Electronic shopping method, electronic shopping system and document authenticating method relating thereto

• US 5,995,626 A
• Filed: 04/02/1998
• Issued: 11/30/1999
• Est. Priority Date: 08/04/1995
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Miyazaki, Satoshi, Nishioka, Mototsugu
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US09/053,490
• Time in Patent Office: 607 Days
• Field of Search: 705/26, 705/27, 705/35, 705/38, 705/39, 705/40, 705/41, 705/42, 705/43, 705/44, 380/23, 380/24, 380/25, 380/49, 380/50, 380/59, 380/30, 380/9, 380/21, 380/29, 380/46, 235/379, 235/380
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/00 Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 : Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3234 : involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3236 : using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 : involving digital signatures

Abstract

An electronic shopping method is provided by both an apparatus 10 and an apparatus 30 to hold a key K(A, C) in common, and both the apparatus 30 and an apparatus 40 to hold a key K(B, C) in common. The apparatus 10 transmits a cipher text C1 which is obtained by enciphering a written order P of the products to be purchased using a key K, a cipher text C2 which is obtained by enciphering the key K using the key K(A, C), and authentication information C3 relating to a part P2 of the written order P to the apparatus 30 and the like. The apparatus 40 deciphers the key K on the basis of the cipher text C2, transmits a cipher text C4 which is obtained by enciphering the key K using the key K(B, C) to the apparatus 30. The apparatus 30 deciphers the key K on the basis of the cipher text C4, deciphers the written order P on the basis of the cipher text C1, authenticates the part P2 by referring the authentication information C3, and transmits a fifth cipher text C5 which is obtained by enciphering the authentication information C3 and the part P2 using the key K(B, C) to the apparatus 40. The apparatus 40 deciphers the part P2, and authenticates the part P2 by referring to the authentication information C3.

Claims

1. A document authenticating method of authenticating an electronic document for use in an electronic shopping system comprising a user site, a retail store site, and a financial institution site on a communication network, said method comprising the steps of:

producing said electronic document indicating a written order from the user site for transmission via said communication network, said electronic document containing information relating to a purchase instruction for at least one product and information relating to a payment instruction of said at least one product;

authenticating at least said information relating to the purchase instruction of said at least one product received from said communication network at the retail store site by a first authenticator; and

authenticating said information relating to the payment instruction of said at least one product received from said communication network at the financial institution site by a second authenticator, wherein said information relating to the purchase instruction of said at least one product is concealed from the financial institution site.

2. A method according to claim 1, wherein said information relating to the purchase instruction corresponds to contents of said written order given to the retail store site, and said information relating to the payment instruction corresponds to at least a credit card number and a sum of purchased products to be sent to the financial institution site.

3. A document authenticating system, comprising:

a document producer which produces a document containing first and second parts, which uses a hash value operated by a one way function on the document to determine a digital signature for, the first and second parts of the document, and which transmits the digital signature and the document over a communication network;

a first document authenticator which authenticates a content of the first part of the document by verifying the digital signature received from said communication network; and

a second document authenticator which authenticates a content of the second part of the document by verifying the digital signal using the hash value received from said communication network.

4. A document authenticating system according to claim 3, wherein said hash value received by the second document authenticator is produced by operating said one way function on the first part of the document authenticated by the first document authenticator.

5. A document authenticating system according to claim 3, wherein said first part of the document corresponds to a purchase instruction of a purchased product, and said second part of the document corresponds to a payment instruction of said purchased product.

6. A document authenticating method for use in an electronic shopping system comprising a user site, a retail store site, and a financial institution site connected to a communication network, said method comprising the steps of:

producing, at the user site for transmission via said communication network, a document containing first and second parts, calculating a hash value for the document containing said first and second parts using a one way hash function, and determining a digital signature for the hash value;

authenticating, at the retail store site, a content of the first part of the document by verifying the digital signature received from said communication network; and

authenticating, at the financial institution site, a content of the second part of the document by verifying the digital signal using the hash value received from said communication network.

7. A document authenticating method according to claim 6, wherein said hash value received at the financial institution site, is produced by operating said one way function on the first part of the document authenticated at the retail store site.

8. A document authenticating method according to claim 6, wherein said first part of the document corresponds to a purchase instruction of a purchased product, and said second part of the document corresponds to a payment instruction of said purchased product.

9. An electronic shopping system, comprising:

a first apparatus, located at a user site, for producing an electronic document containing first and second parts, calculating a hash value for the document containing said first and second parts using a one way hash function for determining a digital signature, and transmitting the digital signature and the document via a first communication link,

a second apparatus, located at a retail store site, for authenticating a content of the first part of the document by verifying the digital signature received from said first communication link, and for supplying the digital signature, the hash value, and the second part of the document via a second communication link; and

a third apparatus, located at a financial institution site, for authenticating a content of the second part of the document by verifying the digital signature using the hash value received from said second communication network.

10. An electronic shopping system according to claim 9, wherein said hash value received at the financial institution site, is produced by operating said one way function on the first part of the document authenticated at the retail store site.

11. An electronic shopping system according to claim 9, wherein said first part of the document corresponds to a purchase instruction of a purchased product, and said second part of the document corresponds to a payment instruction of said purchased product.

12. A document authenticating method for use in an electronic shopping system, said method comprising the steps of:

receiving, at a retail store site, an electronic written order containing first and second parts and a digital signature for the first and second parts of the written order produced from a user site via a first communication link, said digital signature being determined based on a hash value for the written order containing the first and second parts using a one way hash function;

authenticating, at said retail store site, a content of the first part of the written order by verifying the digital signature received from said user site via said first communication link, and supplying the digital signature, the hash value, and the second part of the written order via a second communication link; and

authenticating, at a financial institution site, a content of the second part of the written order by verifying the digital signature using the hash value received from said retail store site via said second communication link.

13. An electronic authenticating method according to claim 12, wherein said hash value received at the financial institution site, is produced by operating a one way function on the first part of the written order authenticated at the retail store site.

14. An electronic authenticating method according to claim 13, wherein said first part of the written order corresponds to a purchase instruction of a purchased product, and said second part of the written order corresponds to a payment instruction of said purchased product.

15. A document authenticating method of authenticating content of a payment instruction by a financial institution, comprising the steps of:

producing an order instruction and a payment instruction by a user and determining a digital signature for both instructions; and

operating a one way function on the order instruction to obtain a hash value and receiving the payment instruction to verify the digital signature using said hash value.

16. A document signature method, comprising:

producing an electronic document containing first and second parts;

calculating a hash value for the document containing said first and second parts using a one way hash function;

determining a digital signature for the document using said hash value; and

transmitting the document containing said first and second parts, the digital signature and the hash value over a communication network for subsequent authentication of different parts of the document by different sites based on the digital signature and the hash value.

17. A document signature method according to claim 16, wherein said first part of the document corresponds to a purchase instruction of a purchased product, and said second part of the document corresponds to a payment instruction of said purchased product.

18. A document signature system, comprising:

a smart card unit which receives an insertion of a smart card;

a document producer which produces an electronic document containing first and second parts;

a hash calculator which calculates a hash value for the document containing said first and second parts using a one way hash function, and which enables said smart card to generate a digital signature for the document using said hash value; and

a communication unit which transmits the document containing said first and second parts, the digital signature, and the hash value over a communication network for subsequent document authentication without clarifying a content of the second part of the document.

19. A document signature system according to claim 18, wherein said first part of the written order corresponds to a purchase instruction of a purchased product, and said second part of the written order corresponds to a payment instruction of said purchased product.

20. An authentication requesting method, comprising the steps of:

producing an electronic document containing first and second parts;

calculating a hash value for the document containing said first and second parts using a one way hash function;

determining a digital signature for the document using said hash value; and

transferring the document containing said first and second parts, the digital signature, and the hash value, via a communication network, for subsequent document authentication without clarifying a content of the second part of the document.

21. An authentication requesting method according to claim 20, wherein said first part of the written order corresponds to a purchase instruction of a purchased product, and said second part of the written order corresponds to a payment instruction of said purchased product.