JP3354667B2 - Communication method for giving transaction execution request to transaction processing system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication system for a computer system for processing transactions, and more particularly, to processing transactions such as financial transactions which require the input of security information of a trading party in order to execute the transactions. The present invention relates to a communication system in which security of security information can be guaranteed in a system.

[0002]

2. Description of the Related Art One of the actions handled by an automatic processing system for bank transactions is a fund transfer action such as transfer or transfer. When executing this act of transferring funds, it is necessary to confirm the acceptance of the remittance by the person on the remittance side (hereinafter referred to as the "transfer source"). When the transferee gives consent,
It is necessary for the transfer source to input security information such as a personal identification number to the system because the transfer source needs to confirm to the system that he / she is the transfer source. This security information must be kept secret so as not to be known to others.

[0003] Under such circumstances, the funds transfer act can be performed only by the terminal operation by the transfer source person, and can be performed by the terminal operation by the person receiving the remittance (hereinafter referred to as the transfer destination person). It is not possible.
In addition, the installation location of the terminal is also limited to a special location where a surveillance camera or the like is installed, thereby enhancing security.

[0004]

With respect to certain kinds of funds transfer, it is sometimes advantageous for both the transferee and the transferor to be able to perform this by operating the terminal by the transferee. One typical example is a case where an employee receives a small cash payment from a company necessary for performing business in the company. In this case, usually, an employee requests payment to the accounting section or the like, and the accounting section member pays out of cash prepared in advance. However, if this payment could be made by transferring the required amount from the company's bank account to the employee's bank account by operating an employee's terminal, the employee appears to the accounting section. This is convenient because it saves time and troubles, and the required expenses can be withdrawn from cash dispensers and ATMs of banks all over the country at desired times. It is also advantageous for companies because the work in the accounting section is reduced and it is not necessary to always prepare a large amount of cash.

[0005] The same can be said for the cashing system of a money lender. The cashing machine installed in the city has a large amount of cash stored in it,
And special security measures are in place. If this cashing service can be performed by the account transfer by the terminal operation of the person receiving the cashing (transferee), the money lender (transfer source) does not need to install a special cashing machine, and This is advantageous because you can always keep your funds in your bank account.

As described above, it is sometimes very convenient to transfer funds by operating the terminal of the transferee. Hereinafter, this type of fund transfer is referred to as "reverse transfer" in the sense that it is an act of an inverse relationship to "transfer" performed by the transfer source person.

One problem in realizing this reverse transfer is how to obtain the consent of the transferor. That is, as described above, the existing banking system uses the security information (password) of the transferor to confirm that the transferor has accepted the transfer.
Requires input. It is most desirable if reverse transfer can be realized by diverting the existing method without breaking it. To do so, the security information of the transfer source must be input somewhere in the reverse transfer procedure. However, in order to make full use of the above-mentioned one advantage of the reverse transfer of reducing the work load of the transfer source, it is not desirable that the step of inputting security information by the transfer source itself be included in the reverse transfer procedure. . On the other hand, the security information of the transferee must never be known to others, especially the transferee.

[0008] These contradictory requirements exist when implementing reverse transfer.

The present invention has been made in view of the above circumstances, and a first object of the present invention is to provide a bank system for realizing a "reverse transfer" by operating a terminal of a transfer recipient. It is an object of the present invention to provide a communication method for connecting a terminal operated by a predecessor and a bank system.

[0010] A second object of the present invention is that the above-mentioned communication system requires the terminal operation of the sender of the transfer to ensure the security of the transaction itself while taking advantage of the above-mentioned "reverse transfer". Instead, it is possible to confirm the sender's consent.

[0011] A third object of the present invention is to provide the above-mentioned communication system in which the security information of the transferee can be input by the terminal operation of the transferee while ensuring the confidentiality of the security information. Sometimes.

Further, a fourth object of the present invention is to provide not only financial transactions but also various other transaction processing systems.
An object of the present invention is to enable security information of a transaction party required at the time of executing a transaction to be input to the system by a terminal operation of a person other than the party, while maintaining the confidentiality of the information.

