JP2008099138A - Anonymous order system, device, and program - Google Patents

Abstract

An object of the present invention is to order a product etc. anonymously without using a prepaid card and a group signature method, and to protect privacy relating to order contents.
An administrator device generates a token with an administrator secret key, generates a pair of temporary encryption keys, and transmits the temporary encryption key to a member device. The member device 200 encrypts the order information with the temporary encryption key to generate encrypted order information, and transmits the order information and the token to the seller device. The merchant apparatus 300 verifies the token with the administrator public key, generates a merchant signature based on the payment basic information obtained by removing the sales target information from the order information, and sets the merchant signature to the payment basic information and the encrypted order information. It is transmitted to the administrator device together with the token. The administrator device verifies the seller signature with the seller public key, decrypts the encrypted order information with the temporary encryption key, verifies with the payment basic information, verifies the token with the temporary encryption key, and when all are valid, Payment information is transmitted to the payment institution apparatus 400.
[Selection] Figure 1

Description

  The present invention provides an anonymous ordering system that can anonymously order a sales object (hereinafter also referred to as a product etc.) consisting of a product or a service without using a prepaid card and a group signature method, and can protect privacy related to order contents, The present invention relates to an apparatus and a program.

  In recent years, online commerce has been conducted using a network. In online commerce, a user often inputs personal information such as an address, name, telephone number, and settlement information through a terminal device.

  However, it is considered that inputting such personal information has a great psychological burden on the user. For example, in a certain questionnaire, more than 90% of the survey respondents answered that they had entered personal information such as credit numbers in online commerce, and more than 80% of people were reluctant to input personal information. I answered yes. Such resistance is thought to be based on anxiety about leakage of personal information and infringement of privacy.

  Therefore, from the viewpoint of avoiding leakage of personal information and privacy infringement in online commerce, a system capable of paying money anonymously like face-to-face sales is desired.

  Specifically, there is an anonymous settlement system using prepaid electronic money, and anonymous settlement is realized by the following procedure. First, a user purchases a prepaid card at a convenience store or the like. Here, it is assumed that 5,000 yen worth of electronic money is converted into a prepaid card. In addition, this card contains a URL and a password. When the user scratches the card face, the personal identification number can be obtained. The user can make a purchase of 5,000 yen by connecting to the URL described on the card and inputting the password on the URL site.

  That is, according to such an anonymous settlement system, an anonymous wallet for 5,000 yen is placed on a server on the network and can be used until the balance reaches 0 yen. In this anonymous payment system, not only the provider of goods and services via the network, but also the salesclerk of the store that sells the prepaid card cannot know the password of the prepaid card purchased by the user. Therefore, it is difficult to specify the user. At least, the information that the person who purchased the prepaid card of 5,000 yen is transmitted to the provider of the product and the salesclerk of the store. Thus, by using a prepaid card, it is possible to construct a system that makes it difficult to specify a user and can make a payment for each user.

  However, with this anonymous payment system, when the balance of electronic money is low, it is necessary to purchase a prepaid card at a convenience store, etc. There is. In addition, since it is easy for minors to purchase prepaid cards, problems such as promoting crimes such as purchase of products for adults by minors have been pointed out.

  Under such circumstances, an anonymous ordering system in which personal information is deposited only with an institution registered in advance as a member has been studied.

For example, Patent Document 1 discloses an anonymous ordering system that uses a group signature method so that a service provider does not need to manage personal information, realizes user anonymity, and protects privacy related to order contents. Are listed.
JP 2006-119777 A

  However, in the anonymous order system described in Patent Document 1 described above, since the group signature method is used, when generating a group signature, the value calculated by raising a certain numerical value to a power is further increased. It is necessary to find a numerical value. Therefore, when generating a group signature, an enormous power operation must be performed. As a result, it takes a long time until the group signature is generated.

  On the other hand, with an electronic signature scheme such as an RSA (Rivest-Shamir-Adleman) signature, an electronic signature can be generated by exponentiation, and the time required to generate the signature can be shortened. Comparing with the same safety strength, in the group signature method, generating a signature requires a power of 3500 bits and a time of about 4 seconds. On the other hand, in the case of an electronic signature method, it takes about several hundreds of microseconds to generate a signature with a 1024-bit power operation. However, according to the study of the present inventor, it is difficult to apply the electronic signature method to the anonymous ordering system because the public key certificate for signature verification in the electronic signature method is not anonymous.

  Accordingly, it is desired to realize an anonymous ordering system that can order products and the like anonymously without using the group signature method and without the problems of prepaid cards, and that can protect the privacy related to the order contents.

  The present invention has been made in view of the above circumstances, and provides an anonymous ordering system that can order products and the like anonymously without using a prepaid card and a group signature method, and that can protect privacy related to order contents. With the goal.

  1st invention manages the member information of the member registered beforehand, issues the token to the member, and the member orders the sales object which consists of goods or a service anonymously using the token An anonymous ordering system comprising a member device for sales and a seller device for executing sales of a sales target according to the order, wherein the administrator device includes an administrator public key, an administrator secret key, Means for storing a merchant public key; member information storage means for storing the member information in association with member identification information for identifying the member; and a token for generating the token from the member device Means for receiving a token issuance request including generation information and the member identification information; and when receiving the token issuance request, an electronic signature of the token generation information is generated by the administrator secret key Token generating means for generating a token by adding the electronic signature to the token generation information, means for generating a temporary encryption key corresponding to the token when the token is generated by the token generating means, and the token And means for transmitting the temporary encryption key to the member device, and from the seller device, “sales target information indicating the sales target, order information including an order ID and a settlement amount corresponding to the sales target information”. Encrypted order information encrypted by the temporary encryption key, “basic payment information not including the sales target information but including an order ID and a payment amount corresponding to the sales target information”, and the seller secret Means for receiving a merchant signature generated from the payment basic information by a key and the token, and a merchant for verifying the merchant signature by the merchant public key Name verification means, means for decrypting the encrypted order information with the temporary encryption key to generate decryption order information, and an order for verifying whether the decryption order information is valid based on the settlement basic information The verification result by the information verification unit, the token verification unit that verifies the token received from the seller device with the administrator public key, the seller signature verification unit, the order information verification unit, and the token verification unit. A means for generating payment information for the object to be sold based on the member information and the basic payment information when each is verified to be valid, and the member device sends the token issue request to the manager device , Means for receiving the token, and a temporary encryption key corresponding to the token from the manager device, and by the operation of the member, the seller Means for displaying the sales target information transmitted from the apparatus; means for selecting any of the sales target information being displayed by the operation of the member; and the order information corresponding to the selected sales target information. Means for receiving from the seller device; means for encrypting the order information with the temporary encryption key to generate encrypted order information; and sending the encrypted order information to the seller device together with the order information and the token. Means for transmitting, and the seller device receives the order information, the encrypted order information, and the token from the member device, and means for storing a seller public key and a seller private key. Means for verifying the token received from the member device with the administrator public key, and if the token is verified to be valid, the payment basic Means for generating a merchant signature based on distribution, the merchant signature is anonymous order system and means for transmitting to said manager device together with the token and the payment basic information and the encrypted order information.

  According to a second aspect of the present invention, there is provided a member device for a member registered in advance to order a sales target consisting of goods or services anonymously using a token, and a seller for executing sales of the sales target according to the order. An administrator device program communicable with both devices, the administrator device computer storing an administrator public key, an administrator secret key, and a seller public key, the member Member information storage means for storing member information in association with member identification information for identifying the token, and a token issuance request including the token generation information for generating the token and the member identification information from the member device is received. When the token issue request is received, the electronic signature of the token generation information is generated with the administrator secret key, and the token is added to the token generation information. Token generating means for generating a token, means for generating a temporary encryption key corresponding to the token when the token is generated by the token generating means, means for transmitting the token and the temporary encryption key to the member device, Encryption obtained by encrypting “sales target information indicating the sales target, order information including an order ID corresponding to the sales target information and a settlement amount” by the member device from the seller device. The seller generated from the payment basic information by the order information, “basic payment information not including the sales target information but including the order ID and the payment amount corresponding to the sales target information”, and the seller private key Means for receiving a signature and the token; merchant signature verification means for verifying the merchant signature with the merchant public key; and Means for generating decryption order information by decrypting with an issue key, order information verification means for verifying whether or not the decryption order information is valid based on the basic payment information, and a token received from the seller device When the verification results by the token verification unit, the seller signature verification unit, the order information verification unit, and the token verification unit are verified with the administrator public key, respectively, the member information and the settlement are verified. It is a program for functioning as means for generating settlement information for the sales object based on basic information.

  According to a third aspect of the present invention, an administrator device that manages member information of members registered in advance and issues a token to the member, and the member orders an object to be sold consisting of goods or services anonymously using the token. A member device for communicating with both devices, wherein the token issues a token issuing request including member identification information and token generation information for identifying the member. Is generated by adding the electronic signature to the token generation information by generating the electronic signature of the token generation information from the administrator private key of the administrator device. The program main body stores a computer of the seller device, a means for storing a seller public key and a seller secret key, and a member device from the member device. The order information is encrypted by the member device using the information, the order information including the order ID corresponding to the sales target information and the settlement amount, and the temporary encryption key generated by the administrator device corresponding to the token. Means for receiving the encrypted order information and the token, means for verifying the token received from the member device with the administrator public key of the administrator device, and verifying that the token is valid A means for generating a seller signature based on “settlement basic information not including the sales target information but including the order ID and the payment amount corresponding to the sales target information” by the seller private key; , A program for causing the basic payment information, the encrypted order information, and the token to function as a means for transmitting to the administrator device.

<Action>
According to the first invention, when the administrator device receives the token generation information from the member device, the administrator device generates an electronic signature of the token generation information with the administrator private key, and adds the electronic signature to the token generation information. Generate a token. Furthermore, a temporary encryption key corresponding to the token is generated and transmitted to the member device together with the token. The member device receives a token and a temporary encryption key corresponding to the token from the administrator device, encrypts the order information with the temporary encryption key, and generates encrypted order information. Then, the encrypted order information is transmitted to the seller apparatus together with the order information and the token. The seller device receives order information (basic payment information + sales target information), encrypted order information, and a token from the member device. Then, the token received from the member device is verified with the administrator public key, and if the token is verified to be valid, a seller signature based on the payment basic information is generated with the seller private key, and the seller signature is The basic payment information, the encrypted order information, and the token are transmitted to the administrator device. In addition, the administrator device receives the encrypted order information, basic payment information, seller signature, and token from the seller device, and the respective results of verification of the seller signature, verification of the order information, and verification of the token are valid. If it is, the payment information for the sales target is generated based on the member information and the payment basic information.

  Therefore, the prepaid card and group signature method are used by depositing the member information only to the administrator device, not transmitting the member information to the seller device, and not revealing the detailed purchase history of the member to the administrator device. Therefore, it is possible to provide an anonymous ordering system in which a user can order products and the like anonymously and can protect privacy relating to order contents.

  In addition to the above-described operation, the second invention provides the administrator device with the payment information using the payment basic information and the member information not including the sales target information (product ID) when the token verification result is correct. Can be generated. As a result, it is possible to make a settlement without notifying the manager device from the member device or the seller device to the manager device.

  Further, in the third invention, in addition to the above-described operation, the seller device can obtain information that the member is registered in the administrator device by verifying whether or not the token is valid. it can. Thereby, the member who is a user can receive provision of a sales object, without telling personal information, such as individual ID and payment information, to a seller apparatus from a member apparatus.

  ADVANTAGE OF THE INVENTION According to this invention, the anonymous order system, apparatus, and program which can order goods etc. anonymously and can protect the privacy regarding the order content can be provided, without utilizing a prepaid card and a group signature system.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
(1-1. Configuration)
FIG. 1 is a schematic diagram showing a configuration of an anonymous ordering system according to the first embodiment of the present invention.

  In the anonymous order system according to the present embodiment, a management company (group administrator), a member (signer), and a seller (verifier) use the administrator device 100, the member device 200, and the seller device 300, respectively. In this anonymous order system, an administrator device 100, a member device 200, a seller device 300, and a settlement institution device 400 are connected to each other via a network 500.

In the anonymous order system according to this embodiment, an RSA digital signature algorithm widely used as a public key cryptosystem is considered. Also, a public key certificate issued by a certificate authority is used to use an electronic signature. In this embodiment, for simplicity, the public key certificate is simply indicated as a public key. For example, the public key certificate of the administrator device 100 is expressed as an administrator public key PK _GM .

  The administrator device 100 includes an administrator storage device 101, an initial setting unit 102, a member registration unit 103, a token generation unit 104, a temporary encryption key generation unit 105, an order information verification unit 106, a token verification unit 107, and a payment information generation unit. 108.

The administrator device 100 stores in advance a pair of an administrator public key and an administrator secret key (PK _GM , SK _GM ), and the administrator public key PK _GM is a valid third party (not necessarily a third party). The public key certificate issued by the certificate authority is not necessary.

The administrator storage device 101 has key information such as the administrator public key PK _GM and administrator secret key SK _GM of the administrator device 100 and the seller public key PK _SP of the seller device 300 set by the initial setting unit 102. Is a memory for storing.

More specifically, as shown in FIG. 2, the manager storage device 101 stores data such as member information, merchant information, token issue information, sales history information, and settlement information in addition to the key information. Here, as member information, personal information such as member ID (member identification information), name, name, postal code, address, telephone number, work name, work address, work telephone number assigned to each member The member account information, current token, temporary encryption key, etc. for making a settlement are stored in association with each other. As the member account information, for example, information such as a credit number or a bank account number is written. The current token and the temporary encryption key are information necessary for making an anonymous settlement when receiving provision of a product or the like from the seller device 300. As seller information, a seller ID, a seller name, a postal code, an address, a telephone number, a seller account information for performing settlement, and a seller public key PK _SP are stored in association with each other. Is done. As token issue information, the current token and the temporary encryption key are stored in association with each other for each member ID of the member. As the sales history information, a token, order information, and encrypted order information are stored in association with each other for each seller ID. The order information includes a product ID (sales target information), a unit price, a quantity, and a settlement amount for each order ID. The settlement information is information for instructing the settlement organization apparatus 400 to perform settlement, and for each order ID, member account information, merchant account information, and settlement amount are stored in association with each other.

The initial setting unit 102 sets information such as the administrator public key PK _GM and the administrator secret key SK _GM of the administrator device 100. In addition, the manager storage device 101 has a function of writing seller information.

  The member registration unit 103 writes member information in the administrator storage device 101 based on a member registration request from the member device 200. When member registration is completed, a member ID is given and a password is issued.

When the token generation unit 104 receives a token issue request transmitted from the member device 200, the token generation unit 104 issues a token. Specifically, the token generation unit 104 uses the electronic signature SIG _SKGM (R _USER , date_token) between the random number R _USER (token generation information) and the token issue date / time date included in the token issue request as the administrator secret key SK _GM. The information including the random number R _USER , the token issuance date / time_date_token, and the electronic signature SIG _SKGM (R _USER , date_token) is generated as a “token”. Note that the token issue date / time_token may be omitted, and the token may be information including a random number R _USER and an electronic signature SIG _SKGM (R _USER ). In any case, the token is sent to the member device 200 and written to the member information in the manager storage device 101 at the same time.

When the token generation unit 104 generates a token, the temporary encryption key generation unit 105 generates a temporary encryption key K _tmp corresponding to the generated token. The temporary encryption key K _tmp is a common key of the common key encryption method, and is sent to the member device 200 and written to the member information of the administrator storage device 101 at the same time.

The order information verification unit 106 has a verification function for verifying the seller signature, the payment basic information, and the encrypted order information received from the seller device 300. The payment basic information includes an order ID, a unit price, a quantity, and a payment amount. The seller signature is an electronic signature generated from the payment basic information by the seller private key SK _SP .

Here, the verification function of the order information verification unit 106 is as follows (f106-1) to (f106-2). (F106-1) A function of verifying whether or not the seller signature is valid based on the seller public key PK _SP and the settlement basic information. (F106-2) Regarding the encrypted order information, the order ID and the settlement amount of the decryption order information (order ID, product ID and settlement amount) obtained by decrypting the encrypted order information and the basic settlement information A function for verifying whether the order ID and the payment amount match. By these verifications, it can be confirmed that the order information transmitted from the seller device 300 is the order information transmitted from the member device 200. Further, when the order information verification unit 106 verifies that the order information and the seller signature are valid, the order information verification unit 106 sends order information legitimate data indicating the fact to the settlement information generation unit 108.

The token verification unit 107 verifies the electronic signature of the token received from the seller device 300 with the administrator public key PK _GM . Further, the token verification unit 107 confirms that the token received from the seller device 300 is not a token used in the past based on the token issuance information stored in the administrator storage device 101 or information on the token that is not currently used. Has a function to confirm. If the token verification unit 107 verifies that the token is valid, the token verification unit 107 sends token valid data indicating that to the payment information generation unit 108.

  When the payment information generation unit 108 receives the order information valid data from the order information verification unit 106 and the token valid data from the token verification unit 107, the payment information generation unit 108 converts the product into a product based on the member information, the seller information, and the basic payment information. Payment information is generated, and the payment information is written in the administrator storage device 101. Specifically, the payment information generation unit 108 reads information on the payment amount of the product included in the basic payment information transmitted from the seller device 300, and sets the payment organization based on the account information stored in the administrator storage device 101. Settlement information for instructing the apparatus 400 to settle the price of the product or the like is generated.

  The member device 200 is a terminal for a member who has previously registered as a member of the administrator device 100 to order a product or the like anonymously using a token. Specifically, the member device 200 includes a member storage device 201, a token request unit 202, a product request unit 203, and an encrypted order information generation unit 204.

  The member device 200 can perform member authentication to the administrator device 100 via the network 500 by using the member ID and password assigned at the time of member registration from the administrator device 100, and the result of this member authentication is valid. In this case, anonymous orders are possible.

The member storage device 201 is a memory in which a token transmitted from the administrator device 100, a temporary encryption key K _tmp , order information received from the seller device 300, and the like are stored as purchase history information. Specifically, as the purchase history information, as shown in FIG. 3, the order information received from the seller device 300, the token, the encrypted order information, the seller ID, and the date / time information are stored in association with each other.

The token request unit 202 transmits a token issuance request including a random number R _USER , a token issuance date / time_date_token, and a member ID (member identification information) to the administrator device 100 by a member operation. When the token request unit 202 receives the token and the temporary encryption key K _tmp from the administrator device 100 in response to the token issuance request, the token request unit 202 stores the token and the temporary encryption key K _tmp in the member storage device 201. Has a writing function. Here, the token is information issued by the administrator device 100 when the transmission source of the token issue request is a member. Specifically, the random number R _USER , the token issue date / time date_token, and the electronic signature SIG _SKGM (R _USER , date_token).

  The product request unit 203 requests the seller device 300 to provide a product or the like. Specifically, the product request unit 203 has a function of connecting to the seller device 300 by a member operation, a function of receiving product information indicating products (online content, etc.) transmitted from the seller device 300, and the like. A function for displaying received product information on a display device (not shown) and a member's operation select a product ID of product information to be purchased from the displayed product information with an input device (not shown) or the like. And a function of receiving order information including the selected product ID, the order ID corresponding to the product ID, and the settlement amount from the seller device 300. Note that the order information is not limited to “product ID”, “order ID”, and “settlement amount”, but for example, a range in which the sales target cannot be specified, such as “unit price” of the product, etc. = At least excluding the product name, preferably in the range excluding the product ID), any related information may be included.

When the product request unit 203 receives the order information from the seller device 300, the encrypted order information generation unit 204 generates “encrypted order information” obtained by encrypting the order information using the temporary encryption key K _tmp. To do. The encrypted order information generation unit 204 is preferably realized by a tamper resistant device such as an IC card or a USB memory having tamper resistance from the viewpoint of fraud prevention. In addition, the encrypted order information generation unit 204 has a function of transmitting a product request including the encrypted order information, the order information, and the token to the seller device 300 when the encrypted order information is generated. If the merchandise device 300 accepts the merchandise request, the merchandise device 300 provides the merchandise and the like.

  The seller device 300 receives order information of a sale target consisting of products or services together with a token, and includes a seller storage device 301, an order receiving unit 302, a product providing unit 303, and a settlement request unit 304. . In the present embodiment, the case where the sales target is a product will be described as an example.

Here, as shown in FIG. 4, the seller storage device 301 stores a pair of seller public key and seller private key (PK _SP , SK _SP ) as key information. The public key PK _SP is assumed to have a public key certificate issued by a valid third party (not necessarily a third party) certificate authority. The administrator device 100 may issue the public key certificate of the seller public key PK _SP . In addition, an administrator public key PK _GM is stored as key information.

  The seller storage device 301 stores sales history information, seller information, product information, and content information in addition to key information. Here, the sales history information includes the sales date / time for the order ID, the token, the product ID of the sold content, the number, the unit price, the settlement amount (sales amount), the encrypted order information, the status information indicating the completion or incomplete of the settlement, etc. Is memorized. As the merchant information, merchant ID information, merchant name, postal code, address, etc. managed by the manager device 100, merchant account information at a settlement organization, and the like are also stored. As product information, product ID, unit price, and product description information are stored in association with each other. The product description information is information for explaining a product, and for example, a product name, a product classification, a product overview, and the like can be used as appropriate. In the content information, a product ID and content data are stored in association with each other. The content data is provided data when the product is content. The content information is omitted when the sales target is data (for example, translation data, ticket data, etc.) generated for each order (for example, when the sales target is a service).

The order receiving unit 302 receives a token, order information, and encrypted order information from the member device 200, and writes the received information and current date and time information in the seller storage device 301 in association with the order ID. It has a function. In addition, the order receiving unit 302 verifies whether the token transmitted from the member device 200 is valid by using the administrator public key PK _GM. The token valid data including at least the order ID is sent to the product providing unit 303.

  The product providing unit 303 provides a product or the like when the token valid data is received from the order receiving unit 302. For example, on the basis of the order ID, download of online content or the like to the member device 200 is made possible and provided. In addition, when the product providing unit 303 provides a product or the like, the product providing unit 303 sends provision completion data including the order ID to the settlement request unit 304.

When the settlement request unit 304 receives provision completion data from the product providing unit 303, the settlement request unit 304 makes a settlement request to the administrator device 100 for payment of the provided product. Electronic Specifically, the settlement request unit 304, after the provision of a product or the like, by the seller secret key SK _SP of the seller for the storage device 301, based on the settlement basic information, including order ID · unit price, number and payment amount It has a function of generating a signature as a “seller signature”, a basic payment information / seller signature thereof, and a function of transmitting the token / encrypted order information transmitted from the member device 200 to the administrator device 100.

  The settlement institution device 400 is used in a financial institution such as a bank, for example, and manages the account of a member or a seller. When the settlement information is received from the administrator device 100, the account of the seller from the account of the member. Has the function of transferring money to That is, the settlement institution device 400 has a function of paying the price between the member device 200, the administrator device 100, and the seller device 300 from the viewpoint of allowing the member to anonymously pay the seller for the product etc. Have For the name of the transfer person, for example, information such as an order ID or an administrator name that cannot identify a member from the seller is used.

(1-2. Operation)
Next, the operation of the anonymous order system according to the present embodiment will be described with reference to the sequence diagram of FIG.

  As a premise, the member device 200 transmits a member registration request for registering the user as a member to the administrator device 100 by a user operation (step ST1). After receiving the member registration request, the administrator device 100 registers the user as a member when admitting as a member (step ST2). Along with member registration, in the following description, the above-mentioned “user” is referred to as “member”. Further, the administrator device 100 sets a member ID and a password for each member, and transmits it to the member device 200 (step ST3). In this embodiment, the member ID and password are generated and issued by the administrator device 100. However, if the member ID is managed so as not to overlap with the member IDs of other members, the member device 200 A member ID and a password may be set, and a member registration request including the member ID and password may be transmitted.

  When the member device 200 receives the member ID and the password and completes the member registration, the member device 200 can execute an order for products etc. provided by the seller device 300 by the operation of the member.

Specifically, the member device 200 obtains a token and a temporary encryption key K _tmp from the administrator device 100 by a member operation. At this time, the token request unit 202 of the member device 200 generates a random number and transmits a token issue request including the random number R _USER , the token issue date / time date_token, and the member ID to the administrator device 100 (steps ST4 and ST5).

Upon receiving the token issuance request, administrator apparatus 100 generates a token (step ST6). Specifically, an electronic signature with the administrator private key SK _GM is given to the two data of the random number R _USER included in the token issuance request and the issuance date / time date_token of the token by the token generation unit 104. Thus, a token (Token) is generated.

In addition to the generation of the token, the temporary encryption key generation unit 105 generates a temporary encryption key K _{tmp that} is temporarily shared with the member device 200.

Then, the generated token and the temporary encryption key K _tmp are transmitted from the administrator device 100 to the member device 200 (step ST7).

In Member apparatus 200, upon receiving the token and a temporary encryption key _{K tmp,} writes the token and the temporary encryption key _{K tmp} membership storage device 201.

  Subsequently, the member device 200 is connected to the seller device 300 by a member operation, and displays the product information transmitted from the seller device 300 on a display device (not shown). In the member device 200, any of the displayed product information is selected by a member's operation (step ST8). Note that the product information according to the present embodiment represents digital content such as music, moving images, and still images that can be provided online.

  When the merchandise information is selected by member apparatus 200, seller apparatus 300 transmits order information for certifying that the selected merchandise has been sold to member apparatus 200 (step ST9). The order information includes an order ID that is a sequence number uniquely assigned to each order by the seller apparatus 300, a settlement amount, and a product ID. The product ID is referred to as sales target information, and other information such as order ID and payment amount is also referred to as basic payment information.

When the member device 200 receives the order information, the encrypted order information generation unit 204 encrypts the order information using the temporary encryption key K _tmp and generates encrypted order information (step ST10). For encryption, for example, common key encryption such as Triple DES (Data Encryption Standard) or AES (Advanced Encryption Standard) is used. Then, the member device 200 transmits the order information and the encrypted order information together with the previously sent token to the seller device 300 (step ST11).

Upon receiving the token, the order information (settlement basic information + sales target information), and the encrypted order information, the seller apparatus 300 verifies the validity of the token using the administrator public key PK _GM by the order receiving unit 302. (Step ST12). That is, the order reception unit 302 generates the random number R _USER obtained by decrypting the electronic signature of the token with the administrator public key PK _GM and the issuance date / time date_token of the token, the random number R _USER included in the token and the issuance date / time of the token date_token in advance. And verify whether they match. The time when both coincide is “valid”.

  If the verification result is valid, the order receiving unit 302 sends the token valid data to the product providing unit 303. Upon receiving the token valid data, the product providing unit 303 provides the content data to the member device 200 (step ST13). After providing the content, the product provision unit 303 sends the provision completion data to the settlement request unit 304.

Settlement request unit 304, the seller signature _{SIG SKSP} with the seller secret key _{SK SP} against settlement basic information including an order ID (order ID, unit price, number, payment amount) (step ST14).

  Then, the settlement request unit 304 transmits the encrypted order information, token, and seller signature together with the settlement basic information to the administrator device 100 (step ST15).

The administrator device 100 uses the order information verification unit 106 to verify the received seller signature with the seller public key PK _SP and payment basic information (step ST16). Further, the administrator device 100 uses the order information verification unit 106 to decrypt the encrypted order information using the temporary encryption key K _tmp (step ST17), and the content of the obtained decryption order information and the content of the basic payment information are identical. Verify that you are doing it. Furthermore, the administrator device 100 verifies the token with its administrator public key PK _GM by using the token verification unit 107 (step ST18).

  If all of these verification results are valid, the administrator device 100 is based on the settlement basic information, the member account information of the member who purchased the product, and the seller account information of the seller who provided the product. Payment information including an order ID, member account information, merchant account information, and a payment amount is generated. Then, the settlement information is transmitted to settlement organization apparatus 400 (step ST19).

  As a result, settlement is performed from the account of the member who purchased the product or the like in the settlement institution 400 (step ST20).

(1-3. Effect)
As described above, in the anonymous order system according to the present embodiment, when the administrator device 100 receives the random number R _user as the token generation information from the member device 200, the electronic signature of the random number R _user and the issue date / time_token of the token _Is generated by the administrator secret key SK _GM to generate a token. Furthermore, a temporary encryption key K _tmp corresponding to the token is generated and transmitted to the member device 200 together with the token. The member device 200 receives the token and the temporary encryption key K _tmp corresponding to the token from the administrator device 100, and encrypts the order information with the temporary encryption key K _tmp to generate encrypted order information. Then, the encrypted order information is transmitted to the seller apparatus 300 together with the order information and the token. The seller device 300 receives order information (basic payment information + sales target information), encrypted order information, and a token from the member device 200. Then, the token received from the member device 200 is verified with the administrator public key PK _GM . When the token is verified as valid, a merchant signature based on the payment basic information is generated with the merchant private key SK _SP , The seller signature is transmitted to the administrator device 100 together with the payment basic information, the encrypted order information, and the token. Further, the administrator device 100 receives the encrypted order information, settlement basic information, seller signature, and token from the seller device 300, and each result of verification of the seller signature, verification of the order information, and verification of the token. Is valid, the payment information for the product etc. is generated based on the member information and the payment basic information.

  Accordingly, the member information is deposited only with the manager device 100, the member information is not transmitted to the seller device 300, and the detailed purchase history of the member is not disclosed to the manager device 100. An anonymous ordering system that can protect the anonymity and privacy of members without using a method can be provided. Specifically, it is possible to provide an anonymous ordering system in which a user can order products and the like anonymously and can protect privacy regarding the order contents.

  Further, when the verification result of the token is correct, the administrator device 100 generates payment information using the basic payment information and member information that do not include the product ID. As a result, payment can be made without notifying the administrator device 100 of the specific contents of the product from the member device 200 or the seller device 300. Note that when the encrypted order information is decrypted, the order information including the product ID is known to the manager device 100, but the specific content such as the product name cannot be known from the product ID.

  Further, the seller device 300 can obtain information that the member is registered in the administrator device 100 by verifying whether or not the token is valid. Therefore, the seller device 300 can recognize that it is a registered member without receiving any personal information such as individual member ID or payment information from the member device 200. That is, the seller device 300 can provide a product without receiving personal information from the member device 200. Further, from the user's side, the member device 200 can receive the product without transmitting any personal information such as individual member ID or payment information to the seller device 300.

The member device 200 generates a random number R _USER as token generation information. According to such a random number R _USER , the uniqueness (uniqueness) of the token can be ensured. For example, even when different members transmit token issuing requests at the same time, since different random numbers are included in the token issuing requests, different tokens can be issued simultaneously. Further, since the member device 200 generates token generation information, it is possible to prevent the administrator device 100 from using the token illegally. However, the token generation information is not limited to being generated by the member device 200, but may be generated by the administrator device 100 if the administrator device 100 can be trusted.

  Moreover, in this embodiment, since the group signature is not used, an anonymous ordering system can be easily constructed.

<Others>
Note that the method described in the above embodiment includes a magnetic disk (floppy (registered trademark) disk, hard disk, etc.), an optical disk (CD-ROM, DVD, etc.), a magneto-optical disk (MO) as programs that can be executed by a computer. ), And can be distributed in a storage medium such as a semiconductor memory.

  In addition, as long as the storage medium can store a program and can be read by a computer, the storage format may be any form.

  In addition, an OS (operating system) running on a computer based on an instruction of a program installed in the computer from a storage medium, MW (middleware) such as database management software, network software, and the like realize the above-described embodiment. A part of each process may be executed.

  Further, the storage medium in the present invention is not limited to a medium independent of a computer, but also includes a storage medium in which a program transmitted via a LAN, the Internet, or the like is downloaded and stored or temporarily stored.

  Further, the number of storage media is not limited to one, and the case where the processing in the above embodiment is executed from a plurality of media is also included in the storage media in the present invention, and the media configuration may be any configuration.

  The computer according to the present invention executes each process in the above-described embodiment based on a program stored in a storage medium, and is a single device such as a personal computer or a system in which a plurality of devices are connected to a network. Any configuration may be used.

  In addition, the computer in the present invention is not limited to a personal computer, but includes a processing unit, a microcomputer, and the like included in an information processing device, and is a generic term for devices and devices that can realize the functions of the present invention by a program. .

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

It is a schematic diagram which shows the structure of the anonymous order system which concerns on the 1st Embodiment of this invention. It is a figure which shows the information memorize | stored in the memory | storage device 101 for managers concerning the embodiment. It is a figure which shows the information memorize | stored in the memory | storage device 201 for members concerning the embodiment. It is a figure which shows the information memorize | stored in the memory | storage device 301 for sellers concerning the embodiment. It is a sequence diagram for demonstrating operation | movement of the anonymous order system which concerns on the embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Administrator apparatus, 101 ... Storage device for administrators, 102 ... Initial setting part,
103: Member registration unit, 104: Token generation unit, 105 ... Temporary encryption key generation unit,
106: Order information verification unit 107: Token verification unit 108: Settlement information generation unit
200: Member device, 201: Member storage device, 202: Token request unit,
203 ... Product request section, 204 ... Encrypted order information generation section, 300 ... Seller device,
301 ... Seller storage device, 302 ... Order accepting unit, 303 ... Product providing unit,
304: Payment request unit, 400: Payment institution apparatus, 500: Network.

Claims (5)

An administrator device that manages member information of a member registered in advance and issues a token to the member; a member device for the member to order an object for sale consisting of goods or services anonymously using the token; An anonymous ordering system comprising a seller device for executing sales of a sales target according to the order,
The administrator device is
Means for storing an administrator public key, an administrator private key, and a merchant public key;
Member information storage means for storing the member information in association with member identification information for identifying the member;
Means for receiving, from the member device, a token issuing request including token generation information for generating the token and the member identification information;
A token generating means for generating an electronic signature of the token generation information with the administrator secret key and adding the electronic signature to the token generation information to generate a token when the token issue request is received;
Means for generating a temporary encryption key corresponding to the token when the token is generated by the token generating means;
Means for transmitting the token and the temporary encryption key to the member device;
From the seller device, encrypted order information obtained by encrypting “sales target information indicating the sales target, order information including an order ID corresponding to the sales target information and a settlement amount” with the temporary encryption key; “Payment basic information that does not include the sales target information but includes an order ID and a payment amount corresponding to the sales target information”, a seller signature generated from the payment basic information by the seller private key, Means for receiving the token;
A merchant signature verification means for verifying the merchant signature with the merchant public key;
Means for decrypting the encrypted order information with the temporary encryption key to generate decryption order information;
Order information verification means for verifying whether or not the decryption order information is valid based on the payment basic information;
Token verification means for verifying the token received from the seller device with the administrator public key;
When the verification results by the seller signature verification unit, the order information verification unit, and the token verification unit are verified to be valid, the payment for the sales target is performed based on the member information and the basic payment information. Means for generating information,
The member device is
Means for transmitting the token issue request to the administrator device;
Means for receiving from the administrator device the token and a temporary encryption key corresponding to the token;
Means for displaying sales target information transmitted from the seller device by the operation of the member;
Means for selecting any of the sales target information being displayed by the operation of the member;
Means for receiving the order information corresponding to the selected sales target information from the seller device;
Means for encrypting the order information with the temporary encryption key to generate encrypted order information;
Means for transmitting the encrypted order information to the merchant device along with the order information and the token;
The merchant device is:
Means for storing the merchant public key and merchant private key;
Means for receiving the order information, the encrypted order information and the token from the member device;
Means for verifying the token received from the member device with the administrator public key;
Means for generating a merchant signature from payment basic information based on the order information with the merchant private key if the token is verified as valid;
An anonymous ordering system, comprising: means for transmitting the seller signature to the manager device together with the basic payment information, the encrypted order information, and the token. Both devices, a member device for a member registered in advance to order a sales target consisting of goods or services anonymously using a token, and a seller device for executing sales of the sales target according to the order An administrator device capable of communicating with
Means for storing an administrator public key, an administrator private key, and a merchant public key;
Member information storage means for storing member information in association with member identification information for identifying the member;
Means for receiving, from the member device, a token issuing request including token generation information for generating the token and the member identification information;
A token generating means for generating an electronic signature of the token generation information with the administrator secret key and adding the electronic signature to the token generation information to generate a token when the token issue request is received;
Means for generating a temporary encryption key corresponding to the token when the token is generated by the token generating means;
Means for transmitting the token and the temporary encryption key to the member device;
Encryption obtained by encrypting “sales target information indicating the sales target, order information including an order ID corresponding to the sales target information and a settlement amount” by the member device from the seller device. The seller generated from the payment basic information by the order information, “basic payment information not including the sales target information but including the order ID and the payment amount corresponding to the sales target information”, and the seller private key Means for receiving a signature and the token;
A merchant signature verification means for verifying the merchant signature with the merchant public key;
Means for decrypting the encrypted order information with the temporary encryption key to generate decryption order information;
Order information verification means for verifying whether or not the decryption order information is valid based on the payment basic information;
Token verification means for verifying the token received from the seller device with the administrator public key;
When the results of verification by the seller signature verification unit, the order information verification unit, and the token verification unit are verified as valid, respectively, a payment for the sales target is performed based on the member information and the basic payment information. An administrator device comprising means for generating information. Both devices, a member device for a member registered in advance to order a sales target consisting of goods or services anonymously using a token, and a seller device for executing sales of the sales target according to the order An administrator device program capable of communicating with
A computer of the administrator device;
Means for storing an administrator public key, an administrator private key, and a merchant public key;
Member information storage means for storing member information in association with member identification information for identifying the member;
Means for receiving a token issuance request including token generation information for generating the token and the member identification information from the member device;
A token generating means for generating an electronic signature of the token generation information with the administrator secret key and adding the electronic signature to the token generation information to generate a token when the token issue request is received;
Means for generating a temporary encryption key corresponding to the token when the token is generated by the token generating means;
Means for transmitting the token and the temporary encryption key to the member device;
Encryption obtained by encrypting “sales target information indicating the sales target, order information including an order ID corresponding to the sales target information and a settlement amount” by the member device from the seller device. The seller generated from the payment basic information by the order information, “basic payment information not including the sales target information but including the order ID and the payment amount corresponding to the sales target information”, and the seller private key Means for receiving a signature and said token;
A merchant signature verification means for verifying the merchant signature with the merchant public key;
Means for decrypting the encrypted order information with the temporary encryption key to generate decryption order information;
Order information verification means for verifying whether the decryption order information is valid based on the settlement basic information;
Token verification means for verifying the token received from the seller device with the administrator public key;
When the results of verification by the seller signature verification unit, the order information verification unit, and the token verification unit are verified as valid, respectively, a payment for the sales target is performed based on the member information and the basic payment information. Means for generating information,
Program to function as. In the program according to claim 3,
The token generation information is a random number generated for each member device. An administrator device that manages member information of a member registered in advance and issues a token to the member; a member device for the member to order an object for sale consisting of goods or services anonymously using the token; A merchant device program capable of communicating with both devices,
The token is
When the administrator device receives a token issuance request including member identification information for identifying the member and token generation information from the member device, the administrator having the electronic signature of the token generation information in the administrator device Generated by a secret key, and generated by adding the electronic signature to the token generation information,
The program body includes a computer of the seller device,
Means for storing the merchant public key and merchant private key;
From the member device, “sales target information indicating the sales target, order information including an order ID and a settlement amount corresponding to the sales target information”, and a temporary encryption generated by the administrator device corresponding to the token Means for receiving the encrypted order information obtained by encrypting the order information by the member device with a key and the token;
Means for verifying a token received from the member device with an administrator public key possessed by the administrator device;
When the token is verified to be valid, the seller based on the “settlement basic information not including the sales target information but including the order ID and the payment amount corresponding to the sales target information” by the seller private key A means of generating a signature,
A program for causing the seller signature to function as a means for transmitting to the manager device together with the payment basic information, the encrypted order information, and the token.

Images