JPH08249286A - Electronic data communication system - Google Patents

Abstract

PURPOSE: To provide an electronic data communication system preventing the illegal utilization of transmitted electronic data and excellently keeping the secrecy of data transmission. CONSTITUTION: A server terminal 10 transmits electronic data given a serial number ciphered corresponding to a transmission request from a client terminal 20 to the client terminal and stores transmitted electronic data. The client terminal 20 receives electronic data by receiving electronic data transmitted from the server terminal 10 and writing it in a card 50. Then, a checker terminal 30 collates electronic data written into the card 50 and that stored in the server terminal 10 to confirm electronic data.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic data transmission / reception system, and more particularly to an electronic data transmission / reception system improved to prevent illegal use of transmitted electronic data.

[0002]

2. Description of the Related Art Recently, by using an IC card having a built-in semiconductor memory such as S-RAM or EEP-ROM, hotel use tickets, train, plane, ship tickets, movie theater, concert tickets, etc. can be transferred to the Internet. An electronic ticket issuing system that issues tickets electronically via a telephone network has been considered. As this electronic ticket issuing system, the one disclosed in Japanese Patent Application Laid-Open No. 6-236464 has been conventionally known.

By the way, this kind of electronic ticket issuing system generally confirms a server issuing an electronic ticket, a client receiving the electronic ticket issued from the server, and an electronic ticket received by the client. It is equipped with an electronic ticket confirmation terminal,
Here, some of the tickets issued by the server have confidentiality, and how to prevent illegal use of the tickets issued by the server by the client is a serious problem.

[0004]

However, the conventional electronic ticket issuing system disclosed in Japanese Patent Laid-Open No. 6-236464 has problems with respect to the confidentiality of ticket issuing and the prevention of illegal use. .

Therefore, an object of the present invention is to provide a system that prevents unauthorized use of transmitted electronic tickets and is excellent in the confidentiality of ticket issuing.

[0006]

In order to achieve the above object, the present invention provides a server for transmitting electronic data, a client for receiving electronic data transmitted from the server, and confirmation of electronic data received by the client. In an electronic data transmission / reception system including an electronic data confirmation terminal for performing, the server transmits electronic data to the client, the electronic data having a serial number encrypted in response to a transmission request from the client, Electronic data storage means for storing the electronic data transmitted by the electronic data transmission means, wherein the client receives the electronic data by receiving the electronic data transmitted from the server by the electronic data transmission means. The electronic data confirmation terminal is provided with Characterized by including the electronic data confirmation means for confirming the electronic data by collating the electronic data receiving means electronic data stored in the electronic data and the electronic data storage means received in.

Further, the present invention is an electronic data comprising a server for transmitting electronic data, a client for receiving the electronic data transmitted from the server, and an electronic data confirmation terminal for confirming the electronic data received by the client. In the transmission / reception system, the client includes transmission request means for requesting the server to transmit electronic data including an encryption keyword created on the client side, and the server responds to a transmission request from the client. And electronic data storage means for storing the electronic data transmitted by the electronic data transmission means, wherein the client transmits the electronic data. Receive electronic data transmitted from the server by means The electronic data confirmation terminal confirms the electronic data by collating the electronic data received by the electronic data reception means with the electronic data stored in the electronic data storage means. The electronic data confirmation means is provided.

Further, the present invention provides an electronic data transmitting / receiving system comprising a server for transmitting electronic data and a client for receiving electronic data transmitted from the server, the client being connected to the server via a line. A transmission request generating means for generating a transmission request for the electronic data, and a transmission request generating means for encrypting the transmission request generated by the transmission request generating means using the secret key of the client.
And an encryption means for encrypting the transmission request encrypted by the first encryption means using the public key of the server.
And the transmission request means for transmitting the transmission request encrypted by the second encryption means to the server.

Also, the present invention provides an electronic data transmitting / receiving system comprising a server for transmitting electronic data and a client for receiving electronic data transmitted from the server, the client being connected to the server via a line. Is a transmission request generating means for generating a transmission request for the electronic data, a random number giving means for giving a random number to the transmission request generated by the transmission request generating means, and a transmission request having a random number given by the random number giving means. And a second encryption means for encrypting the transmission request encrypted by the first encryption means by using the public key of the server. And a transmission request means for transmitting the transmission request encrypted by the second encryption means to the server.

Further, the present invention is an electronic data comprising a server for transmitting electronic data, a client for receiving the electronic data transmitted from the server, and an electronic data confirmation terminal for confirming the electronic data received by the client. In the transmission / reception system, the client stores the electronic data encrypted by using the secret key of the server corresponding to the electronic data transmitted from the server, and the electronic data stored in the storage unit. Means for taking out the data, an encryption means for encrypting the electronic data taken out by the means for taking out using the public key of the electronic data confirmation terminal, and the electronic data confirmation for the data encrypted by the encryption means. Transmitting means for transmitting to the terminal,
The electronic data confirmation terminal comprises: receiving means for receiving the electronic data transmitted by the transmitting means; and decrypting the electronic data received by the receiving means using the secret key of the electronic data confirmation terminal. It is characterized by comprising decryption means and confirmation means for confirming the suitability of the electronic data decrypted by the decryption means.

