Electronic cash system based on a blind certificate

• US 6,299,062 B1
• Filed: 11/04/1998
• Issued: 10/09/2001
• Est. Priority Date: 08/18/1998
• Status: Expired due to Term

• Current Assignee: Mercury Kingdom Assets Limited
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Hwang, Seong Oun
• Primary Examiner(s): Frech, Karl D.
• Assistant Examiner(s): Taylor, Larry D
• Application Number:
  US09/186,207
• Time in Patent Office: 1,070 Days
• Field of Search: 235/379-380, 235/381, 902/2, 902/7, 902/22, 902/26, 902/27-28, 340/825.31, 340/825.34, 380/30, 380/23, 380/24, 380/49, 380/25, 380/50, 705/41-44, 705/69
• US Class Current: 235/379
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An electronic cash system for performing an electronic transaction using an electronic cash, comprises at least one user apparatus each capable of using the electronic cash; an authentication center apparatus, for receiving a user identity information, a corresponding public key along with a certificate issue request from one of the user apparatus and for issuing a certificate for the user apparatus'"'"'s public key after confirming the identity of the corresponding user; at least one shop apparatus for confirming the identification of the user based on the user apparatus'"'"'s public key, the corresponding certificate, for producing a challenge value unique to respective transaction using an electronic cash received from the user apparatus and then for confirming the validity of the electronic cash based on a response value from the user apparatus in response to the challenge value, so as to perform an electronic cash transaction with the user apparatus; and at least one bank apparatus for opening an anonymous account to one of the user apparatus and issuing an electronic cash according to the user apparatus'"'"'s request after confirming the identification of the user based on the user apparatus'"'"'s public key and the corresponding certificate, and for confirming the validity of an electronic cash received from one of the shop apparatus or the user apparatus so as to credit a corresponding account.

Claims

1. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein said certificate issuing step comprises;

a substep wherein the user apparatus generates a secret key and a public key, based on a discrete logarithm signature scheme;

a substep wherein the user apparatus transmits the public key, establishing an identity to the authentication center apparatus;

a substep wherein the authentication center generates the certificate for the public key of the user apparatus, using a secret key of the authentication center key, the public key of the user apparatus and identity-related information of the authentication center apparatus;

a substep wherein the authentication center apparatus transmits the certificate to the user apparatus; and

a substep wherein the user apparatus confirms the validity of the certificate using the public key of the authentication center apparatus, the identity-related information of the authentication center apparatus and the public key of the user apparatus,

wherein said substep for generating the certificate is performed based on the following equation,

2. The electronic cash transaction method in accordance with claim 1, wherein said substep for generating the public key of the user apparatus is performed based on the following equation:

3. The electronic cash transaction method in accordance with claim 1, wherein said substep for confirming the validity of the certificate is made by verifying the following equation,

4. The electronic cash transaction method in accordance with claim 1, wherein said account opening step comprises:

a substep wherein the user apparatus transmits the public key of the user apparatus and the corresponding certificate to the bank apparatus;

a substep wherein the bank apparatus confirms the validity of the public key of the user apparatus and the corresponding certificate; and

a substep wherein, if the public key of the user apparatus and the corresponding certificate are valid, the bank apparatus opens the account for the public key of the user apparatus.

5. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein said certificate issuing step comprises;

a substep wherein the user apparatus generates a secret key and a public key, based on a discrete logarithm signature scheme;

a substep wherein the user apparatus transmits the public key, establishing an identity to the authentication center apparatus;

a substep wherein the authentication center generates the certificate for the public key of the user apparatus, using a secret key of the authentication center key, the public key of the user apparatus and identity-related information of the authentication center apparatus;

a substep wherein the authentication center apparatus transmits the certificate to the user apparatus; and

a substep wherein the user apparatus confirms the validity of the certificate using the public key of the authentication center apparatus, the identity-related information of the authentication center apparatus and the public key of the user apparatus,

wherein said substep for confirming the validity of the public key of the user apparatus and the corresponding certificate is preformed by verifying the following equation,

