JP2000200320A - Electronic money - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a transaction using an electronic money without carrying a smart card for the electronic money transaction and to enable the transaction using the electronic money even when a terminal, to which a smart card reader/ writer is not connected, is used. SOLUTION: A customer 1 is a terminal to perform the transaction using the electronic money. An agency 2 deposits the value of electronic money in place of the customer 1. A bank 5 issues a transfer certificate permitting the value of the electronic money requested by the customer to be transferred from the bank 5. The customer 1 sends the transfer certificate issued by the bank 5 to the agency 2. The agency 2 sends the transfer certificate to the bank 5 and receives the electronic money of the relevant value from the bank 5 in place of the customer 1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of transferring electronic money between smart cards (also referred to as "IC cards") that handle money (hereinafter, referred to as "electronic money") stored electronically in a memory. Related to electronic money systems.

[0002]

2. Description of the Related Art A system in which a smart card storing the value of electronic money issued by a financial institution is used as an "electronic wallet" is disclosed in Japanese Patent Publication No. Hei 5-5046.
No. 43 "Money Transfer System". This "electronic wallet" system includes an electronic wallet using a smart card, a withdrawal means for loading the value (amount) of electronic money into the electronic wallet when the electronic wallet is attached,
It has a settlement means for adjusting the value of electronic money. These means are connected to the computer of the bank and enable the exchange of the value of electronic money between electronic wallets. "Electrification of smart cards" by electronically loading the value of electronic money from a bank account into memory in the smart card and electronically transferring some or all of the value of the electronic money to another electronic wallet. Treated as a "purged wallet". The value of e-money can only move between e-purses, except that it is generated and settled in banks. Therefore, it has a very strong character against fraud such as forgery and duplication. The term smart card is widely used for prepaid cards, credit cards, cash cards, and the like, but in this specification, "smart card"
Means “smart card that functions as an electronic wallet”. This is realized by a card or the like in which an integrated circuit having a microprocessor and a memory is embedded.

[0003]

However, the above-mentioned prior art has the following problems to be solved. Since electronic money can transfer its value electronically,
It can be used as a means of settlement between distant parties through a network such as the Internet. And the "money transfer system" shown in the prior art. Generally, the value can be transferred only between smart cards, so that it is very robust against fraud such as forgery and duplication.

However, in order to exchange the value of electronic money between smart cards, consumers always have the smart card and are equipped with a smart card reader / writer capable of reading and writing the smart card (called a "wallet"). ) Is required. That is, a terminal that does not have a smart card reader / writer, for example, a personal computer or a mobile terminal at a private house cannot use such electronic money. In order to expand the use of electronic commerce, smart card readers / writers should be installed in as many user homes as possible. However, there is a problem that the user needs to purchase equipment for that purpose. In addition, in order to use a mobile terminal, it is necessary to carry a smart card reader / writer, and there is a problem that the portability of the mobile terminal is impaired.

[0005]

The present invention adopts the following constitution in order to solve the following points. <Structure 1> A customer including a terminal that conducts a transaction using electronic money, an agency for depositing the value of electronic money for the customer, a bank having an electronic money deposit account for the customer, and the customer And a network interconnecting the agency and the bank, the bank issues a withdrawal certificate permitting withdrawal of the value of electronic money requested by the customer from the bank, and the customer provides the agency with the An electronic money system, comprising sending a withdrawal certificate issued by a bank, wherein the agency sends the withdrawal certificate to the bank and receives a reasonable value of electronic money from the bank on behalf of the customer.

<Structure 2> A customer including a terminal that conducts a transaction using electronic money, a merchant that provides a product to be purchased by the customer, and when the customer purchases a product, the customer receives the electronic money instead of the customer. An agency that pays, and instead of the merchant, an acquirer that receives the price of goods from the agency by electronic money, and a network that interconnects the customer, the agency, the merchant, and the acquirer, the merchant includes: , When the customer purchases a product, issues an invoice for the price, the agency receives the invoice issued by the merchant from the customer, and the acquirer transfers electronic money of a value corresponding to the invoice, Above agency Electronic money system, wherein the receiving.

<Structure 3> A customer comprising a terminal that conducts a transaction using electronic money, a merchant providing goods purchased by the customer, and when the customer requests a refund to the merchant for a predetermined reason, The agency that receives the electronic money to be refunded on behalf of the customer, the acquirer that repays the electronic money of the appropriate value to the agency instead of the merchant, and interconnects the customer, the agency, the merchant, and the acquirer The merchant issues a refund letter indicating the corresponding refund price when the customer requests a refund, the acquirer receives the refund letter issued by the merchant from the agency,
An electronic money system, wherein the agency receives electronic money having a value corresponding to the reimbursement form from the acquirer.

<Structure 4> A customer including a terminal that conducts a transaction using electronic money, an agency for storing the value of electronic money for the customer, and a bank having an electronic money deposit account for the customer , Comprising a network interconnecting the customer, the agency and the bank, wherein the bank issues a deposit permitting the customer to deposit, and the customer provides the agency with the value of the electronic money to the bank. An electronic money system, wherein the agency sends a deposit requesting a deposit, and the agency sends the deposit to the bank to deposit electronic money of a corresponding value into the bank on behalf of the customer. <Structure 5> A customer who conducts a transaction using electronic money, a financial institution that has a deposit account for the customer that can deposit and withdraw with electronic money, and an agency that deposits the value of electronic money for the customer, The customer, the financial institution, and the agency are interconnected by a network.The customer sends withdrawal information to the agency to withdraw from the deposit account, and the agency in the previous term transmits the withdrawal information to the financial institution. An electronic money system, wherein the electronic money is sent to an institution and receives electronic money of a corresponding value from the financial institution on behalf of the customer. <Structure 6> A customer who conducts a transaction using electronic money, an agency having an electronic money account for the customer who deposits the value of the electronic money for the customer, and a merchant who provides products purchased by the customer An acquirer that receives the price of a product by electronic money in place of the merchant, and a network that interconnects the customer, the agency, the merchant, and the acquirer, wherein the merchant purchases a product when the customer purchases the product. Issues an invoice for the payment, the agency receives the invoice on behalf of the customer, the customer sends information identifying the electronic money account, and the agency is able to confirm the customer as legitimate , The agency The electronic money with, make payments on behalf of the customer, the electronic money system. <Structure 7> A customer who has a right to receive a refund of electronic money, an agency for the customer who has an electronic money account for the customer who deposits the value of the electronic money for the customer, and an electronic money for the customer And a network that interconnects the customer, the agency, the merchant, and the acquirer, and the merchant is reimbursed. Issue a refund with the details of the above, the agency receives a refund on behalf of the customer, the customer sends information identifying the electronic money account, and the agency receives a refund on behalf of the customer , Child money system. <Structure 8> A customer who conducts a transaction using electronic money, a financial institution having a deposit account for the customer who can deposit and withdraw electronic money, and a customer who deposits the value of electronic money for the customer Agency comprising an electronic money account for, and a network interconnecting the customer, the financial institution and the agency, the customer, the agency, deposit information for depositing in the deposit account, electronic Sending information that can identify a money account, and depositing the financial institution on behalf of the customer by the electronic money owned by the agency when the agency can confirm the customer is legitimate. Electronic money system.

[0009]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below using specific examples. The present invention enables transactions using electronic money without carrying a smart card. Further, even when a terminal device to which a smart card reader / writer is not connected is used, a transaction using electronic money is enabled. In the following description, a customer refers to a customer for a bank or a merchant, or a terminal operated by the customer, that initiates a transaction using electronic money.
Transactions are performed using various terminals functioning as customers. In addition, for customers, an agency called an agency that keeps the value of electronic money will be established. This agency has a function of transmitting and receiving the value of electronic money based on information sent from a customer via a network.

<Specific Example 1> In the system of the specific example 1, the agency receives electronic money from the financial institution in exchange for the withdrawal certificate received from the financial institution by the customer. That is, the customer withdraws electronic money to be used for purchasing goods from a predetermined account of the financial institution.
Then, electronic money can be prepared in a remotely operated wallet called an agency, and electronic commerce can be started.

FIG. 1 is a block diagram showing the configuration of the entire system of the first embodiment. The system shown is for customer 1
, Agency 2 and bank 5.
The customer 1 includes, for example, any of the following terminals. The mobile terminal 1a is a mobile portable computer terminal device having a communication function. Personal computer 1b (hereinafter, "personal computer")
) Is a general computer provided in a process or office, which also has a communication function. Other terminal 1c
Is a computer terminal device such as a POS terminal widely used in a convenience store, a stand in a station, and the like.

The agency 2 includes the following devices installed in financial institutions and the like. The electronic money server 21 in the figure performs deposit / withdrawal of electronic money, management of an electronic money safe, and management of an electronic money account for a customer. The electronic money safe 22 is a device that holds a plurality of smart cards. The electronic money safe 22 is under the management of the electronic money server 21.

The electronic money account 24 is stored in the agency 2
Is an electronic money account for each customer managed by. The electronic money account 24 is a logical entity and exists in the electronic money server 21 of the agency 2. Only one electronic money account 24 is designated for each customer by ID (identification number). A plurality of smart cards are inserted into the electronic money safe 22. As a result, the smart card can be managed so as to simultaneously process a plurality of customers.

The bank 5 is constituted by the following devices. The electronic money server 51 manages payment and withdrawal of electronic money and an electronic money safe. Electronic money safe 52
Is a device that holds a plurality of smart cards and is under the control of the electronic money server 51 of the bank 5. Accounting host 5
3 manages a savings account for the customer. The deposit account 54 is a logical account of a deposit account of each customer managed by the bank 5, and is an account host 5 of the bank 5.
There are three. Only one deposit account is designated for each customer by account number. A plurality of smart cards 55 are inserted into the electronic money safe.

The customer 1, the agency 2, and the bank 5 mutually connected to an arbitrary network such as the Internet 6 have the following functions. The customer 1 has a deposit account 54 in the bank 5 and an electronic money account 24 in the agency 2, and mutually transfers electronic money. To be precise, the deposit account is a user who makes a transaction using a terminal as a customer, that is, an account in the name of a bank customer.

The agency 2 is an organization for the customer 1 to have the electronic money account 24. The agency 2 keeps the electronic money for the customer, and transfers the electronic money on behalf of the customer's request. The bank 5 is a bank having a deposit account 54 for the customer 1, and is an electronic money issuing bank that also deposits and withdraws electronic money by the customer 1 in addition to ordinary business.

Customer 1, Agency 2, Bank 5
Communication between them is performed on the Internet 6, and uses encryption to avoid eavesdropping, falsification, and spoofing. What kind of encryption is used to avoid eavesdropping, falsification, and spoofing?
Whether devices in each role are protected from unauthorized access from the outside or the like is determined by using well-known encryption processing technology or firewall technology.

<Operation of Specific Example 1> A procedure when the customer 1 withdraws electronic money from the bank 5 and deposits it with the agency 2 will be described below with reference to FIG.
FIG. 2 is a sequence chart showing the operation of the system according to the first embodiment. First, the customer 1 accesses the electronic money server 51 in the bank 5 using, for example, the personal computer 1b (step S1). Thus, the withdrawal operation of the electronic money is performed according to the procedure displayed on the personal computer 1b.

The electronic money server 51 of the bank 5 performs a process of inquiring the accounting host 53 of the bank 5 whether or not it can be withdrawn (step S2). The accounting host 53 of the bank 5 confirms that the deposit account 54 for the customer 1 indicated by the account number exists, that the passwords match, and that the withdrawal amount is equal to or less than the balance, and that the result is stored in the bank 5. 5 is notified to the electronic money server 51. If the withdrawal is possible, a withdrawal certificate including the name, handling number, withdrawal, transaction amount and its currency, withdrawal time limit and withdrawal request destination is created, and the withdrawal certificate is sent to the personal computer 1b (step S3). The withdrawal certificate is a certificate that permits the customer to withdraw the value of the electronic money requested by the customer from the bank.

The personal computer 1b sends the customer ID together with the withdrawal certificate in order to perform the transaction.
The data is sent to the electronic money server 21 of the agency 2 (step S4). In the present invention, a terminal that conducts a transaction using electronic money is referred to as a customer. However, this ID is not the identification number of the terminal, but is actually the electronic money of a user who conducts a transaction using electronic money. Equivalent to account number.

Electronic money server 21 of agency 2
Confirms whether there is an electronic money account 24 indicated by the ID. If there is an electronic money account 24, the withdrawal certificate is sent to the withdrawal request address written in the withdrawal certificate, that is, the electronic money server 51 of the bank 5 (step S5). Bank 5
The electronic money server 51 confirms that the received withdrawal certificate is issued by itself and does not overlap with the transaction number of the withdrawal certificate that has been withdrawn in the past, and responds to the agency 2 is returned to the electronic money server 21 (step S6). If the response is acceptable, the electronic money server 21 of the agency 2 starts transferring the value of the electronic money (step S7).

In this step S7, the electronic money server 51 of the bank 5 according to the electronic money transfer protocol.
Transfers the electronic money to the electronic money server 21 of the agency 2. Since electronic money can only transfer its value between smart cards, the smart card 55 in the electronic money safe 52 of the bank 5
The value is transferred to the smart card 25 in the electronic money safe 22 of the agency 2 through the electronic money server 51 of the bank 5 and the electronic money server 21 of the agency 2. The method of transferring the value of electronic money is known, and a description thereof will be omitted. As a result of this value transfer, the value is transferred to the electronic money account 24 of the customer 1 in the bank 5, and the total amount of electronic money held by the agency 2 is increased by the transferred amount.

Electronic money server 21 of agency 2
Completes the reception, the personal computer 1
b is notified that the reception has been completed (step S8).
The processing in each step when it is different from the above procedure is as follows.

First, in step S2, in the following case,
Do not perform subsequent processing or request re-input. (1) When there is no account indicated by the account number (2) When the password does not match (3) When the specified amount cannot be withdrawn In step S5, if the electronic money account indicated by the ID does not exist, The processing is not performed, and the fact is notified to the personal computer 1b.

If a certain event occurs in step S6, the following processing is performed. (1) When there is no withdrawal request destination described in the withdrawal certificate, that is, the electronic money server 51 of the bank 5, the personal computer 1b is notified to that effect without performing the subsequent processing. (2) When the withdrawal certificate is different from the withdrawal certificate issued by the electronic money server of the bank 5, or when the withdrawal time limit has passed, or when the withdrawal certificate has been sent twice, the following processing is performed. However, the fact is returned to the electronic money server of the agency 2, and the electronic money server of the agency 2 notifies the personal computer 1b.

In step S7, agency 2
Electronic money server 21, electronic money safe 22 of agency 2 or smart card 25 used for value transfer therein, electronic money server 5 of bank 5
1. The electronic money safe 52 of the bank 5 or the smart card 55 used for value transfer therein, or
When communication cannot be performed correctly due to some trouble in the Internet 6, the electronic money server 21 of the agency 2 tries to restart the electronic money server according to the value transfer protocol of the electronic money being used. If it cannot be restarted by all means, electronic money server 2 of agency 2
1 notifies the personal computer 1b of the interruption. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effects of Specific Example 1> As described above, a predetermined withdrawal certificate issued by the bank is sent to the agency that holds the electronic money on behalf of the customer, and the agency withdraws the electronic money from the bank on behalf of the customer. , The customer can withdraw electronic money from the bank account without having a smart card or using a terminal equipped with a smart card reader / writer that reads and writes the smart card. .

<Specific Example 2> FIG. 3 is a block diagram showing the configuration of the entire system of a specific example 2. Example 2 is a system in a case where a customer 1 purchases a product from a merchant 3. The customer 1 and the merchant 3 do not have a smart card, and the electronic money equivalent to the price of the product is
It is handed over to the acquirer 4 from the agency 2 acting on their behalf. The system shown in the figure does not include the bank of the specific example 1, but newly includes a merchant 3 and an acquirer 4. In this figure, the same parts as those in the specific example 1 are denoted by the same reference numerals, and overlapping description will be omitted. The authentication server 23 newly provided in the agency 2 has a function for specifying a customer. The merchant 3 has a web server 31. The web server 31 performs procedures such as introduction and purchase of a product.

The acquirer 4 includes the following devices. The electronic money server 41 manages the electronic money safe 42 and the electronic money account of the merchant 3.
The electronic money safe 42 is a device that holds a plurality of smart cards and is under the control of the electronic money server 41. The electronic money account 44 is an electronic money account of each merchant 3 managed by the acquirer 4, is a logical entity, and exists in the electronic money server 21 of the acquirer 4. Only one electronic money account 44 is designated by the merchant ID. A plurality of smart cards are inserted into the electronic money safe 42.

The customer 1, the agency 2, the merchant 3, and the acquirer 4 have the following functions. The customer 1 has an electronic money account 24 at the agency 2, purchases goods from the merchant 3, and pays for the goods. The agency 2 is an organization having an electronic money account 24 for the customer 1, keeps the customer's electronic money, and deposits and withdraws the electronic money at the customer's request. The merchant 3 sells the product to the customer 1 and receives the price. Acquirer 4 is an organization that receives sales proceeds from Agency 2 on behalf of Merchant 3.

Since the customer 1 has the electronic money account 24 at the agency 2, the customer 1 has a direct contract relationship with the agency 2 and trusts each other. Also,
Merchant 3 has a contract with Acquirer 4 to receive money on behalf of Merchant 3 and trusts each other. However, it is between Agency 2 and Acquirer 4 that the value transfer of electronic money is directly performed. The agency 2 and the acquirer 4 do not have to have a direct contractual relationship and do not have to trust each other. This is because the agency 2 and the acquirer 4 trust the electronic money transferred between them.

The customer 1, the agency 2, the merchant 3, and the acquirer 4 are connected by the Internet 6, and use code to avoid eavesdropping, falsification, and spoofing. Known techniques are used to determine what kind of encryption is to be used to prevent eavesdropping, falsification, and spoofing, and to protect devices in each role from external unauthorized access.

FIG. 4 is a sequence chart showing the operation of the system of the second embodiment. Hereinafter, a procedure when the customer 1 purchases a product from the merchant 3 and the agency performs payment on behalf of the merchant 3 will be described with reference to FIG. First, in step S1, the customer 1 accesses the web server 31 in the merchant 3 using the personal computer 1b. When the customer 1 decides what he / she wants to purchase, the personal computer 1b
The transaction information such as the name of the purchased item and the payment method is sent to the web server 31 of the merchant 3 (step S2).

In step S3, the web server 31 of the merchant 3 checks the transaction information and checks the merchant ID.
Create an invoice that includes the invoice number, the amount to be charged and its currency, payee, and due date. Then, the bill is sent to the personal computer 1b. The customer 1 checks the contents of the bill displayed on the personal computer 1b and decides whether to continue the transaction. When continuing the transaction, the personal computer 1b sends the ID of the electronic money account 24 together with the bill to have the payment performed on behalf of the user.
Is sent to the electronic money server 21 of the agency 2 (step S4).

Electronic money server 21 of agency 2
Confirms that the electronic money account indicated by the ID exists and that the payment described in the bill is possible from the electronic money account. Next, the authentication server 23 of the agency 2 is requested to authenticate the electronic money account. Then, the authentication server 23 of the agency 2 requests the personal computer 1b for a password required for authentication in order to confirm whether the agency 2 is a legitimate customer having the electronic money account 24 (step S5).

The personal computer 1b sends the password input by the customer 1 to the authentication server 23 of the agency 2 as an authentication response. The authentication server 23 of the agency 2 checks whether the password transmitted in step S6 is a password corresponding to the electronic money account 24, and compares the result with the electronic money server 21 of the agency 2.
Return to The electronic money server 21 of the agency 2
If the customer is authenticated as a valid customer, the payment destination described in the bill sent from the personal computer 1b, that is, the electronic money server 41 of the acquirer 4
The invoice is sent to (step S7).

The electronic money server 41 of the acquirer 4
The contents of the bill are confirmed, and a response indicating whether the bill is acceptable is returned to the electronic money server 21 of the agency 2 (step S8). If the response is acceptable, the electronic money server 21 of the agency 2 starts transferring the value of the electronic money (step S).
9). In this step S9, the electronic money server 2 of the agency 2 follows the electronic money transfer protocol.
1 transfers the electronic money to the electronic money server 41 of the acquirer 4. Since electronic money can only transfer its value between smart cards, the smart card 25 stored in the electronic money safe 22 of the agency 2 can be used.
Through the electronic money server 21 of the agency 2 and the electronic money server 41 of the acquirer 4, the smart card 45 in the electronic money safe 42 of the acquirer 4
To move its value to

As a result of the value transfer, the electronic money corresponding to the payment amount is transferred from the electronic money account 24 of the customer 1 in the agency 2 to the electronic money account 44 of the merchant 3 in the acquirer 4 and held by the agency 2 The value of electronic money decreases by the amount paid,
At the same time, the value of the electronic money held by Acquirer 4 increases by the payment amount.

Electronic money server 21 of agency 2
Completes the payment, the personal computer 1b
That the payment has been completed (step S1)
0). On the other hand, the electronic money server 41 of Acquirer 4
Upon completion of receipt, Merchant 3 web server 31
Is notified that the reception has been completed (step S11).
The processing in each step when it is different from the above flow is as follows.

In step S3, if it is not desired to continue the transaction, the bill is not sent to the electronic money server 21 of the agency 2, and the subsequent processing is not performed. Further, there is no need to send any information to the web server 31 of the merchant 3. This is because the merchant 3 does not have an obligation to ship goods or the like without paying the price.

In step S5, the following processing is not performed in the following cases. The reason is personal computer 1
Notify b. (1) When the electronic money account indicated by the ID does not exist (2) When the payment described in the bill cannot be made If the passwords transmitted in step S6 do not match, the subsequent processing is not performed. The reason is notified to the personal computer 1b.

If a certain event occurs in step S8, the following processing is performed. When there is no payee described in the bill, that is, the electronic money server 41 of the acquirer 4, the personal computer 1b is notified to that effect without performing the subsequent processing. When the merchant ID described in the bill is not contracted with the acquirer 4, the electronic money server 41 of the acquirer 4 notifies the electronic money server 21 of the agency 2 to that effect,
The electronic money server 21 of the agency 2 notifies the personal computer 1b of the fact, and no actual payment is made.

When the payment deadline described in the bill has passed, the electronic money server 41 of the acquirer 4 notifies the fact to the electronic money server 21 of the agency 2, and the electronic money server 21 of the agency 2 transmits the personal computer 1 b Will be notified and no actual payment will be made. If you receive an invoice with the same invoice number as a previously paid invoice,
The electronic money server 41 of the acquirer 4 notifies the electronic money server 21 of the agency 2 to that effect, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of that effect, and no actual payment is made.

In step S9, agency 2
Electronic money server 21, the electronic money safe 22 of the agency 2, or the smart card 25 used for value transfer therein, the electronic money server 41 of the acquirer 4, the electronic money safe 42 of the acquirer 4, or the value transfer therein. If the communication cannot be performed correctly due to the smart card 45 or the Internet 6 that is being used, the electronic money server 21 of the agency 2 attempts to restart in accordance with the value transfer protocol of the electronic money being used. By all means,
If it cannot be resumed, the electronic money server 21 of the agency 2 notifies the personal computer 1b of the suspension. If value transfer has not begun, no payment has been made. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 2> As described above, the agency that pays by electronic money on behalf of the customer and the acquirer that receives the price of the product by electronic money instead of the merchant are provided, and the request issued by the merchant The agency, which receives the certificate from the customer, makes an electronic payment to Acquirer on behalf of the customer, so that the customer or merchant does not need to have a smart card and is equipped with a smart card reader / writer that can read and write the smart card. Electronic money transactions without using a terminal.

<Embodiment 3> FIG. 5 is a block diagram showing the configuration of the entire system of Embodiment 3. In the system of this specific example, when the customer 1 returns a product purchased from the merchant 3, the electronic money refund process is performed between the acquirer 4 and the agency 2. FIG.
Is different from Example 2 in that there is no authentication server 23 of Agency 2. The same parts as those of the other specific example 2 are denoted by the same reference numerals, and overlapping description will be omitted.

The customer 1, the agency 2, the merchant 3, and the acquirer 4 have the following functions.
In this specific example, customer 1 has electronic money account 24 at agency 2 and returns merchandise purchased from the merchant. In this case, the merchant 3 receives a refund of the price of the product by electronic money. Agency 2 is an organization in which Customer 1 has an electronic money account 24,
It keeps electronic money for customers and deposits and withdraws electronic money at the customer's request. Merchant 3
Refunds to the customer 1 by electronic money when the customer 1 returns the product. The Acquirer 4 is an organization that performs refunds on behalf of the merchant 3. The relationship between the customer 1 and the agency 2 and the relationship between the merchant 3 and the acquirer 4 are the same as in the specific example 2. The communication method between them is also the same as in the second embodiment.

FIG. 6 is a sequence chart showing the operation of the system according to the third embodiment. Hereinafter, a procedure in the case where the customer 1 receives a refund from the merchant 3 will be described with reference to FIG. First, in step S1, customer 1
Accesses the web server 31 of the merchant 3 using the personal computer 1b. Customer 1
Sends transaction information such as a receipt and a refund method to the web server 31 of the merchant 3 according to the procedure displayed on the personal computer 1b.

In the next step S2, the web server 31 of the merchant 3 checks the transaction information and
A refund document including D, the refund number, the amount to be refunded, its currency, the refund requester, and the refund deadline is created. Then, the reimbursement note is sent to the electronic money server 41 of Acquirer 4.
(Step S3). When the electronic money server 41 of the acquirer 4 confirms the sent refund letter, it returns a response to the web server 31 of the merchant 3 (step S).
4). The web server 31 of the merchant 3 sends a refund letter to the personal computer 1b (step S5).

The personal computer 1b sends the ID specifying the electronic money account together with the reimbursement letter to the electronic money server 2
1 (step S6). The electronic money server 21 of the agency 2 checks whether the electronic money account indicated by the transmitted ID exists in the agency 2. If there is an electronic money account, personal computer 1b
The reimbursement request is sent to the electronic money server 41 of the acquirer 4 (step S7).

The electronic money server 41 of the acquirer 4
It is checked whether the refund sent from the electronic money server 21 of the agency 2 matches the refund sent from the web server 31 of the merchant 3 in advance, and a response as to whether or not the refund is accepted is sent to the electronic money server 21 of the agency 2. (Step S8). If the response is acceptable, the electronic money server 21 of the agency 2 starts transferring the value of the electronic money (step S9). Thereafter, according to the transfer protocol of the electronic money, the electronic money server 41 of the acquirer 4 transmits the electronic money server 2 of the agency 2
1 to transfer the electronic money.

Since the value of electronic money can only be transferred between smart cards, the smart card 45 in the electronic money safe 42 of the acquirer 4 sends the electronic money server 41 of the acquirer 4 and the agency 2
The value is transferred to the smart card 25 in the electronic money safe 22 of the agency 2 through the electronic money server 21 of the agency 2. As a result of this value transfer, electronic money corresponding to the reimbursement amount is transferred from the electronic money account 44 of the merchant 3 in the acquirer 4 to the electronic money account 24 of the customer 1 in the agency 2 and the acquirer 4
Increases the value of electronic money held by the company by the amount of the refund.
Upon completion of the receipt, the electronic money server 21 of the agency 2 notifies the personal computer 1b that the refund has been completed (step S10).

The processing in each step when it is different from the above flow is as follows. In step S7,
If there is no account indicated by the ID, the subsequent processing is not performed. The reason is notified to the personal computer 1b.

If a certain event has occurred in step S8, the following processing is performed. (1) The refund requester indicated on the refund letter,
If the electronic money server 41 of the acquirer 4 does not exist, the personal computer 1b is notified of the fact without performing the subsequent processing. (2) If the contents of the refund sent from the electronic money server 21 of the agency 2 do not match the contents of the refund received by the electronic money server 41 of the acquirer 4 from the web server 31 of the merchant 3 in advance, the acquirer 4 The electronic money server 41 of the agency 2 notifies the electronic money server 21 of the agency 2 to that effect, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of the effect, and actual refund is not performed.

(3) If the repayment period described in the refund sent from the electronic money server 21 of the agency 2 has passed, the electronic money server 4 of the acquirer 4
1 indicates that fact to the electronic money server 21 of the agency 2
, The electronic money server 21 of the agency 2 notifies the personal computer 1b of the notification, and actual refund is not performed. (4) If a refund letter having the same refund letter number as that of the refund letter that has been refunded in the past is sent, the electronic money server 41 of the acquirer 4 informs the fact to that effect. 21 and the electronic money server 21 of the agency 2 notifies the personal computer 1b of the fact, and actual refund is not performed.

In step S9, agency 2
Electronic money server 21, the electronic money safe 22 of the agency 2, or the smart card 25 used for value transfer therein, the electronic money server 41 of the acquirer 4, the electronic money safe 42 of the acquirer 4, or the value transfer therein. If the communication cannot be performed correctly due to the smart card 45 or the Internet 6 that is being used, the electronic money server 21 of the agency 2 attempts to restart in accordance with the value transfer protocol of the electronic money being used. By all means,
If it cannot be resumed, the electronic money server 21 of the agency 2 notifies the personal computer 1b of the suspension. If no value transfer has begun, no refund has been made. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 3> As described above, when a customer receives a refund from a merchant due to the return of a product or other predetermined reason, the agency receiving the refund by electronic money on behalf of the customer uses the merchant. Send the reimbursement letter issued, the agency,
By receiving electronic money reimbursement on behalf of the customer, the customer or merchant does not need to have a smart card and does not need to use a terminal equipped with a smart card reader / writer that can read and write the smart card, and can use the electronic money You can get a refund at

<Embodiment 4> FIG. 7 is a block diagram showing the configuration of the entire system of Embodiment 4. In this specific example,
Agency 2 changes Bank 5 to Customer 1
Deposit electronic money into. The system configuration in FIG. 7 differs from the system in FIG. 1 only in that an authentication server 23 of agency 2 is added. The function of the authentication server 23 of the agency 2 is as described in the specific example 2.

FIG. 8 is a sequence chart showing the operation of the system of the fourth embodiment. Hereinafter, a procedure for depositing a part or all of the electronic money deposited in the agency 2 in the bank 5 will be described with reference to FIG. In step S1, the customer 1 accesses the electronic money server 51 in the bank 5 using the personal computer 1b. The customer 1 performs a deposit operation according to the procedure displayed on the personal computer 1b.

In step S2, the electronic money server 51 of the bank 5 inquires of the accounting host 53 of the bank 5 whether there is a deposit account 54 indicating the account number sent by the deposit operation. Bank 5 accounting host 5
3 confirms that the deposit account 54 of the customer 1 indicated by the account number exists, and notifies the result to the electronic money server 51 of the bank 5 (step S2). If there is a deposit account, a deposit including the name, handling number, deposit, transaction amount and currency, deposit term, and deposit destination is created, and the deposit is sent to the personal computer 1b (step S3).

The personal computer 1b assigns an ID for specifying the electronic money account together with the deposit to the electronic money server 21 of the agency 2 in order to perform the transaction.
(Step S4). The electronic money server 21 of the agency 2 has an electronic money account indicated by the ID,
Check whether the payment described in the deposit is possible from the electronic money account. Next, the authentication server 23 of the agency 2 is requested to authenticate the electronic money account. Then, the authentication server 23 of the agency 2 checks the personal computer 1 to confirm whether the agency 2 is a legitimate customer having the electronic money account 24.
b to request a password required for authentication (step S
5).

The personal computer 1b sends the password input by the customer 1 as an authentication response to the authentication server 23 of the agency 2 (step S6). The authentication server 23 of the agency 2 checks whether the transmitted personal identification number is the personal identification number corresponding to the electronic money account 24, and compares the result with the electronic money server 2 of the agency two.
Return to 1. Electronic Money Server 21 of Agency 2
When the customer is authenticated as a legitimate customer, the deposit destination described in the deposit sent from the personal computer 1b, that is, to the electronic money server 51 of the bank 5,
The deposit is sent (step S7).

The electronic money server 51 of the bank 5 confirms that the received deposit note is issued by itself, that it is not duplicated, and that the deposit deadline has not expired. It returns to the electronic money server 21 of the agency 2 (step S8). If the response is acceptable, the electronic money server 21 of the agency 2 starts transferring the value of the electronic money (step S9). Thereafter, according to the transfer protocol of the electronic money, the electronic money server 21 of the agency 2
Transfer electronic money to

Since the value of electronic money can be transferred only between smart cards, the smart card 25 in the electronic money safe 22 of the agency 2 receives
The value is transferred to the smart card 55 in the electronic money safe 52 of the bank 5 through the electronic money server 21 of the agency 2 and the electronic money server 51 of the bank 5. As a result of this value transfer, electronic money of the designated value is transferred from the electronic money account 24 of the customer 1 in the agency 2 to the deposit account 54 of the customer 1 in the bank 5, and the electronic money of the electronic money held by the agency 2 is transferred. The value decreases by the transferred amount, and the balance of the customer 1's savings account 54 increases by the transferred amount. When the deposit is completed, the electronic money server 21 of the agency 2 notifies the personal computer 1b that the deposit has been completed (step S10).

The processing at each stage when it is different from the above procedure is as follows. In step S2, if there is no account indicated by the account number, the subsequent processing is not performed or a request for re-input is made. In step S5, the following processing is not performed in the following cases. The reason is notified to the personal computer 1b. (1) When there is no electronic money account indicated by the ID (2) When the payment described in the deposit cannot be made If the passwords do not match in step S7, the subsequent processing is not performed. The reason is notified to the personal computer 1b.

If a certain event occurs in step S8, the following processing is performed. (1) If the deposit destination described in the deposit statement, that is, the electronic money server 51 of the bank 5 does not exist, the personal computer 1b informs the personal computer 1b without performing the subsequent processing.
Notify. (2) When the deposit is different from the deposit issued by the electronic money server 51 of the bank 5, or when the deposit expiration date has passed, or when the deposit is sent repeatedly, the bank 5 The electronic money server 51 notifies the electronic money server 21 of the agency 2 of the fact, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of the fact.

In step S9, agency 2
Electronic money server 21, electronic money safe 22 of agency 2 or smart card 25 used for value transfer therein, electronic money server 5 of bank 5
1. The electronic money safe 52 of the bank 5 or the smart card 55 used for value transfer therein, or
If communication cannot be performed correctly due to some trouble in the Internet 6, the electronic money server 21 of the agency 2 attempts to restart the electronic money server according to the value transfer protocol of the electronic money being used. If it cannot be resumed by all means, the electronic money server 21 of the agency 2
Notifies the personal computer 1b of the interruption. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 4> As described above, a deposit is sent to an agency that deposits electronic money on behalf of a customer, and the agency sends the customer's electronic money account to the customer in the bank on behalf of the customer. By making a deposit into the bank account, the customer can transfer the electronic money to the bank account without having a smart card or using a terminal equipped with a smart card reader / writer that reads and writes the smart card. Can be deposited at Note that the bank note need not always be issued by the bank, and may be issued independently by the customer. This is because, in the case of deposit, bank authentication is not required.

<Embodiment 5> FIG. 1 is a block diagram showing the configuration of the entire system of Embodiment 5. <Operation of Embodiment 5> FIG. 9 is a sequence chart showing the operation of the system of Embodiment 5. Hereinafter, a procedure for withdrawing from the bank 5 with electronic money and depositing it with the agency 2 will be described with reference to FIG.

The customer 1 is the personal computer 1
Send ID to Agency 2 using b. (Step S1) The electronic money server 21 of the agency 2 checks whether there is an electronic money account 24 indicated by the ID, and returns a response indicating whether or not the electronic money account 24 is available to the customer 1. (Step S2) The customer 1 uses the personal computer 1b to
If a response is acceptable, the agency 2 is sent withdrawal information including the bank number, account number, password, withdrawal, transaction amount and its currency. (Step S3)

The electronic money server 21 of the agency 2
Sends the withdrawal information sent to bank 5 specified by the bank number. (Step S4) The electronic money server 51 of the bank 5 confirms the withdrawal information, and the account number and the password included in the withdrawal information sent to the accounting host 53 of the bank 5 are valid, and the transaction amount and the Inquire if the currency can be withdrawn. The accounting host 53 of the bank 5 confirms that the deposit account 54 of the customer 1 indicated by the account number exists, that the password is the same, and that the withdrawal amount is equal to or less than the balance. The electronic money server 51 is notified. According to the result, the electronic money server 51 of the bank 5 returns a response to the permission to the agency 2. (Step S5)

Electronic money server 21 of agency 2
Starts a value transfer with the bank 5 if a response is acceptable. (Step S6) Thereafter, in accordance with the transfer protocol of the electronic money, the bank 5
The electronic money server 51 transfers the electronic money to the electronic money server 21 of the agency 2. Since the value of electronic money can be transferred only between smart cards, a smart card 55 in an electronic money safe 52 of bank 5 can be transferred from an electronic money server 51 of bank 5 and an electronic money server 21 of agency 2. The value is transferred to a certain smart card 25 in the electronic money safe 22 of the agency 2. Note that details of the value transfer of electronic money are omitted because they are not directly related to the present invention. As a result of this value transfer, the designated amount is reduced from the deposit account 54 of the customer 1 in the bank 5, and is transferred as electronic money to the electronic money account 24 of the customer 1 in the agency 2, and The total amount of electronic money held has increased by the amount transferred. (Step S7)

The electronic money server 21 of the agency 2
Completes the reception, the personal computer 1
Notify b that the receipt has been completed. (Step S8) The processing in the case where the above-mentioned procedure is different from each other is as follows. First, in step S2, when the electronic money account indicated by the ID does not exist, the electronic money server 21 of the agency 2 notifies the client 1 of a negative response, and does not perform the subsequent processing.

In step S4, if there is no bank 5 specified by the bank number included in the withdrawal information, the client 1 is notified to that effect without performing the subsequent processing. In step S5, in the following case, the electronic money server 51 of the bank 5 notifies the agency 2 of a negative response, and does not perform the subsequent processing. (1) When there is no account indicated by the account number (2) When the password does not match (3) When the specified amount cannot be withdrawn

At step S7, agency 2
Electronic money server 21, electronic money safe 22 of agency 2 or smart card 25 used for value transfer therein, electronic money server 5 of bank 5
1. The electronic money safe 52 of the bank 5 or the smart card 55 used for value transfer therein, or
When communication cannot be performed correctly due to some trouble in the Internet 6, the electronic money server 21 of the agency 2 tries to restart the electronic money server according to the value transfer protocol of the electronic money being used. If it cannot be restarted by all means, electronic money server 2 of agency 2
1 notifies the client 1 of the interruption. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 5> As described above, the agency 2 that stores the electronic money in place of the customer 1 has the ID, the bank number, the account number, and the ID of the electronic money account 24 of the customer 1 in the agency 2 By sending withdrawal information including the PIN, withdrawal, transaction amount and its currency, Agency 2 receives electronic money withdrawn from Bank 5 on behalf of Customer 1 so that Customer 1 always has a smart card, The terminal can be withdrawn from a savings account with electronic money that can only be stored in a smart card without requiring a terminal provided with a smart card reader / writer that reads and writes the smart card.

<Embodiment 6> FIG. 3 is a block diagram showing the configuration of the entire system of Embodiment 6.

<Operation of the Specific Example 6> FIG. 10 is a sequence chart showing the operation of the system of the specific example 6. Hereinafter, a procedure in the case where the customer 1 purchases a product from the merchant 3 and the agent substitutes for payment will be described with reference to this diagram.

The customer 1 is the personal computer 1
Using b, the user accesses the web server 31 of the merchant 3 in the merchant 3, and determines the purchase item and the payment method. (Step S1) The web server 31 of the merchant 3 checks the merchant I
Create an invoice including D, the invoice number, the amount to be invoiced, its currency, payee, and due date. Then, the bill is sent to the designated agency 2. (Step S2) The electronic money server 21 of the agency 2 sends a confirmation request including the contents of the bill to the customer 1. (Step S
3) The customer 1 checks the contents of the bill displayed on the personal computer 1b and decides whether to continue the transaction. To continue the transaction, the ID and the password of the electronic money account 24 are sent to the electronic money server 21 of the agency 2. (Step S4)

Electronic money server 21 of agency 2
Confirms that the electronic money account indicated by the ID exists and that the payment described in the bill is possible from the electronic money account. Next, the authentication server 23 of the agency 2 is requested to authenticate the electronic money account. Then, the authentication server 23 of the agency 2 checks the ID and the password in order to check whether the agency 2 is a legitimate customer who has the electronic money account 24. When the electronic money server 21 of the agency 2 is authenticated as a legitimate customer, the electronic money server 21 sends the bill to the payee described in the bill, that is, the electronic money server 41 of the acquirer 4. (Step S5)

The electronic money server 41 of the acquirer 4
The contents of the bill are confirmed, and a response indicating whether or not the bill is accepted is returned to the electronic money server 21 of the agency 2. (Step S6) If a response is possible, the electronic money server 21 of the agency 2 starts value transfer of the electronic money. (Step S7)

Thereafter, the electronic money server 21 of the agency 2 transfers the electronic money to the electronic money server 41 of the acquirer 4 in accordance with the electronic money transfer protocol. Since the value of electronic money can be transferred only between smart cards, the smart card 25 in the electronic money safe 22 of the agency 2 sends the value through the electronic money server 21 of the agency 2 and the electronic money server 41 of the acquirer 4. The value is transferred to a smart card 45 in the electronic money safe 42 of the acquirer 4. Note that details of the value transfer of electronic money are omitted because they are not directly related to the present invention. As a result of this value transfer, the electronic money corresponding to the payment amount is transferred from the electronic money account 24 of the customer 1 in the agency 2 to the electronic money account 44 of the merchant 3 in the acquirer 4, and the total amount of electronic money held by the agency 2 Decreased by the payment amount, and the total amount of electronic money held by Acquirer 4 increased by the payment amount. (Step S8)

Electronic money server 21 of agency 2
Notifies the personal computer 1b that the payment has been completed when the payment is completed. On the other hand, Acquirer 4
Upon completion of the reception, the electronic money server 41 notifies the web server 31 of the merchant 3 that the reception has been completed. (Step S9) The processing in the case where the flow differs from the above flow in each step is as follows. In step S4, if it is not desired to continue the transaction, the ID and the password are not sent, and instead, a notice of the discontinuation of the transaction is notified, and the subsequent processing is not performed. Further, there is no need to send any information to the web server 31 of the merchant 3. This is because the merchant 3 does not have an obligation to ship goods or the like without paying the price.

In step S5, the following processing is not performed in the following cases. The reason is notified to the personal computer 1b. (1) When there is no electronic money account indicated by the ID or when the passwords do not match. (2) When the payment stated in the invoice cannot be made. (3) When the payment destination described in the bill, that is, the electronic money server 41 of the acquirer 4 does not exist.

If a certain event has occurred in step S6, the following processing is performed. (1) When the merchant ID described in the bill is not contracted with the acquirer 4, the electronic money server 41 of the acquirer 4 notifies the fact to the electronic money server 21 of the agency 2 and the electronic money of the agency 2 The server 21 notifies the personal computer 1b of the fact, and no actual payment is made. (2) If the payment deadline stated on the invoice has passed,
The electronic money server 41 of the acquirer 4 notifies the electronic money server 21 of the agency 2 to that effect, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of that effect, and no actual payment is made. (3) If a bill having the same bill number as that of the bill paid in the past is sent, the electronic money server 41 of the acquirer 4 informs the fact to that effect. 21 and the electronic money server 21 of the agency 2 notifies the personal computer 1b of the notification, and no actual payment is made.

In step S8, agency 2
Electronic money server 21, the electronic money safe 22 of the agency 2, or the smart card 25 used for value transfer therein, the electronic money server 41 of the acquirer 4, the electronic money safe 42 of the acquirer 4, or the value transfer therein. If the communication cannot be performed correctly due to the smart card 45 or the Internet 6 that is being used, the electronic money server 21 of the agency 2 attempts to restart in accordance with the value transfer protocol of the electronic money being used. By all means,
If it cannot be resumed, the electronic money server 21 of the agency 2 notifies the personal computer 1b of the suspension. If value transfer has not begun, no payment has been made. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 6> As described above, the merchant I issued by the merchant 3 to the agency 2 paying by electronic money instead of the customer 1
D and an invoice number, the amount to be charged and its currency and payee, and an invoice including the payment deadline. Further, the ID and PIN of Customer 1's electronic money account in Agency 2 are sent. If it can be confirmed from the ID and the password that the customer is a legitimate customer, the customer 1 always pays by electronic money instead of the customer 1, and the customer 1 always has a smart card, and a smart card reader / writer capable of reading and writing the smart card is used. Payment can be made with electronic money that can only be stored on a smart card without the need for an equipped terminal.

<Embodiment 7> FIG. 5 is a block diagram showing the configuration of the entire system of Embodiment 6. <Operation of Specific Example 7> FIG. 11 is a sequence chart showing the operation of the system of the specific example 7. Hereinafter, a procedure when the customer 1 receives a refund from the merchant 3 will be described with reference to this diagram. The customer 1 accesses the web server 31 of the merchant 3 using the personal computer 1b. The consumer sends transaction information such as a receipt and a refund method to the web server 31 of the merchant 3 according to the procedure displayed on the personal computer 1b. (Step S1)

The web server 31 of the merchant 3 examines the transaction information, and creates a refund including the merchant ID and the refund number, the amount to be refunded, the currency thereof, the billing destination of the refund, and the refund deadline. Then, the reimbursement note is sent to the electronic money server 41 of the acquirer 4. (Step S2) After confirming the sent reimbursement note, the electronic money server 41 of the acquirer 4 returns a response to the web server 31 of the merchant 3. (Step S3) The web server 31 of the merchant 3 sends a refund letter to the designated agency 2. (Step S4)

Electronic money server 21 of agency 2
Sends a confirmation request including the contents of the refund letter to the customer 1.
(Step S5) After confirmation, the customer 1 enters the ID of the electronic money account 24,
It is sent to the electronic money server 21 of the agency 2. (Step S6) The electronic money server 21 of the agency 2 checks whether or not the electronic money account indicated by the transmitted ID exists in this agency. If you have an electronic money account,
The refund request is sent to the destination of the refund described in the refund document, that is, the electronic money server 41 of the acquirer 4.
(Step S7)

The electronic money server 41 of the acquirer 4
It is checked whether the refund sent from the electronic money server 21 of the agency 2 matches the refund sent in advance from the web server 31 of the merchant 3, and a response as to whether or not the refund is accepted is sent to the electronic money server 21 of the agency 2. To return. (Step S8) If a response is possible, the electronic money server 21 of the agency 2 starts value transfer of the electronic money. (Step S9)

Thereafter, the electronic money is transferred from the electronic money server 41 of the acquirer 4 to the electronic money server 21 of the agency 2 in accordance with the electronic money transfer protocol. Since the value of electronic money can only be transferred between smart cards, the smart card 45 in the electronic money safe 42 of Acquirer 4 can be transmitted from the electronic money server 41 of Acquirer 4 and the electronic money server 21 of Agency 2. The value is transferred to a smart card 25 in the electronic money safe 22 of the agency 2. Note that details of the value transfer of electronic money are omitted because they are not directly related to the present invention. As a result of this value transfer, the electronic money corresponding to the refunded amount from the electronic money account 44 of the merchant in the acquirer 4 is transferred to the electronic money account 24 of the customer 1 in the agency 2
The total amount of electronic money held by Acquirer 4 has decreased by the amount refunded, and the total amount of electronic money held by Agency 2 has increased by the amount refunded. (Step S10)

Electronic money server 21 of agency 2
Notifies the personal computer 1b that the refund has been completed upon completion of the reception. (Step S1
1) The processing in each step when it is different from the above flow is as follows. If there is no account indicated by the ID in step S7, the subsequent processing is not performed. The reason is notified to the personal computer 1b. If there is no repayment request destination described in the refund form, that is, the electronic money server 41 of the acquirer 4, the personal computer 1b is notified to that effect without performing the subsequent processing.

If a certain event occurs in step S8, the following processing is performed. (1) If the contents of the refund sent from the electronic money server 21 of the agency 2 do not match the contents of the refund received by the electronic money server 41 of the acquirer 4 from the web server 31 of the merchant 3 in advance, the acquirer 4 The electronic money server 41 of the agency 2 notifies the electronic money server 21 of the agency 2 to that effect, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of the effect, and actual refund is not performed. (2) When the refund period described in the refund sent from the electronic money server 21 of the agency 2 has passed, the electronic money server 41 of the acquirer 4 notifies the electronic money server 21 of the agency 2 to that effect. ,
The electronic money server 21 of the agency 2 notifies the personal computer 1b of the fact, and actual payout is not performed. (3) If a refund with the same refund number as the refund with which the refund was made in the past is sent,
The electronic money server 41 of the acquirer 4 notifies the electronic money server 21 of the agency 2 to that effect, and the electronic money server 21 of the agency 2 notifies the personal computer 1b of that effect, and actual refund is not performed.

In step S10, the electronic money server 21 of the agency 2, the electronic money safe 22 of the agency 2, the smart card 25 used for value transfer therein, the electronic money server 41 of the acquirer 4, and the electronic money of the acquirer 4 Safe 42 or smart card 45 used for value transfer therein,
Alternatively, if communication cannot be performed correctly due to some trouble on the Internet 6, the electronic money server 21 of the agency 2 attempts to restart the electronic money server in accordance with the value transfer protocol of the electronic money being used. If it cannot be resumed, the electronic money server 21 of the agency 2 notifies the personal computer 1b of the interruption. If no value transfer has begun, no refund has been issued. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 7> As described above, the merchant 3 issues the merchant ID and the refund form number, the amount to be refunded, the currency thereof, and the amount to the agency 2 that receives the refund by electronic money instead of the customer 1. By sending a refund letter containing the refund requester and the refund deadline, and sending the ID of Customer 1's electronic money account at Agency 2, Agency 2 receives the refund by electronic money on behalf of Customer 1 , Customer 1 always has a smart card,
It is possible to receive a refund by electronic money that can be held only in the smart card without requiring a terminal provided with a smart card reader / writer capable of reading and writing the smart card.

<Embodiment 8> FIG. 7 is a block diagram showing the configuration of the entire system of Embodiment 8. <Operation of Embodiment 8> FIG. 12 is a sequence chart showing the operation of the system of Embodiment 8. Hereinafter, a procedure for depositing a part or all of the electronic money deposited in the agency 2 in the bank 5 will be described with reference to FIG.

Customer 1 is personal computer 1
Send ID and PIN to Agency 2 using b. (Step S1) The electronic money server 21 of the agency 2 checks whether there is an electronic money account 24 indicated by the ID, and the authentication server 23 of the agency 2 checks that the transmitted password is Is confirmed as a password corresponding to the password, and the result is transmitted to the electronic money server 21 of the agency 2
Return to The electronic money server 21 of the agency 2
A response to the permission is returned to the customer 1. (Step S2)

Customer 1 is personal computer 1
Using b, if the response is acceptable, send the bank number, account number, deposit, deposit information including the transaction amount and its currency to Agency 2. (Step S3) The electronic money server 21 of the agency 2 checks whether the transaction amount and the currency included in the deposit information can be withdrawn from the electronic money account 24. Electronic money account 24
If it is possible to withdraw the deposit information sent to the bank 5 specified by the bank number. (Step S4)

The electronic money server 51 of the bank 5 confirms the deposit information, and confirms that the account number contained in the sent withdrawal information is valid in the accounting host 53 of the bank 5 and deposits the transaction with the transaction amount and its currency. Ask if you can do it. The accounting host 53 of the bank 5 confirms that the deposit account 54 of the customer 1 indicated by the account number exists, confirms the deposit amount and currency, and notifies the electronic money server 51 of the bank 5 of the result. Electronic money server 51 of bank 5
Responds to the result to the agency 2 in response to the result. (Step S5) If a response is acceptable, the electronic money server 21 of the agency 2 starts value transfer with the bank 5. (Step S6)

Thereafter, the electronic money server 21 of the agency 2 transfers the electronic money to the electronic money server 51 of the bank 5 according to the electronic money transfer protocol.
Since the value of electronic money can only be transferred between smart cards, the smart card 25 in the electronic money safe 22 of agency 2 can be transferred from the electronic money server 21 of agency 2 and the electronic money server 51 of bank 5. , Bank 5 Electronic Money Safe 52
The value is transferred to a certain smart card 55 inside.
Note that details of the value transfer of electronic money are omitted because they are not directly related to the present invention. As a result of this value transfer, the designated amount from the electronic money account 24 of the customer 1 in the agency 2 is transferred to the deposit account 54 of the customer 1 in the bank 5, and the total amount of electronic money held by the agency 2 is transferred. And the balance of the deposit account 54 of the customer 1 has been increased by the transferred amount. (Step S7)

Electronic money server 21 of agency 2
After completing the deposit, the personal computer 1
Notify b that the receipt has been completed. (Step S8) The processing in the case where the above-mentioned procedure is different from each other is as follows. In step S2, when the electronic money account indicated by the ID does not exist, or when the passwords do not match, the electronic money server 21 of the agency 2 notifies the client 1 of a negative response, and performs the subsequent processing. Do not do or request re-entry.

In step S4, the following processing is not performed in the following case, and the reason
Notify b. (1) When the bank 5 specified by the bank number included in the deposit information does not exist (2) When the payment described in the deposit statement cannot be made

If a certain event occurs in step S5, the following processing is performed. (1) If the designated account number does not exist, the electronic money server 51 of the bank 5 notifies the agency 2
And the electronic money server 21 of the agency 2 notifies the personal computer 1b of the notification. In step S7, the electronic money server 21 of the agency 2, the electronic money safe 22 of the agency 2, or the smart card 25 used for value transfer therein, the electronic money server 51 of the bank 5, and the electronic money safe 52 of the bank 5 Alternatively, if the smart card 55 used for value transfer therein or the Internet 6 cannot communicate properly due to some trouble, the electronic money server 21 of the agency 2 uses the value transfer protocol of the electronic money used. And try to resume. If it cannot be restarted by any means, the electronic money server 21 of the agency 2 notifies the personal computer 1b of the interruption. If the value transfer is in progress, the problem is solved by the method already used by the electronic money being used.

<Effect of Specific Example 8> As described above, the ID and the password of the electronic money account 24 of the customer 1 in the agency 2 are sent to the agency 2 which keeps the electronic money in place of the customer 1, and The agency 2 sends the deposit information including the bank number, account number, deposit, transaction amount and its currency, and the agency 2 sends the customer 1 deposit account in the bank 5 from the customer 1 electronic money account 24 instead of the customer 1. By depositing the information in the smart card 54, the customer 1 always has a smart card and does not need a terminal equipped with a smart card reader / writer for reading and writing the smart card, and can only hold the electronic card on the smart card. Money can be deposited into a savings account.

<Other Modifications> In all of the above specific examples, the following modifications are possible. (1) Although the customer 1, the agency 2, the merchant 3, and the acquirer 4 are connected by the Internet 6, the connection is not limited to the Internet, but may be connected by any communication means. (2) Although Agency 2 is an independent organization from Bank 5, these roles may be performed by a financial institution such as a bank. The agency 2 may be of any type as long as it is an organization that performs payment or refund on behalf of the customer 1 with electronic money.

(3) The agency 2 does not always need to keep the electronic money of the customer 1 at all times. That is, payment and withdrawal (payment, refund, and the like) using electronic money may be performed on behalf of a customer 1 upon request. For example, Agency 2 may give credit to a customer to a certain extent, pay for electronic money within that range, and withdraw electronic money of the corresponding value from Agency 2's bank account at a later date. (4) Although the roles of the merchant 3 and the acquirer 4 have been described separately, in an actual operation, the merchant may have the function of the acquirer.

(5) When the customer 1 requests the agency 2 for the agency, the electronic money account 2 of the customer 1
Although the ID that can identify the customer 4 has been notified, any method may be adopted as long as the customer 1 can be identified in the agency 2. For example, an identifier consisting of a number or a character string of a certain length may be used. Similarly, bank 5
Specifies the savings account by the account number, but may be anything as long as the savings account can be specified. For example, an identifier consisting of a number or a character string of a certain length may be used. The acquirer 4 specifies the electronic money account 44 of the merchant 3 by the merchant ID, but any method can be used as long as the acquirer 4 can specify the electronic money account 44 of the merchant 3. For example, an identifier consisting of a number or a character string of a certain length may be used.

(6) The example of using a personal identification number as an authentication method has been described. However, if it can be confirmed that the customer 1 is a legitimate customer having the electronic money account 24 in the agency 2, any method for authenticating can be used. No problem. Representative methods for performing authentication are shown below. [Passphrase] When information required for authentication is requested from the authentication server 23 of the agency 2 to the personal computer 1b, the customer 1 inputs a predetermined passphrase (a character string having a certain length),
The personal computer 1b sends it to the agency 2
To the authentication server 23. The authentication server 23 of the agency 2 compares the sent passphrase with the passphrase registered for the account, and if they match, confirms that the customer has the account in the agency 2. .

[Signature and Certificate] The customer 1 inserts a medium in which an encryption key and a public key with a certificate are recorded into the personal computer 1b, and enters a predetermined personal identification number (or passphrase). input. If the personal computer 1b matches the registered password (or passphrase), the personal computer 1b reads the encryption key and the public key with certificate from the medium, and certifies that the message sent at the time of the authentication request is signed with the encryption key. The attached public key is sent to the authentication server 23 of the agency 2. The authentication server 23 of the agency 2 checks the signature of the message with the sent public key, and checks whether the certified public key matches the one registered for the account. If it can be confirmed that the two are correct, it is confirmed that the customer has the account in this agency 2. For example, a floppy disk can be used as the medium.

[Iris] Personal computer 1b
Photograph the iris of the customer 1 and send it to the authentication server 23 of the agency 2. The authentication server 23 of the agency 2 compares the sent iris with the iris registered for the account, and if they match, confirms that the customer has the account in the agency 2. Alternatively, the function may be assigned such that the feature is extracted from the iris captured by the personal computer 1b and the authentication server 23 of the agency 2 compares the feature with the iris registered for the account.

[Fingerprint] The personal computer 1b takes a fingerprint of the customer 1 and sends it to the agency authentication server 23.
Send to The authentication server 23 of the agency 2 compares the sent fingerprint with the fingerprint registered for the account, and if they match, confirms that the customer has the account in the agency 2. Further, the function may be assigned so that the feature is extracted from the fingerprint captured by the personal computer 1b and the authentication server 23 of the agency 2 compares the feature with the fingerprint registered for the account.

[Handwriting] The customer 1 makes a predetermined signature using a tablet or the like. The personal computer 1b sends the handwriting to the authentication server 23 of the agency 2. The authentication server 23 of the agency 2 extracts the feature from the handwriting sent thereto, and if the feature matches the feature of the handwriting registered for the account, confirms that the customer has the account in the agency 2 I do. Alternatively, the personal computer 1b may extract the features from the handwriting, and the authentication server 23 of the agency 2 may share the function so as to compare with the features of the handwriting registered for the account.

[Voiceprint] The customer 1 utters some words. The personal computer 1b sends the voice to the authentication server 23 of the agency 2. The authentication server 23 of the agency 2 extracts voiceprint features from the transmitted voice, and if the voiceprint features match the voiceprint features registered for the account, the authentication server 23 determines that the customer has the account in the agency 2 Check. Alternatively, the personal computer 1b may extract the features from the voiceprint, and the authentication server 23 of the agency 2 may share the function so as to compare with the features of the voiceprint registered for the account.

(7) The electronic money server 21 of the agency 2, the electronic money safe 22 of the agency 2, and the authentication server 23 of the agency 2 need not be separate devices, but have the functions described in the respective embodiments. If so, it may be one device or a plurality of devices divided in different ways. (8) The electronic money server 41 of the acquirer 4 and the electronic money safe 42 of the acquirer 4 do not need to be separate devices, but may be one device as long as they have the functions described in the respective embodiments. Alternatively, a plurality of devices that are divided in different ways may be used. (9) The electronic money server 51 of the bank 5, the electronic money safe 52 of the bank 5, and the accounting host 53 of the bank 5 do not need to be separate devices and have the functions described in the respective embodiments. For example, even one device
It may be a plurality of devices divided in different ways.

(10) The withdrawal certificate includes the name, handling number, withdrawal, transaction amount and currency, withdrawal time limit, and withdrawal request destination, but these are not necessarily essential. Any certificate that permits withdrawal of a predetermined amount of electronic money may be used. Since the name and the withdrawal request destination indicate the same bank, only one of them may be used. The handling number may be anything that can uniquely specify the withdrawal certificate. If the currency is fixed, no currency is needed. Withdrawal deadline is not necessary if there is tacit consent. Further, other items may be included.

(11) The invoice includes the merchant ID and the invoice number, the amount and currency, the payee, and the due date, but these are not necessarily required. What is necessary is just to include necessary information to be a bill for the product.
If the web server 31 of the merchant 3 also serves as the electronic money server 41 of the acquirer 4, the payee is already known and is unnecessary, and if there is a signature by the merchant 3 and it can be confirmed therewith, there is no need to have a merchant ID.
The bill number can be anything that can only be specified on the bill. If the currency is fixed, no currency is needed. The payment deadline is unnecessary if there is tacit consent. Further, other items may be included.

(12) The reimbursement document includes the merchant ID and reimbursement document number, the amount and currency, the reimbursement requester, and the reimbursement deadline, but these are not necessarily essential. What is necessary is just to include the information which determines the contents of a refund. If the web server 31 of the merchant 3 also serves as the electronic money server 41 of the acquirer 4, the reimbursement request destination is already known, so it is unnecessary. The reimbursement form number can be anything that can uniquely specify the reimbursement form. If the currency is fixed, no currency is needed. The payment deadline is unnecessary if there is tacit consent. Also,
Other items may be included.

(13) It is assumed that the deposit includes the name, the handling number, the deposit, the transaction amount and its currency, the deposit period, and the deposit destination, but this is not necessarily essential.
It only needs to include the deposit amount and other necessary items. The name and depository point to the same bank, so only one may be used. Anything can be used as long as the handling number can uniquely specify the deposit note. If you know a deposit certificate, you do not need to deposit it. If the currency is fixed,
No currency is needed. The time limit for deposit is unnecessary if there is tacit consent. Alternatively, if the electronic money is not transferred, it does not mean that the electronic money has been deposited, and thus there is no need to set a time limit. Further, other items may be included.

(14) Although the personal computer 1b has been described as an example of a terminal used by the customer 1, a mobile terminal or another terminal may be used. Any device may be used as long as it has the functions described in the above specific examples. (15) The bank 5 is not necessarily a bank that issues electronic money, and may be a financial institution other than a bank.

(16) Although the accounting host of the bank 5 confirms the validity of the user by using the personal identification number, another authentication method may be used. For example, there are the above-mentioned passphrase, signature and signature, iris, fingerprint, handwriting, and voiceprint. (17) A deposit account managed by the electronic money server 51 of the bank 5 may be provided separately from the deposit account 54 managed by the accounting host 53 of the bank 5 and handled completely separately from the accounting system. In this case, the electronic money server 51 of the bank 5 or all devices for managing the deposit account perform confirmation of the presence or absence of the deposit account and the balance.

(18) In the specific example 4, the bank 5 is accessed to obtain a deposit, but this procedure is omitted, and the customer 1 creates a deposit and the agency 2 sends the deposit to the agency 2. You may start by sending the ID. In this case, the deposit includes the deposit, the transaction amount and its currency, the deposit destination, and the account number. It confirms that an account exists and that it is possible to deposit electronic money in the specified currency. In addition, if the deposit can be determined based on the deposit note, the deposit may be omitted. If the deposit destination is determined, the deposit destination may be omitted.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an entire system according to specific examples 1 and 5.

FIG. 2 is a sequence chart showing an operation of the system according to the first embodiment.

FIG. 3 is a block diagram illustrating a configuration of an entire system according to specific examples 2 and 6.

FIG. 4 is a sequence chart showing an operation of the system according to the second embodiment.

FIG. 5 is a block diagram illustrating a configuration of an entire system according to specific examples 3 and 7.

FIG. 6 is a sequence chart showing an operation of the system according to the third embodiment.

FIG. 7 is a block diagram illustrating a configuration of an entire system according to specific examples 4 and 8.

FIG. 8 is a sequence chart showing the operation of the system according to the fourth embodiment.

FIG. 9 is a sequence chart showing an operation of the system of the specific example 5.

FIG. 10 is a sequence chart showing the operation of the system according to Example 6;

FIG. 11 is a sequence chart showing the operation of the system according to Example 7;

FIG. 12 is a sequence chart showing the operation of the system of Example 8;

[Explanation of symbols]

 1 Customer 1a Mobile Terminal 1b Personal Computer 1c Other Terminals 2 Agency 3 Merchant 4 Acquirer 5 Bank 6 Internet 21 Electronic Money Server 22 Electronic Money Safe 23 Authentication Server 24 Electronic Money Account 25 Smart Card 31 Web Server 41 Electronic Money Server 42 Electronic Money Safe 44 Electronic money account 45 Smart card 51 Electronic money server 52 Electronic money safe 53 Accounting host 54 Deposit account 55 Smart card

Claims (8)

[Claims] 1. A customer who conducts a transaction using electronic money, an agency that stores the value of electronic money for this customer, a bank that has an electronic money deposit account for the customer, the customer and the customer A network interconnecting an agency and the bank, wherein the bank issues a withdrawal certificate permitting the customer to withdraw the value of electronic money required by the customer from the bank; Sending an withdrawal certificate issued by the bank, the agency sending the withdrawal certificate to the bank, and receiving electronic money of a corresponding value from the bank on behalf of the customer. . 2. A customer who conducts a transaction using electronic money, a merchant that provides goods purchased by the customer, and an agency that pays electronic money on behalf of the customer when the customer purchases goods. An acquirer that receives the price of the product from the agency by electronic money instead of the merchant, wherein the merchant issues a bill for the price when the customer purchases the product, and the agency includes the merchant Receiving an invoice issued by the customer from the customer, and the acquirer receiving electronic money of a value corresponding to the invoice from the agency. 3. A customer who conducts a transaction using electronic money, a merchant who provides goods purchased by the customer, and a refund on behalf of the customer when the customer requests a refund to the merchant for a predetermined reason. An agency that receives electronic money to be provided, and an acquirer that, in place of the merchant, refunds electronic money of a corresponding value to the agency, wherein the merchant indicates a corresponding refund price when the customer requests a refund. An electronic money system, wherein the acquirer receives a reimbursement letter issued by the merchant from the agency, and the agency receives electronic money of a value corresponding to the reimbursement letter from the previous term acquirer. . 4. A bank for conducting a transaction using electronic money, an agency for depositing the value of electronic money for the customer, and a network interconnecting the customer, the agency and a bank, Issues a deposit that deposits the value of electronic money into the bank at the request of the customer; the customer sends a deposit to the agency requesting that the value of electronic money be deposited into the bank; An electronic money system, wherein the deposit is sent to the bank, and electronic money of a corresponding value is deposited in the bank on behalf of the customer. 5. A customer who performs a transaction using electronic money, a financial institution having a deposit account for the customer that can deposit and withdraw electronic money, and an agency that deposits the value of electronic money for the customer. The customer, the financial institution and the agency are interconnected by a network, the customer sends the agency withdrawal information to withdraw from the deposit account, the agency in the previous period,
An electronic money system comprising: transmitting the withdrawal information to the financial institution; and receiving electronic money of a corresponding value from the financial institution on behalf of the customer. 6. A customer performing a transaction using electronic money, an agency having an electronic money account for the customer who deposits the value of the electronic money for the customer, and a merchant providing goods purchased by the customer. And an acquirer that receives the price of a product by electronic money in place of the merchant, and a network interconnecting the customer, the agency, the merchant, and the acquirer, wherein the merchant purchases the product when the customer purchases the product. The agency receives an invoice on behalf of the customer, the customer sends information identifying the electronic money account, and the agency is able to confirm that the customer is legitimate To
An electronic money system in which payment is made on behalf of the customer by electronic money owned by the agency. 7. A customer having a right to receive a refund of electronic money, an agency having an electronic money account for the customer who deposits the value of the electronic money for the customer, and providing a refund of the electronic money to the customer. A merchant that must be performed, an acquirer that performs a refund by electronic money instead of the merchant, and a network that interconnects the customer, the agency, the merchant, and the acquirer, wherein the merchant has a description of the refund. Issuing a reimbursement note, the agency receiving a reimbursement note on behalf of the customer, the customer sending information identifying the electronic money account, and the agency receiving a reimbursement on behalf of the customer. Tem. 8. A customer who conducts a transaction using electronic money, a financial institution having a deposit account for the customer that can deposit and withdraw electronic money, and the customer who deposits the value of electronic money for the customer Agency comprising an electronic money account for, and a network interconnecting the customer, the financial institution and the agency, the customer, the agency, deposit information for depositing in the deposit account, Sending information that can identify the electronic money account, and when the agency can confirm the customer as legitimate, deposits at the financial institution on behalf of the customer by electronic money owned by the agency. Electronic money system.