[0011]

In the electronic data transmission / reception system of the present invention, the server uses the electronic data transmission means to transmit to the client the electronic data to which the encrypted serial number is added in response to the transmission request from the client, and the electronic data storage means. Thus, the electronic data transmitted by the electronic data transmitting means is stored. Further, the client receives the electronic data by receiving the electronic data transmitted from the server by the electronic data transmitting means by the electronic data receiving means. The electronic data confirmation terminal confirms the electronic data by the electronic data confirmation means by collating the electronic data received by the electronic data reception means with the electronic data stored in the electronic data storage means.

Here, the electronic data transmitting means is an electronic data generating means for generating electronic data in response to a transmission request from the client, and a serial number encrypted in the electronic data generated by the electronic data generating means. The serial number assigning means for assigning the serial number to the client and the transmitting means for transmitting the electronic data with the serial number encrypted by the serial number assigning means to the client.

The client has a card capable of writing the electronic data, and receives the electronic data transmitted from the server by the electronic data transmitting means and writes the electronic data in the card to receive the electronic data. Can be configured to.

Further, the electronic data confirmation terminal can be configured to confirm the electronic data by decoding the encrypted serial number given to the electronic data of the electronic data received by the client.

Further, the electronic data transmitting means generates electronic data in response to a transmission request from the client, and an electronic data encrypted by the electronic data generated by the electronic data generating means. Serial number assigning means for assigning, encryption means for encrypting the entire electronic data to which the serial number encrypted by the serial number assigning means is encrypted, and transmission for transmitting the electronic data encrypted by the encrypting means to the client And means.

Further, the client can be configured to be able to confirm the received electronic data by including a decrypting means for decrypting the electronic data encrypted by the encrypting means.

Further, in the electronic data transmission / reception system of the present invention, the client transmits the transmission request of the electronic data including the encryption keyword created on the client side to the server by the transmission request means, and the server transmits the electronic data. The means transmits the electronic data containing the encryption keyword to the client in response to the transmission request from the client, and the electronic data storage means stores the electronic data transmitted by the electronic data transmitting means. Further, the client receives the electronic data by receiving the electronic data transmitted from the server by the electronic data transmitting means by the electronic data receiving means. Also,
The electronic data confirmation terminal confirms the electronic data by collating the electronic data received by the electronic data receiving means with the electronic data stored in the electronic data storage means by the electronic data confirmation means.

Here, the transmission request means can be configured to encrypt the entire transmission request of electronic data including the encryption keyword created on the client side and transmit the encrypted transmission request to the server.

Further, the electronic data transmitting means can be configured to encrypt the entire electronic data including the encryption keyword and transmit the encrypted electronic data to the server.

Further, the client can be configured to be able to confirm the received electronic data by including a decrypting means for decrypting the electronic data encrypted by the encrypting means.

Further, in the electronic data transmission / reception system of the present invention, the client generates the transmission request of the electronic data by the transmission request generation means, and the transmission request generated by the transmission request generation means by the first encryption means. Is encrypted using the private key of the client, the transmission request encrypted by the first encryption means is further encrypted by the second encryption means using the public key of the server, and the second request is transmitted by the transmission request means. The transmission request encrypted by the second encryption means is transmitted to the server.

Here, the server decrypts the transmission request received by the transmission request receiving means, and the transmission request received by the transmission request receiving means, by using the secret key of the server. First decryption means for
A first collating means for collating the transmission request decrypted by the first decrypting means with the public key of the client for collating the propriety of the transmission request, and the first collating means. If the transmission request is determined to be appropriate by, the electronic data generation means for generating electronic data corresponding to the transmission request, and the encrypted serial number to the electronic data generated by the electronic data generation means Serial number assigning means, a third encrypting means for encrypting the electronic data to which the serial number encrypted by the serial number assigning means is assigned using the secret key of the server, and an encryption by the third encrypting means. Fourth encryption means for encrypting the encrypted electronic data using the public key of the client, and an electronic device for transmitting the electronic data encrypted by the fourth encryption means to the server. It is de be configured by comprising: a data transmitting means.

Further, the client decrypts the electronic data received by the electronic data receiving means for receiving the electronic data transmitted from the electronic data transmitting means, and the electronic data received by the electronic data receiving means by using the secret key of the client. And a second decryption unit for decrypting the electronic data decrypted by the second decryption unit by using the public key of the server to verify the suitability of the electronic data. It can be configured by including a collating unit and a recording unit that records the electronic data when the second collating unit determines that the electronic data is proper.

In the electronic data transmission / reception system of the present invention, the client uses the transmission request generation means to generate a transmission request for electronic data, and the random number giving means applies a random number to the transmission request generated by the transmission request generation means. The encryption request is given and encrypted by the first encryption means with the random number given by the random number giving means, using the secret key of the client, and the second encryption means is given by the first encryption means. The generated transmission request is further encrypted using the public key of the server, and the transmission request means transmits the transmission request encrypted by the second encryption means to the server.

Here, the server decrypts the transmission request received by the transmission request receiving means, which receives the transmission request transmitted by the transmission requesting means, and the transmission request received by the transmission request receiving means, using the secret key of the server. First decryption means for
A first collating means for collating the transmission request decrypted by the first decrypting means with the public key of the client for collating the propriety of the transmission request, and the first collating means. When it is determined that the transmission request is proper, the electronic data generation means for generating electronic data corresponding to the transmission request, and the electronic data generated by the electronic data generation means are stored in the secret key of the server. A third encryption means for encrypting the encrypted data, a fourth encryption means for encrypting the electronic data encrypted by the third encryption means with the public key of the client, and the fourth encryption means. Electronic data transmitting means for transmitting electronic data encrypted by the encrypting means to the server.

Further, the client uses the electronic data receiving means for receiving the electronic data transmitted from the electronic data transmitting means and the electronic data received by the electronic data receiving means by using the secret key of the client. And a second decryption unit for decrypting the electronic data decrypted by the second decryption unit by using the public key of the server to verify the suitability of the electronic data. It can be configured by including a collating unit and a recording unit that records the electronic data when the second collating unit determines that the electronic data is proper.

Further, in the electronic data transmitting system of the present invention, the client stores the electronic data encrypted by the storage means using the secret key of the server corresponding to the electronic data transmitted from the server, and the extracting means. The electronic data stored in the storage means is retrieved by the encryption means, the electronic data retrieved by the retrieval means is encrypted by the encryption means using the public key of the electronic data confirmation terminal, and the encryption data is encrypted by the encryption means by the transmission means. The generated data is transmitted to the electronic data confirmation terminal. In addition, the electronic data confirmation terminal,
The receiving means receives the electronic data transmitted by the transmitting means, the decrypting means decrypts the electronic data received by the receiving means using the secret key of the electronic data confirmation terminal, and the confirming means uses the decrypting means. Confirm the suitability of the decrypted electronic data.

[0028]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT An embodiment of an electronic data transmitting / receiving system according to the present invention will be described in detail below with reference to the accompanying drawings.

FIG. 1 is a block diagram showing a schematic configuration of an embodiment of an electronic data transmitting / receiving system according to the present invention.

In FIG. 1, the electronic data transmission / reception system mainly includes an electronic data server 10 for transmitting electronic data, and an electronic data server (hereinafter referred to as a server terminal).
A small terminal (hereinafter referred to as a client terminal) 20 provided on the client side for receiving electronic data transmitted from 10 and an electronic data confirmation terminal side for confirming the electronic data when the electronic data received by the client side is used Small terminal (hereinafter referred to as checker terminal)
It is configured to include 30.

Here, the client terminal 20 and the checker terminal 30 are connected to the server terminal 10 via the internet telephone network 40.

In FIG. 1, one client terminal 20 and one checker terminal 30 are shown, but in the actual configuration, the client terminal 20 is installed in a general home or company. A large number of terminals 20 are provided, and the checker terminal 30 is used at a place where this electronic data is used, such as a hotel,
These are installed at stations, concert venues, etc.,
Many checker terminals 30 are also provided.

Further, the client terminal 20 uses the S-RA
A card writer capable of writing / reading data to / from a data writable / readable electronic data card (hereinafter referred to as a card) 50 including an IC card having a semiconductor memory such as M or EEP-ROM.
It has a reader, and performs ticket reception processing for receiving electronic data by writing electronic data corresponding to the electronic data transmitted from the server terminal 10 to the card 50.

The checker terminal 30 also has a card reader / writer capable of reading / writing data from the card 50 that has undergone the ticket reception processing by the client terminal 20, and the desired electronic data can be read from this card 50. By reading out, it is checked whether or not this electronic data is proper.

The server terminal 10 transmits electronic data via the client terminal 20 in response to a transmission request from the client side. Here, in this embodiment, the contents of the electronic data are as follows: 1) tickets for hotels, etc. 2) tickets for trains, planes, ships, etc. 3) tickets for movie theaters, concerts, etc. 3) tickets for horse racing, bicycle races, etc. Is assumed.

As the transmission request from the client side, 1) a transmission request made by voice communication by telephone using a telephone line 2) a transmission request made by image communication by facsimile using a telephone line 3) telephone line Request for data communication from personal computers and family computers using 4) Request for verbal transmission at electronic store 5) Internet telephone network 4 from client terminal 20
A transmission request using 0 may be considered.

Regardless of which transmission request is adopted, the server terminal 10 transmits electronic data via the client terminal 20 according to this transmission request.

In the case of adopting 4) the oral transmission request at the store for transmitting the electronic data, the client terminal 20 is arranged at the store for transmitting the electronic data.

In the following description, the operation of each unit will be described assuming that the client side makes a transmission request from the client terminal 20 in 5) using the Internet telephone network 40.

When the server terminal 10 receives a transmission request (ticket order) from the client terminal 20 on the client side via the Internet telephone network 40, electronic data transmission for transmitting predetermined electronic data corresponding to the transmission request. Execute the process. In this electronic data transmission process, the electronic data corresponding to the transmission request is transmitted from the server terminal 10 to the client terminal 20 on the client side via the internet telephone network 40, and the transmitted electronic data is transmitted to the server terminal 10 side. It is done by storing in. Here, the electronic data transmitted from the server terminal 10 to the client terminal 20 is attached with an electronic signature for identifying the client side, as described later in detail.