[0013]

SUMMARY OF THE INVENTION The present invention provides a novel communication system for transmitting a transaction execution request to a transaction processing system in order to achieve the above object. The communication method according to the present invention includes an IC card possessed by one party (a first party) that conducts a transaction, a terminal device that can be used by the first party having a reader / writer for the IC card,
A gateway center is provided between the terminal device and the transaction processing system.

The IC card stores security information of the other party (second party) of the transaction, which is required when making a transaction execution request. For example, if the transaction is a bank transfer or transfer, the first party is the payee,
The second party is the transfer source, and the security information stored in the IC card is the transfer transfer password of the transfer source.

The access right to the security information stored in the IC card is normally locked, and is unlocked only when authentication according to a predetermined procedure is established. The function of the authentication procedure for unlocking is provided by the gateway center.

Therefore, the IC card is used as a reader / writer of the terminal device.
When coupled to a writer, the gateway center
Performs an authentication procedure with the C card to unlock the access right, thereby allowing the security information of the second party to be
Can be read from C card.

Upon receiving a transaction execution request of the first party from the terminal device, the gateway center determines whether or not the requested transaction has been approved by the second party. Using the read security information, a transaction execution request is created and transmitted to the transaction processing system.

For example, in the case of a transfer or transfer transaction, the gateway center reads the personal identification number of the transfer source from the IC card, and the transfer request of the transfer destination from the terminal device has been approved by the transfer source. Then, a transfer transfer execution request is created and transmitted to the bank system using the read password.

In the method of the present invention, it is preferable that the authentication for unlocking the access right is a mutual authentication between the IC card and the gateway center.

The security information of the second party in the IC card is stored in an encrypted state, and is desirably decrypted at the gateway center.

The information of the first party necessary for making a transaction execution request (for example, the account number of the transferee in the case of transfer / transfer) is registered in advance in the communication system, and is stored in the first party. It is desirable that this need not be entered at the terminal.

Further, after the transaction processing system executes the requested transaction, the processing result can be sent to the IC card through the gateway center and recorded. In this case, it is desirable that the processing result is encrypted and recorded in the IC card.

[0023]

According to the communication system of the present invention, when a first party wants to execute a transaction, as a basic operation, if the IC card is inserted into the terminal device and a transaction execution request is input from the terminal device, the request is received. The gateway center automatically determines whether the requested transaction has been approved by the second party, and if approved, reads the security information of the second party from the IC card and requests the transaction execution. And send it to the transaction processing system. Thus, the transaction desired by the first party can be executed without receiving the security information from the second party.

In this case, if the second party does not approve the transaction, no transaction execution request is sent, so there is no risk that the second party will suffer unexpected damage. In addition, only the gateway center has an authentication function for unlocking the security information access right of the second party in the IC card, and there is no terminal device or other device, so that the security of the security information can be secured. It is protected.

When this communication method is applied to, for example, a reverse transfer at a bank, the transferee possesses an IC card which stores the personal identification number and account information of the transferee, and the transferee has the IC card. Insert the card into the terminal device and enter a request for reverse transfer. Then, the gateway center checks whether or not the requested reverse transfer has been approved by the transferor, and if so, reads out the transferor's password and account information from the IC card and uses it. Create a fund transfer request and send it to the bank system.

Thus, the reverse transfer can be executed by the terminal operation of the transferee without any particular trouble of the transferor's hand. In addition, there is no mistake in making a transfer that is not approved by the transferor, and the transferor's personal identification number is not known to the transferee or other third parties, and is safe for the transferor It is.

In the method of the present invention, it is preferable that the authentication for unlocking the access right of the security information is a mutual authentication between the IC card and the gateway center.
As a result, the security information is not read out and the transaction is executed both in the case where the forged IC card is used and in the case where the unauthorized fake gateway center acts as an intermediary for communication. The security of the interests of both parties is more securely protected.

It is preferable that the security information of the second party is stored in an encrypted state in the IC card, and the security information is decrypted at the gateway center. Thus, the security of the security information is further protected.

