JPH1078988A - Electronic business transaction system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a simple and versatile electronic business transaction system which eliminates the danger caused by the pretense of a commodity seller, etc., and also secures the safety for business transactions in an on-line communication mode where the credit cards are used. SOLUTION: When a card holder purchases the commodities from a commodity seller, the card holder ciphers the partial data on the relevant commodity seller, card manager and distribution dealer among the order data necessary for purchase of commodities via his terminal equipment 1 and by means of a common cipher key effective only among those persons concerned. Then the card holder communicates with the terminal equipments 3 and 4 of the persons concerned for those ciphered data via a terminal equipment 2 of the commodity seller. Then each person concerned decodes every relevant partial data by means of the cipher key that is used in common to the card holder and carries out the desired business transaction processing.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to the Internet,
More particularly, the present invention relates to an electronic commerce system using a card for payment such as a credit card and a debit card.

[0002]

2. Description of the Related Art In recent years, with the spread of the Internet and personal computer communications, users of those networks have been able to provide online merchandise to merchants such as electronic malls and personal computer communications through online communications. And the purchase of the product is usually performed.

In such a commercial transaction, a person who intends to purchase a product has a credit card, a debit card, or another payment card in advance, and purchases the product. Along with data such as the name, address, telephone number, and the type and quantity of the product to be purchased, data such as the card number and expiration date of the card holder are transmitted from the terminal device of the card holder to the product seller via the network. connect. Then, based on the data received by the terminal device of the merchandise seller, the merchandise seller receives a card holder authentication from a card manager (card company) or performs a merchandise delivery procedure (requests a merchant for distribution of merchandise). And the billing of the merchandise to the credit card company. In addition, the card company gives the card holder authentication to the merchandise seller based on the name, address, telephone number, card number, expiration date, etc. of the card holder given by the merchandise seller or further given by the merchandise seller. Processing such as withdrawal of the product price from the account of the card holder (settlement of the product price) is performed based on data such as the product price.

In such an electronic commerce system, hacking (interception of communication data), cracking (falsification of communication data), a card holder, a merchant server (terminal device of a merchandise seller), an acquirer gateway (of a card administrator) Danger such as impersonation of terminal devices) has been pointed out.

In this case, for example, impersonation of a card holder can be prevented to a considerable extent by a database based on card numbers and the like held and managed by a card manager. In addition, since the upper limit is set for the payment amount of one card holder by the card, the damage caused by the impersonation of the card holder is not so large.

[0006] On the other hand, especially in the impersonation of a merchandise seller, a large number of card numbers,
Since card information such as an expiration date may be collected, plagiarizing such card information may cause a great deal of damage.

As a countermeasure against these problems, communication using an identification number (ID number) and a password of a card holder or data corresponding thereto has conventionally been performed, and when the identification number and the password have been stolen. However, so as not to affect the existing business transaction by card, so-called closed user group (closed user group)
It is common to construct a group). However, with such a system, it has been difficult to solve the above-described problems.

[0008] Various countermeasures against the above-mentioned problems have been proposed, such as encryption of communication data by stream type common key encryption using DES or the like, or authentication by public key encryption such as RSA encryption. However, a simple and versatile e-commerce system has not been built yet.

[0009]

SUMMARY OF THE INVENTION In view of the foregoing, the present invention provides an electronic commerce system using online communication using a card for payment, thereby eliminating the risk of impersonating a merchandise seller and securing the security of commercial transactions. It is an object of the present invention to provide a simple and versatile e-commerce system while ensuring security.

[0010]

In order to achieve the object, an electronic commerce system of the present invention achieves at least a merchandise seller and a card holder for purchasing merchandise from the merchandise seller using a card for payment. And a card manager that manages payment by the card as a party, a system for conducting business transactions through online communication in a network including a terminal device possessed by each party, wherein the card holder is the product seller from the product seller. When purchasing a product using a card, the card holder uses its own terminal device, out of order data for purchasing the product,
After encrypting a part related to each party other than the card holder with a common encryption key valid only between the parties, the encrypted order data including the encrypted data is collectively stored in the card holder. Each of the parties communicating from the terminal device to the parties other than the card holder via the product seller's terminal device and receiving the encrypted order data, the respective terminal devices use the respective terminal devices to convert the encrypted order data from the encrypted order data. The card administrator decrypts only the partial data relating to itself using the common encryption key with the card holder, and among the parties performing the decryption, the card administrator uses the terminal device to decrypt the partial data based on the partial data. The merchant performs a transaction process involving the card manager, including a process of giving the card holder authentication to the merchandise seller. Based on the decrypted partial data and the authentication of the card holder given by the card administrator, a process of a commercial transaction concerning the product seller is performed, including a process for delivering the product. .