The client terminal 20 on the client side receives the electronic data from the server terminal 10 and writes the received electronic data in the card 50 to perform the electronic data receiving process.

Further, the client terminal 20 on the client side can pay for the electronic data by electronic settlement after receiving the electronic data from the server terminal 10.

By the way, in this embodiment, in the electronic data transmission process by the server terminal 10, in order to prevent the illegal use on the client side of the electronic data received on the client side, the server terminal 10 changes from the client terminal on the client side. 20) 1) Add an encrypted serial number to the electronic data sent to 20) 2) Perform a process of adding the cryptographic keyword sent from the client side when making a call request, and when using this electronic data The checker terminal 30 is configured to check the encrypted serial number or encrypted keyword.

When the process 1) is adopted, since the serial number cannot be decrypted on the client side because the serial number is encrypted, the same electronic data is repeatedly rewritten by falsifying the serial number. It is possible to prevent fraudulent use such as repeated use, and 2)
When the processing of (1) is adopted, the cryptographic keyword is required when using this electronic data, so that the unauthorized use of this electronic data by a third party can be prevented.

Further, in this embodiment, when electronic data is transmitted from the server terminal 10 to the client terminal 20 on the client side, all the transmission data is encrypted and transmitted to the client terminal 20.

According to such a configuration, the server terminal 10
Even if the third party eavesdrops this electronic data during the transmission of the electronic data from the client to the client terminal 20, the third party cannot decrypt the electronic data. Is retained. This configuration is particularly effective when using a network that can be accessed by the general public as the Internet telephone network 40.

In the configuration for encrypting the electronic data transmitted from the server terminal 10 to the client terminal 20, if the client side can decrypt the encrypted electronic data, the client side can receive the encrypted electronic data. It is possible to confirm the content of the electronic data that has been created.
Even if the client side is configured to decrypt the encrypted electronic data and the encrypted serial number is added to the electronic data, the encrypted serial number is If it is made impossible to decipher, it is possible to prevent illegal duplicated use in which the serial number is falsified by the client side and the same electronic data is repeatedly used.

The checker terminal 30 also checks whether or not the used electronic data is appropriate at the location where the electronic data is used. Specifically, the reception of electronic data on the client side is performed by the server terminal 1 as described above.
Since the electronic data transmitted from 0 is written in the card 50, when using the received electronic data, the card 50 in which the electronic data is written is used.
The user carries the electronic data to the location where the electronic data is used and inserts the card 50 into the checker terminal 30 provided at the location where the electronic data is used to check the electronic data.

In this check, if the electronic data is proper, then the electronic data can be used. For example, if this electronic data is a ticket for use at a hotel or the like, the use of this hotel becomes possible, and if this electronic data is a ticket for a train, an airplane, a ship, etc., a train, an airplane,
It becomes possible to use ships, etc., in the case of tickets for movie theaters, concerts, etc., you can enter the theater, concerts, etc., and in the case of tickets for horse racing, bicycle racing, etc., you can purchase horse tickets, car tickets, etc. Become.

The checker terminal 30 includes the server terminal 1
The public key and the transmitted check data, which will be described in detail later, are distributed from 0, and the checker terminal 30 uses the public key to decrypt the electronic data written in the card 50, and as a result, the electronic data is appropriate. Check if there is.

FIG. 2 is a block diagram showing a specific configuration of the server terminal 10. In FIG. 2, the server terminal 10 includes a basic block 100 and a database 12 that stores transmitted electronic data and the like.

Here, the basic block 100 is, as shown in FIG. 3, an identifier generator 101, a clock 102, and a power source 1.
03, communication unit 104, work area 105, encryption processing device 11
0, the cryptographic processing device 110 includes a digital signature device 111, a digital signature reference device 112, and an encryption device 1.
13, a decryption device 114, and a key management device 120,
The key management device 120 includes a public key management device 121 and a secret key management device 122.

Here, the identifier generating device 101 generates an identifier of the device on which the basic block 100 is mounted, the clock 102 measures time, manages the transmission time of electronic data, and the power source 103. Is for supplying drive power to the equipment in which the basic block 100 is mounted, and is supplied from a commercial power source or is composed of a battery.
That communicates between the device equipped with and other devices,
The work area 105 is a portion for performing various data processing of the device in which the basic block 100 is installed, the cryptographic processing device 110.
Is for performing various cryptographic processes in a device in which the basic block 100 is mounted.

Further, the electronic signature device 111 performs an electronic signature process which will be described in detail later, the electronic signature reference device 112 performs an electronic signature reference process which will be described in detail later, and the encryption device 1
Reference numeral 13 denotes a device that performs data encryption processing, and the decryption device 11
Reference numeral 4 denotes a decryption process for encrypted data, key management device 120 has an electronic signature process performed by electronic signature device 111, electronic signature reference process performed by electronic signature reference device 112,
Encryption process by the encryption device 113, decryption device 114
It manages a public key and a private key used in the decryption process by.