The information of the first party such as the account information of the transferee in the reverse transfer may be registered in advance in the scheme so that the first party does not need to input the information from the terminal. desirable. As a result, even if the IC card is illegally used by a third party and the transaction is executed, the transaction in which the third party becomes a party will not be completed. Profit security is maintained.

Further, it is desirable that the execution result of the transaction by the transaction processing system be returned to the IC card through the gateway center, and that this be encrypted and stored in the IC card. As a result, an authorized organization such as a gateway center can later refer to the transaction history as needed, while also avoiding the risk that the parties arbitrarily modify the transaction history.

[0031]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 shows the overall configuration of an embodiment of the present invention. In this embodiment, the present invention is applied to a small cash payment to an employee in a company.

In FIG. 1, reference numeral 1 denotes a processing system of a certain bank (bank A). In the bank A system 1, a bank account of a company and a bank account of its employees are managed.

Reference numeral 3 denotes a company host computer, and the company host 3 includes an expense system for processing an expense payment to an employee. This expense system has a file in which various kinds of information relating to an employee's deposit account, for example, an account number, a holder's name, a deposit type, and the like are recorded.

Reference numeral 5 denotes a terminal device called a home use terminal, which is used by employees for billing expenses. The home use terminal 5 is installed in a place convenient for use by employees, for example, in a work place or a branch office of a company located in various places. The home use terminal 5 includes an IC card reader / writer, and has an IC card 7 owned by an employee.
Can be accessed.

The IC card 7 is issued by Bank A and stores account information of a company, for example, an account number, a holder's name, a deposit type, and a transfer PIN. At least the transfer password is stored in an encrypted form. The IC card 7 is of a type having a mutual authentication function, for example, an “S-type IC card” manufactured by NTT Data Communications Corporation. In the IC card 7, the access right relating to the account information of the company is normally locked, and is unlocked only when mutual authentication according to a predetermined procedure is established.

What is important here is that the mutual authentication procedure for the access right of the company account information can be performed only by the gateway center 9, and other systems and terminals do not know this procedure. Therefore, the employee cannot read the company account information from the IC card 7.

The bank system 1, the company host 3, and the home use terminal 5 are connected to a kind of communication relay and transaction mediation system 9 called a gateway center. The gateway center 9 and the bank system 1 are connected via a communication network dedicated to a bank, for example, a “bank ANSER” 11 provided by NTT Data Communications Corporation.

The gateway center 9 and the home use terminal 5 are connected via a public communication network, for example, a videotex (VTX) network 13 and a public telephone network 15.

The outline of the procedure of the expense payment in this system is as follows.

First, the employee makes a call from the home use terminal 5 and connects to the gateway center 9 (step S).
1). Subsequently, the employee inputs the expense payment request to the home use terminal 5 and inserts the IC card 7 into the home use terminal 5. Then, the gateway center 9 becomes IC
Confirm that the card 7 is issued by Bank A, and if it is confirmed, a mutual authentication procedure is performed between the gateway center 9 and the IC card 7, and when mutual authentication is established, the company in the IC card 7 The access right to the account information is unlocked.

Thereafter, the gateway center 9 connects the home use terminal 5 and the company host 3 (step S).
2). In this state, the home use terminal 5 operated by the employee
A predetermined expense payment procedure is performed between the company and the expense system of the company host 3 (step S3).

Thereafter, the company host 3 sends back the account information of the employee to the home use terminal 5, and the employee account information is written on the IC card 7 (step S4).

Thereafter, the gateway center 9 reads out the company account information and the employee account information in the IC card 7 and creates a transfer request command from the company account to the employee account.
This command is transmitted to the bank system 1 together with information indicating that the IC card 7 has been issued by the bank and that mutual authentication has been established (step S5). The bank system 1 executes the transfer in response to this command.

Thereafter, the employee goes to the nearest financial period and uses the cash dispenser (CD) or ATM 19 to withdraw the expenses transferred to his / her account (step S6).

In the above procedure, the corporate account information can be accessed only when the mutual authentication between the gateway center 9 and the IC card 7 is established, so that the use of an illegally issued IC card, For example, when the connection is made to a gateway center other than the above, the above-mentioned reverse transfer is not executed. Thereby, confidentiality of security information such as a password included in the company account information is ensured, and a reverse transfer that is not approved by the company is not executed.