6. The electronic cash transaction method in accordance with claim 5, wherein said electronic cash withdrawal step comprises:

a substep wherein the user apparatus generates a random number of electronic cash and produces an image for the electronic cash random number;

a substep wherein the user apparatus generates a message (electronic cash candidate) for electronic cash withdrawal;

a substep wherein the user apparatus generates a signature of the user apparatus on the message;

a substep wherein the user apparatus transmits the message, the signature of the user apparatus, the public key of the user apparatus and the corresponding certificate;

a substep wherein the bank apparatus confirms the validity of the public key of the user apparatus and the corresponding certificate;

a substep wherein, if the public key of the user apparatus and the corresponding certificate are valid, the bank apparatus generates a signature of the bank apparatus on the message;

a substep wherein the bank apparatus transmits the message with signature of the bank apparatus to the user apparatus;

a substep wherein the user apparatus verifies a bank apparatus signed message from the bank apparatus; and

a substep wherein the user apparatus stores the bank apparatus signed message and the random number as an electronic cash.

7. The electronic cash transaction method in accordance with claim 6, wherein the bank apparatus debits the value of the withdrawn electronic cash for the account of the user apparatus.

8. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein said electronic cash withdrawal step comprises;

a substep wherein the user apparatus generates a random number of electronic cash and produces an image for the electronic cash random number;

a substep wherein the user apparatus generates a message (electronic cash candidate) for electronic cash withdrawal;

a substep wherein the user apparatus generates a signature of the user apparatus on the message;

a substep wherein the user apparatus transmits the message, the signature of the user apparatus, the public key of the user apparatus and the corresponding certificate;

a substep wherein the bank apparatus confirms the validity of the public key of the user apparatus and the corresponding certificate;

a substep wherein, if the public key of the user apparatus and the corresponding certificate are valid, the bank apparatus generates a signature of the bank apparatus on the message;

a substep wherein the bank apparatus transmits the message with signature of the bank apparatus to the user apparatus;

a substep wherein the user apparatus verifies a bank apparatus signed message from the bank apparatus; and

a substep wherein the user apparatus stores the bank apparatus signed message and the random number as an electronic cash,

wherein said substep for confirming the validity of the public key of the user apparatus and the corresponding certificate is preformed by verifying the following equation,

9. The electronic cash transaction method in accordance with claim 8, wherein said random number r is one randomly selected from {1, . . . , q} and the image r′

of the random number is generated according to the following equation;

10. The electronic cash transaction method in accordance with claim 8, wherein said substep for generating a message for electronic cash withdrawal is performed in accordance with following equation,

11. The electronic cash transaction method in accordance with claim 8, wherein the substep for generating a signature of the bank apparatus on the message c′

is performed by generating a bank apparatus signed message c in accordance with following equation,

12. The electronic cash transaction method in accordance with claim 8, when the user apparatus is served as a payer and an opposite party of a commercial transaction is served as a payee, wherein said electronic cash payment step comprises:

a substep wherein the payer transmits an electronic cash message, a public key and corresponding certificate, to the payee;

a substep wherein the payee confirms the validity of the payer'"'"'s public key and the corresponding certificate;

a substep wherein the payee transmits a payee'"'"'s account number at the bank apparatus and a transaction time, to the payer;

a substep wherein the payee produces a challenge value based on the electronic cash message, the payee'"'"'s account number at the bank apparatus and the transaction time;

a substep wherein the payer produces the challenge value based on the electronic cash message, the payee'"'"'s account number at the bank apparatus and the transaction time;

a substep wherein the payer computes a response value for the challenge value using a random number related to the electronic cash, the challenge value and a secret key of the payer;

a substep wherein the payer transmits the response value to the payee;

a substep wherein the payee confirms the validity of the response value; and

a substep wherein, if the response value is valid, the payee accepts the electronic cash.

13. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein, when the user apparatus is served as a payer and an opposite party of a commercial transaction is served as a payee, said electronic cash payment step comprises;

a substep wherein the payer transmits an electronic cash message, a public key and corresponding certificate, to the payee;

a substep wherein the payee confirms the validity of the payer'"'"'s public key and the corresponding certificate;

a substep wherein the payee transmits a payee'"'"'s account number at the bank apparatus and a transaction time, to the payer;

a substep wherein the payee produces a challenge value based on the electronic cash message, the payee'"'"'s account number at the bank apparatus and the transaction time;

a substep wherein the payer produces the challenge value based on the electronic cash message, the payee'"'"'s account number at the bank apparatus and the transaction time;

a substep wherein the payer computes a response value for the challenge value using a random number related to the electronic cash, the challenge value and a secret key of the payer;

a substep wherein the payer transmits the response value to the payee;

a substep wherein the payee confirms the validity of the response value; and

a substep wherein, if the response value is valid, the payee accepts the electronic cash,

wherein said substep for the payee'"'"'s confirming the validity of the payer'"'"'s public key and the corresponding certificate, is performed by verifying the following equation,

14. The electronic cash transaction method in accordance with claim 13, wherein said substep for the payee'"'"'s producing the challenge value d based on the electronic cash message c, the payee'"'"'s account number A_S and the transaction time is performed in accordance with following equation,

15. The electronic cash transaction method in accordance with claim 13, wherein said substep for the payer'"'"'s computing the response value z for the challenge value d using a random number r related to the electronic cash, the challenge value d and a secret key of the payer s_U is performed in accordance with following equation:

 

Z=(r+s_Ud)mod q,

wherein q is dividable by p−

1 and p is a prime number.

16. The electronic cash transaction method in accordance with claim 13, wherein said substep for the payee'"'"'s confirming the validity of the response value is preformed by verifying the following equation:

17. The electronic cash transaction method in accordance with claim 13, wherein said payee is a shop apparatus.

18. The electronic cash transaction method in accordance with claim 13, further comprising an electronic cash settlement step wherein a payee received the electronic cash provides a record related to the electronic cash transaction to the bank apparatus as to credit the value of the electronic cash to an account of the payee.

19. The electronic cash transaction method in accordance with claim 13, wherein, when the user apparatus is called as a payer, said electronic cash settlement step comprises:

a substep wherein the payee transmits an electronic cash message, a public key of the payer and a corresponding certificate, a challenge value, a transaction time, a payee'"'"'s account number and a response value, to the bank apparatus;

a substep wherein the bank apparatus confirms the validity of the payer'"'"'s public key and the corresponding certificate and the validity of the response value; and

a substep wherein the bank apparatus checks whether the electronic cash is stored in a deposit database of the bank apparatus.

20. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein said substep for the bank apparatus'"'"'s confirming the validity of the payer'"'"'s public key and the corresponding certificate is performed by verifying the following equation,

 

[Cert_U]mod n_CA=h(ID_CA∥

p_U)

where in Cert_U represents the certificate of the payer, ID_CA represents the identity-related information of the authentication center apparatus, p_U represents the public key of the payer, e_CA represents the public key of the authentication center apparatus, ncA represents a public modulus of the authentication center apparatus and h( ) represents a one-way function.

21. The electronic cash transaction method in accordance with claim 20, wherein said substep for the bank apparatus'"'"'s confirming the validity of the response value is performed by verifying the following equation:

22. The electronic cash transaction method in accordance with claim 20, wherein said electronic cash payment step is accomplished such that the electronic cash possessed by the user apparatus as the payer is divided and then some of the electronic case is used for payment.

23. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein said electronic cash payment step is accomplished such that the electronic cash possessed by the user apparatus as the payer is divided and then some of the electronic case is used for payment, and

wherein said electronic cash payment step comprises;

a substep wherein the payer selects a payment electronic cash random number r₁ and a remnant electronic cash random number r₂;

a substep wherein the payer generates images r₁′

, r₂′

for the payment electronic cash random number and the remnant electronic cash random number;

a substep wherein the payer produces an electronic cash message signature d based on the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value of the payment electronic cash A₁ and the remnant electronic cash random number image r₂ and generates an electronic cash message signature response value z based on the electronic cash message signature d, the secret key of the payer s_U and the electronic cash random number r;

a substep wherein the payer transmits the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the remnant electronic cash random number image r₂′

the electronic cash message signature d, the public key of the payer p_U and the corresponding certificate Cert_U to the payee;

a substep wherein the payee confirms the validity of the payer'"'"'s public key and the corresponding certificate;

a substep wherein the payee transmits a payee'"'"'s account number and the transaction time;

a substep wherein the payee produces a challenge value d₁ based on the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the account number A_S of the payee and the transaction time;

a substep wherein the payer computes a response value z₁ based on the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the account number A_S of the payee and the transaction time, the secret key s_U of the payer and the electronic cash random number r;

a substep wherein the payer transmits the response value to the payee;

a substep wherein the payee confirms the validity of the response value z₁; and

a substep wherein, if the response value is valid, the payee accepts the electronic cash.

24. The electronic cash transaction method in accordance with claim 23, wherein said substep for the payer'"'"'s generating images r₁′

, r₂′

for the payment electronic cash random number and the remnant electronic cash random number is performed in accordance with following equation

25. The electronic cash transaction method in accordance with claim 23, wherein said substep for the payer'"'"'s producing the electronic cash message signature d based on the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value of the payment electronic cash A₁ and the remnant electronic cash random number image r₂′

, and for generating the electronic cash message signature response value z based on the electronic cash message signature d, the secret key of the payer s_U and the electronic cash random number r, is performed in accordance with following equations,

26. The electronic cash transaction method in accordance with claim 23, wherein said substep for the payee'"'"'s confirming the validity of the payer'"'"'s public key and the corresponding certificate, is performed by verifying the following equation,

27. The electronic cash transaction method in accordance with the claim 23, wherein said substep for the payee'"'"'s producing the challenge value d₁ based on the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the account number A_S of the payee and the transaction time, is performed in accordance with the following equation,

28. The electronic cash transaction method in accordance with claim 23, wherein said substep for the payer'"'"'s computing the response value z₁ based on the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the account number A_S of the payee and the transaction time, the secret key s_U of the payer and the electronic cash random number r, comprises the substeps of;

generating the challenge value d₁ in accordance with d₁=h (r₁′

∥

A₁∥

As∥

time),

said h( ) representing a one-way function; and

producing the response value z₁ in accordance with z₁=(r+s_Ud₁) mod q, wherein q is dividable by p−

1 and p is a prime number.

29. The electronic cash transaction method in accordance with claim 23, wherein said substep for the payee'"'"'s confirming the validity of the response value z₁ is preformed by verifying the following equation:

30. The electronic cash transaction method in accordance with claim 23, further comprising a substep wherein the payer produces a medium value w₁ in accordance with w₁=g^z1p_U^d1 mod p,

wherein g represents a generator for the subgroup G(q) of Z*_p and q is an order of G(q), p being a prime numbers, r being randomly selected from a set {1, . . . , q}, q being dividable by p−

1 and Z*_p being a mathematical notation which indicates a set of {1, 2, 3 . . . , p−

1}.

31. The electronic cash transaction method in accordance with claim 30, further comprising a substep wherein the payer stores the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the remnant electronic cash random number image r₂′

, the challenge value d₁ and the medium value w₁.

32. The electronic cash transaction method in accordance with claim 30, further comprising:

a substep wherein the payer transmits the medium value w₁ to the payee; and

a substep wherein the payee stores the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the remnant electronic cash random number image r₂′

, the challenge value d₁ and the medium value w₁.

33. The electronic cash transaction method in accordance with claim 23, wherein the payer stores the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the remnant electronic cash random number image r₂′ and

the challenge value d₁.

34. The electronic cash transaction method in accordance with claim 23, wherein the payee stores the electronic cash message c, the electronic cash random number image r′

, the value A of the electronic cash, the payment electronic cash random number image r₁′

, the value A₁ of the payment electronic cash, the remnant electronic cash random number image r₂′ and

the challenge value d₁.

35. An electronic cash transaction method comprising:

a certificate issuing step wherein an authentication center apparatus different from a bank apparatus issues a certificate to an user apparatus;

an account opening step wherein the user apparatus acquires an account from the bank apparatus using the certificate, with identity of the user apparatus;

an electronic cash withdrawal step wherein the user apparatus withdraws an electronic cash endowed with a signature of the bank apparatus, from the account; and

an electronic cash payment step wherein the user apparatus uses the certificate and the electronic cash for payment of a specific commercial transaction in an off-line state with bank apparatus,

wherein there are two or more user apparatuses each performing said certificate issuing step and said account opening step and one of them is served as an assigner and another is served as an assignee, and said method further comprising an electronic cash transfer step wherein the assigner transfers an electronic cash to the assignee.

36. The electronic cash transaction method in accordance with claim 35, wherein said electronic cash transfer step comprises:

a substep wherein the assignee withdraws a vacant electronic cash c_U2,z from the bank apparatus;

a substep wherein the assigner transmits the electronic cash message c_U1, an assigner'"'"'s public key p_U1 and corresponding certificate Cert_U1, an electronic cash random number image w, to the assignee;

a substep wherein the assignee confirms the validity of the assigner'"'"'s public key p_U1 and the corresponding certificate Cert_U1;

a substep wherein the assignee confirms the validity of the received electronic cash message c_U1;

a substep wherein, if the assigner'"'"'s public key and the corresponding certificate, and the received electronic cash are valid, the assignee produces a challenge value d;

a substep wherein the assignee transmits the vacant electronic cash message c_U2,z, an assignee'"'"'s public key PU2 and corresponding certificate Cert_U2, a transaction time, and a vacant electronic cash random number image w*, to the assigner;

a substep wherein the assigner confirms the validity of the assignee'"'"'s public key and the corresponding certificate;

a substep wherein the assigner confirms the validity of the vacant electronic cash from the assignee;

a substep wherein the assigner computes a challenge value d based on the electronic cash message c_U1, the transaction time, the vacant electronic cash message c_U2,z;

a substep wherein the assigner produces a response value based on the challenge value d, an assigner'"'"'s secret key S_U1 and the electronic cash random number r;

a substep wherein the assigner transmits the response value to the assignee; and

a substep wherein the assignee confirms the response value.

37. The electronic cash transaction method in accordance with claim 36, wherein said substep wherein the assignee withdraws the vacant electronic cash from the bank apparatus comprises:

a substep for generating a random number for the vacant electronic cash;

a substep for generating an image for the vacant electronic cash random number;

a substep for producing a message for withdrawal of the vacant electronic cash;

a substep for generating a signature of the assignee on the message;

a substep wherein the assignee transmits the message, the assignee'"'"'s signature, the assignee'"'"'s public key and the corresponding certificate;

a substep wherein the bank apparatus confirms the validity of the assignee'"'"'s public key and the corresponding certificate;

a substep wherein the bank apparatus confirms the validity of the assignee'"'"'s signature;

a substep wherein the bank apparatus makes a bank apparatus signature on the message, if the assignee'"'"'s public key and the corresponding certificate, and the assignee'"'"'s signature are all valid;

a substep wherein the bank apparatus transmits the message given with the bank apparatus'"'"'s signature, to the assignee;

a substep wherein the assignee verifies a vacant electronic cash message having the bank apparatus'"'"'s signature, from the bank apparatus; and

a substep wherein the assignee stores the vacant electronic cash message having the bank apparatus'"'"'s signature along with the vacant random number, as vacant electronic cash.

38. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assignee'"'"'s confirming the validity of the assigner'"'"'s public key and the corresponding certificate, is performed by verifying the following equation,

39. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assignee'"'"'s confirming the validity of the received electronic cash message c_U1, is performed by verifying the following equation,

40. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assigner'"'"'s producing the challenge value d, is performed in accordance with

41. The electronic cash transaction method in accordance with claim 36, wherein said step for the assigner'"'"'s confirming the validity of the assignee'"'"'s public key and the corresponding certificate is performed by verifying the following equation,

42. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assigner'"'"'s confirming the validity of the assignee'"'"'s vacant electronic cash, is performed by verifying the following equation,

43. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assigner'"'"'s producing the challenge value based on the electronic cash message, the transaction time, the vacant electronic cash message, is performed in accordance with

44. The electronic cash transaction method in accordance with claim 43, wherein said substep for the assigner'"'"'s producing the response value for the challenge value using the challenge value, the assigner'"'"'s secret key, the electronic cash random number is performed in accordance with equation:

45. The electronic cash transaction method in accordance with claim 36, wherein said substep for the assignee'"'"'s confirming the validity of the response value comprises the substeps of:

producing a medium value w′

using the assigner'"'"'s public key p_U1, the challenge value d, the response value z in accordance with w′

=g^zp_U1^d mod p, wherein g represents a generator for the subgroup G(q) of Z*_p and h ( ) represents a one-way function; and

verifying that the equation c_U1^eB mod n_B=h(w∥

p_U1), using the medium value w′

, wherein e_B represents the public key of the bank apparatus, n_B represents a public modulus of the bank apparatus, p_U1 is the assigner'"'"'s public key and h ( ) represents a one-way function, Z*_p is a mathematical notation which indicates a set of {1, 2, 3, . . . , p−

1}, p indicates a prime number, g^z represents the multiplication of g as many as r times and z represents a response value.

46. The electronic cash transaction method in accordance with claim 35, further comprising a transferred electronic cash payment step wherein the assignee as payer uses the electronic cash to a payee for payment of a commercial transaction.