The public key management device 121 manages the public key, and the private key management device 122 manages the private key. The public key and secret key will be described in detail later.

FIG. 4 is a block diagram showing a specific configuration of the client terminal 20. In FIG. 4, the client terminal 20 includes a basic block 100, an input device 21, a storage area 22, a display device 23, a recording device 24,
The electronic payment device 25 is provided.

Here, the basic block 100 is the same as that described in detail in FIG.

The input device 21 inputs various data and commands for operating the client terminal 20, and the storage area 22 is the client terminal 20.
Which constitutes a work area for processing, the display device 23 displays various information including the operation state of the client terminal 20, and the recording device 24 is, for example, the server terminal 1.
The electronic payment device 25 records electronic data and the like received from 0, and the electronic payment device 25 electronically pays the price when the electronic data is received.

FIG. 5 is a block diagram showing a specific configuration of the checker terminal 30. In FIG. 5, the checker terminal 30 includes a basic block 100 and a confirmation device 3.
1. The display device 32 is provided.

Here, the basic block 100 is the same as that described in detail in FIG.

Further, the confirmation device 31 confirms whether or not the used electronic data is proper, and the display device 32 indicates the confirmation device 31.
The confirmation result and the like are displayed.

FIG. 6 shows a specific example of the electronic data reservation procedure in the electronic data transmission system shown in FIG. 1. In the example shown in FIG. 6, the client side when an encrypted serial number is used. The operations of the client terminal 20 and the server terminal 10 on the server side are shown.

By the way, in this embodiment, digital signature and encryption / encryption on the client side and the server side
The client terminal 20 on the client side has the secret key Kcs and the public key Kcp for the decryption processing, and the server terminal 10 on the server side also has the secret key Kss.
And a public key Ksp.

Here, the secret key Kcs is used for the digital signature on the client side, and the data encrypted with this secret key Kcs can be decrypted on the server side by using the corresponding public key Kcp. You can

The public key Ksp is used for encryption on the client side, and the data encrypted with the public key Ksp cannot be decrypted without using the corresponding secret key Kss.

The secret key Kss is used for the electronic signature on the server side, and the data encrypted with this secret key Kss can be decrypted on the client side by using the corresponding public key Ksp. .

Further, the public key Kcp is used for encryption on the server side, and the data encrypted with the public key Kcp cannot be decrypted unless the corresponding secret key Kcs is used.

In FIG. 6, when the client side makes a transmission request to the server side, first, a request R corresponding to this transmission request is generated (step 20).
1). Then, the request R is encrypted with the secret key Kcs of the client to give a digital signature (step 202).

Next, the request R that made this electronic signature
(Kcs) is further encrypted with the public key Ksp of the server (step 203), and this encrypted request R (Kc)
s, Ksp) to the server side (step 20)
4).

On the server side, this request R (Kc
s, Ksp) (step 205), and the received request R (Kcs, Ksp) is the secret key K of the server.
Decrypt with ss (step 206).

Then, the decrypted request R (K
By decrypting cs) with the public key Kcp of the client, the electronic signature on the client side relating to the transmission request is verified (step 207).

As a result of the electronic signature verification in step 207, when it is determined that the electronic signature is not appropriate (NO in step 207), the transmission request is ignored (step 208).

If it is determined that the electronic signature is proper as a result of the electronic signature verification in step 207 (OK in step 207), then it is checked whether the transmission request is a reservation process (step 209). . If it is determined that the reservation process is not performed (NO in step 209), a rejection notification T of the transmission request is generated (step 212), and the process proceeds to step 213.

If it is determined in step 209 that this transmission request is a reservation process (step 20)
9), electronic data T'corresponding to this transmission request
(= R (Kcs) + α) is generated (step 210),
Next, an encrypted serial number is added to the electronic data T ′ (step 211) to generate electronic data T (= T ′ + serial number), and the process proceeds to step 213.

In step 213, an electronic signature is given by encrypting the electronic data or the rejection notification T with the secret key Kss of the server, and the electronically signed information T (Kss).
Is further encrypted with the public key Kcp of the client (step 214), and this encrypted information T (Kss, Kcp)
Is transmitted to the client side (step 215).

On the client side, this information T (Ks
s, Kcp) (step 216), and the received information T (Kss, Kcp) is used as the secret key K of the client.
Decrypt with cs (step 217).

Then, this decrypted information T (Kss)
Is decrypted with the public key Ksp of the server to verify the electronic signature on the server side (step 218).

As a result of the electronic signature verification in step 218, when it is determined that the electronic signature is not appropriate (NO in step 218), this information is ignored (step 2).
19).

If the electronic signature verification in step 218 determines that the electronic signature is proper (OK in step 218), then the result of the transmission request is confirmed from the information T (step 218). 220).

As a result of confirmation of this result, if the information T is a rejection notice (NO in step 220), a predetermined reservation error process is executed (step 221).

If the information T is electronic data corresponding to the transmission request as a result of confirmation of the result (step 22)
0 is OK), the data is recorded in the recording device (step 222), and the electronic data T (Kss) is stored (step 223).

It is also possible to directly shift from step 217 to step 223 without performing the processing of steps 218 to 222.

FIG. 7 shows another specific example of the electronic data reservation procedure in the electronic data transmission system shown in FIG. 1. In the example shown in FIG. 7, the client side when random numbers are used. The operations of the client terminal 20 and the server terminal 10 on the server side are shown.

In FIG. 7, when the client side makes a transmission request to the server side, first, a request R'corresponding to this transmission request is generated (step 30).
1).

Then, a random number is given to this request R '(step 302). After that, the request R (R '+ random number) to which this random number is added is encrypted with the secret key Kcs of the client to give an electronic signature (step 303).

Next, the request R that made this electronic signature
(Kcs) is further encrypted with the public key Ksp of the server (step 304), and the encrypted request R (Kc)
s, Ksp) to the server side (step 30)
5).

On the server side, this request R (Kc
s, Ksp) (step 306), and the received request R (Kcs, Ksp) is the private key K of the server.
Decrypt with ss (step 307).

Then, the decrypted request R (K
By decrypting cs) with the public key Kcp of the client, the electronic signature on the client side relating to the transmission request is verified (step 308).

As a result of the electronic signature verification in step 308, when it is determined that the electronic signature is not appropriate (NO in step 308), the transmission request is ignored (step 309).

If it is determined that the electronic signature is proper as a result of the electronic signature verification in step 308 (OK in step 308), then it is checked whether the transmission request is a reservation process (step 310). . If it is determined that the reservation process is not performed (NO in step 310), a transmission request rejection notification T is generated (step 312), and the process proceeds to step 313.

If it is determined in step 310 that this transmission request is a reservation process (step 31)
0 is OK), electronic data T (=
R (Kcs) + α) is generated (step 311) and the process proceeds to step 313.

At step 313, an electronic signature is given by encrypting the electronic data or the rejection notification T with the secret key Kss of the server, and the electronically signed information T (Kss).
Is further encrypted with the public key Kcp of the client (step 314), and this encrypted information T (Kss, Kcp)
Is transmitted to the client side (step 315).

On the client side, this information T (Ks
s, Kcp) (step 316), and the received information T (Kss, Kcp) is the secret key K of the client.
Decrypt with cs (step 317).

Then, this decrypted information T (Kss)
Is verified with the public key Ksp of the server to verify the electronic signature on the server side (step 318).

As a result of the electronic signature verification in step 318, when it is determined that the electronic signature is not appropriate (NO in step 318), this information is ignored (step 3).
19).

If the electronic signature verification in step 318 determines that the electronic signature is proper (OK in step 318), then the result of the transmission request is confirmed from the information T (step 318). 320).

As a result of confirmation of this result, if the information T is a rejection notification (NO in step 320), a predetermined reservation error process is executed (step 321).

If the information T is electronic data corresponding to the transmission request as a result of confirmation of the result (step 32)
0 is OK), the data is recorded in the recording device (step 322), and the electronic data T (Kss) is stored (step 323).

It is also possible to directly shift from step 317 to step 323 without performing steps 318 to 322.

FIG. 8 shows a specific example of the electronic data utilization procedure in the electronic data transmission system shown in FIG. 1. In FIG. 8, the client terminal 20 on the client side and the check terminal on the electronic data confirmation terminal side are shown. Thirty
Shows the operation of.

In this embodiment, the client side client terminal 20 on the client side uses the private key Kcs and the public key Kcp for the digital signature and encryption / decryption processing on the client side and the electronic data confirmation terminal side.
In addition, the check terminal 30 on the electronic data confirmation terminal side has a secret key Kts and a public key Ktp.

In FIG. 8, electronic data T (Kss) digitally signed on the server side is stored on the client side (step 401). First, on the client side, the stored ticket, that is, the electronic data T
(Kss) is taken out (step 402), this electronic data T (Kss) is encrypted with the public key Ktp of the confirmation terminal (step 304), and this encrypted electronic data T
(Kss, Ktp) is transmitted to the electronic data confirmation terminal side (step 404).

The electronic data confirmation terminal receives this electronic data T (Kss, Ktp) (step 40).
5) Decrypt the received electronic data T (Kss, Ktp) with the secret key Kts of the confirmation terminal (step 40).
6).

Then, the decrypted electronic data T (K
The digital signature is verified by decrypting (ss) with the public key Ksp of the server (step 407).

As a result of the electronic signature verification in step 407, if it is determined that the electronic signature is not appropriate (NO in step 407), the electronic data T (Kss) is ignored (step 408).

If the electronic signature verification in step 407 determines that the electronic signature is proper (OK in step 407), then the electronic data T (Ks
The contents of s) are confirmed (step 409).

As a result of confirmation of the contents, electronic data T (Ks
If s) is not appropriate (NO in step 409), predetermined error processing is performed (step 410).

Further, as a result of the confirmation of the contents, electronic data T
If (Kss) is appropriate (O in step 409)
K), next, it is confirmed whether or not there is a duplication in the encrypted serial numbers given to the electronic data T (Kss) (step 411).

If it is determined that the serial numbers are duplicated, a predetermined error process is performed as an error (step 412).

If it is determined in step 411 that the serial numbers do not overlap, a predetermined ticket content corresponding to the electronic data T (Kss) is executed (step 41).
3).

