JP2002140631A - Electronic commercial transaction system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic commercial transaction system which safely exchanges merchandise for money without disclosing personal information to the opposite party, without making a contract with a financial institution and without performing a complicated procedure. SOLUTION: When an auction server 6 combines a merchandise selling user with a merchandise buying user, the information of each user and the information of the merchandise to be transacted are transmitted to a ticket server 1 to start a commercial transaction. The server 1 transmits an enciphered electronic ticket to a user A terminal 3 or a user B terminal 4 through a network 2 before the users give and receive the merchandise or the money on a convenience store. In the convenience store, the user A terminal 3 or the user B terminal 4 transmits the electronic ticket to a convenience store terminal 5 through a narrow area network 7, and the terminal 5 decodes the electronic ticket to perform the commercial transaction described on the electronic ticket.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic commerce system for exchanging goods for money using a network including a public telephone line network and the Internet.

[0002]

2. Description of the Related Art In recent years, as a result of the widespread use of the Internet, it is not uncommon for content providers or product providers to be individuals rather than corporations. In such a case, an auction service particularly effective in matching and making (linking) a product provider and a product purchaser, which is particularly effective, has come into the spotlight. For example,
Japanese Patent Application Publication No. 2000-503789 discloses an "electronic auction information processing and transmission method and system" that supports the auction process from bidding to successful bid. However, this technology does not know anything after a successful bid, and it is up to the two parties to match and make the exchange of goods and money, and receive money and send the goods Absent,
Or they often allow fraudulent fraud, such as sending goods and not sending money.

[0003] As a service for preventing such fraud, an escrow service has been proposed. In this service, the product price is temporarily stored by a third party organization, the product price is passed to the product provider if the product is sent correctly, and the product is provided if the correct product is not sent Is a service where money is not paid to the person.

[0004] As an example of the escrow service, JP-A-2
000-194780, “E-commerce system and e-commerce method”. This is an escrow service using a bank transfer. When a product purchase request is made, the bank temporarily secures the product price from the product purchase user's bank account, and the product price secured by the receipt notification from the product purchase user. This is a service for executing a transfer of money and depositing it into a bank account of a product providing user.

[0005]

[Problems to be Solved by the Invention] The escrow service can prevent fraud, but the destination of the goods and the source of the goods are known to the other party. Address, name,
There is a first problem that it is not desirable to know privacy information such as a telephone number.

When a credit card must be used on the Internet for payment, there is a problem in terms of security, and there is a period of about one month from the use of the credit card to the actual debit. Therefore, if the withdrawal bank account is canceled during that time, it will not be possible to collect the product price without fail.
There is a problem.

In the invention described in Japanese Patent Application Laid-Open No. 2000-194780, a user who uses the escrow service has to make a contract for online banking with a bank in advance. In view of the above, there is a third problem in that a period of one month or more is required and a fixed usage fee is required every month, so that it is not suitable for use in a case of urgent use.

Accordingly, a first object of the present invention is to provide an electronic commerce system which enables exchange of goods and money via a network without transmitting personal information such as an address and a credit card number to a business partner. Is to do.

[0009] A second object of the present invention is to provide an electronic commerce system capable of exchanging goods and money via a network without a special contract with a financial institution.

[0010] A third object of the present invention is to provide an electronic commerce system capable of safely exchanging goods and money via a network without performing complicated procedures.

[0011]

In the electronic commerce system according to the present invention, all of the series of transactions, that is, payment of goods, delivery of goods, receipt of goods, and receipt of goods, are performed using the concept of a ticket. to manage. The ticket contains all the information related to the transaction such as personal information and product information, or pointers to all the information. When necessary, the ticket is given to the user participating in the transaction, and a transaction support place where the transaction is performed on behalf of the user. , It is possible to carry out the work of the commercial transaction only with the ticket. In the following, the commercial transaction support location will be described as a convenience store.

An electronic commerce system according to the present invention includes a ticket server for managing commercial transactions, a convenience store terminal of a convenience store that actually handles commercial products and money, a terminal of a user who participates in commercial transactions, a server, and each terminal. It is composed of a network network connecting to each other, and a narrow area network connecting the convenience store terminals and the user terminals to each other. The ticket server operates the ticket holding means for holding the ticket and the ticket holding means, issues a ticket according to a process of the commercial transaction to the user, and performs the next transaction for the user and the convenience store for the commercial transaction. Transaction management means for sending and navigating the ticket information, electronic ticket generation means for generating an electronic ticket obtained by encrypting the ticket information held by the ticket holding means using common key encryption, and use by the electronic ticket generation means Encryption key management means for generating an encryption key to be encrypted and dividing the encryption key by a secret sharing scheme. The ticket holding means at least a ticket I that can uniquely identify the ticket
D, user names of a product providing user and a product purchasing user,
It consists of an e-mail address, a product or payment method, a product name, a product price, a current transaction status, a next transaction status, a right to access a ticket, a key ID which is a coded value of the ticket, and a transaction history. .

The user terminal includes a WWW client which is a WWW browser which can be connected to a network and a narrow area network, an e-mail client which can be connected to a network and can receive e-mail, and a user of an operation user such as a camera. It comprises a face image acquisition unit capable of acquiring a face image, and an encryption information holding unit for securely holding the encryption information passed from the WWW client.

[0014] Further, the convenience store terminal decrypts the encrypted data by using the key holding means for securely holding the encryption key and the encryption key, and exchanges the ticket and the like via the narrow area wireless network. And a POS terminal function providing means that can be connected to a network and has a bar code reading function, a display function, and an input function, which are general POS terminal functions.

[0015] When a commercial transaction is started, the ticket server generates a new ticket for the commercial transaction. The ticket server sends an e-mail to the user participating in the commercial transaction according to the commercial transaction rule of the ticket holding unit, and creates a WWW page for inputting a product receiving place and the like to perform navigation of the commercial transaction user.

[0016] The ticket server requests the user's face image from the user terminal immediately before issuing the electronic ticket to the user. If the face image is obtained, the ticket server sends the face image and the electronic ticket to a convenience store. Instruction content,
The transaction management means sends the information necessary for the transaction such as the product receiving location and the like to the user terminal as an electronic ticket. The electronic ticket issued to the user by the transaction management means,
The electronic ticket is encrypted by the encryption key generated by the encryption key management means by the electronic ticket generation means. The encryption key management means divides the encryption key used at this time into three.
In the division, a ticket encrypted with one essential encryption key (which is an essential encryption key) and one of the remaining two encryption keys (an arbitrary encryption key) is used. It is a weighted division that can be decoded. There are various methods for dividing the encryption key, and any method may be used as long as the above condition is satisfied. The essential encryption key is sent to the user terminal together with the encrypted electronic ticket by the transaction management means, and the arbitrary encryption key is sent to the convenience store terminal by the encryption key management means, and is held in the ticket server by the transaction management means.

[0017] When the user brings the electronic ticket and asks the user terminal to come to the convenience store and execute the processing described in the ticket, the user terminal transmits the held electronic ticket and the essential encryption key in a narrow area. Send it to the convenience store terminal via the network.
The convenience store terminal creates a decryption key by combining the required encryption key and an arbitrary encryption key distributed in advance, decrypts the electronic ticket, displays the face image of the electronic ticket and the contents of the request processing, and operates the convenience store terminal operation user. Accordingly, when a normal signal is input to the convenience store terminal, it becomes possible to execute a process such as receiving a product price described in the electronic ticket.

Further, when the goods are delivered or the goods are paid, in addition to the above-described processing, an arbitrary question is selected from a question list existing in the commercial transaction rules immediately before the electronic ticket is issued, and the user is answered. The electronic ticket further includes a question to the user and a response from the user, and when the user who came to the convenience store with the electronic ticket carries out the merchandise price payment processing, the question and the question are sent to the terminal of the convenience store. The answer is displayed, the convenience store clerk confirms that the answer to the question from the ticket bearer is the same as the answer to the question sent to the terminal of the convenience store, and the face image is the same as the electronic ticket holder. If they are the same,
Since the merchandise provider and the ticket bringer can be regarded as the same, merchandise price payment processing at the convenience store terminal is enabled.

The transaction management means generates an arbitrary question list based on the commercial transaction rules held by the ticket holding means before generating the commodity payment ticket, and presents it to a user who receives the goods or a user who receives the goods price. The electronic ticket generation means further encloses the answer and the question in the ticket and encrypts it, and the commercial transaction support terminal displays the list of questions and answers decrypted in the above-described procedure, and the answer to the question is correct. If the operator of the commercial transaction support terminal does not input to the commercial transaction support terminal that it has been recognized, the subsequent processing may not be continued.

Further, the transaction management means confirms whether or not there is a ticket for payment of the commodity with the same ticket ID in the encrypted data holding means of the user terminal at the time of issuing the ticket for receiving the commodity, and determines whether the ticket for payment of the commodity exists. In such a case, an identification question to the product receiving user may not be generated, the identification question may not be included in the electronic ticket, and the identification question may not be displayed on the commercial transaction support terminal.

Further, the transaction management means confirms whether or not there is a commodity payment ticket having the same ticket ID in the encrypted data holding means of the user terminal when the commodity receipt ticket is issued, and determines whether the commodity payment ticket exists. Does not request the user's face image from the user terminal,
The face image may not be included in the electronic ticket, and the face image may not be displayed on the commercial transaction support terminal.

Further, the transaction management means confirms whether or not there is a commodity shipping ticket having the same ticket ID in the encrypted data holding means of the user terminal at the time of issuing the commodity price receiving ticket, and finds that the commodity shipping ticket exists. In this case, an identification question to the product price receiving user may not be generated, an identification ticket may not be included in the electronic ticket, and the identification question may not be displayed on the commercial transaction support terminal.

Further, the transaction management means confirms whether or not there is a commodity shipping ticket having the same ticket ID in the encrypted data holding means of the user terminal at the time of issuing the commodity price receiving ticket, and finds that the commodity shipping ticket exists. In such a case, the face image of the user may not be requested from the user terminal, the face image may not be included in the electronic ticket, and the face image may not be displayed on the commercial transaction support terminal.

[0024]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention relates to an electronic commerce system for providing an escrow service for supporting exchange of money and goods via a network. And a ticket server for managing the progress of the escrow service, terminals for a plurality of users who enjoy the escrow service, and a plurality of commercial transaction support services in distributed locations for receiving and sending goods and receiving and paying money. Terminal, a ticket server, a user terminal, and a network for interconnecting the transaction support terminals, and a narrow area network for connecting the user terminal and the transaction support terminal only at the transaction support location. It is designed to exchange money.

[0025]

Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 shows the configuration of an embodiment of the electronic commerce system of the present invention. This electronic commerce system includes a ticket server 1 for managing a process of a commercial transaction, a network network for interconnecting constituent devices 2, and a user A participating in a commercial transaction.
User A terminal 3 which is a terminal of the user 3, a user B terminal which is a terminal of the user B who participates in a commercial transaction 4, a convenience store terminal 5 which is installed in a convenience store which is a place for receiving goods and money to be traded, and participates in a commercial transaction Auction server 6 and Blu for determining two users
and a short-range wireless network 7 such as the Internet. The ticket server 1, user A terminal 3, user B terminal 4, convenience store terminal 5 and auction server 6 are mutually connected via a network 2. Further, the convenience store terminal 5 and the user A terminal 3 and the user B terminal 4 are connected to each other by the narrow area wireless network 7.

Although FIG. 1 shows only two user terminals to avoid complication of the drawing, there are actually two or more terminals. The user A terminal 3 and the user B
The terminal 4 is assumed to be a mobile phone. In the following description, the user A who is the user of the user A terminal 3 is a product provider, and the user B who is a user of the user B terminal 4 is a product purchaser.

The convenience store terminal 5 is a POS terminal having at least means for reading a barcode, means for displaying information to a clerk, and means for the clerk to input information. Further, the convenience store terminal 5 may be a terminal provided in a department store, a station, or the like as long as it is the POS terminal as described above.

The auction server 6 is a general auction site existing on the Internet. However, the present invention is not limited to this. For example, the auction server 6 provides a commercial transaction service to two users who have met each other outside the auction site. It may be a window server.

FIG. 2 shows the configuration of a specific example of the ticket server 1. The ticket server 1 includes a WWW server 20 serving as an interface with the network 2, a ticket holding unit 50 for holding the contents of an electronic ticket, and a WWW server from the network 2. A transaction management means for receiving various requests sent via the server 20 and processing those requests using other means, and for managing transactions based on the ticket transition process held in the ticket holding means 50 10 and the contents from the transaction management means 10 and the ticket holding means 50 are encrypted by a common key encryption technique,
Electronic ticket generating means 30 for generating an electronic ticket;
The electronic ticket generation unit 30 generates an encryption key to be used, and the encryption key management unit 40 divides the encryption key.

FIG. 3 shows a configuration example of the user A terminal 3.
The user A terminal 3 is a WWW browser that can be connected to the network 2 and the short-range wireless network 7.
W client 300 and e-mail client 31 that can connect to network 2 and receive e-mail
0, a face image acquisition unit 320 such as a camera capable of acquiring a face image of a user who operates the user A terminal 3, and an encryption information holding unit 330 for securely holding encryption information passed from the WWW client 300. Is done. here,
Although the configuration of the user A terminal 3 is shown, the user B terminal 4 and other user terminals not shown in FIG. 1 have the same configuration as the user A terminal 3 shown in FIG.

FIG. 4 shows a configuration example of the convenience store terminal 5. The convenience store terminal 5 decrypts the encrypted data using the key holding means 510 for securely holding the encryption key and the encryption key, and also transmits the user A terminal 3 and the user A via the narrow area wireless network 7. Decryption means 52 for exchanging tickets and the like with B terminal 4
0 and a POS terminal function providing means 530 which can be connected to the network 2 and has a bar code reading function, a display function, and an input function, which are general POS terminal functions.

Ticket holding means 50 in the ticket server
Is a database that holds all the commercial transaction processes handled by the electronic commerce system, and the transaction management means 10 executes new addition, change, and search processing of records. There is one ticket for one commercial transaction, and one ticket is at least a ticket ID that uniquely identifies the ticket, the name of the auction server that established the auction, the date when the transaction was started in the ticket server 1, and the user who provides the product. , Information of a user who purchases a product (including a product number for identifying a shipped product), information of a product to be traded, a price of a product, an expiration date of a commercial transaction, and a current commercial transaction status. , Business transaction rules, encrypted data such as encrypted tickets, the current value of electronic tickets, and the processes of transactions up to now.

The information of the user who provides the product includes a user name, a mail address, a place where the product is sent out, a place where the price is received, and a question and answer for identity verification. Further, the information of the user who purchases the product includes a user name, an e-mail address, a place to pay for the product, a place to receive the product, and a question and answer for identity verification.

FIG. 5 shows an example of the contents of the record held by the ticket holding means 50. FIG. 5 shows that the ticket specified by the ticket IDs 012 and 026 is stored in the ticket holding unit 50, and the detailed contents of the ticket specified by the ticket ID 12 are described. . These items are merely examples, and the present invention is not limited to these items. For example, there may be an item describing a fee of a convenience store. The commercial transaction rules describe various rules in commercial transactions for each ticket.
It consists of a list of questions necessary for identity verification in a commercial transaction transition. The transaction management means 10 reads this transaction transition rule, determines the next transaction state,
Perform the described process. The entity of the commercial transaction transition rule is held in the ticket holding means 50.

FIG. 6 shows an example of a commercial transaction rule, Rul
e11 is shown. Rule 11 is the transaction transition rule 601
And a question list 602. The commercial transaction transition rule 601 is, for example, when there is no new commercial transaction process (603), the next is a new ticket generation process (6).
04), the transaction management means 10 performs
eTicket is specified, and necessary information at that time is CellID, CellMail, and Buyer.
erID, BuyerMail and ProductInf
o (605).

Also, in the case of a ticket generation process, a deposit is taken, in the case of a deposit process, a product is received, in the case of a product receiving process, a product is sent, in the case of a product sending process, a product is confirmed, and in a case of a product confirmation process. It is specified in the commercial transaction transition rule 601 that the payment process and the payment process are the termination processes. This transition rule is in line with the natural flow of commercial transactions.

Next, the processing in this embodiment will be described. First, the flow of money and goods will be described with reference to the block diagram of FIG. Referring to FIG. 28, this block diagram includes a ticket server 281 and a convenience store 2
82, an A user 283 as a product providing user, and a B user 284 as a product purchasing user are shown.