According to the present invention, the card holder who intends to purchase a commodity from the commodity seller using the payment card is included in the order data. After encrypting the data of the part related to each party other than the card holder with a common encryption key valid only with each party, the encrypted order data obtained by decrypting the encrypted data is Communication is performed from the terminal device of the card holder to each party including the product seller via the terminal device of the product seller. By encrypting the order data in this way, its confidentiality is maintained.

On the other hand, each party such as a merchandise seller and a card manager who has received the encrypted order data, based on the encrypted order data, converts the partial data relating to the concerned party into a common encryption key between the card holder and the card holder. To decrypt. In this case, since each party does not have a common encryption key for decrypting the partial data relating only to the other party, it cannot decrypt the partial data and know its contents. Then, the content of the order data can be known only within a range in which the party is involved. Therefore, it is impossible to steal partial data that does not involve the parties. Then, of the parties, the card manager performs a business transaction related to the card manager based on the decrypted partial data, including a process of giving the merchandise seller authentication of the card holder, and Based on the partial data decrypted by its own terminal device and the authentication of the card holder given by the card administrator, including a process for delivering the product to the card holder, Perform related business transactions. Thereby, electronic commerce is established.

Therefore, according to the present invention, the confidentiality of the order data is ensured by encrypting and communicating the order data, and at the same time, the parties other than the card holder are provided with the necessary minimum of the order data. Only limited data is given. For this reason, even if a third party pretends to be a merchandise seller, the counterfeit merchandise seller cannot obtain information relating only to the card administrator, such as the card number and expiration date, for example. The effect of the impersonation cannot be obtained. As a result, according to the present invention, it is possible to secure the safety of commercial transactions while eliminating the risk of impersonating a merchandise seller. Further, since the encrypted order data generated by the terminal device of the card holder is distributed to each party via a merchandise seller, the card holder substantially converts the encrypted order data when purchasing a product. In this case, it is sufficient to communicate only with the merchandise seller, and a simple electronic commerce system can be realized.

In the electronic commerce system of the present invention,
The order data may include a delivery destination of the product (this is not limited to the location of the card holder), and may include a distributor that delivers the product as the party.

In this case, of the order data, the data of the delivery destination is encrypted only by the common encryption key between the card holder and the distributor, and the distributor has its own terminal device. It is preferable to perform the delivery processing of the product based on the partial data including the data of the delivery destination decrypted by the above and an instruction given from the product seller. By doing this, the delivery destination of the product,
Of the parties, only the distributor can know, which is preferable in terms of privacy protection.

In the present invention, the order data includes a number and an expiration date of the card, and the data of the number and the expiration date are encrypted only by the common encryption key between the card holder and a card manager. I do. Accordingly, when conducting business transactions using the payment card, the most important card number and expiration date on settlement are determined only by the card administrator who needs the data. In other words, a party other than the card administrator and the card holder cannot know the data of the card number and the expiration date. As a result, the security of the electronic commerce system described above can be effectively ensured, and in the course of commercial transactions,
It is possible to effectively prevent impersonation of the most dangerous commodity seller.

In the present invention as described above, the common encryption key may be separately determined and distributed between the card holder and each party in advance, but other than the card holder and the card holder. On the card holder side, the common encryption key between each of the parties described above is converted into a secret private key unique to the card holder provided in advance by the card holder, and a private and private key unique to each party other than the card holder. Generated on the side of each of the parties other than the card holder, by applying a unique and open identifier to the card holder to a secret private key unique to the party provided in advance by the party. It is particularly preferred to produce. Here, the identifier is fixedly used for each party and is open to the public, such as the name, name, address of each party, a mail address on the network, a domain name, or a combination thereof. Should be fine.

As described above, each party including the card holder employs a method of generating a common encryption key by applying the identifier of the other party to share the common encryption key to the secret personal key of the party. Each party can generate a common encryption key necessary for the above-mentioned commercial transaction without having to arrange or distribute a common encryption key in advance by simply inputting the identifier of the other party into its own secret personal key. . For this reason, the electronic commerce system of the present invention can be made extremely simple, and its versatility can be enhanced. Further, since it is not necessary to distribute the common encryption key itself in advance, the confidentiality of the communication data can be ensured, and the security of the electronic commerce system can be enhanced.

The method of generating a common encryption key as described above is described in, for example, a paper "NON-PUBLIC KEY DIS by Rolf Blom."
TRIBUTION / Advances in Cryptology: Proceedings of
CRYPTO'82 / Plenum Press 1983, pp.231-236 ", also R
olf Blom's paper `` An Optimal Class of Symmetric
Key Generation Systems / Advances in Cryptology: EU
ROCRYPT '84 / Springer LNCS 209, 1985, pp.335-33
8 ", or Japanese Patent Publication No. 5-48980, etc., and a detailed description thereof will be omitted here.

Further, in the present invention, before communicating with the encrypted order data, each of the parties communicates with the other party of the encrypted order data in advance to communicate with the party of the other party. It is preferable to confirm. By confirming the parties involved in e-commerce in advance in this way, it is possible to prevent the harmful effects of impersonating the merchandise seller or card manager in advance, and to further enhance the safety of the e-commerce system. Can be enhanced.

[0021]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described with reference to FIGS.

Referring to FIG. 1, in the electronic commerce system of the present embodiment, a terminal device 1 of a card holder having a card (not shown) for payment such as a credit card, a debit card, etc., and a merchandise seller Terminal device 2 and a card administrator (card company) managing payment by card
Terminal device 3 and a terminal device 4 of a distributor who is responsible for delivery of products handled by the product seller are communicably connected to each other via a network 5 such as the Internet or a personal computer communication network. These card holders, merchandise sellers, card managers, and distributors are parties to electronic commerce described below.

The terminal devices 1 to 4 of each party are constituted by computer machines such as personal computers. Each of the terminal devices 1 to 4 has a secret personal key 6 which is a common encryption key generation system for generating a common encryption key for encrypted communication between arbitrary parties, and a communication using the common encryption key. Encryption for data encryption / decryption
A decryption system 7 is included as software or hardware, and these systems 6 and 7 are distributed in advance to respective parties from a center (not shown) that issues an encryption key and the like.

Here, the secret private key 6 corresponds to the aforementioned Rolf
As shown in Blom's dissertation and Japanese Patent Publication No. 5-48980, etc., each terminal device 1 stores a unique identifier for each party, such as the name and address of the communication partner, and an openness. 4 to generate a common encryption key with the communication partner.

The encryption / decryption system 7 encrypts communication data with the common encryption key using a well-known DES (Data Encryption Standard) (transmission side of the communication data), and transmits the encrypted communication data. This is for decoding data (on the communication data receiving side).

In the electronic commerce system of the present embodiment having the above-described configuration, electronic commerce is performed as follows.

First, in the system according to the present embodiment, each party can use the Internet or personal computer communication at any time.
It is assumed that the other party who should communicate encrypted order data described later communicates with each other via each of the terminal devices 1 to 4 so that parties who should communicate encrypted order data described later can communicate with each other. Confirmation (authentication of the communication partner) of the other party is performed in advance.

Further, the card holder previously communicates with the terminal device 1 of the card holder itself and the terminal device 2 of the merchandise seller (refer to the homepage of the merchandise seller, etc.) or stores the catalog data of the merchandise seller on a CD. -The merchandise information of the merchandise seller is obtained by referring to the recording medium such as a ROM or a magazine.

When the card holder intends to purchase the merchandise from the merchandise seller, the card holder notifies the merchandise seller to that effect, and the merchandise seller sends order form data. The data of this order form is
The card holder itself may be obtained in advance from a CD-ROM or the like.

Next, the card holder inputs order data for purchasing a desired product with its own card using its own terminal device 1 in accordance with the acquired order form. In this case, the order data to be input includes, for example, the name, address, telephone number,
FAX number, card number and expiration date of the card held by the card holder, product name, quantity, product number, purchase price, payment form (installment payment, lump sum payment, etc.) of the product to be purchased, delivery destination of the product (delivery destination (Including address, address, etc.)
Etc.

The order data is not limited to the above data. When a card holder purchases a product using his or her own card, a product seller or a card manager who is a party to the commercial transaction is required. And distributors are required to carry out the processes related to their commercial transactions (identification of the orderer and order details by the merchandise seller, authentication of the card holder and payment by the card administrator, delivery of the merchandise by the distributor, etc.) It is only necessary to include appropriate information.

After the order data is created, the card holder further operates the terminal device 1 of the card holder so that the data of the part of the order data relating to each party of the merchandise seller, the card manager and the distributor (this is (Predetermined) and duplicate them. For example, FIG.
With respect to the merchandise seller, the name, address, telephone number, fax and
Number, product name, quantity, product number,
Data for specifying the orderer and order details, such as the purchase amount and payment form, are copied. For the card administrator, the name, address, telephone number, fax number, and Data for authenticating the card holder and performing settlement of the price, such as the number and expiration date, the product number of the product to be purchased, the purchase amount, the form of payment, etc., are copied. As for the distributor, data necessary for delivering the product, such as the name of the card holder, telephone number, FAX number, and delivery destination, is copied.

The procedure for the card holder to perform such processing, or the software for automatically processing the same, is used in advance when sending the data of the order form from the merchandise seller to the card holder. Is given to the holder. Then, the card holder performs the above-described processing according to a given procedure or with given software. Further, the partial data for each party is not limited to the above-described mode.
The data of the X number may not be required by any party. Also, due to the laws and customs of each country, the card manager does not need the product number or the product seller needs the delivery destination of the product. There.

Further, the card holder inputs the identifiers of the merchandise seller, the card manager and the distributor into the secret personal key 6 in the terminal device 1 of the card holder, respectively, so that each The common encryption key for cryptographic communication with a party is generated. In this case, since the distributor is specified by the merchandise seller, the identifier of the distributor or information (such as the name of the distributor) necessary for the card holder to recognize the identifier is transmitted from the merchandise seller, for example. For example, when sending data in a book format to a card holder, the data is given to the card holder in advance. Since the merchandise seller and the card manager are specified by the card holder itself, the card holder has already recognized the identifiers of the merchandise seller and the card manager.

In this manner, the partial data relating to each of the merchandise seller, the card manager and the distributor is copied from the order data, and the common encryption key between the parties is generated. The card holder uses the encryption / decryption system 7 of its own terminal device 1 to encrypt the partial data relating to each party using a common encryption key corresponding to the party, as shown in FIG. As a set of communication data, the encrypted order data and the card holder identifier, which are made up of each partial data,
The information is transmitted from the terminal device 1 of the user to the terminal device 2 of the merchandise seller via the network 5 (see a broken arrow x in FIG. 1). In this case, the identifier of the card holder transmitted together with the encrypted order data is not encrypted. Instead of the card holder identifier, information (simple name, address, etc. of the card holder) by which each party such as a merchandise seller can identify the card holder identifier may be transmitted together with the encrypted order data. .

At this time, since the encrypted order data, which is the main part of the communication data, is encrypted, it cannot be decrypted by a third party who is not the party, and the confidentiality of the communication data cannot be decrypted. Is secured.

On the other hand, the merchandise seller that has received the communication data (encrypted order data and the identifier of the card holder) at the terminal device 2 writes the identifier of the card holder included in the communication data into the secret of the terminal device 2 itself. By inputting the personal key 6, a common encryption key with the card holder is generated. Then, referring to FIG. 3, the merchandise seller decrypts the partial data relating to the encrypted order data using the encryption / decryption system 7 of its own terminal device 2 using the generated common encryption key. I do. This allows the merchant to provide the card holder's name, address, telephone number, FAX number, product name, quantity, product number, purchase amount, payment form, etc., of the order data. Data can be obtained regularly.

At this time, the partial data relating to the parties other than the merchandise seller (card manager and distributor) is encrypted with an encryption key different from the common encryption key between the merchandise seller and the card holder. However, the merchandise seller cannot decrypt the partial data, and therefore cannot know, for example, the card number and expiration date related to the card manager, or the contents of the data of the delivery destination related to the distributor.