[0111]

As described above, according to the electronic data transmitting / receiving system of the present invention, the server causes the electronic data transmitting means to transmit the electronic data to which the serial number encrypted in response to the transmission request from the client is added. The electronic data storage means stores the electronic data transmitted by the electronic data transmission means, and the client receives the electronic data transmitted by the electronic data transmission means from the server by the electronic data reception means. By receiving the electronic data,
The electronic data confirmation terminal is configured to confirm the electronic data by collating the electronic data received by the electronic data receiving means with the electronic data stored in the electronic data storage means by the electronic data confirmation means. It is possible to prevent an unauthorized use of the transmitted electronic data and to provide an electronic data transmission / reception system excellent in the confidentiality of ticket transmission.

[Brief description of drawings]

FIG. 1 is a block diagram showing a schematic configuration of an embodiment of an electronic data transmission / reception system according to the present invention.

FIG. 2 is a block diagram showing a specific configuration of the server terminal shown in FIG.

FIG. 3 is a block diagram showing a detailed configuration of a basic block shown in FIG.

FIG. 4 is a block diagram showing a specific configuration of the client terminal shown in FIG.

5 is a block diagram showing a specific configuration of the checker terminal shown in FIG.

6 is a flowchart showing a specific example of an electronic data reservation procedure in the electronic data transmission system shown in FIG.

7 is a flowchart showing another specific example of the electronic data reservation procedure in the electronic data transmission system shown in FIG.

8 is a flowchart showing a specific example of a procedure for using electronic data in the electronic data transmission system shown in FIG.

[Explanation of symbols]

 10 Electronic Data Server (Server Terminal) 12 Database 20 Small Terminal (Client Terminal) 21 Input Device 22 Storage Area 23 Display Device 24 Recording Device 25 Electronic Payment Device 30 Small Terminal (Checker Terminal) 31 Confirmation Device 32 Display Device 40 Internet Telephone Network 50 electronic ticket card (card) 100 basic block 101 identifier generation device 102 clock 103 power supply 104 communication unit 105 work area 110 cryptographic processing device 111 electronic signature device 112 electronic signature reference device 113 encryption device 114 decryption device 120 key management device 121 Public key management device 122 Private key management device

Claims (17)

[Claims] 1. An electronic data transmission / reception system comprising a server for transmitting electronic data, a client for receiving electronic data transmitted from the server, and an electronic data confirmation terminal for confirming the electronic data received by the client, The server is electronic data transmitting means for transmitting to the client electronic data to which an encrypted serial number is added in response to a transmission request from the client, and electronic data for storing the electronic data transmitted by the electronic data transmitting means. A storage unit, the client includes an electronic data receiving unit that receives the electronic data by receiving the electronic data transmitted from the server by the electronic data transmitting unit, and the electronic data confirmation terminal Is the electronic data received by the electronic data receiving means and Electronic data transmission and reception system, characterized by comprising an electronic data confirmation means for confirming the electronic data by collating the electronic data stored in the child data storage unit. 2. The electronic data transmitting means includes an electronic data generating means for generating electronic data in response to a transmission request from the client, and an electronic serial number encrypted in the electronic data generated by the electronic data generating means. 2. The electronic data transmitting / receiving system according to claim 1, further comprising: a serial number assigning unit that assigns the serial number, and a transmitting unit that transmits the electronic data to which the serial number encrypted by the serial number assigning unit is assigned, to the client. 3. The client has a card in which the electronic data can be written, and receives the electronic data transmitted from the server by the electronic data transmitting means and writes the electronic data in the card to receive the electronic data. Claim 1 characterized by the above.
Electronic data transmission / reception system described. 4. The electronic data confirmation terminal confirms the electronic data by decoding an encrypted serial number given to the electronic data of the electronic data received by the client. Electronic data transmission / reception system described. 5. The electronic data transmission means includes an electronic data generation means for generating electronic data in response to a transmission request from the client, and an encrypted serial number for the electronic data generated by the electronic data generation means. Serial number assigning means for assigning, encryption means for encrypting the entire electronic data to which the serial number encrypted by the serial number assigning means is given, and transmission for transmitting the electronic data encrypted by the encrypting means to the client The electronic data transmitting / receiving system according to claim 1, further comprising: 6. The electronic data transmission / reception system according to claim 5, wherein the client includes a decryption unit that decrypts the electronic data encrypted by the encryption unit. 7. An electronic data transmission / reception system comprising a server for transmitting electronic data, a client for receiving electronic data transmitted from the server, and an electronic data confirmation terminal for confirming the electronic data received by the client, The client includes transmission request means for requesting the server to transmit electronic data including an encryption keyword created on the client side, and the server responds to a transmission request from the client with the encryption keyword. And electronic data storage means for storing the electronic data transmitted by the electronic data transmission means, wherein the client is the server by the electronic data transmission means. Electronic data to receive electronic data sent from The electronic data confirmation terminal comprises a receiving means, and the electronic data confirmation terminal confirms the electronic data by collating the electronic data received by the electronic data receiving means with the electronic data stored in the electronic data storage means. An electronic data transmission / reception system comprising means. 8. The electronic device according to claim 7, wherein the transmission requesting means encrypts the entire electronic data transmission request including the encryption keyword created on the client side and transmits the encrypted transmission request to the server. Data transmission / reception system. 9. The electronic data transmitting / receiving system according to claim 7, wherein the electronic data transmitting means encrypts the entire electronic data including the encryption keyword and transmits the encrypted electronic data to the server. 10. The electronic data transmission / reception system according to claim 9, wherein the client includes a decryption unit that decrypts the electronic data encrypted by the encryption unit. 11. An electronic data transmission / reception system comprising a server transmitting electronic data and a client connected to the server via a line and receiving electronic data transmitted from the server, wherein the client is the electronic data. Transmission request generation means for generating a transmission request, first encryption means for encrypting the transmission request generated by the transmission request generation means by using the secret key of the client, and the first encryption means. Second encryption means for encrypting the transmission request encrypted by using the public key of the server, and transmission request means for transmitting the transmission request encrypted by the second encryption means to the server An electronic data transmission / reception system comprising: 12. The server uses a transmission request receiving means for receiving the transmission request transmitted by the transmission requesting means, and decrypts the transmission request received by the transmission request receiving means using a secret key of the server. A first decryption unit and a first collation unit for collating the transmission request decrypted by the first decryption unit with the public key of the client to determine whether or not the transmission request is appropriate. And when the first collating means determines that the transmission request is proper, electronic data generating means for generating electronic data corresponding to the transmission request, and electronic data generated by the electronic data generating means. Serial number assigning means for assigning an encrypted serial number to the data, and electronic data to which the serial number encrypted by the serial number assigning means is assigned is encrypted using the secret key of the server. Third encryption means, a fourth encryption means for encrypting the electronic data encrypted by the third encryption means using the public key of the client, and the fourth encryption means. 12. The electronic data transmitting / receiving system according to claim 11, further comprising: electronic data transmitting means for transmitting the electronic data encrypted by the method to the server. 13. The client includes an electronic data receiving unit that receives electronic data transmitted from the electronic data transmitting unit, and decrypts the electronic data received by the electronic data receiving unit using a secret key of the client. And a second decryption unit for decrypting the electronic data decrypted by the second decryption unit by using the public key of the server to verify the suitability of the electronic data. 12. The electronic data according to claim 11, further comprising: collating means; and recording means for recording the electronic data when the electronic data is determined to be proper by the second collating means. Transmission and reception system. 14. An electronic data transmission system comprising a server transmitting electronic data and a client connected to the server via a line and receiving electronic data transmitted from the server, wherein the client is the electronic data. A transmission request generation means for generating a transmission request, a random number giving means for giving a random number to the transmission request generated by the transmission request generating means, and a transmission request to which a random number is given by the random number giving means for the client's secret First encryption means for encrypting using a key; second encryption means for encrypting the transmission request encrypted by the first encryption means using the public key of the server; An electronic data transmission / reception system, comprising: a transmission request means for transmitting a transmission request encrypted by a second encryption means to the server. 15. The server uses a transmission request receiving means for receiving the transmission request transmitted by the transmission requesting means, and decrypts the transmission request received by the transmission request receiving means using a secret key of the server. A first decryption unit and a first collation unit for collating the transmission request decrypted by the first decryption unit with the public key of the client to determine whether or not the transmission request is appropriate. If the first collating means determines that the transmission request is proper, the electronic data generating means for generating electronic data corresponding to the transmission request, and the electronic data generating means for generating the electronic data Third encryption means for encrypting data using the private key of the server, and a third encryption means for encrypting the electronic data encrypted by the third encryption means using the public key of the client. 15. The electronic data transmission / reception system according to claim 14, further comprising: 4 encryption means; and electronic data transmission means for transmitting the electronic data encrypted by the fourth encryption means to the server. . 16. The client uses electronic data receiving means for receiving electronic data transmitted from the electronic data transmitting means, and decrypts the electronic data received by the electronic data receiving means by using the secret key of the client. And a second decryption unit for decrypting the electronic data decrypted by the second decryption unit by using the public key of the server to verify the suitability of the electronic data. 15. The electronic data according to claim 14, further comprising: collating means; and recording means for recording the electronic data when the electronic data is determined to be appropriate by the second collating means. Transmission and reception system. 17. An electronic data transmission / reception system comprising a server for transmitting electronic data, a client for receiving electronic data transmitted from the server, and an electronic data confirmation terminal for confirming electronic data received by the client, The client is a storage unit that stores electronic data encrypted by using the secret key of the server corresponding to the electronic data transmitted from the server, and a retrieval unit that retrieves the electronic data stored in the storage unit. And an encryption unit that encrypts the electronic data extracted by the extraction unit using the public key of the electronic data confirmation terminal, and the data encrypted by the encryption unit is transmitted to the electronic data confirmation terminal. The electronic data confirmation terminal is provided with: Receiving means for receiving, decrypting means for decrypting the electronic data received by the receiving means using the secret key of the electronic data confirmation terminal, and confirmation for confirming the suitability of the electronic data decrypted by the decrypting means. An electronic data transmission / reception system comprising: