JPH0660228A - IC card ticket issuing device - Google Patents

Abstract

(57) [Summary] (Correction) [Purpose] To provide an IC card ticket issuing device capable of preventing fraud and confusion. [Arrangement] An area where a plurality of ticket issuing centers 2A can individually and exclusively record is provided on the IC card 13 via a communication network, and a part of the information on the service conditions transmitted from the ticket issuing center 2A based on the user's input is left unchanged. A structure that can be recorded on the card 13. Digital signature S for the service provision condition information SC at the center 2A by the secret key of the center
Created. Information with signature added to information SC (S, SC)
From the center 2A, and creates the signed information (N, NT + MO) of the ticket issuing device by adding the signature N to the information NT recorded or generated by the ticket issuing device 1A and the fare amount information MO.
The signature of the user in the IC card that the user brought and inserted in the device is signed information (S, SC), (N, NT + M
O) or the like is created and recorded / issued on the card 13.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention, which is connected to a communication network and shared by a plurality of ticket issuing centers, issues a plurality of types of tickets by writing them on an IC card. In particular, it is possible to illuminate that the service conditions stated on the ticket are indeed due to the ticketing center in question, and the ticketing center cannot deny, and at the same time, the storage and deposit fees stated on the ticket It is possible to illuminate that the amount has been collected by the ticketing device or the ticketing device operation center, and it cannot be denied by the ticketing device or ticketing device operation center. The present invention relates to an IC card issuing device which can illuminate that the confirmation has been made and issues information that cannot be denied by the user into the IC card.

[0002]

2. Description of the Related Art Conventionally, a ticket issuing apparatus of this type is a stand-alone type having no communication function, or accommodated as a terminal connected to only one ticketing center apparatus having a communication function. .

The invention disclosed in Japanese Patent Laid-Open No. 61-201366 is characterized in that the telephone number of the center accessed by the ticket issuing device is encrypted and printed on ticket paper to issue a ticket. there were.

[0004]

Since there are a plurality of card issuing center devices in a shared use system capable of accessing a plurality of card issuing center devices and issuing a ticket using the above-mentioned conventional communication network, a ticket issuing device. It was necessary to take measures to distinguish the tickets that shared the.

That is, recording on the face of a sheet (printing, magnetic recording, etc.)
If all formats are set arbitrarily for the ticketing center, if a similar format appears, it will be confusing for users and others. In addition, there is a problem that it is necessary to protect the ticket from a person who intends to illegally issue a ticket, such as accessing an unauthorized ticket issuing center apparatus from an authorized ticket issuing apparatus by misusing the system.

Further, in the invention disclosed in the above-mentioned Japanese Patent Laid-Open No. 61-2013366, the telephone number of the center accessed from the ticket issuing device is encrypted and printed on the face of the ticket to distinguish the tickets of different centers. Since the key is fixed to the public telephone and the information encrypted at the same time is the telephone number of the center, the code is easy to see, and the service conditions such as date and time and seat type are simply printed on the face as it is. However, there is a problem that it is easy to induce cheating.

[0007] On the other hand, digital signature technology that allows a person who has transmitted digital information to transmit the information as if it were affixed to a document and illuminates that it has been recognized is, for example, NTT R & D Vol.40, No. .5, 1991, PP
6687-686, "High-speed digital signature system ESIG
N "is established.

According to such a digital signature, the document M
Using the secret key K and the digital signature S created by the signature generation function, the transmitted document M and the public key U can be used to verify by the signature verification function whether the document is certainly a document by a person having the secret key K. The person with the secret key K cannot deny that fact. Further, even if a part of the document is changed, the verification result is determined to be invalid.

If an algorithm called ESIGN is used for these digital signature functions, the program size that can be mounted on an IC card can be set within a practical processing time.
It is shown in the above-mentioned document.

Therefore, the present invention has been made in view of the above points, and provides a very good IC card issuing apparatus which can solve the above-mentioned conventional problems by using a digital signature technique. It is an object.

[0011]

In order to solve the above problems, the present invention provides information with a signature of a ticketing center obtained by adding a digital signature S by a secret key of the ticketing center to service provision condition information transmitted from the ticketing center. It is recorded on an IC card by the ticket issuing device, and at the same time, the ticket issuing device adds a digital signature N by the secret key of the ticket issuing device to the information such as ID and the fee information that can be specified by the ticket issuing device An IC card issuing device configured to record information on an IC card and issue a ticket.

Specifically, a plurality of ticket issuing centers are provided with an area on the IC card, which can be independently and exclusively recorded, via a communication network.
In this area, based on the user's input, a part of the information on the service condition transmitted from the ticket issuing center is directly I
It can be recorded on a C card, and further, at the ticket issuing center, a digital signature S is created for the service providing condition information SC by the secret key of the ticket issuing center, and the signature of the ticket issuing center added to the service providing condition information SC. Signature information of the ticket issuing device, which receives the additional information (S, SC) from the ticket issuing center, adds the digital signature N created by the secret key of the ticket issuing device to the information NT stored or generated by the ticket issuing device and the fare amount information MO (N, NT + MO)
I, which the user of the ticket issuing device confirms the service conditions and the amount of charge and inputs into the operation input unit by the confirmation information or the confirmation trigger, is inserted into the ticket issuing device.
The signature of the user in the C card is the signed information of the ticket issuing center (S, SC), the signed information of the ticket issuing device (N,
The present invention relates to an IC card issuing device configured to record and issue tickets on an IC card for NT + MO).

[0013]

With the above arrangement, the user or I
The person who picked up the ticket that is a C card issued the contents,
It is difficult to tamper with the correct format even if it is decrypted, and it is confusing because it is not possible to change the ticket to different service provision conditions, different ticket issuing device IDs or different fee amounts. Without it, the ticket can be protected from those who intend to illegally issue the ticket.

Further, since the service conditions recorded on the ticket, which is an IC card, have a signature that cannot be generated by a ticketing center other than the ticketing center, it is possible to prove that the service condition is certainly by the ticketing center. We cannot deny the fact that the service provision conditions have been sent.

Furthermore, a signature that cannot be generated by a ticket issuing device or a ticket issuing device operation center that the storage and deposit fee amount recorded on the ticket is indeed collected by the ticket issuing device or ticket issuing device operation center. Since it is certifiable, it is not possible for the ticket issuing device or the ticket issuing device operation center to deny the contents, and it is possible to prove that the user has confirmed the service conditions and the amount of charge, except for users who cannot be denied by the user. The present invention relates to a ticket issuing device that records the signature information of the user, which cannot be generated in the IC card, in the IC card, and can prevent fraud and confusion.

[0016]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings.

FIG. 1 is an explanatory view of a system configuration of an embodiment of the present invention. 1A to 1M are ticket issuing devices, 2A to 2N are ticket issuing centers, and 3A to 3L are locations for providing ticket services. Is a communication network, and 11 is a ticket issuing device operation center.

The ticket issuing apparatuses 1A to 1M are connected by a communication network 10 to ticket issuing centers 2A to 2N corresponding to dial numbers recorded on IC cards.

3A to 3L are theaters and the like that are provided with services by issued tickets brought by users, and have an IC card reader capable of decoding the information of the ticket, which is an IC card.

Reference numeral 11 denotes a ticket issuing device operation center for managing and operating a plurality of ticket issuing devices.

FIG. 2 shows a ticket issuing apparatus 1A to 1M, for example, 1
It is a block block diagram of A.

In FIG. 2, reference numeral 3 is a communication processing unit. The communication processing unit 3 includes the communication network 10 and the ticket issuing center 2.
This is a part that transmits and receives signals to and from A to 2N, and performs format conversion between the signal format inside the ticket issuing apparatus 1A and the network transmission signal format in terms of voltage level, bit arrangement, and the like.

Reference numeral 4 is a charge processing unit. This charge processing unit 4
Is a legitimate one that takes in an ID recorded matter for securing payment, such as a coin, a bill inserted into the ticket issuing apparatus 1A for payment of a fee by a user, and a substitute prepaid card or the like or a credit card. It is a part that performs verification and processes such as storing charges, recording reductions, billing charges, and returning balances.

An IC card used as a ticket can also be used for prepaid or credit fee processing.

Reference numeral 5 is a ticket issuing section including an IC card reader / writer. The ticket issuing unit 5 is provided by the ticket issuing center devices 2A to 2
N, for example, service conditions such as service name, date and time, place, and seat number from 2A are converted into ticket record information, and an IC card carried by the user is recorded according to the ticket record format of the control unit 8 described later. A portion for issuing a ticket to a user, which includes an IC card insertion portion, an ejection mechanism, a signal transmission / reception portion with an IC card, a communication portion with a control portion, and the like.

The display unit 6 displays operation guides and operation instructions for the user.
It is a part for displaying the ticketing condition notification such as a charge and other information related to ticketing as visible or audible information, and is composed of, for example, a display, a speaker and the like.

Reference numeral 7 is an operation input unit, and this operation input unit 7
Is a part used by the user to input information necessary for the control unit 8 and ticketing, for example, to confirm the displayed service conditions and charges and to record that the confirmation has been made on the IC card. It is composed of a switch, a push button switch and the like.

The control section 8 is a section that controls each section of the ticket issuing apparatus 1A, and uses the data such as the ticket format and the temporary storage section RAM8c according to the program stored in the ROM 8b by the processing section CPU 8a, and each section of the ticket issuing apparatus 1A. The input data is processed and the control data is output to each part.

Further, the control unit 8 uses the key information stored in the ROM 8b or the temporary storage unit RAM 8c to read the R
According to the program stored in the OM 8b, signature generation of the ticket issuing device is performed.

FIG. 3 shows a ticket issuing device 1A, a ticket issuing device operation center 11, a ticket issuing center 2A, a service providing area 3A,
It is the figure which showed the procedure and method of performing a series of reservation ticket issuing processing with IC card 13 which is a ticket.

FIG. 4 shows a ticket issuing apparatus 1A, a ticket issuing apparatus operation center 11, a ticket issuing center 2A, a service providing area 3A,
FIG. 4 is a diagram showing an example in which a reservation ticket issuing process is performed by a ticket 13 by a procedure and a method partially different from those in FIG. 3.

FIG. 5 is a diagram showing an example of a processing procedure of the ticket issuing apparatus 1A.

FIG. 6 shows an IC issued by the ticket issuing device 1A.
It shows the surface of the card. In a normal IC card, all the information is recorded on the chip of the C section, and the contents cannot be visually confirmed. However, in FIG. 6, the service conditions are particularly shown in the A section and the name of the ticketing center is temporarily shown in the B section. The recorded example is shown.

The operation of the embodiment of the present invention will be described below with reference to the drawings.

The ticket issuing apparatus 1A of the present invention is connected to one end of the communication network 10 as shown in FIG.

As a result, the user can obtain the ticket issuing apparatus 1A shown in FIG.
When a coin is inserted into the charge processing unit 4 shown in (4) and an IC card is inserted into the ticket issuing unit or an IC card having a charge function is inserted into the ticket issuing unit, the control unit CPU 8a recognizes this by a signal from the ticket issuing unit 5. According to the processing procedure of FIG. 5 stored in the ROM 8b, a control signal is sent to the ticket issuing unit 5 and the like, and the recorded plural service items and their telephone numbers are received from the IC card.

When the user selects one of the plurality of service items displayed on the display unit 6 by the operation input unit 7, the control unit 8 causes the telephone number of the ticketing center transmitted from the corresponding IC card. To the communication network 10 via the communication processing unit 3.

As a result, an exchange connection is performed by the communication network 10, the ticket issuing apparatus 1A is connected to the ticket issuing center 2A, and the ticket issuing center 2A uses the user user information section UUI of the D channel of the ISDN protocol associated with the call setting as follows. Such service guide is transmitted to the ticket issuing device 1A.

The ticket issuing device 1A receives the input items necessary for ticketing, the price list, the operation guidance, and the control procedure related to them, and the display unit 6 follows the control procedure to issue ticket guidance and operation guidance to the user. , Display the tariff, etc. and instruct the input operation for the required items.

In response to this, when the user performs an input operation from the operation input section 7, the control section 8 uses the service item input by the user via the communication processing section 3 as a service request to the ticket issuing center 2A. Send to. In this case, the user can also be configured to input according to the voice guidance from the ticket issuing center 2A.

When the ticket issuing center 2A accepts the ticket issuing based on the vacant seat information or the like in response to the service request condition transmitted from the ticket issuing apparatus 1A, the charge information and the like for the ticket issuing are transmitted subsequently to the acceptance signal. Therefore, the control unit 8
This is received via the communication processing unit 3.

Subsequently, the control unit 8 calculates a required charge from the received charge information, and checks through the charge processing unit 4 whether or not a sufficient amount of the charge has been accumulated (deposited) in the charge processing unit 4. If there is a shortage, a message to that effect is displayed on the display unit 6 to urge the user to make an additional charge.

At this time, when the IC card with the prepaid charge function is inserted and the charge is insufficient, the IC card is returned to have additional insertion or the same IC.
The display prompts the user to use the credit function of the card.

When the required amount is satisfied by the inspection of the charge processing unit 4 and the ticket issuing preparation is completed, the control unit 8 transmits from the communication processing unit 3 that the charge can be stored in the ticket issuing center.

At the ticketing center 2A, the service name, the entry date and time, the place, the seat class, the seat number, the charge, the service reception number, the service reception date, the issuer name, and the center name that can identify the ticketing center , A center identification number, a center telephone number, and the like, the service condition SC that is necessary information, and a secret key KS unique to the ticketing center, which is predetermined, are used to create a digital signature S by a signature generation function. , The pair of SC and S (S, SC), which is the service condition with signature of the ticket issuing center, is transmitted to the ticket issuing apparatus 1A.

The ticket issuing device 1A receives the information through the communication processing unit 3, recognizes that the information is in the correct format and is accessed by the ticket issuing center, and then displays the service conditions and the charge amount on the display unit 8. To display.

When the user confirms the contents by the display on the display unit and inputs the confirmation by the operation input unit 7, the charge processing unit 4 in the ticket issuing apparatus 1A stores or receives the charge. Deposit with credit.

The ticket issuing device has an ID that can identify the ticket issuing device, information that the user issues, such as the date and time when the user accessed, NT, a charge amount MO stored or deposited in the ticket issuing device, and a signature of the ticket issuing center. Service conditions (S,
SC) using the secret key KT unique to the ticket issuing device,
A digital signature N is generated by the signature generation function, and N and MO
The signed information (N, MO + NT + (S, SC)) of the ticket issuing device, which is a + NT + (S, SC) pair, is created.

For convenience of explanation, S and SC, which are the signing service conditions of the ticketing center, are (S, SC), and the signing information of the ticket issuing device is (N, MO + NT + (S, SC)).
It is written as.

In the ticket issuing device, the user confirmation signal that the user has confirmed the IC card 13 from the ticket issuing unit 5 and the signature information of the ticket issuing device (N, MO + NT + (S, SC))
To send.

In the IC card 13, the received signature information of the ticket issuing device is (N, MO + NT + (S, SC)) and the membership number PE corresponding to the ticket issuing center or service item recorded in advance in the IC card. The user's private key is used to generate the user's signature U, and the member number PE and the signature U are transmitted to the ticket issuing unit 5 of the ticket issuing device.

In the control unit 8 of the ticket issuing device, the user signature information (U, PE + (N, MO + NT +)
(S, SC))), and the ticket record data is configured using the ticket format data stored in the ROM 8b. The ticket record data is transferred to the IC card 1 via the ticket issuing unit 5.
Write to 3.

Further, the telephone number of the corresponding ticketing center of the telephone directory in the IC card is associated with the user-signed information so that the service can be dialed automatically.

Here, the IC card 13 may be used to create the user signed information and the ticket record data.

Since the IC card does not normally have a print / record section, only the necessary information is recorded in the chip, and the service conditions cannot be visually checked.

When the writing to the IC card is completed, the IC card is ejected by the ejecting means and the ticket issuing is completed.

The control unit 8 returns the remaining money or the like in the charge processing unit 4, if any, and sends a disconnection signal to the communication network 10 to perform termination processing such as disconnecting the line of the ticketing center 2A. , It returns to the initial use waiting state again. In the case of an IC card with a charge function, I
Eject the C card.

When the user brings the issued IC card to the theater, for example, the service providing area 3A in FIG. 1, if the receptionist has the service conditions printed on the surface of the IC card as shown in FIG. Visually admit to admit.

If the IC card is a normal IC card with the service conditions not printed on the surface, I in the service providing area 3A
An IC card is inserted into the C card reader 12 to automatically read information.

The reader 12 reads the telephone number of the ticketing center in the IC card, automatically dials it, and sends the user signature information (U, PE + (N, MO + NT + (S, SC))) to the ticketing center.

At the ticket issuing center 2A, the service providing area 3A
The member number PE is searched for in the user database corresponding to the service item in the service condition among the information transmitted by the user, and the public key PU of the user is obtained.

That is, the ticket issuing center 2A uses the user signature U
The public key U and the signature verification function are used to verify whether it is correct, and if correct, the ticket issuing device corresponding to the ticket issuing device ID NT which is transmitted from the ticket issuing device operation center 11 in advance or at the request of the ticket issuing center. By using the signature public key PN and the signature verification function, it is verified whether the signature N of the ticket issuing device is authentic.

Further, the ticket issuing center 2A verifies whether the signature S of the ticket issuing center is authentic by using the public key PS for signature of the ticket issuing center and the signature verification function, and if correct, the file of the ticket issuing center 2A. The service conditions SC recorded in the above are compared and collated.

If the matching lines match, the ticket issuing center 2A transmits OK, and if they do not match, NO is sent to the service providing place 3A.

Furthermore, at the ticketing center, the bank having the registered account of the user, which has been delivered in advance, is accessed from the user's account by using the charge information MO, the user's member number PE, and the user database. Ask to automatically deduct the charge.

In the above description, verifying the signature verifies that the outgoing information is indeed from the signed device, and at the same time, if the signed information itself has been tampered with, Since it is determined to be incorrect by verification, it is possible to verify whether or not the signed information itself has been tampered with.

At the service providing place 3A, OK or NO transmitted from the ticket issuing center is displayed on the reader 12,
The receptionist reads it and decides whether to admit or refuse the person who brought the ticket.

FIG. 4 shows an example in which some functions of the embodiment of FIG. 3 are modified.

The first difference is that the signing information (N, (MO + NT + (S, SC))) of the ticket issuing device is transmitted to the IC card, and the IC card adds information such as the user's membership number PE. The point is that the user signature information (U, PE + (N, MO + NT + (S, SC))) is created using the user private key.

As a result, the ticket issuing apparatus 1A can be configured to only create the signed information of the ticket issuing apparatus, and the IC card to create the signed information of the user.

The second difference is that the user not only presses the confirmation button after seeing the display of the service conditions and the amount of charge, but also the information such as the user password for confirming the user's own operation. Is input to the ticket issuing device, and the input causes the IC card to generate the user's signature and create the user-signed information.

This user password is checked by the user database of the ticketing center.

The third difference is that the public key PS of the ticketing center has been transmitted from the ticketing center 2A to the service providing area in advance, so that the ticket is recorded on the ticket as soon as the IC card is inserted into the reader 12. Signature S of the ticketing center
Can be verified, the results can be displayed and checked by the receptionist.

The fourth difference is that if the secret key ET of the ticket issuing apparatus 1A is embedded in the ticket issuing apparatus 1A, there is a security problem and the ticket issuing apparatus operation center 11
Since it is difficult to manage the corresponding public key PN so that it can be sent to the ticketing center, the ticketing device operation center 11 collectively manages the secret key ET and the public key DT of the ticketing device, and the Alternatively, the secret key of the ticket issuing device is appropriately delivered from the ticket issuing device operation center 11 at an appropriate cycle.

For example, when the user dials the ticket issuing center 2A through the operation input unit 7, the ticket issuing apparatus 1A automatically calls the ticket issuing apparatus operation center 11 and the D channel of the ISDN protocol associated with the call setting is set. The key issuing device 1A transmits temporary key information TK newly generated for each call to the user information unit UUI.

When the ticket issuing center 2A responds to this, the network sends a called response signal to the ticket issuing apparatus 1A. At this time, the ticket issuing center 2A uses the temporary key TK transmitted from the ticket issuing device 1A, encrypts the key ET paired with the public key PN, which should be used in the ticket issuing device 1A, with TK,
K (KT) is put on the user information section, and the ticket issuing device 1
Send to A.

When the ticket issuing device 1A receives the called response signal of the user information section and the encrypted key information TK (KT) via the communication processing section 3, the control section 8 causes the encryption key information TK ( Temporary key TK for KT)
The secret key KT of the ticket issuing device is decrypted by the RAM 8c.
It will be recorded on and used for digital signature creation.

In the above description, even if the charge processing unit 8 is a charge processing medium such as a coin or a prepaid card for on-the-spot payment, a credit card, a credit call card, which is a kind of telephone card, or an IC that also serves as a ticket. It is obvious that the same can be applied to the prepaid fee processing and the credit fee processing by the card.

Further, it is also possible to realize by a method in which the user hands the cash to the clerk of the store where the ticket issuing device is installed, without mounting the charge processing section on the ticket issuing device.

It is also possible for a clerk to input service request conditions and the like to the ticket issuing device instead of the user.

Also, the form of the signal sent from the communication processing unit 7 can be executed without problems using a PB signal on an analog line, a modem, or Bch and Dch packets on a digital line.

The ticket shown in FIG. 6 is, like an ordinary IC card,
In addition to recording all the information on the chip of part C, the service conditions are recorded in part A and the name of the ticketing center is recorded in part B by heat or magnetism so that it can be visually confirmed. It is assumed that the data will be erased and then recorded again by heat or magnetism when it is reused.

[0083]

As described above, according to the present invention,
The IC card is provided with an area where a plurality of ticketing centers can independently record through the communication network. In this area, the ticketing center signature information (S, SC) added to the service provision condition information SC is sent from the ticketing center. The information NT that is received and stored or generated by the ticket issuing device and the charge amount information MO are added with the digital signature N created by the secret key of the ticket issuing device to create the signed information (N, NT + MO) of the ticket issuing device, and the ticket issuing I which the user of the device brings in and inserts into the ticket issuing device by the confirmation information or confirmation trigger input by the operation input unit by the user of the device after confirming the service condition and the charge amount.
The signature of the user in the C card is the signed information of the ticket issuing center (S, SC), the signed information of the ticket issuing device (N,
It is possible to provide an IC card ticket issuing device which is created for NT + MO, etc., and recorded / issued on an IC card.

Therefore, according to such an IC card issuing device, it is difficult for the user or the person who picks up the IC card ticket to tamper with the content after issuing the ticket and decrypting it. Therefore, the ticket cannot be changed to have a different service provision condition, a different ticket issuing device ID, or a different charge amount, and it is possible to prevent fraudulent ticket issuance without causing confusion.

Further, since the service conditions recorded on the IC card ticket have a signature that cannot be generated by a ticketing center other than the ticketing center, it is possible to certify that the ticket is issued by the ticketing center. We cannot deny the fact that the service provision conditions have been sent.

Furthermore, a signature that cannot be generated by a ticket issuing device or a ticket issuing device operation center is that the storage and deposit fee amount recorded on the ticket is certainly collected by the ticket issuing device or ticket issuing device operation center. Since it is proofable because it is attached, the ticket issuing device or the ticket issuing device operation center cannot deny the content.

Further, in order to make it possible for the user to prove that the service conditions and the charge amount have been confirmed, the signature information of the user that cannot be denied by the user is recorded in the IC card. Therefore, it is possible to prevent fraud and confusion from occurring.

[Brief description of drawings]

FIG. 1 is an explanatory diagram of a system configuration showing an embodiment of the present invention,

FIG. 2 is a block configuration diagram of a ticket issuing device according to an embodiment of the present invention,

FIG. 3 is a diagram for explaining the flow of processing of a ticketing system according to an embodiment of the present invention,

FIG. 4 is a diagram for explaining the flow of processing of a ticket issuing system according to another embodiment of the present invention;

FIG. 5 is a diagram showing an example of a processing procedure of the ticket issuing device according to the embodiment of the present invention;

FIG. 6 is a diagram showing an example in which service conditions and the like are temporarily recorded on the surface of an IC card, and cryptographic information is magnetically recorded, in addition to storing all information in a chip of an IC card issued by the present invention. .

[Explanation of symbols]

1A to 1M ... Ticket issuing device, 2A to 2N ... Ticket issuing center, 3A to 3N ... Service providing area, 3 ... Communication processing unit, 4 ... Charge processing unit, 5 ... Ticket issuing unit, 6 ... Display unit, 7 ... Operation input unit, 8 ... control unit, 8a ... CPU, 8b ... ROM,
8c ... RAM, 10 ... communication network, 11 ... ticketing device operation center, 12 ... reader, 13 ... ticket (IC card).

Claims (1)

[Claims] 1. A ticket issuing apparatus connected to a ticket issuing center via a communication network to write ticket issuing information in an IC card, by providing a service by transmitting and receiving a signal to and from the communication network and the ticket issuing center and using a secret key at the ticket issuing center. Condition information S
Signed information (S, S) of the ticketing center consisting of the digital signature S for C and the service provision condition information SC.
C), the digital signature N created by the secret key for the ticket issuing device, in one or both of the information NT and the amount information MO stored or generated on the ticket issuing device side. A control unit that creates the added information (N, NT + MO) with the ticket issuing device and controls each part of the ticket issuing device, a display unit that displays the service provision condition SC and the fare amount information MO, and a user of the ticket issuing device An IC card issuing apparatus including an operation input unit for inputting the information, and a ticket issuing unit for transmitting the information (S, SC) and the information (N, NT + MO) or (N, NT + MO + (S, SC)) to an IC card.