Further, the merchandise seller transmits the encrypted order data and the identifier of the card holder from its own terminal device 2 to the card administrator's terminal device 3 via the network 5 (see the dashed arrow y in FIG. 1). ). In this case, all data received by the merchandise seller may be transmitted to the card administrator, but only partial data relating to the card administrator in the encrypted order data is transmitted to the card administrator together with the card holder identifier. You may.

In this way, the card manager, having received the encrypted order data and the identifier of the card holder from the terminal device 2 of the merchandise seller at his / her own terminal device 3, as in the case of the merchandise seller, sets the card holder. After generating the common encryption key with the card holder by inputting the identifier into the secret personal key 6 of the own terminal device 3, the terminal device 3 uses the common encryption key as shown in FIG. The encryption / decryption system 7 decrypts the partial data relating to the encrypted order data itself. Accordingly, of the order data, the name, address, telephone number, FAX number, card number and expiration date of the card holder, the product number of the product to be purchased, the purchase amount, and the payment of the price in the order data. Data necessary for the card manager such as the form can be obtained regularly. At this time, as in the case of the merchandise seller, the card administrator knows the data other than the partial data related to itself, for example, the data such as the delivery destination of the merchandise related only to the distributor, in the encrypted order data. Can not do.

Then, the card manager who has obtained the above-mentioned data, based on the data such as the card holder's name, telephone number, card number and expiration date, authenticates the card holder (if the card holder is an appropriate card user, Is performed), and the authentication result is notified to the product seller. further,
If the card holder is a proper card user, a process for withdrawing the price from the card holder's account is performed based on data such as the purchase amount and the form of payment.

Further, the merchandise seller having received the notification of the authentication result from the card manager, if the authentication result is appropriate, transmits the encrypted order data and the identifier of the card holder from its own terminal device 2 to the distributor. To the terminal device 4 via the network 5 (see the dashed arrow z in FIG. 1), and at the same time, gives the distributor a request for product delivery based on the partial data obtained by the product seller, or if necessary, Arrange purchase of goods. In this case, only the partial data relating to the distributor in the encrypted order data may be transmitted to the distributor together with the identifier of the card holder.

Then, the distributor receiving the encrypted order data and the card holder identifier from the merchandise seller transmits the card holder identifier to its own terminal device 4 in the same manner as the merchandise seller and the card manager. After inputting the secret personal key 6 to generate a common encryption key with the card holder, the encryption / decryption system 7 of the own terminal device 4 uses the common encryption key as shown in FIG. Decrypt the partial data of the encrypted order data relating to itself.
As a result, data necessary for the distributor, such as the name of the card holder, the telephone number, the FAX number, and the delivery destination, among the order data, can be obtained properly. At this time, the distributor knows data other than the partial data relating to itself, for example, data such as a card number and an expiration date, in the encrypted order data, as in the case of the merchandise seller or the card manager. Can not do.

The distributor that has obtained the data on the delivery destination or the like performs the product delivery process based on the data and the instruction given by the product seller.

In the electronic commerce system of the present embodiment constructed as described above, of the order data created by the card holder, the partial data relating to each party (commodity seller, card manager and distributor) is respectively stored. Encrypted using each common encryption key between each party and distribute the encrypted partial data to each party by communication, so that the confidentiality of the order data can be secured. it can. At the same time, each party can use the common encryption key with the card holder to obtain the necessary data of the order data without any trouble, while conversely, only the necessary data can be obtained. Can not. For this reason, for example, a merchandise seller or a distributor cannot know the number or expiration date of the most important card in the commercial transaction using the card. Therefore, even if a third party impersonates a merchandise seller or distributor, it is not possible to obtain important information such as the card number and expiration date, so that the effect cannot be obtained. It is possible to prevent impersonation of a distributor.

Each party including the card holder,
Since the communication with the communication partner of the encrypted order data is performed in advance to confirm the party of the communication partner, not only impersonation of the merchandise seller or distributor but also prevention of impersonation of the card administrator can be prevented. can do.

When the inventors of the present invention conducted a demonstration experiment using the e-commerce system of the present embodiment and tried various system attacks by impersonation, etc., they could sufficiently withstand these attacks. Was.

In this embodiment, the delivery destination of the product is
Since the data is encrypted only with the common encryption key between the distributor and the card holder, the data cannot be known by the merchandise seller or the card administrator, and the merchandise purchased by the card holder cannot be recognized by itself. Privacy can be protected when given to another person.

Further, when the card holder purchases a product, the encrypted order data is delivered via the terminal 2 of the product seller to the product seller, a card manager or a distributor. Therefore, the card holder only needs to transmit the encrypted order data only to the terminal device 2 of the merchandise seller, and can easily purchase the merchandise.

Further, in this embodiment, the card holder encrypts the partial data relating to the merchandise seller, the card manager and the distributor, and the merchandise seller, the card manager and the distributor decrypt the partial data respectively. A common encryption key can be generated by each party simply by inputting an identifier of a required party to a secret personal key provided in their own terminal devices 1 to 4, so that each time a commercial transaction is performed, There is no need to negotiate a common encryption key or have a separate center distribute the common encryption key, and business transactions can be easily performed.

Therefore, the electronic commerce system of the present embodiment can be made a safe, simple, and versatile system.

In the present embodiment described above, a system including a distributor as a party of electronic commerce is shown, but the system may be constructed without including the distributor.
Alternatively, it is also possible to construct a system including a gateway administrator such as an Internet provider, a key certificate authority, and the like as parties.

In this embodiment, a system has been described in which each party generates a common encryption key by inputting an identifier of a required party into a secret private key provided in its own terminal device 1-4. It is also possible to separately arrange a common encryption key between the parties or to have the center distribute the common encryption key.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram of an embodiment of an electronic commerce system of the present invention.

FIG. 2 is an explanatory diagram showing data processing on the card holder side in the system of FIG. 1;

FIG. 3 is an explanatory diagram showing data processing on a party other than the card holder in the system of FIG. 1;

[Explanation of symbols]

1-4 terminal device, 5 network, 6 secret personal key.

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁶ Identification code Reference number in the agency FI Technical display location H04L 9/00 601E 675D

Claims (5)

[Claims] Claims 1. At least a merchandise seller, a card holder that purchases merchandise from a merchandise seller using a payment card, and a card manager that manages payment by the card are used as parties. A system for conducting a commercial transaction by online communication in a network including a terminal device possessed by a party, wherein when the card holder purchases a product from the product seller using the card, the card holder uses its own terminal device. By encrypting a part related to each party other than the card holder in the order data for purchasing the product with a common encryption key valid only between the parties, the encrypted data From the terminal device of the card holder via the terminal device of the merchandise seller. Each party that has received the encrypted order data and communicated with each other party, using the terminal device, receives only the partial data related to itself using the common encryption key with the card holder from the encrypted order data. Among the parties performing the decryption, the card administrator:
Based on the partial data decrypted by its own terminal device,
The merchant performs a business transaction related to the card manager including a process of giving the card holder authentication to the merchandise seller. An electronic commerce system, which performs processing of a commercial transaction concerning the merchandise seller, including processing for delivering the merchandise, based on the authentication of the card holder. 2. The order data includes a delivery destination of the product, the party includes a distributor that delivers the product, and in the order data, the data of the delivery destination is the card holder and the distribution. The distributor is encrypted only with the common encryption key between the traders, and the distributor sells the product based on the partial data including the delivery destination data decrypted by its own terminal device and an instruction given by the product seller. 2. The electronic commerce system according to claim 1, wherein a delivery process is performed. 3. The method according to claim 2, wherein the order data includes a number and an expiration date of the card, and the data of the number and the expiration date are encrypted only by the common encryption key between the card holder and a card manager. The electronic commerce system according to claim 1 or 2, wherein 4. The common encryption key between the card holder and each party other than the card holder, on the card holder side, a secret private key unique to the card holder provided in the card holder in advance. Generated by applying a unique and open identifier to each party other than the card holder,
Each of the parties other than the card holder generates the secret private key unique to the party and provided by the party in advance by applying an identifier that is unique and open to the card holder. An electronic commerce system according to any one of claims 1 to 3. 5. The communication system according to claim 1, wherein each of the parties communicates with the communication partner of the encrypted order data in advance to communicate with the encrypted order data to confirm the party of the communication partner. The electronic commerce system according to any one of claims 1 to 4, wherein: