COLLECTIVE SUSPENSION/SETTLEMENT REPRESENTATION PROCESSING SERVER DEVICE AND PROGRAM

• US 20110131138A1
• Filed: 02/09/2009
• Published: 06/02/2011
• Est. Priority Date: 08/07/2008
• Status: Abandoned Application

• Current Assignee: ICON PLC
• Original Assignee: ICON PLC
• Inventors: Tsuchiya, Toshiko
• Application Number:
  US13/057,463
• Publication Number:
  US 20110131138A1
• Time in Patent Office: Days
• US Class Current: 705/71
• CPC Class Codes: G06Q 20/354 Card activation or deactivation
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/407 Cancellation of a transaction
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

Provided is a collective suspension processing server device, collective suspension representation processing server device, settlement representation processing server device, method, and program, wherein there is no chance that the encryption key leaks. Also provided is the implementation of preventing the leakage of any piece of information under management. The collective suspension processing server device, collective suspension representation processing server device, settlement representation processing server device, method, and program does not hold the encryption key and the decryption key which are used to encrypt users'"'"' card information in a management database, but instead, dynamically generates the encryption key and the decryption key. Regarding the common key which is used in encryption, the common key is generated and encrypted for each authentication information table without destructing the rank order of strings of characters and numbers which constitute the authentication information, and encrypted strings of characters and numbers are searched using the common key generated and encrypted for each authentication information table. The decryption key which is used to decrypt the encrypted card information is unique to each user.

Claims

1. A terminal device connected to the collective suspension processing server device, comprising:

a common key processing unit which generates a common encryption key used for encryption and a common decryption key used for decryption, by using an input unit which executes an input operation for inputting an electronic information based on a user'"'"'s operation of the terminal device, a storage unit which stores the electronic information, a display unit which displays the electronic information, a reception unit which receives the electronic information, a user authorization information input from the input unit based on the user'"'"'s input operation and a user identification information received from the storage unit,

a key generation processing unit which receives identification information stored in the storage unit in addition to the user authorization information input from the input unit based on the user'"'"'s input operation and the monetary information corresponding to the information of the bank account and credit card owned by the user, and automatically generates a pair of the encryption key for encryption and the decryption key for decryption based on the monetary information, the authorization information and the identification information,

an encryption processing unit which receives letters and numerals used for an encryption from the common key processing unit when the user authorization information for registration is input from the input unit, generates the encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the user authorization information, acquires the user identification information from the storage unit of the terminal device, and generates the encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the user identification information,

a storage unit which stores the encrypted authorization information and the encrypted identification information generated by the encryption processing unit of the terminal device, a decryption common key information for decrypting the encrypted authorization information and the encrypted identification information, the decryption key generated by the key generation processing unit, the encrypted monetary information, the encrypted authorization information and the encrypted identification information with relating each other,

a transmission unit which transmits a decryption common key information for decrypting the encrypted authorization information and the encrypted identification information stored in the storage unit of the terminal device, the decryption key generated by the key generation processing unit, the encrypted monetary information, encrypted authorization information and the encrypted identification information,

a storage unit which stores an electronic information transmitted from the terminal device to the collective suspension processing server device,

a decryption processing unit which reads the encrypted monetary information and the decryption key stored in the storage unit of the terminal device, and decrypts the monetary information,

a reception unit which receives the decryption common key information for decrypting the encrypted authorization information and the encrypted identification information related to the selected monetary information, the decryption key generated by the key generation processing unit, the encrypted monetary information, the encrypted authorization information and the encryption identification information, when the monetary information desired to be suspended is selected from among the decrypted monetary information displayed on the display unit of the terminal device, and the decryption common key information, the decryption key, the encrypted monetary information, the encrypted authorization information and the encrypted identification information are acquired from the storage unit and sent to the collective suspension processing server device,

an authorization unit which confirms whether the received encrypted authorization information is registered,

an encryption processing unit which checks the existence or nonexistence of an information completely identical to the encrypted sequence of letters and numerals of the encrypted authorization information and the encrypted identification information registered in the storage unit of the collective suspension processing server device, based on the encrypted sequence of letters and numerals of the encrypted authorization information and the encrypted identification information received from the terminal device,

a decryption processing unit which decrypts the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals, the encrypted monetary information received from the terminal device and the decryption key for decryption, by using the decryption common key,

a transmission unit which transmits a monetary information outgoing command for suspension to the specified monetary facilities received from the terminal device.

3. A monetary account suspension processing system comprising:

the collective suspension representation processing server device according to claim 1,

a monetary facility server device which executes a processing for receiving an information related to the user, an encrypted monetary information for suspension and the decryption key from the terminal device, and for suspending an usage of the encrypted monetary information.

4. The collective suspension processing server device according to claim 1, comprising a monetary facility server device for suspending a use of the encrypted monetary information.

2. A collective suspension processing method of a terminal device connected to the collective suspension processing server device, comprising:

a common key processing step which generates a common encryption key used for encryption and a common decryption key used for decryption, by using an input unit which executes an input operation for inputting an electronic information based on a user'"'"'s operation of the terminal device, a storage unit which stores the electronic information, a display unit which displays the electronic information, a reception unit which receives the electronic information, a user authorization information input from the input unit based on the user'"'"'s input operation and a user identification information received from the storage unit,

a key generation processing step which receives identification information for identifying the user stored in the storage unit in addition to the user authorization information input from the input unit based on the user'"'"'s input operation and the monetary information corresponding to the information of the bank account and credit card owned by the user, and automatically generates a pair of the encryption key for encryption and the decryption key for decryption based on the monetary information, the authorization information and the identification information,

an encryption processing step which receives letters and numerals used for an encryption from the common key processing unit when the user authorization information for registration is input from the input unit, generates the encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the user authorization information, acquires the user identification information from the storage unit of the terminal device, and generates the encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the user identification information,

a storage step which stores the encrypted authorization information and the encrypted identification information generated by the encryption processing unit of the terminal device, a decryption common key information for decrypting the encrypted authorization information and the encrypted identification information, the decryption key generated by the key generation processing unit, the encrypted monetary information, the encrypted authorization information and the encrypted identification information with relating each other,

a transmission step which transmits a decryption common key information for decrypting the encrypted authorization information and the encrypted identification information stored in the storage unit of the terminal device, the decryption key generated by the key generation processing unit, the encrypted monetary information, encrypted authorization information and the encrypted identification information,

a storage step which stores an electronic information transmitted from the terminal device to the collective suspension processing server device,

a decryption processing step which reads the encrypted monetary information and the decryption key stored in the storage unit of the terminal device, and decrypts the monetary information,

a receiving step which receives the decryption common key information for decrypting the encrypted authorization information and the encrypted identification information related to the selected monetary information, the decryption key generated by the key generation processing unit, the encrypted monetary information, the encrypted authorization information and the encrypted identification information, when the monetary information desired to be suspended is selected from among the decrypted monetary information displayed on the display unit of the terminal device, and the decryption common key information, the decryption key, the encrypted monetary information, the encrypted authorization information and the encrypted identification information are acquired from the storage unit and sent to the collective suspension processing server device,

an authorization step which confirms whether the received encrypted authorization information is registered,

an encryption processing step which checks the existence or nonexistence of an information completely identical to the encrypted sequence of letters and numerals of the encrypted authorization information and the encrypted identification information registered in the storage unit of the collective suspension processing server device, based on the encrypted sequence of letters and numerals of the encrypted authorization information and the encrypted identification information received from the terminal device,

a decryption processing step which decrypts the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals, the encrypted monetary information received from the terminal device and the decryption key for decryption, by using the decryption common key,

a transmission step which transmits a monetary information outgoing command for suspension to the specified monetary facilities received from the terminal device.

5. A server device connected to a terminal device via a network, comprising:

a common key processing unit which acquires a user authorization information and a user monetary information for registration input by a user'"'"'s input operation from an input unit of the terminal device and an identification information for identifying a user stored in the storage unit of the terminal device, and provides letters and numerals used for an encryption of the user authorization information and the user identification information, those are sent from a transmission unit of the terminal device and received by the collective suspension representation processing server device, by each field unit,

an encryption unit which generates an encrypted authorization information and an encrypted identification information, each of information has an encrypted sequence of letters and numerals, so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

a key generation processing unit which dynamically generates a first key using the encrypted authorization information and the encrypted identification information encrypted by the encryption processing unit, dynamically generates a second key using random numerals and letters received from the key generation processing unit of the collective suspension representation processing server device, dynamically generates a third key using the first and second keys and generates an encrypted monetary information for settlement processing using the user monetary information and the third key,

a transmission unit which transmits the second key and the encrypted monetary information for settlement processing generated by the key generation processing unit from the transmission unit of the collective suspension representation processing server device to the terminal device,

a storage unit of the terminal device which stores a received information,

a decryption processing unit which;

acquires the monetary information for encryption processing, the authorization information and the identification information to be suspended based on a monetary information outgoing command operation corresponding to suspension using a display unit of the terminal device, sending them from a transmission unit of the terminal device,

generates an encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals for encrypting by each field unit into a sequence of letters and numerals of the information by the encryption processing unit of the collective suspension representation processing server device,

generates a first key for reading out and decrypting the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals of the encrypted authorization and the encrypted identification information stored in the storage unit, and

decrypts the encrypted authorization information and the encrypted identification information,

a key generation processing unit which generates a third key using a first key generated by the decryption processing unit for decryption and a second key sent from the terminal device,

a decryption processing unit which decrypts an encrypted monetary information for settlement processing using the third key,

a transmission unit which transmits a monetary information outgoing command for suspension to the monetary facility.

6. A server device connected to a terminal device via a network, comprising:

a common key processing step which acquires a user authorization information and a user monetary information for registration input by a user'"'"'s input operation from an input unit of the terminal device and an identification information for identifying a user stored in the storage unit of the terminal device, and provides letters and numerals used for an encryption of the user authorization information and the user identification information, those are sent from a transmission unit of the terminal device and received by the reception unit of the collective suspension representation processing server device, by each field unit,

an encryption step which generates an encrypted authorization information and an encrypted identification information, each of information has an encrypted sequence of letters and numerals, so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

a key generation processing step which dynamically generates a first key using the encrypted authorization information and the encrypted identification information encrypted by the encryption processing unit, dynamically generates a second key using random numerals and letters by the key generation processing unit of the collective suspension representation processing server device, dynamically generates a third key using the first and second keys and generates an encrypted monetary information for settlement processing using the user monetary information and the third key,

a transmission step which transmits the second key and the encrypted monetary information for settlement processing generated by the key generation processing unit from the transmission unit of the collective suspension representation processing server device to the terminal device,

a storage unit of the terminal device which stores a received information,

a decryption processing step which;

acquires the monetary information for encryption processing, the authorization information and the identification information to be suspended based on a monetary information outgoing command operation corresponding to suspension using a display unit of the terminal device, sending them from a transmission unit of the terminal device,

generates an encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals for encrypting by each field unit into a sequence of letters and numerals of the information by the encryption processing unit of the collective suspension representation processing server device,

generates a first key for reading out and decrypting the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals of the encrypted authorization and the encrypted identification information stored in the storage unit, and

decrypts the encrypted authorization information and the encrypted identification information,

a key generation processing step which generates a third key using a first key generated by the decryption processing unit for decryption and a second key sent from the terminal device,

a decryption processing step which decrypts an encrypted monetary information for settlement processing using the third key,

a transmission step which transmits a monetary information outgoing command for the suspension to the monetary facility.

7. A server device connected to a terminal device via a network, comprising:

a common key processing unit which acquires a user authorization information and a user credit card information for registration input from an input unit of the terminal device based on a user'"'"'s input operation, an identification information for identifying the user, the authorization information and the user credit card information stored in a storage unit of the terminal device, each information is sent from a transmission unit of the terminal device, and provides letters and numerals for encrypting the user authorization information and the user identification information received in the settlement representation processing server device by each field unit,

an encryption processing unit which generates an encrypted authorization information and an encrypted identification information, each of information has an encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

a key generation processing unit which dynamically generates a first key using the encrypted authorization information and the encrypted identification information encrypted by the encryption processing unit, dynamically generates a second key using random numerals and letters received from the key generation processing unit of the collective suspension representation processing server device, dynamically generates a third key using the first and second keys and generates an encrypted monetary information for settlement processing using the user credit card information and the third key,

a transmission unit which transmits the second key and the encrypted user credit card information for settlement processing generated by the key generation processing unit from the transmission unit of the collective suspension representation processing server device to the terminal device,

a storage unit of the terminal device which stores the received information,

a transmission unit which reads out the user authorization information, the user identification information and the user credit card information, and transmits them to the reception unit of the settlement representation processing server, when an operation for requesting a product desired to be purchased is executed using the input unit of the terminal device,

a decryption processing unit which;

being provided with letters and numerals for encrypting a user authorization information and a user identification information received by the reception unit of the settlement representation processing server device by each field unit,

searches information from among the encrypted authorization information and the encrypted identification information stored as the information for registration in the storage unit of the settlement representation processing server device, the searched information are completely identical to the encrypted authorization information and the encrypted identification information generated by an encryption processing unit,

decrypts only an electronic mail address contained in the encrypted authorization information stored by each field unit and makes a transmission unit to send a settlement execution processing confirmation notification toward the decrypted electronic mail address,

makes a display unit of the terminal device to display the settlement execution processing confirmation notification received by a reception unit of the terminal device,

makes the terminal device to acquire an encrypted credit card information for settlement processing, an authorization information, an identification information and a second key from the storage unit of the terminal device and send them using a transmission unit of the terminal device, when a confirming processing request operation is executed based on the contents displayed on the display unit,

makes the encryption processing unit to generate the encrypted sequences of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals for encrypting by each field unit into a sequence of letters and numerals of the user authorization information and the user identification information received by the settlement representation processing server device,

reads out the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals of the encrypted authorization information and the encrypted identification information stored in the storage unit, and generates a first key for decryption,

a key generation processing unit which generates a third key using a first key generated by the decryption processing unit for decryption and a second key sent from the terminal device,

a decryption processing unit which decrypts the encrypted credit card information for settlement processing sent from the terminal device using the third key,

a transmission unit which transmits the credit card information to a monetary facility to execute a settlement processing with a monetary information.

9. The monetary facility settlement processing system according to claim 7, comprising a server device which receives the settlement request processing information, the decryption key, the identification information and the authorization information from the terminal device and executes a settlement request processing.

8. A settlement representation processing method using server device connected to a terminal device via a network, comprising:

a common key processing step which acquires a user authorization information and a user credit card information for registration input from an input unit of the terminal device based on a user'"'"'s input operation, an identification information for identifying the user, the authorization information and the user credit card information stored in a storage unit of the terminal device, each information is sent from a transmission unit of the terminal device, and provides letters and numerals for encrypting the user authorization information and the user identification information received by the reception unit of the settlement representation processing server device by each field unit,

an encryption processing step which generates an encrypted authorization information and an encrypted identification information, each of information has an encrypted sequence of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

a key generation processing step which dynamically generates a first key using the encrypted authorization information and the encrypted identification information encrypted by the encryption processing unit, dynamically generates a second key using random numerals and letters received from the key generation processing unit of the collective suspension representation processing server device, dynamically generates a third key using the first and second keys and generates an encrypted credit card information for settlement processing using the user credit card information and the third key,

a transmission step which transmits the second key and the encrypted user credit card information for settlement processing generated by the key generation processing unit from the transmission unit of the collective suspension representation processing server device to the terminal device,

a storage step of the terminal device which stores the received information,

a transmission step which reads out the user authorization information, the user identification information and the user credit card information, and transmits them to the reception unit of the settlement representation processing server, when an operation for requesting a product desired to be purchased is executed using the input unit of the terminal device,

a decryption processing step which;

being provided with letters and numerals for encrypting a user authorization information and a user identification information received by the reception unit of the settlement representation processing server device by each field unit,

searches information from among the encrypted authorization information and the encrypted identification information stored as the information for registration in the storage unit of the settlement representation processing server device, the searched information are completely identical to the encrypted authorization information and the encrypted identification information generated by an encryption processing unit,

decrypts only an electronic mail address contained in the encrypted authorization information stored by each field unit and makes a transmission unit to send a settlement execution processing confirmation notification toward the decrypted electronic mail address,

makes a display unit of the terminal device to display the settlement execution processing confirmation notification received by a reception unit of the terminal device,

makes the terminal device to acquire an encrypted credit card information for settlement processing, an authorization information, an identification information and a second key from the storage unit of the terminal device and send them using a transmission unit of the terminal device, when a confirming processing request operation is executed based on the contents displayed on the display unit,

makes the encryption processing unit to generate encrypted sequences of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals for encrypting by each field unit into a sequence of letters and numerals of the user authorization information and the user identification information received by the settlement representation processing server device,

reads out the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals to the encrypted authorization information and the encrypted identification information stored in the storage unit, and generates a first key for decryption,

makes the encryption processing unit to generate the encrypted sequences of letters and numerals so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence by putting letters and numerals for encrypting by each field unit into a sequence of letters and numerals of the user authorization information and the user identification information received by the settlement representation processing server device,

reads out the encrypted authorization information and the encrypted identification information completely identical to the encrypted sequence of letters and numerals to the encrypted authorization information and the encrypted identification information stored in the storage unit, and decrypt them,

a key generation processing step which generates a third key using a first key generated by the decryption processing unit for decryption and a second key sent from the terminal device,

a decryption processing step which decrypts the encrypted credit card information for settlement processing sent from the terminal device using the third key,

a transmission step which transmits the credit card information to a monetary facility to execute a settlement processing with a monetary information.

10. A settlement request information providing device in which a terminal device and a settlement representation processing server device are connected via Internet, comprising:

a reception unit which receives a user authorization information and a user credit card information for registration input from an input unit of the terminal device based on a user'"'"'s input operation, an identification information for identifying the user stored in a storage unit of the terminal device, transmitted from a transmission unit toward the settlement representation processing server device,

a common key processing unit which provides letters and numerals for encrypting the user authorization information, user identification information and the credit card information received by the reception unit, by each field unit,

an encryption processing unit which generates an encrypted authorization information, an encrypted identification information and an encrypted credit card information, each of information has an encrypted sequence of letters and numerals that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence, by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

an encryption processing unit which makes the common key processing unit to generate letters and numerals for encrypting the credit card information and the authorization information by each field unit, and dynamically generates encrypted sequence of letters and numerals of an encrypted credit card information and an encrypted authorization information so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence, by putting the letters and numerals into the credit card information and the authorization information,

a control processing unit which checks whether the encrypted credit card information stored in the storage unit of the settlement representation processing server device and the encrypted sequence of letters and numerals of the encrypted authorization information are completely identical, and stops the processing if they are not identical,

a transmission unit which transmits a settlement processing suspension command to the product settlement request information providing device of external.

12. The settlement request information providing device according to claim 10, comprises a monetary facility server device which executes a credit card settlement.

13. The settlement request information providing device according to claim 10, wherein;

the transaction unit of the settlement representation processing server device transmits the encrypted monetary information,

the monetary facility server device receives the encrypted monetary information via the network,

the transmission unit of the user terminal device transmits the second key for decrypting the encrypted monetary information and the encrypted monetary information for settlement processing directly to the monetary facility server device, and

the monetary facility server executes the settlement processing.

11. A settlement request information providing method of a device in which a terminal device and a settlement representation processing server device are connected via Internet, comprising:

a receiving step which receives a user authorization information and a user credit card information for registration input from an input unit of the terminal device based on a user'"'"'s input operation, an identification information for identifying the user stored in a storage unit of the terminal device, transmitted from a transmission unit toward the settlement representation processing server device,

a common key processing step which provides letters and numerals for encrypting the user authorization information, user identification information and the credit card information received by the reception unit, by each field unit,

an encryption processing step which generates an encrypted authorization information, an encrypted identification information and an encrypted credit card information, each of information has an encrypted sequence of letters and numerals that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence, by putting letters and numerals of common encryption key into a sequence of letters and numerals of the information,

an encryption processing step which makes the common key processing unit to generate letters and numerals for encrypting the credit card information and the authorization information by each field unit, and dynamically generates the encrypted sequence of letters and numerals of an encrypted credit card information and an encrypted authorization information so that the order of source sequence is not mixed up and the number of letters and numerals is equal to or less than quintuple of the source sequence, by putting the letters and numerals into the credit card information and the authorization information,

a control processing step which checks whether the encrypted credit card information stored in the storage unit of the settlement representation processing server device and the encrypted sequence of letters and numerals of the encrypted authorization information are completely identical, and stops the processing if they are not identical,

a transmission step which transmits a settlement processing suspension command to the product settlement request information providing device of external.