First, the B user 284 deposits the commodity price in the convenience store 282. Next, the A user deposits a product in the convenience store 282. B user 2
84 receives the merchandise at the convenience store 282, and if the merchandise is confirmed to be correct by the B user, the merchandise price is paid to the A user from the convenience store 282. At this time, the commission acquired by the convenience store 282 and the commission acquired by the ticket server 281 that manages the flow of commercial transactions are subtracted from the commodity price.

Finally, a fee is paid to the ticket server 281 from the convenience store 282. The commission may be paid for each transaction or on a monthly basis. Although only one convenience store 2802 is shown in the figure, the convenience store 2802 is not one convenience store, but is a collective expression of a group of convenience stores consisting of a plurality of stores. Money distribution and merchandise distribution between the stores in the convenience store 282 may be performed in the same manner as in the usual business of the convenience store, and the payment of the fee to the ticket server 281 may be collectively performed by the affiliated group of the convenience store. Pay.

FIG. 7 shows the overall flow of transactions of the electronic commerce system described above. Hereinafter, the processing in this embodiment will be described in detail with reference to the flowchart and the flowchart (FIGS. 8, 11, 13, 18, and 23) for each processing (S702 to S706) in FIG. Note that signal lines such as reference numeral 21 may be used for different signal names depending on the drawings. The commercial transaction in the present system starts from the point where the transaction product and the transaction partner are determined in the auction server 6 (step S701 in FIG. 7).

[0042]

[Explanation of New Ticket Generation Process (Step S702 in FIG. 7)] It is assumed that data exchange between each means always includes at least a ticket ID for identifying a ticket.

FIG. 8 shows the flow of the new ticket generation process. When the trading product and the trading partner are determined by the auction server 6, the auction server 6
A ticket generation request 21 is issued to the transaction management means 10 via the WWW server 20 of the ticket server 1 via the server (step S801 in FIG. 8). Ticket generation request 21
Is composed of at least an auction server name, information on a product to be traded, a price of the product, a user ID of a trading user, and a mail address.

The transaction management means 10 having received the ticket generation request 21 issues a ticket I which can uniquely identify the ticket.
D is generated, a new ticket record is generated in the ticket holding means 50, and the received ticket generation request 21 is generated.
And the name of the auction server that requested the generation is recorded in each item of the record of the new ticket (S802). One record of the ticket holding means 50 corresponds to one ticket. At this time, the transaction state to be transitioned next is searched from the commercial transaction transition rule of the ticket holding unit 50, and the current transaction state is set to “ticket generation”.

Transaction management means 10 that has generated a new ticket
Creates the ticket generation notification page 11 and sends it to the WWW server 20 (S803). The WWW server 20 holds the received ticket generation notification page 11, receives a page dispatch request 101 from the network 2 described later, and sends out the corresponding ticket generation notification page 11.

The ticket generation notification page 11 is provided for at least a user who pays for the commodity, an input area for receiving the commodity, an input area for the place for paying the commodity, a button for confirming the input, and a transaction user showing details of the commercial transaction. Name,
It consists of a trade product name, a trade price, a transaction start date, and a transaction expiration date.

FIG. 9 shows an example of the ticket generation notification page 11. Referring to FIG. 9, the ticket generation notification page 11 includes, as a message to the user B who is a product purchaser, a store name 9 of a convenience store that receives the product.
Area 901 for inputting the number 04 and area 9 for inputting the name of a convenience store that pays for the product
02 and transaction contents 903 are displayed. The content to be displayed is not limited to the content shown in FIG.
A designation item such as a reception date and time may be included.

Further, the transaction management means 10 creates and transmits a ticket generation notification mail 12 for notifying the transaction user that the subsequent transaction proceeds on a page on the WWW server 20 (S804). Further, the transaction management means 10 notifies the auction server 6 of the ticket generation completion notification 11 via the WWW server 20.

FIG. 10 shows an example of the ticket generation notification mail 12 transmitted by the transaction management means 10. Referring to FIG. 10, this ticket generation notification mail 12 is composed of header information 1001, text 1002, and transaction content 1003. The third and fourth lines of the body 1002 are ticket generation notification pages 1 created by the transaction management means 10
1 is a URL for displaying the server bo
The page 012 of o is a ticket generation notification page for the user B. Transaction content 1003
Is configured by extracting a predetermined item from a corresponding ticket of the ticket holding unit 50.

[0050]

[Description of Product Price Receiving Process (Step S70 in FIG. 7)
3) FIG. 11 shows the flow of the commodity price receiving process.

The ticket generation notification mail 12 (1 in FIG. 3)
04), the e-mail client 310 of the user B terminal 4 displays the contents (shown in FIG. 10) on the screen. When the user B selects the URL of the ticket generation notification mail 104 displayed on the screen, the e-mail client 310 issues a WWW page display request 311 to the WWW client 300 of the user B terminal 4. The WWW page display request 311 is composed of the selected URL, but such a function is common as a function of a mobile phone.

The WWW client 300 issues a WWW page request 302, receives the ticket generation notification page 105 (22 in FIG. 2) from the corresponding server (here, the ticket server 1), and displays the contents shown in FIG. . When the user B inputs a product receiving place and a product payment place on the displayed screen and presses the enter button (step S1101 in FIG. 8), the WWW client 300 sends a face to the face image acquiring unit 320. An image acquisition request 303 is issued. The face image acquisition unit 320 that has received the face image acquisition request 303 displays an instruction to the user B to capture the face image, acquires the face image 321 of the user B while interacting with the user B, and (S1102).

The WWW client 300 that has received the face image 321 passes a receiving method decision notice 302 (21 in FIG. 2) to the transaction management means 10 (S1103). The receiving method determination notification 21 includes at least a ticket ID, a product receiving place, a payment place, and a face image. The transaction management means 10 having received the receiving method decision notice 21 records information on the goods receiving place and the payment place in the ticket specified by the corresponding ticket ID in the ticket holding means 50. Further, the transaction management means 10
The name of the store specified by the ticket ID, the transaction details, and the request to the convenience store for the ticket specified by the ticket ID are acquired from the ticket holding unit 50, and the face image included in the reception method determination notification 21 is collectively requested to generate an electronic ticket. 13 and passed to the electronic ticket generating means 30. Here, the contents of the request to the convenience store include, for example, "performing the deposit processing and receiving the product price of 10,000 yen", which is generated from the current transaction state and the product price. be able to.

The electronic ticket generation means 30 sends an encryption key generation request 32 to the encryption key management means 40. Encryption key management means 40 receiving encryption key generation request 32
Generates an encryption key at random and sends the encryption key 41 to the electronic ticket generation means 30 (S1104). The electronic ticket generating means 30 which has received the encryption key 41 encrypts the ticket ID, the transaction state and the face image by using the common key encryption with the encryption key 41 to obtain an encrypted ticket (S11).
05). The electronic ticket generating means 30 collects the merchandise price paying store name, the ticket ID, and the encryption key used for the encryption included in the electronic ticket generation request 13 into an encryption key division request 32 and passes the request to the encryption key management means 40. .

The encryption key management means 40 divides the encryption key included in the encryption key division request 32 into three, and generates three divided encryption keys (S1106). A ticket encrypted with one of the required divided encryption keys of the divided encryption keys (referred to as an essential divided encryption key) and one of the remaining two (referred to as an arbitrary divided encryption key) It is a weighted division that can be decoded. There are various methods for dividing the encryption key, and any method may be used as long as the above condition is satisfied.

The encryption key management means 40 stores the convenience store terminal 5 of the convenience store specified by the merchandise price receiving store name included in the encryption key division request 32.
The one arbitrary divided encryption key 42 (102, 531 in FIG. 4) is sent to the key holding unit 510 (S110).
7). Further, the encryption key management unit 40 passes the remaining arbitrary divided encryption key and the required divided encryption key to the electronic ticket generation unit 30 as the division result 41. The electronic ticket generation unit 30 that has received the division result 41 collectively transfers the two divided encryption keys included in the division result 41 and the previously generated encrypted ticket to the transaction management unit 10 as electronic ticket information 31.

The transaction management means 10 records the arbitrary divided encryption key among the divided encryption keys and the encrypted ticket in the encrypted data column of the corresponding ticket in the ticket holding means 50 (S1108). Further, the transaction management means 10 stores the encrypted ticket, the required divided encryption key, and the transaction contents (9 in FIG. 9).
03) and the message to the user are combined into an electronic ticket set for paying for the goods, and the electronic ticket sets 11 and 22 (105 in FIG. 3) for paying for the goods are sent to the WWW client 300 of the user B terminal 4 (S11).
09). Here, the message to the user is, for example, "I sent an electronic ticket for payment of goods to a mobile phone. Bring this mobile phone to a convenience store,
Please process the payment for the goods. The contents of the ticket are as follows. ".

Electronic ticket set 10 for payment of goods
5, the WWW client 300 records the encrypted ticket and the mandatory divided encryption key of the electronic ticket set 105 for payment of the commodity in the cryptographic information holding means 330, and starts the message, transaction contents and payment of the commodity for the user. Is displayed on the screen as a result of receiving the electronic ticket for payment of the commodity price.

In S1108, the arbitrary divided encryption key stored in the convenience store is damaged by some factor, for example, when the encrypted ticket is decrypted in the convenience store described later. When the decryption is not successful due to falsification of an essential encryption key stored in the user terminal or the like, the encryption key is used for confirmation. Similarly, the encrypted ticket held in the ticket holding means 50 is also held for use in the meaning of confirmation.

In step S1106, the encryption key is divided into three parts. For this purpose, a secret sharing method may be used. For example, a (k, n) threshold method introduced by Shamir is used. The secret sharing method is a method of maintaining secret by distributing and managing secret information. Basically, the secret is divided into n parts, and any k or more divided pieces can be combined to restore the divided secret. Any combination of (k-1) or less pieces can be divided. The secret cannot be restored. Here, k is 2 and n is 3, and one of the divided keys is weighted. These methods are general, and the detailed algorithm is omitted.

FIG. 12 shows a display example of the result of receiving the ticket for payment of the commodity price. Message 120 to user
1, a transaction content 1202 and a button 1203 for starting the payment processing of the commodity price.

When the commodity price payment start button displayed on the user B terminal 4 as a result of receiving the commodity price payment ticket is pressed by the user (S1110),
The WWW client 300 acquires the corresponding encrypted ticket and the required divided encryption key from the encryption information holding unit 330, and sets the electronic ticket set 301 (103 in FIG. 4).
To the decoding means 520 of the convenience store terminal 5 via the narrow area wireless network 7 (S111).
1).

The decryption means 520 having received the electronic ticket set 103 obtains an arbitrary encryption key 511 corresponding to the ticket ID from the key holding means 510. Next, a decryption key is generated by combining the arbitrary encryption key and the essential encryption key included in the electronic ticket set 103 (S
1112), the encrypted ticket of the electronic ticket set 103 is decrypted with the decryption key (S1113). Since the technique of secret sharing is also used for the generation and decryption of the decryption key, it will not be described here. The decryption unit 520 sends the decryption result 521 to the POS terminal function providing unit 530.

Upon receiving the decryption result 521, the POS terminal function providing means 530 performs the deposit processing as the transaction contents of the decryption result 521, and
In addition to displaying that 00 yen is to be received, a face image is displayed (S1114). The displayed content is readable,
That is, it is determined by the operating user of the user A terminal 3 of the convenience store that the face image decoded and displayed is the same as the user B terminal 4 holder, and the face image is normal for the POS terminal function providing means 530. Is input (Y in S1115), the POS terminal function providing unit 5
Reference numeral 30 enables a clerk to perform a charge receiving process by operating a normal POS terminal.

When the price receiving process is performed, the POS terminal function providing means 530 issues a price receiving notification 533 (101, 21 in FIG. 2) (S1116). The price receipt notification 21 includes at least the ticket ID and the deposit amount. If it is not input that it is normal (S111
In N), ticket error processing is performed. This ticket error processing will be described later.

[0066]

[Description of Product Receiving Process (Step S704 in FIG. 7)]
FIG. 13 shows the flow of the product receiving process.

The transaction management means 10 having received the price receipt notification 21 records that the commodity price has been deposited in the corresponding ticket of the ticket holding means 50. Specifically, the item of the ticket value is changed to the same value as the deposited amount, the current transaction state is changed to “commodity receipt”, and the fact that the deposit processing is completed is added to the transaction history. For example,
"User B: payment for goods (9/1)" is added.
The transaction management means 10 is a convenience store terminal 5
The POS terminal function providing unit 530 that has received the payment receiving process completion notification 11 (22) (102 in FIG. 4) displays the completion of the process.

Next, the transaction management means 10 creates a product shipping request page 11 and passes it to the WWW server 20 (step S1301 in FIG. 13). The product shipping request page 11 includes at least an area for inputting a place to ship the product, a button for confirming the input, and transaction details. FIG. 14 shows an example of the product delivery request page 11. Referring to FIG. 14, the product delivery request page 11 includes an area 1401 for inputting a store name of a convenience store to which a product is delivered, and a transaction content 1402.

Further, the transaction management means 10 creates a commodity sending request mail 12 and sends it to the commodity providing user (S1302). The product shipping request mail 12 includes at least a request text for requesting product shipping, a URL of a product shipping request page, and transaction contents.

FIG. 15 shows an example of a product delivery request mail 12 transmitted to a product providing user in the product price receiving process. Referring to FIG. 15, the commodity sending request mail 12 includes header information 1501, request contents 1 to the user.
The request content 1502 includes a product delivery request page URL 1504.

When the URL of the commodity sending request mail 11 displayed on the user A terminal 3 is selected, the e-mail client 310 issues a WWW page display request 311 to the WWW client 300 of the user A terminal 3, and
The WW client 300 issues a WWW page request 302 via the network 2, receives the product dispatch request page 105 (22 in FIG. 2) from the relevant server, and displays it on the screen.

When the user inputs the product shipping location on the product shipping request page displayed on the user A terminal 3 and presses the enter button (S1303), the WWW client 300
Is a request for a face image acquisition request 30
Issue 3. The face image acquisition unit 320 that has received the face image acquisition request 303 displays an instruction to capture the face image to the user, and acquires the face image 321 of the operation user (here, the user A) while interacting with the operation user. T (S
1304), and pass it to the WWW client 300.

The WWW client 300 that has received the face image 321 sends the product delivery decision notice 3 to the transaction management means 10.
02 (21 in FIG. 2) is passed (S1305). The product shipping decision notice 21 is composed of information on a place where the product is shipped and a face image. The transaction management means 10 which has received the commodity shipping decision notice 21 obtains the place where the commodity is to be dispatched from the commodity shipping decision notice 21, and stores the contents thereof in the ticket holding means 5
0 is described in the item of “product providing user information” of the corresponding ticket. Further, the transaction management means 10 sends the current transaction state, transaction contents, request contents to the convenience store, the name of the merchandise receiving store and the name of the merchandise paying store of the merchandise receiving user from the ticket holding means 50 to the transaction state. Acquisition and receiving method decision notice 2
Electronic ticket generation request 1 together with the face image included in
3 and passed to the electronic ticket generation means 30.

The electronic ticket generation means 30 sends an encryption key generation request 32 to the encryption key management means 40. Encryption key management means 40 receiving encryption key generation request 32
Generates an encryption key at random and sends the encryption key 41 to the electronic ticket generation means 30 (S1306). The electronic ticket generating unit 30 that has received the encryption key 41 encrypts the request contents to the convenience store, the product receiving store name, and the face image by using the common key encryption with the encryption key 41 to obtain an encrypted electronic ticket (S1307). ).

The electronic ticket generating means 30 collects the merchandise shipping store name, the ticket ID and the encryption key used for the encryption contained in the electronic ticket generation request 13 into an encryption key division request 32, and the encryption key management means 40 Pass to.
The encryption key management means 40 generates one essential encryption key and two arbitrary encryption keys by dividing the encryption key included in the encryption key division request 32 in the same manner as in the ticket generation processing S702 (S1308).

The encryption key management means 40 sends one arbitrary divided encryption key to the key holding means 510 of the convenience store terminal 5 of the convenience store specified by the product shipping store name included in the encryption key division request 32. 42
(102, 531 in FIG. 4) is sent (S130).
9). Further, the encryption key management unit 40 passes the remaining arbitrary divided encryption key and the required divided encryption key to the electronic ticket generation unit 30 as the division result 41. The electronic ticket generation unit 30 that has received the division result 41 collectively transfers the two divided encryption keys included in the division result 41 and the previously generated encrypted ticket to the transaction management unit 10 as electronic ticket information 31.

The transaction management means 10 records the arbitrary divided encryption key among the divided encryption keys and the encrypted ticket in the encrypted data column of the corresponding ticket of the ticket holding means 50 (S1310). Further, the transaction management means 10 collects the encrypted ticket, the required divided encryption key, the transaction content, and the message to the user into an electronic ticket set 11, and the electronic ticket sets 11, 22 (105 in FIG. 3).
Is sent to the WWW client 300 of the user A terminal 3 (S1311).

Here, the message to the user is, for example, “Sending an electronic ticket for shipping products to a mobile phone. Bring this mobile phone to a convenience store,
Please perform the product shipping process. The contents of the ticket are as follows. ". The WWW client 300 of the user A terminal 3 that has received the electronic ticket set 105 records the contents of the electronic ticket set 105 in the cryptographic information holding unit 330, and also starts a message to the user, transaction contents, and a product shipping process. The button is displayed on the screen as the result of receiving the ticket for shipping the product. FIG. 16 shows a display example of the result of receiving the ticket for shipping goods. Referring to FIG. 16, the result of receiving the ticket for shipping goods is a message 160 to the user.
1, a transaction content 1602 and a button 1603 for starting a commodity shipping process.

When the user presses the product shipping process start button displayed on the user A terminal 3 as a result of receiving the product shipping ticket (S1312), the WWW client 300 transmits the corresponding encrypted ticket and the required divided encryption key. Is acquired from the encryption information holding unit 330 and sent to the decryption unit 520 of the convenience store terminal 5 via the narrow area wireless network 7 as the electronic ticket set 301 (103 in FIG. 4) (S1313).

The decryption means 520 having received the electronic ticket set 103 obtains an arbitrary encryption key 511 corresponding to the ticket ID from the key holding means 510. Next, a decryption key is generated by combining the arbitrary encryption key 511 and the essential encryption key included in the electronic ticket set 103 (S1314), and the encrypted ticket of the electronic ticket set 103 is decrypted with the decryption key (S1315). The decryption means 520 transmits the decryption result 521 to the POS terminal function provision means 53
Send to 0.

The POS terminal function providing means 530 that has received the decryption result 521 displays that the merchandise receiving process is to be performed as the transaction content of the decryption result 521, and displays a face image (S1316). It is determined by the operating user of the convenience store terminal 5 that the displayed content is decipherable, that is, normally decrypted, and the displayed face image is the same as the holder of the user A terminal 3, and the POS terminal function providing means If the input to 530 is normal (Y in S1317), POS terminal function providing means 5
Reference numeral 30 enables a store clerk to perform a commodity receiving process by operating a normal POS terminal. When the goods receiving process is performed (S1
318), the POS terminal function providing unit 530 prints the product pasting print ticket from the product receiving shop name, product name, and ticket ID of the product purchase user included in the decryption result 521 (S1319).

FIG. 17 shows print ticket data 1 for attaching a product.
3 shows an example of a print ticket for pasting a product, which is the result of printing No. 3. Referring to FIG. 17, the print ticket for pasting a product includes “convenience store XX store” as product destination information 1701, “VCR” as a product name 1702, and product number 1 for uniquely recognizing the product.
As 703, “1111-2222-333-44”
444 "is described. This can be generated, for example, by combining an ID for identifying a store, an ID for identifying a terminal in the store, and a serial number generated for each terminal.

If the input of normal is not made (S
N) at 1317, a ticket error process is performed. The ticket error processing will be described later.

Further, the POS terminal function providing means 530 issues a goods receipt notice 533 (101, 21 in FIG. 2) to the transaction management means 10. The product receipt notification 21 includes at least the ticket ID and the product number printed on the product sticking tag.

[0085]

[Description of Product Delivery Process (Step S705 in FIG. 7)]
FIG. 18 shows the flow of the product delivery processing.

The transaction management means 10 which has received the commodity receipt notice 21 records that the commodity has been deposited in the corresponding ticket. Enter the product number, change the current transaction status to "product receipt", and add to the transaction history that the product receipt process has been completed. For example, “user A: receiving goods (9/2)” is added.

Further, the transaction management means 10 randomly obtains a certain number of questions from the question list of the commercial transaction rules held by the ticket holding means 50, and creates an identity confirmation question page 11 (105 in FIG. 3). W of user B terminal 4
Transfer to the WW client 300 (Step S1 in FIG. 18)
801). The personal identification question page 11 includes several selected questions, an area for inputting an answer to the question, and transaction details. The WWW client 300 that has received the personal confirmation question page 105 displays the content.

FIG. 19 shows an example of the personal identification question page 11. Referring to FIG. 19, this identity confirmation question page 1
Reference numeral 1 includes a question 1901, a response input area 1902 for the question, and transaction contents 1903 for identification.

When the decision button on the personal identification question page 11 displayed on the WWW client 300 is pressed (S1802), the WWW client 300 issues a face image acquisition request 303 to the face image acquisition means 320. The face image acquisition unit 320 that has received the face image acquisition request 303 displays an instruction to capture the face image to the user, and acquires the face image 321 of the operation user (here, the user B) while interacting with the operation user. Handover to the WWW client 300 (S1803).

The WWW client 300 having received the face image 321 notifies the transaction management means 10 of the question answer 302
(21 in FIG. 2) is passed (S1804). The question answer notification 21 includes at least a ticket ID, a question, and an answer to the question. The transaction management unit 10 that has received the question / response notification 21 records the pair of the received question and answer in the item of the user confirmation question / response of the corresponding ticket purchase user in the ticket holding unit 50. Further, the transaction management means 10 checks the current transaction status, transaction contents, contents of the request to the convenience store, the name of the merchandise receiving store of the merchandise purchaser, the contents of the question answer, The product number is acquired and combined with the face image included in the question / response notification 21 to form the electronic ticket generation request 13, and the electronic ticket generation unit 30
Pass to

The electronic ticket generation means 30 sends an encryption key generation request 32 to the encryption key management means 40. Encryption key management means 40 receiving encryption key generation request 32
Generates an encryption key at random and sends the encryption key 41 to the electronic ticket generation means 30 (S1805). The electronic ticket generating means 30 receiving the encryption key 41 encrypts the request contents to the convenience store, the name of the store receiving the goods, the contents of the question and answer, the product number and the face image by using the common key encryption with the encryption key 41 and encrypts the encrypted contents. Ticket (S
1806). The electronic ticket generation unit 30 collects the merchandise receiving store name, the ticket ID, and the encryption key used for encryption included in the electronic ticket generation request 13 into an encryption key division request 32 and passes the request to the encryption key management unit 40. The encryption key management unit 40 performs the ticket generation process S70
As in the case of 2, by dividing the encryption key included in the encryption key division request 32, one essential encryption key
Two arbitrary encryption keys are generated (S1807).

The encryption key management means 40 sends one arbitrary divided encryption key to the key holding means 531 of the convenience store terminal 5 of the convenience store specified by the product receiving store name included in the encryption key division request 32. 4
2 (102, 531 in FIG. 4) (S180
8). Further, the encryption key management unit 40 passes the remaining arbitrary divided encryption key and the required divided encryption key to the electronic ticket generation unit 30 as the division result 41. The electronic ticket generating unit 30 that has received the division result 41 collectively transfers the two divided encryption keys included in the division result 41 and the previously generated encrypted ticket to the transaction management unit 10 as electronic ticket information 31.

The transaction management means 10 records the arbitrary divided encryption key among the divided encryption keys and the encrypted ticket in the encrypted data column of the corresponding ticket of the ticket holding means 50 (S1809). Further, the transaction management means 10 collectively forms the electronic ticket set by combining the encrypted ticket, the essential divided encryption key, the transaction content, and the message to the user, and sets the electronic ticket sets 11 and 22 (105 in FIG. 3).
Is sent to the WWW client 300 of the user B terminal 4 (S1810). Here, the message to the user is, for example, "The electronic ticket for receiving goods has been sent to the mobile phone. Bring this mobile phone to the convenience store and process the goods. The contents of the ticket are as follows It is. "

W that has received the electronic ticket set 105
The WW client 300 uses the electronic ticket set 105
Is recorded in the encryption information holding means 330,
A message to the user, transaction details, and a button for starting the product receiving process are displayed on the screen as a result of receiving the product receiving ticket. FIG. 20 shows a display example of a result of receiving a ticket for receiving a product. Referring to FIG. 20, the result of receiving a ticket for receiving a product includes a message 2001 to the user, transaction contents 2002, and a button 2003 for starting a payment process for a product price.

When the user presses the product reception processing start button of the product reception ticket reception result displayed on the user B terminal 4 (S1811), the WW
The W client 300 obtains the corresponding encrypted ticket and the required divided encryption key from the encryption information holding unit 330, and obtains the electronic ticket set 301 (103 in FIG. 4) of the convenience store terminal 5 via the narrow area wireless network 7. It is sent to the decoding means 520 (S1812). Decryption means 520 receiving electronic ticket set 103
Obtains the arbitrary encryption key 511 corresponding to the ticket ID from the key holding unit 510. Next, a decryption key is generated by combining the arbitrary encryption key and the essential encryption key included in the electronic ticket set 103 (S1813), and the encryption ticket of the electronic ticket set 103 is decrypted with the decryption key (S1814). The decoding means 520 outputs the decoding result 52
1 to the POS terminal function providing means 530.

The POS terminal function providing means 530 receiving the decryption result 521 displays a question, an answer, and a face image from the decryption result 521 (S1815). When the clerk inputs that the ticket is correctly decrypted, the answer to the question is correct, and the face image is confirmed (Y in S1816), the POS terminal function providing unit 530 displays the product number to be delivered, and Product delivery processing can be performed by operating the POS terminal. When the product delivery process is performed (S
1817), the POS terminal function providing unit 530 issues a product delivery procedure completion notification 533 (101, 21 in FIG. 2). The product delivery procedure completion notification 21 includes at least a ticket ID.

If the clerk inputs that the ticket was not decrypted correctly, that the answer to the question was incorrect, or that the face image was different from the user terminal holder, the POS terminal function providing means 530 (N in S1816) , A ticket error process is performed. The ticket error processing will be described later.

[0098] Further, the transaction management means 10 that has received the commodity delivery procedure completion notification 21 creates the commodity confirmation page 11 (S1818) and passes it to the WWW server 20. The product confirmation page 11 includes a product confirmation request message to the product purchase user and a product confirmation result input area.
FIG. 21 shows an example of the product confirmation page 11. Referring to FIG. 21, the product confirmation result input area is an area 2101 for selecting whether or not the received product has a problem.
Area 2102 for inputting a problem when there is a problem
It is composed of

Next, the transaction management means 10 sends a commodity confirmation request mail 1 requesting the commodity purchase user to confirm the commodity.
2 is created and sent to the product purchase user (S181).
9). The product confirmation request mail 12 is composed of at least header information, text, and transaction information, and the text includes at least the URL of the product confirmation page. FIG.
1 shows an example of the product confirmation request mail 12. Referring to FIG. 22, the product confirmation request mail 12 includes a header 2
201, a text 2202, and transaction information 2203. In the text 2202, the URL of the product confirmation page
2204 is “http: // boo / 012”.

The product confirmation request mail 12 (10 in FIG. 3)
The e-mail client 310 of the user B terminal 4 receiving 4) displays the contents on the screen. When the user selects the URL of the ticket generation notification mail 104 displayed on the screen, the e-mail client 310
A page display request 311 is issued to the WWW client 300, and the WWW client 300 receives the ticket product confirmation request page 105 (22 in FIG. 2) from the corresponding server.

When the enter button of the product confirmation page displayed on the WWW client 300 is pressed (S18)
20), the WWW client 300 sends the product confirmation notice 30
2 (21 in FIG. 2) is sent to the transaction management means 10. The product confirmation notification 21 is composed of at least the ticket ID, the presence / absence of a problem with the received product, and the content of the problem if any. If the transaction management means 10 receives the product confirmation notification 21 and the product confirmation notification 21 indicates that the product has no problem (Y in S1821), the transaction management means 10 shifts to the product price payment processing. If the product confirmation notice 21 indicates that the product has a problem (N in S1821), the transaction management means 10 sends the problem occurrence mail 12 to the ticket server administrator (S1822), and the transaction processing shown in FIG. After that, the arbitration process is manually performed by the administrator.

[0102]

[Explanation of Payment Delivery Processing (Step S706 in FIG. 7)]
FIG. 23 shows the flow of the delivery process.

The transaction management means 10 includes the ticket holding means 5
The payment receiving request page 11 is created using the contents of 0 (S2301). The payment request page 11 includes at least an area for specifying a method of receiving the product price and transaction details. FIG. 24 shows the payment request page 11
An example is shown below. Referring to FIG. 24, the payment request page 11 includes an instruction message 2401 for the product providing user (user A) and a transaction content 2402. The instruction message 2401 includes a convenience store where the product providing user receives the product price. Area 2403 for inputting the name of the store.

Further, the transaction management means 10 creates a product price receiving request mail 12 notifying the product providing user to receive the product price, and transmits it to the product providing user (S2302). Payment request email 1
Reference numeral 2 includes at least a header, a text, and transaction information, and the text includes at least a link to a URL that describes a method by which the product providing user receives the price. E-mail client 310 of user A terminal 3
Receives the payment request mail 104, displays the contents on the screen.

FIG. 25 shows an example of the commodity price receiving request mail 12. Referring to FIG. 25, the commodity price reception request mail includes a header 2501, a body 2502, and transaction information 2503. In the text 2502, the URL 2504 of the product confirmation page is "http: // b
oo / 013 ".

When the URL of the payment request mail 11 displayed on the user A terminal 3 is selected, the electronic mail client 310 issues a WWW page display request 311 to the WWW client 300. The WWW client 300 issues a WWW page request 302, and receives a payment request page 105 (2 in FIG. 2) from the corresponding server.
Receive 2) and display it on the screen. When the user inputs the price receiving place of the price receiving request page displayed on the user A terminal 3 and presses the determination button (S2303),
The WWW client 300 sends a payment receiving method determination notice 302 (21 in FIG. 2) to the transaction management means 10.

The transaction management means 10 having received the price receiving method decision notification 21 randomly obtains a fixed number of questions from the question list of the transaction rules of the ticket holding means 50,
The personal identification question page 11 (105 in FIG. 3) whose example is shown in FIG. 19 is created and handed over to the WWW client 300 of the user A terminal 3 (S2304). The identity confirmation question page 11 includes several selected questions, an area for inputting answers to the questions, and transaction contents. WWW client 30 that has received the identity confirmation question page 105
0 indicates the content.

When the product providing user presses the enter button on the personal identification question page 105 displayed on the WWW client 300 (S2305), the WWW client 300 requests the face image obtaining means 320 to obtain a face image obtaining request 303. Issue Upon receiving the face image acquisition request 303, the face image acquisition unit 320 displays an instruction to capture the face image to the user, and interacts with the operation user to face image 321 of the operation user (here, user A).
Is acquired and passed to the WWW client 300 (S23).
06).

The WWW client 300 having received the face image 321 notifies the transaction management means 10 of the question answer 302
(21 in FIG. 2) is passed (S2307). The question-and-answer notification 21 includes at least a ticket ID, a question, and an answer to the question. The transaction management unit 10 that has received the question / response notification 21 changes the current transaction state of the ticket holding unit 50 to “delivery of goods” and sets the pair of the received question and answer to the identity of the corresponding ticket in the ticket holding unit 50. Record in the question and answer section. Further, the transaction management means 10 checks the current transaction state of the ticket specified by the ticket ID from the ticket holding means 50,
The transaction contents, the request to the convenience store, the name of the store receiving the price of the commodity sending user and the contents of the question and answer are acquired, and the electronic image is generated together with the face image included in the question and answer notification 21 as the electronic ticket generation request 13. Hand over to 30.

The electronic ticket generation means 30 sends an encryption key generation request 32 to the encryption key management means 40. Encryption key management means 40 receiving encryption key generation request 32
Generates an encryption key at random and sends the encryption key 41 to the electronic ticket generation means 30 (S2307). The electronic ticket generating means 30 having received the encryption key 41 encrypts the contents of the request to the convenience store, the name of the store for receiving the commodity price, the contents of the question and the answer and the face image by using the common key encryption with the encryption key 41, and Yes (S230
9). The electronic ticket generation unit 30 collects the merchandise price receiving store name, the ticket ID, and the encryption key used for the encryption included in the electronic ticket generation request 13 into an encryption key division request 32 and passes the request to the encryption key management unit 40. . The encryption key management unit 40 performs the ticket generation process S70
By dividing the encryption key included in the encryption key division request 32 in the same manner as in step 2, a single essential encryption key and two arbitrary encryption keys are generated (S2310).

[0111] The encryption key management means 40 stores the convenience store terminal 5 of the convenience store specified by the merchandise price payment store name included in the encryption key division request 32.
One of the arbitrary divided encryption keys 42 (102 and 531 in FIG. 4) is sent to the key holding unit 531 (S23).
11). Further, the encryption key management unit 40 passes the remaining arbitrary divided encryption key and the required divided encryption key to the electronic ticket generation unit 30 as the division result 41. The electronic ticket generating unit 30 that has received the division result 41 collectively transfers the two divided encryption keys included in the division result 41 and the previously generated encrypted ticket to the transaction management unit 10 as electronic ticket information 31.

The transaction management means 10 records an arbitrary divided encryption key among the divided encryption keys and the encrypted ticket in the encrypted data column of the corresponding ticket of the ticket holding means 50 (S2312). Further, the transaction management means 10 combines the encrypted ticket, the required divided encryption key, the transaction content and the message to the user into an electronic ticket set,
The electronic ticket sets 11, 22 (105 in FIG. 3) of the user A terminal 3 are sent to the WWW client 300 (S
2313). Here, the message to the user is, for example, "Sent an electronic ticket for receiving the product price to the mobile phone. Bring this mobile phone to the convenience store and perform the process of receiving the product price. It is as follows. "

Upon receiving the electronic ticket set 105, the WWW client 300 of the user A terminal 3 records the contents of the electronic ticket set 105 in the encryption information holding means 330 and starts a message, transaction contents and payment processing for the user. Button is displayed on the screen as the result of receiving the ticket for payment.

FIG. 26 shows an example in which the ticket receiving ticket page is displayed on the user A terminal 3. Referring to FIG. 26, the payment receipt ticket page includes an instruction 2601 to the product provider, a print ticket 2602 to be brought to the convenience store, and transaction contents 2603. The print ticket 2602 includes a barcode 2604 that enables processing at the convenience store terminal 5 of the convenience store.

When the commodity price payment start button displayed on the user A terminal 3 as a result of receiving the commodity price receipt ticket is pressed by the user (S231).
3), the WWW client 300 stores the corresponding encrypted ticket and the required divided encryption key in the encryption information holding unit 33.
From the electronic ticket set 301 (1 in FIG. 4).
03) to the decoding means 520 of the convenience store terminal 5 via the short-range wireless network 7 (S23).
15). Upon receiving the electronic ticket set 103, the decryption unit 520 sets the arbitrary encryption key 51 corresponding to the ticket ID.
1 is obtained from the key holding means 510. Next, a decryption key is generated by combining the arbitrary encryption key and the essential encryption key included in the electronic ticket set 103 (S23).
16), decrypt the encrypted ticket of the electronic ticket set 103 with the decryption key (S2317). The decryption unit 520 sends the decryption result 521 to the POS terminal function providing unit 530.

The POS terminal function providing means 530 receiving the decryption result 521 displays a question, an answer, and a face image from the decryption result 521 (S2318). When the clerk inputs that the ticket has been decrypted correctly, that the answer to the question has been correct, and that the face image has been confirmed (Y in S2319), the POS terminal function providing means 530 displays the normal PO.
By operating the S terminal, the commodity price delivery processing can be performed. When the product price delivery process is performed (S2320), the POS terminal function providing unit 530 issues a product price delivery procedure completion notification 533 (101, 21 in FIG. 2). Transaction control means 1 having received the notification 21 of the completion of the delivery of goods
In the case of 0, the current transaction state of the ticket holding means 50 is set to "completed", the ticket value is set to "0", and the payment processing (S706) is completed, and the series of processing shown in FIG. The payment payment procedure completion notification 21 includes at least a ticket ID and a deposit amount.

If the clerk inputs that the ticket was not decrypted correctly, the answer to the question was incorrect, or that the face image was different from the user terminal bearer (N in S2319), the POS terminal function providing means 530 inputs the information. Ticket error processing is performed.

FIG. 27 shows the flow of the ticket error process. When a ticket error occurs, the POS terminal function providing unit 530 issues an unauthorized use notification to the transaction management unit 10 (S2701). The transaction management means 10 that has received the ticket unauthorized use notification sends the problem occurrence mail 12 to the administrator of the ticket server 1 (S2702), and completes the processing shown in the flowchart of FIG.

[0119]

A first effect of the present invention is that a commercial transaction via a network can be securely realized. This is because a ticket valid only for each step of the commercial transaction is generated every time, and the encrypted electronic ticket is sent to the commercial transaction user. Further, when the ticket is exchanged for a product and a product price, an answer to the question presented at the time of ticket generation is checked, and a face image of the user is obtained at the time of ticket generation, and the face image is displayed on a terminal of a convenience store. This is because it is confirmed by the clerk of the convenience store.

A second effect of the present invention is that money and goods can be exchanged without disclosing personal information to trading partners. This is because the transaction user's personal information is held by the ticket holding means, the contents of which are encrypted, included in the encrypted electronic ticket, and sent to the product providing user.

A third effect of the present invention is that a commercial transaction via a network can be easily used. This means that the user only needs to hold the mobile phone that has become widespread, and pays for the product, ships the product,
This is because all the commercial transaction processes of receiving the goods and receiving the price of the goods can be performed by using a convenience store that is spread over a wide area.

A fourth effect of the present invention is that the commodity price can be reliably collected. This is because, without using a credit card, it is possible to pay for the commodity and receive the commodity by exchanging the ticket for cash only, without using a credit card.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of an electronic commerce system of the present invention.

FIG. 2 is a block diagram showing an example of a configuration of a ticket server 1 in FIG.

FIG. 3 is a block diagram showing an example of a configuration of a user A terminal 3 in FIG.

FIG. 4 is a block diagram showing an example of the configuration of the convenience terminal 5 in FIG.

FIG. 5 is a diagram showing an example of record contents of a ticket held by a ticket holding unit 50 in FIG. 2;

FIG. 6 is a diagram showing an example of a commercial transaction rule of the ticket holding unit 50 in FIG.

FIG. 7 is a flowchart showing the overall processing of a commercial transaction in the present invention.

FIG. 8 is a flowchart showing a detailed process of a new ticket generation process S702 in FIG. 7;

FIG. 9 is a view showing an example of a ticket generation notification page created in the process of FIG. 8;

FIG. 10 is a view showing an example of a ticket generation notification mail created in the processing of FIG. 8;

FIG. 11 is a flowchart showing a detailed process of a commodity price receiving process S703 in FIG. 7;

12 is a diagram showing a display example of a result of receiving a ticket for payment of a commodity price created in the process of FIG. 11;

13 is a flowchart showing a detailed process of a commodity receiving process S704 in FIG. 7;

FIG. 14 is a diagram showing an example of a product shipping request page created in the process of FIG.

FIG. 15 is a diagram showing an example of a product shipping request mail created in the process of FIG.

16 is a diagram showing a display example of a result of receiving a ticket for shipping of goods created in the processing of FIG. 13;

FIG. 17 is a diagram showing an example of a print tag for pasting a product created in the process of FIG. 13;

FIG. 18 is a flowchart showing a detailed process of a commodity delivery process S705 in FIG. 7;

FIG. 19 is a diagram showing an example of an identity confirmation question page created in the process of FIG. 18;

FIG. 20 is a diagram showing an example of a commodity receiving ticket page created in the process of FIG. 18;

FIG. 21 is a diagram showing an example of a product confirmation page created in the process of FIG. 18;

FIG. 22 is a diagram showing an example of a product confirmation request mail created in the process of FIG.

23 is a flowchart showing a detailed process of a commodity price payment process S706 in FIG. 7;

24 is a diagram showing an example of a product price receiving request page created in the process of FIG. 23.

FIG. 25 is a diagram showing an example of a commodity price receiving request mail created in the processing of FIG. 23;

26 is a view showing an example of a ticket receiving ticket page created in the processing of FIG. 23;

FIG. 27 is a flowchart showing ticket error processing in each processing of FIGS. 11, 13, 18, and 23;

FIG. 28 is a block diagram for explaining the flow of money and goods according to the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Ticket server 2 Network 3 User A terminal 4 User B terminal 5 Convenience store terminal 6 Auction server 7 Narrow area wireless network 10 Transaction management means 20 WWW server 30 Electronic ticket generation means 40 Encryption key management means 50 Ticket holding means 300 WWW Client 310 E-mail client 320 Face image acquisition unit 330 Encryption information holding unit 510 Key holding unit 520 Decryption unit 530 POS terminal function providing unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme court ゛ (Reference) G06F 17/60 502 G06F 17/60 502 506 506 512 512 512 H04L 9/08 H04L 9/00 601B 9/32 601E 673D

Claims (23)

[Claims] 1. An electronic commerce system for providing an escrow service for supporting exchange of money and commodities via a network, a ticket server for managing the progress of the escrow service, and terminals of a plurality of users who enjoy the escrow service. A plurality of commerce support terminals located at distributed locations for receiving and sending goods, and for receiving and paying money; and a network interconnecting the ticket server, the user terminals, and the commerce support terminals. An electronic commerce system comprising a user terminal and a narrow area network for connecting the commerce support terminal only at a commerce support location, and allowing users to exchange goods and money. 2. An auction server which provides a service for matching and making a user who wants to purchase a product and a user who wants to sell a product, wherein the ticket server is provided with a product purchaser and a product provided by the auction server. 2. The electronic commerce system according to claim 1, wherein the escrow service is started by acquiring the combination information of the persons. 3. The method according to claim 1, wherein a place for receiving the commodity price and a place for receiving the commodity are designated in advance, and the commodity price or the commodity cannot be received at any other place. Electronic commerce system. 4. A commercial transaction can be performed by issuing an electronic ticket to a user who wants to purchase a product and a user who wants to sell a product, and bringing the electronic ticket to a commercial transaction support place. Claim 1 to
3. The electronic commerce system according to any one of 3. 5. The electronic commerce system according to claim 1, wherein a merchandise sending procedure can be performed at the commerce support location and a merchandise receiving procedure can be performed at another commerce support location. 6. A commercial transaction support location for receiving a product price from a product purchaser, delivering a product to a product purchaser, receiving a product price from a product seller, and paying a product price to a product seller. The electronic commerce system according to claim 1. 7. An auction server, a ticket server, a user terminal, and a commerce support terminal for making a match between commerce participants are mutually connected via a network, and the user terminal and the commerce support terminal are connected to each other. In an e-commerce system interconnected via a narrow-area network only at a commerce place, the ticket server manages transition of a commerce state in an escrow service such as payment for goods, shipment of goods, confirmation of goods, and receipt of goods. A transaction management means for inducing a next commercial operation to be performed on the user terminal or the commercial transaction support terminal; and a WWW server for receiving a processing request related to the commercial transaction from the user terminal or the commercial transaction support terminal and posting information about the commercial transaction. The information obtained from the transaction management means is encrypted to support commercial transactions; Electronic ticket generating means for generating an encrypted electronic ticket for assuring that the user holding the user terminal at the place is a user participating in a commercial transaction; and using the electronic ticket generating means for encrypting the electronic ticket. Encryption key management means for generating an encryption key; and ticket holding means for holding, for each transaction, a history of commercial transactions, information on transaction products, and information on a transaction user, wherein the user terminal is connected to the network. An e-mail client that enables reading and writing of e-mail, and a WWW client that can connect to the network and the narrow area network to refer to a WWW page and operate as described in a WWW page description language; Encrypt the electronic ticket sent from the ticket server and keep it secure Decryption means for decrypting the electronic ticket sent from the user terminal, and key holding means for holding a key for decryption sent from the ticket server. A POS terminal function providing means for holding an output function using a display and a journal and an input function using a keyboard and a barcode reader and providing a general POS terminal function. Before executing each commercial transaction process of payment for the product and receipt of the product price, the ticket server sends an encrypted electronic ticket to the user terminal of the user executing each commercial transaction process, and from the user terminal during the commercial transaction process. An electronic ticket is sent to the commercial transaction support terminal, and the electronic ticket is sent to the commercial transaction support terminal. Electronic commerce system and executes a transaction process after confirming that the decoding to the correct ticket. 8. The encryption key management means divides the encryption key used for encryption into three to generate a divided encryption key, distributes the divided encryption key to the commercial transaction support end, the ticket server, and the user terminal, and 8. The electronic commerce system according to claim 7, wherein at the time of decryption, a decryption key is obtained from the ticket server and the user terminal to generate a decryption key, and the encrypted electronic ticket is decrypted. 9. The encryption key management unit according to claim 7, wherein the encryption key management unit divides the encryption key so that an electronic ticket can be decrypted with two of the three encryption keys. Electronic commerce system as described. 10. The encryption key management means generates a weighted divided encryption key so that one of the divided encryption keys is always required for decryption, and the transaction management means generates an encryption key essential for decryption. The electronic commerce system according to any one of claims 7 to 9, wherein the electronic ticket is transmitted to the user terminal, and the encrypted electronic ticket cannot be decrypted without the user terminal. 11. The transaction management means obtains merchandise shipping destination information from a user who receives merchandise before generating an electronic ticket, and the electronic ticket generating means encrypts the information by enclosing the information in an electronic ticket. The electronic commerce system according to any one of claims 7 to 10, wherein the support terminal decrypts the encrypted electronic ticket, takes out the included product shipping destination information, and prints a tag attached to the product. 12. The transaction management means requests a face image of an electronic ticket destination user to the WWW client of the user terminal before generating an electronic ticket, and the WWW client transmits the face image of the user terminal from the face image acquisition means. 10. The method according to claim 9, wherein a face image of a user who is operating is obtained and passed to the transaction management unit, and the transaction management unit and the electronic ticket generation unit further include the face image in an electronic ticket and encrypt the electronic ticket. An electronic commerce system according to any one of 7 to 11. 13. The decoding means according to claim 12, wherein
The POS terminal function providing means displays the decryption result on the screen and waits until the user operating the commercial transaction support terminal confirms that the decryption content is correct. The electronic commerce system according to any one of claims 7 to 12, wherein no function is provided. 14. The transaction management means, before generating a commodity payment ticket, further receives a user who receives an article by generating an arbitrary question list from a commercial transaction rule held by the ticket holding means or receives a commodity price. It is presented to the user to obtain the answer, the answer and the question are further included in the ticket by the electronic ticket generating means and encrypted, and the commercial transaction support terminal displays a list of the question and answer decrypted in the procedure. 10. The subsequent processing cannot be continued unless an input that the answer to the question is recognized to be correct is made to the commercial transaction support terminal by an operator of the commercial transaction support terminal. 13. The electronic commerce system according to any one of 13. 15. The transaction management means confirms whether there is a commodity payment ticket with a matching ticket ID in the encrypted data holding means of the user terminal when the commodity receipt ticket is issued, and Does not generate an identification question to the product receiving user, does not include the identification question in the electronic ticket, and does not display the identification question on the commercial transaction support terminal. Item 15. An electronic commerce system according to any one of Items 7-14. 16. The transaction management means confirms whether or not there is a commodity payment ticket having a matching ticket ID in the encrypted data holding means of the user terminal when the commodity receipt ticket is issued, and determines whether the commodity payment ticket is present. If there is, the electronic device does not request the user terminal for the face image of the user, does not include the face image in the electronic ticket, and does not display the face image on the commercial transaction support terminal. 15. The electronic commerce system according to any one of 15 above. 17. The transaction management means confirms whether or not there is a commodity shipping ticket having the same ticket ID in the encrypted data holding means of the user terminal when the commodity price receiving ticket is issued, and determines whether the commodity shipping ticket is present. If it exists, it does not generate an identity confirmation question to the commodity price receiving user, does not include the identity confirmation question in the electronic ticket, and does not display the identity confirmation question on the commercial transaction support terminal. Item 17. An electronic commerce system according to any one of Items 7 to 16. 18. The transaction management means confirms whether or not there is a commodity shipping ticket having the same ticket ID in the encrypted data holding means of the user terminal at the time of issuing the commodity price receiving ticket. If it is present, the user terminal is not requested for the user's face image,
The electronic ticket does not include a face image, and the face image is not displayed on the commercial transaction support terminal.
18. The electronic commerce system according to any one of 17. 19. The business transaction support location is a commercial facility such as a convenience store, a station, a hotel, or a public facility such as a city hall or a public hall.
Electronic commerce system according to any of the above. 20. The electronic commerce system according to claim 1, wherein the user terminal is a mobile phone, and money and goods can be exchanged among a plurality of users by using only the mobile phone. 21. The electronic commerce system according to claim 1, wherein the user terminal has a built-in camera for image acquisition or is in a connectable form. 22. The local area network is a Bluetooth network.
22. The device according to claim 1, wherein
Electronic commerce system according to any of the above. 23. The electronic commerce system according to claim 1, wherein a content of a processing request to the commercial transaction support terminal is described in the encrypted electronic ticket.