Electronic commerce method, electronic commerce system, certificate terminal, and principal certification method by agent

• US 20050222932A1
• Filed: 05/18/2005
• Published: 10/06/2005
• Est. Priority Date: 04/03/2003
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Murashita, Kimitaka, Suzuki, Shoji, Shinzaki, Takashi
• Application Number:
  US11/131,426
• Publication Number:
  US 20050222932A1
• Time in Patent Office: Days
• US Class Current: 705/35
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes

Abstract

In order to prevent without fail the abuse of certificate information which are exchanged on a network, an orderer inputs the certificate information to a certificate terminal when placing an order for a commodity, the certificate terminal encrypts the certificate information to send it to an order receiver and holds the certificate information and a decryption key. A deliveryman, at the time of commodity delivery, inputs the encrypted certificate information to the certificate terminal, and the orderer inputs data of terminal certification to the certificate terminal. The certificate terminal, when it certifies by the data that the orderer is the valid owner of the certificate terminal, decrypts the encrypted certificate information input by the deliveryman, by the decryption key in the certificate terminal, verifies decrypted certificate information with the certificate information in the certificate terminal, and the deliveryman hands over the commodity to the orderer when the certificate information match.

Claims

1. An electronic commerce method in which an orderer places an order for a commodity with an order receiver via a network and receives the commodity, wherein

the orderer inputs certificate information for identifying the orderer himself/herself to a certificate terminal when placing an order for the commodity,

the certificate terminal encrypts the certificate information by a predetermined encryption key, sends encrypted certificate information to the order receiver together with an order form of the commodity via the network, and holds the certificate information and a decryption key for decrypting the encrypted certificate information,

a person in charge of delivery of the order receiver, when delivering the commodity, inputs the encrypted certificate information received from the certificate terminal when the order was placed for the commodity, and the orderer inputs terminal certification data showing that he/she is the valid owner of the certificate terminal to the certificate terminal,

the certificate terminal, after certifying by the data that the orderer is the valid owner of the certificate terminal, decodes the encrypted certificate information, which has been input by the person in charge of delivery, by the decryption key held in the certificate terminal, verifies decrypted certificate information with the certificate information held in the certificate terminal, and, when the certificate information match, notifies it to the orderer, the person in charge of delivery, and the order receiver, and

the person in charge of delivery executes handing over of the commodity to the orderer on receiving verification-matched notification from the certificate terminal.

2. The electronic commerce method according to claim 1, wherein

the certificate terminal holds biometric information of the orderer together with the certificate information and the decryption key, and

the orderer, at the time of commodity delivery, inputs his/her own biometric information that is certification data as a terminal owner showing that he/she is the valid owner of the certificate terminal, to the certificate terminal, the certificate terminal verifies biometric information, which has been input at the time of commodity delivery, with biometric information previously held in the certificate terminal, and, when the biometric information match, decrypts the encrypted certificate terminal by the decryption key held in the certificate terminal.

4. The electronic commerce method according to claim 1, wherein

the certificate terminal holds a secret key and a public key of the orderer, which have been issued by a certificate authority, and holds a public key of the order receiver issued by the certificate authority, which has been sent from the order receiver to the orderer,

the certificate terminal, when placing an order for the commodity, sends the encrypted certificate information that has been further encrypted by the public key of the order receiver, the public key of the orderer, and an electronic signature for identifying the orderer himself/herself, which has been encrypted by the secret key of the orderer, to the order receiver, and

the order receiver obtains the encrypted certificate information, which has been encrypted by the predetermined encryption key, by using the secret key of the order receiver.

6. The electronic commerce method according to claim 1, wherein

verification result by the certificate terminal is sent to a settlement institution, and the settlement institution executes settlement of the commodity on receiving the verification result.

11. The electronic commerce method according to claim 1, wherein

the order receiver is a financial institute, the orderer is a loanee who borrows money as a commodity from the financial institute, time of placing an order for the commodity is time of making an agreement of money consumption loan between the loanee and the financial institute, and time of commodity delivery is time when the loanee receives money as the commodity from the financial institute.

13. The electronic commerce method according to claim 1, wherein

the certificate terminal automatically creates the predetermined encryption key and the decryption key each time when an order is placed for the commodity, and deletes the decryption key in the certification terminal at the point where verification at the time of commodity delivery is completed.

3. An electronic commerce method in which an orderer places an order for a commodity with an order receiver via a network and receives the commodity, wherein

the orderer inputs first orderer biometric information for identifying the orderer himself/herself to a certificate terminal when placing an order for the commodity,

the certificate terminal encrypts the first orderer biometric information by a predetermined encryption key, sends encrypted first orderer biometric information to the order receiver together with an order form via a network, and holds a decryption key for decrypting the encrypted first orderer biometric information,

a person in charge of delivery of the order receiver, when delivering the commodity, inputs the encrypted first orderer biometric information received from the certificate terminal when the order was placed for the commodity, and the orderer inputs second orderer biometric information for identifying the orderer himself/herself to the certificate terminal,

the certificate terminal decrypts the encrypted first orderer biometric information, which has been input by the person in charge of delivery, by the decryption key held in the certificate terminal, verifies decrypted first orderer biometric information with the second biometric information, and, when the orderer biometric information match, notifies it to the orderer, the person in charge of delivery, and the order receiver, and

the person in charge of delivery executes handing over of the commodity to the orderer on receiving verification-matched notification from the certificate terminal.

5. The electronic commerce method according to claim 3, wherein

the certificate terminal holds a secret key and a public key of the orderer, which have been issued by a certificate authority, and holds a public key of the order receiver issued by the certificate authority, which has been sent from the order receiver to the orderer,

the certificate terminal, when placing an order for the commodity, sends the encrypted first orderer biometric information that has been further encrypted by the public key of the order receiver, the public key of the orderer, and an electronic signature for identifying the orderer himself/herself, which has been encrypted by the secret key of the orderer, to the order receiver, and

the order receiver obtains the encrypted first orderer biometric information, which has been encrypted by the predetermined encryption key, by using the secret key of the order receiver.

10. The electronic commerce method according to claim 3, wherein

the certificate terminal applies reversible process to the first orderer biometric information before encrypting the first orderer biometric information when the order is placed for the commodity, and opposite process to the reversible process, which has been performed when the order was placed for the commodity, is applied to the decrypted first orderer biometric information at the time of commodity delivery to restore the first orderer biometric information.

7. An electronic commerce method in which an orderer places an order for a commodity with an order receiver via a network and an agent entrusted by the orderer receives the commodity, wherein

the orderer inputs first orderer biometric information for identifying the orderer himself/herself to a certificate terminal when placing an order for the commodity,

the certificate terminal sends the first orderer biometric information to the order receiver together with an order form of the commodity via the network,

when the orderer entrusts the agent to receive the commodity, the orderer inputs second orderer biometric information for identifying the orderer himself/herself to the certificate terminal, and the agent inputs first agent biometric information for identifying the agent himself/herself to the certificate terminal,

the certificate terminal holds the second orderer biometric information and the first agent biometric information in a coordinated manner,

a person in charge of delivery of the order receiver, when delivering the commodity, inputs the first orderer biometric information received from the certificate terminal when the order was placed for the commodity to the certificate terminal, and the agent inputs second agent biometric information for identifying the agent himself/herself to the certificate terminal,

the certificate terminal verifies the second agent biometric information with the first agent biometric information held in the certificate terminal, verifies the first orderer biometric information input by the person in charge of delivery with the second orderer biometric information held in the certificate terminal when the agent biometric information match, and, when the orderer biometric information match, notifies it to the agent, the person in charge of delivery, and the order receiver, and

the person in charge of delivery executes handing over of the commodity to the agent on receiving verification-matched notification from the certificate terminal.

8. The electronic commerce method according to claim 7, wherein

the certificate terminal, when an order is placed for the commodity, encrypts the first orderer biometric information by a predetermined encryption key to send the information as encrypted first orderer biometric information to the order receiver, and holds a decryption key for decrypting the encrypted first orderer biometric information in a coordinated manner with the second orderer biometric information and the first agent biometric information, and

the person in charge of delivery, when delivering the commodity, inputs the encrypted first orderer biometric information as the first orderer biometric information to the certificate terminal, the certificate terminal decrypts the encrypted first orderer biometric information, which has been input by the person in charge of delivery, by the decryption key held in the certificate terminal when the above-described agent biometric information match, and verifies decrypted first orderer biometric information with the second orderer biometric information.

9. The electronic commerce method according to claim 7, wherein

the certificate terminal determines verification-unmatched when the first orderer biometric information and the second orderer biometric information are completely the same.

12. The electronic commerce method according to claim 7, wherein

the order receiver is a financial institute, the orderer is a loanee who borrows money as a commodity from the financial institute, time of placing an order for the commodity is time of making an agreement of money consumption loan between the loanee and the financial institute, and time of commodity delivery is time when the agent receives money as the commodity from the financial institute.

14. An electronic commerce system, comprising:

a certificate terminal of an orderer, which places an order for a commodity with an order receiver and performs certification to the orderer himself/herself at the time of receiving the commodity;

a network on which information is exchanged between the certificate terminal and the order receiver; and

a received order information holding section of the order receiver, which holds received order information sent from the certificate terminal via the network, wherein

the certificate terminal is made up of;

a certificate information input section which inputs certificate information for identifying the orderer himself/herself when an order is placed for the commodity;

an encrypting section that encrypts the certificate information input from the certificate information input section by a predetermined encryption key;

an output interface section that sends encrypted certificate information, which has been encrypted by the encrypting section, as the received order information to the order receiver via the network together with an order form;

a certificate information holding section that holds the certificate information input from the certificate information input section;

a decryption key holding section that holds a decryption key for decrypting the encrypted certificate information encrypted by the encrypting section;

a data holding section that previously holds data certifying that he/she is the valid owner of the certificate terminal, which is necessary for decrypting the encrypted certificate information;

a data input section which inputs said data by the orderer at the time of commodity delivery;

an input interface section for inputting the encrypted certificate information held in the received order information holding section at the time of commodity delivery;

an orderer certification section that verifies data held in the data holding section with data input from the data input section and permits the use of the decryption key held in the decryption key holding section when the data match;

a decryption section that decrypts the encrypted certificate information, which has been input from the input interface section, by using the decryption key on receiving verification result by the orderer certification section, and

a verification section that verifies certificate information decrypted by the decryption section with certificate information held in the certificate information holding section and notifies the verification result to the orderer, a person in charge of delivery of the commodity, and the order receiver.

15. A certificate terminal at which an orderer places an order for a commodity with an order receiver via a network and performs certification to the orderer himself/herself when receiving the commodity, wherein

said terminal is made up of:

a certificate information input section which inputs certificate information for identifying the orderer himself/herself when an order is placed for the commodity;

an encrypting section that encrypts the certificate information input from the certificate information input section by a predetermined encryption key;

an output interface section that sends encrypted certificate information, which has been encrypted by the encrypting section, to the order receiver via the network together with an order form;

a certificate information holding section that holds the certificate information input from the certificate information input section;

a decryption key holding section that holds a decryption key for decrypting the encrypted certificate information encrypted by the encrypting section;

a data holding section that previously holds data certifying that he/she is the valid owner of the certificate terminal;

a data input section which inputs said data by the orderer at the time of commodity delivery;

an input interface section for inputting the encrypted certificate information received by the order receiver at the time of commodity delivery;

an orderer certification section that verifies data held in the data holding section with data input from the data input section and permits the use of the decryption key held in the decryption key holding section when the data match;

a decryption section that decrypts the encrypted certificate information, which has been input from the input interface section, by using the decryption key on receiving verification result by the orderer certification section, and

a verification section that verifies certificate information decrypted by the decryption section with certificate information held in the certificate information holding section and notifies the verification result to the orderer, a person in charge of delivery of the commodity, and the order receiver.

16. A principal certification method by an agent, in which the agent entrusted by a certified person performs principal certification to the certified person, wherein

the certified person inputs first certified person biometric information for identifying the certified person himself/herself to a certificate terminal,

the certificate terminal sends the first certified person biometric information to a dealer who needs the principal certification result of the certified person via a network,

when the certified person entrusts the agent, the certified person inputs second certified person biometric information for identifying the certified person himself/herself to the certificate terminal, and the agent inputs first agent biometric information for identifying the agent himself/herself to the certificate terminal,

the certificate terminal holds the second certified person biometric information and the first agent biometric information in a coordinated manner,

the first certified person biometric information sent to the dealer is input to the certificate terminal at the time of principal certification to the certified person, and the agent inputs second agent biometric information for identifying the agent himself/herself to the certificate terminal, and

the certificate terminal verifies the second agent biometric information with the first agent biometric information held in the certificate terminal, and verifies the first certified person biometric information, which has been input, with the second certified person biometric information held in the certificate terminal when the agent biometric information match to perform principal certification to the certified person.