47. The electronic cash transaction method in accordance with claim 46, wherein said transferred electronic cash payment step comprises:

a substep wherein the payer transmits an electronic cash transfer record H_1,2 to the payee;

a substep wherein the payee confirms the validity of the assigner'"'"'s public key and the corresponding certificate;

a substep wherein the payee confirms the validity of the payer'"'"'s public key and the corresponding certificate;

a substep wherein the payee confirms the validity of the transferred electronic cash;

a substep wherein the payee transmits a payee'"'"'s account number and a transaction time related to payment of a commercial transaction;

a substep wherein the payer produces a challenge value and corresponding response value using the payee'"'"'s account number, the transaction time of said payment, and the vacant electronic cash message;

a substep wherein the payer transmits the response value to the payee; and

a substep wherein the payee confirms the validity of the response value.

48. The electronic cash transaction method in accordance with claim 47, wherein said electronic cash transfer record H_1,2 includes a vacant electronic cash message c_U2,z, a response value z, a challenge value d, an electronic cash message c_U1, an electronic cash transfer time, an electronic cash random number image w, a vacant electronic cash random number image w*, the assigner'"'"'s public key p_U1 and corresponding certificate Cert_U1, the payer'"'"'s public key p_U2 and corresponding certificate Cert_U2.

49. The electronic cash transaction method in accordance with claim 47, wherein said substep for the payee'"'"'s confirming the validity of the assigner'"'"'s public key and corresponding certificate, is performed by verifying the following equation,

50. The electronic cash transaction method in accordance with claim 47, wherein said substep for the payee'"'"'s confirming the validity of the payer'"'"'s public key and corresponding certificate, is performed by verifying the following equation,

51. The electronic cash transaction method in accordance with claim 47, wherein said substep for the payee'"'"'s confirming the validity of the transferred electronic cash comprises the substeps of:

confirming the validity of the electronic cash message;

confirming the validity of the payer'"'"'s vacant electronic cash message; and

confirming that the electronic cash transfer is legally performed.

52. The electronic cash transaction method in accordance with claim 51, wherein said substep for confirming the validity of the electronic cash message is performed by verifying that the following equation is correct so as to ascertain that the electronic cash message includes the bank apparatus'"'"'s signature,

53. The electronic cash transaction method in accordance with claim 51, wherein said substep for confirming the validity of the payer'"'"'s vacant electronic cash message, is performed by verifying that the following equation is correct, thereby ascertaining that the vacant electronic cash message includes the bank apparatus'"'"'s signature,

54. The electronic cash transaction method in accordance with claim 51, wherein said substep for confirming that the electronic cash transfer is legally performed is preformed by verifying the following equation:

55. The electronic cash transaction method in accordance with claim 54, wherein said substep for confirming that the electronic cash transfer is legally performed, the method comprising the substeps of:

producing a medium value w′

using the assigner'"'"'s public key p_U1 and the challenge value in accordance with w′

=g^zp_U1^d mod p; and

verifying that the equation c_U1^eB mod n_B=h(w′

∥

∥

p_U1) is correct, z*_p being a mathematical notation which indicates a set of {1, 2, 3, . . . , p−

1}, p indicates a prime number, g^z represents the multiplication of as many as r times, and z represents a response value.

56. The electronic cash transaction method in accordance with claim 47, wherein said substep for the payer'"'"'s producing the challenge value and corresponding response value using the payee'"'"'s account number, the transaction time and the vacant electronic cash message is performed in accordance with the following equations:

 

d′

=h(A_s∥

time′

∥

c_U2,z)

57. The electronic cash transaction method in accordance with claim 47, wherein said substep for the payee'"'"'s confirming the validity of the response value comprises the substeps of:

producing a challenge value d′

using the payee'"'"'s account number A_S, the transaction time and the vacant electronic cash message c_U2,z in accordance with d′

=h(A_S∥

time′

∥

c_U2,z);

producing a medium value w″

using the challenge value d′

, the payer'"'"'s public key p_U2, and the received response value z in accordance with w″

=g^zp_U2^d′

mod p; and

verifying that the equation cu_U2,z^e_B mod n_B=h(w″

∥

p_U2) is correct,

wherein c_U2,z represents the vacant electronic cash message, e_B represents a public key of the bank apparatus and h ( ) represents a one-way function.