Further, the company account information includes the I
Because it is stored in the C card 7,
It is not necessary for the company to input a personal identification number. In other words, the company can automatically pay necessary expenses to employees without any special operation.

It is very convenient for employees, especially when traveling, because they can make a payment request from a home use terminal such as a work place or a branch office, and can draw out expenses from CD / ATMs nationwide.

The procedure of the above reverse transfer and the operation of each unit at that time will be described in detail with reference to the flowcharts of FIGS.

FIG. 2 shows a procedure for making a connection from the home use terminal 5 and connecting to the gateway center 9.

First, when the home use terminal 5 becomes available, a menu screen as shown is displayed (step S101). In this screen, "2. NEWWANSE
"R" is a selection item for the cost reverse transfer. When this item is selected (Step S102), the home use terminal 5 transmits a call to the telephone network (Step S103) and receives a call to the gateway center 9 (Step S104).

When the gateway center 9 responds to the incoming call (step S105), the home use terminal 5 transmits the terminal profile (TPF) of its own terminal three times continuously according to the protocol of the VTX network 13 (step S10).
6). Upon receiving the TPF (step S107), the gateway center 9 instructs the terminal 5 to start a business according to a unique protocol (step S108). In response to this, the terminal 5 loads the program of the expense reverse transfer business from the preset program card and starts the business, and first sends a start response to the gateway center 9 (step S109).

The start response includes the following information.

(1) Message type Indicates that this message is a start response.

(2) Transmission ID Indicates the telephone number of the terminal 5.

(3) Terminal version Indicates the manufacturer of the program card.

(4) Captain screen display The function possession status of the terminal 5 is shown.

(5) Card Identification Number (Comprehensive Alliance Company Code) This is an index for searching for alliance management information managed by the gateway center 9. An identification number of a group of companies that provides a group of multiple services,
This indicates a company group that can receive a service using the IC card 7.

(6) Terminal option information The configuration of the connected equipment of the terminal 5 is shown.

(7) Affiliated menu generation Indicates the new and old service menu corresponding to the card identification number stored in the program card.

FIG. 3 shows an operation of mutual authentication between the gateway center 9 and the IC card 7, which is performed subsequent to the operation of FIG.

First, the gateway center 9 searches the affiliated relationship management information by using the received “comprehensive affiliated company code” as an index, reads out the menu screen of the service provided by the enterprise group, and displays it on the home use terminal 5. (Step S110). At the home use terminal 5, a menu screen showing available services, for example, “temporary expense payment service” is displayed (step S111).

When the employee selects the "temporary payment service", the terminal 5 asks whether or not to use an IC card. The employee selects “Yes”, inserts the IC card 7 into the terminal 5, and inputs the password of the IC card 7 into the terminal 5. This password is a code for the IC card 7 to authenticate the owner, and the input activates the IC card 7 to a usable state.

When the IC card 7 is activated, the service selected by the employee and the I
The presence or absence of use of the C card 7 is notified (step S1).
12). Subsequently, the gateway center 9 instructs the terminal 5 to read the “member number” from the IC card 7 (Step S113). Here, the member number is I
This is the identification code of the employee holding the C card 7. Upon receiving the member number (step S114), the gateway center 9 starts a mutual authentication operation with the IC card 7 (steps S115 to S120).

In the mutual authentication operation, first, the gateway center 9 transmits a mutual authentication command A to the IC card 7 (step S115). This mutual authentication command A includes a random number sequence. Upon receiving this, the IC card 7
A different random number sequence is generated, and a response A including this random number sequence is returned to the gateway center 9 (step S11).
6).

Next, the gateway center 9 encrypts the random number sequence included in the response A using one of a pair of encryption keys shared with the IC card 7, and includes the encrypted random number sequence. The mutual authentication command B is transmitted to the IC card 7 (step S117). In response to this, the IC card 7 encrypts the random number sequence included in the mutual authentication command A using the other of the pair of shared encryption keys, and generates a response B including the encrypted random number sequence. It is returned to the gateway center 9 (step S118).

When each of the gateway center 9 and the IC card 7 correctly encrypts the random number sequence transmitted by itself when the encryption code received from the other party, each of the other parties has a valid encryption key and an encryption function. And the first step of mutual authentication is established.

Subsequently, as a second step, the gateway center 9 sends a key collation command including a collation key shared with the IC card 7 to the IC card 7 (step S119). The IC card 7 collates the received collation key with the collation key in its own card, and sends the result to the gateway center 9 (step S120).

If the key matches, the mutual authentication is completely established. As a result, the IC card 7 recognizes that the gateway center 9 is a legitimate one that has been authorized by the bank, and unlocks the gateway center 9 with the access right to the corporate account information. Also, the gateway center 9
Recognizes that the IC card 7 is valid by issuing from a bank.

If the mutual authentication is not established, the reverse transfer operation is stopped here.

As for the key collation, a function is provided for rewriting the collation key on-line from the gateway center 9 to the IC card 7 after the mutual authentication is established, thereby increasing the security of the mutual authentication. More enhanced.

After the mutual authentication is established, the gateway center 9
Issues a connection request to the enterprise host 3 (step S1).
21). This connection request includes the following information.

(1) Terminal ID Indicates the telephone number of the home use terminal 5.

(2) Terminal connection device Same as “terminal option information” of “start response” described above.

(3) Comprehensive alliance company code Same as “card identification number” of “start response” described above.

(4) Service providing company code A code of a company that provides a service selected by an employee (in the case of this embodiment, “temporary expense service”) from the company group indicated by the comprehensive alliance company code.

(5) Member Number The identification number of the employee read from the IC card 7.

When the connection request is received, the company host 3 activates the expense system and transmits a job selection menu screen of the expense system to the home use terminal 5 (step S122).

FIG. 4 shows a communication operation between the home use terminal 5 and the enterprise host 3 performed after the operation of FIG.

The home use terminal 5 displays the work selection menu screen as shown in the figure received from the company host 3 (step S123). The employee selects a provisional payment application from this menu screen (step S124). This selection result is transmitted to the company host 3 (step S12).
5) The company host 3 recognizes that the provisional payment application has been selected. Then, the corporate host 3 searches the personal information file using the “member number” received in advance as a key and reads out the personal information of the employee (step S12).
6), and transmits the display screen to the home use terminal 5 (step S127). Here, the personal information is a name, a personal identification code, a temporary payment available balance, and the like.

The home use terminal 5 displays the personal information screen, and the employee confirms that the contents are correct and inputs a response to that effect (step S128). Upon receiving this response (step S129), the company host 3 sends the application amount and usage code input screen to the home use terminal 5 for display (step S130).

When the employee enters the use code and the application amount into the home use terminal 5 (step S131), the company host 3 receives them (step S132). When the company host 3 approves the received content, the company host 3 sends a screen for confirming the received content to the home use terminal 5 and displays it (step S133). The employee recognizes that the reverse transfer in the displayed content has been approved by the company, and if there is no problem with the content, the employee inputs an acknowledgment (step S1).
34), which is received by the enterprise host 3 (step S)
135). Thus, an agreement between the employee and the company regarding the execution of the reverse transfer is established.

FIG. 5 shows an operation performed by the gateway center 9 to acquire account information, which is performed subsequent to the operation of FIG.

Next, the corporate host 3 issues a “transfer settlement request”
Is retrieved from the personal information file (step S136), and a “transfer settlement request” is created and sent to the gateway center 9. Here, the “transfer settlement request” includes the following information. Of these pieces of information, the transfer destination information is read from the personal information file.

(1) Message Type Indicates that the request is a transfer settlement request.

(2) Company code This indicates the company that provides this service.

(3) Transaction number A number assigned by the company to identify the provisional payment.

(4) Transfer Amount “Application amount” for temporary payment requested by an employee.

(5) Transfer transfer designation date Desired transfer date for the bank set by the company.

(6) Transfer destination information Financial institution code The identification code of the financial institution to which the transfer destination account (employee's account) belongs.

Branch number Identification code of the branch of the financial institution to which the transfer destination account belongs.

Deposit type The type of the transfer destination account.

Account number Number of transfer account Number of transferee Name of transfer account Note that the transfer information is included in the "Transfer request", so the employee can transfer the transfer information (own account information). No need to input from terminal. As a result, the profits of the company and the employees can be protected. That is, even if a third party obtains the IC card 7 and successfully executes the reverse transfer by misuse, only the transfer of funds from the corporate account to the employee account is performed, and the third party's account is not transferred. There will be no penalty for liquidating between the company and the employee later, as it will not be credited.

The gateway center 9 instructs the home use terminal 5 to write the “transfer settlement request” received from the company host 3 into the work area of the IC card 7 (Step S138).

Thereafter, the gateway center 9 enters a process of acquiring the following three types of information necessary for a transfer request to the bank from the IC card 7 (steps S139 to S147).

(1) “Transfer destination information” “Transfer destination information” included in the above “transfer settlement request”.

(2) “Transfer source information” Information on a company account prepared by a company for provisional payment of expenses. As described above, this information is registered in the IC card 7 and can be accessed only by the gateway center 9, and cannot be accessed (viewed and rewritten) by employees.

(3) “Transfer PIN” This is a PIN managed for each account of the transfer source (company) at the bank, which is determined in advance by the company and notified to the bank. This information needs to be kept confidential to anyone other than the company and the bank. As described above, this information is stored in the IC card 7
Is registered in the gateway center 9
Only employees can access and decrypt, employees cannot.

In the above three types of information acquisition processing, the gateway center 9 first instructs the home use terminal 5 to read the “transfer settlement request” written in the IC card 7 (step S139). The “transfer settlement request” read by the home use terminal 5 is compared with the “transfer settlement request” written in the home use terminal 5 (step S140). If the verifications match, the gateway center 9 acquires the transfer destination information from the read “transfer settlement request” (step S141).

Next, the gateway center 9 instructs the home use terminal 5 to read the account information of the transfer source (employee) from the IC card 7 (step S142), and obtains the transfer source account information from the home use terminal 5. (Step S143).

Subsequently, the gateway center 9 instructs the home use terminal 5 to read the transfer transfer password from the IC card 7 (step S144), and obtains an encrypted transfer transfer password from the home use terminal 5. (Step S145). Then, the gateway center 9 obtains a usable transfer PIN by decrypting the transfer PIN (step S146) (step S147).

FIG. 6 shows an operation of instructing the bank system 1 to perform a transfer transfer from the gateway center 9 to be performed subsequent to the operation of FIG.

Next, the gateway center 9 is connected to the bank AN
Bank system 1 according to the original protocol with SER11
Is transmitted (Step S14)
8). This “fund transfer command” includes the above-mentioned “transfer destination information”, “transfer source information”, and “transfer transfer password”.

The bank system 1 receives the “fund transfer command” (step S 149), and checks various items (for example, confirmation of the existence of an account, confirmation of a balance, confirmation of a coincidence of a personal identification number, and the like). After that, the bank system 1
If the fund transfer (transfer transfer) is permitted in accordance with the regulations of the bank, a "fund transfer report" is returned to the gateway center 9 (step S150). Here, the “fund transfer report” includes “reception number”, “transfer destination information”, “application amount”, and the like.

The gateway center 9 receiving the “fund transfer report” instructs the home use terminal 5 to write the “transfer request result” in the work area of the IC card 7 (step S151). Here, "Transfer request result"
The above information included in the “fund transfer report” and information indicating the status of the transfer (transfer in progress) are included.

As a result, the "transfer request result" is written in the IC card 7. At this time, the IC card 7 stores the "transfer request result" in the work area to prevent forgery of the "transfer request result". (Step S152),
The encrypted data calculated from the “transfer request result” is returned to the gateway center 9 (step S153).

The gateway center 9 checks whether or not the received encrypted data is obtained by correctly encrypting the original “transfer request result” (step S154), and if it is correct, transmits a confirmation screen to the home use terminal 5 (step S15).
5). As a result, a confirmation screen showing the “transfer request result” as shown in the figure is displayed on the home use terminal 5.

If the contents of the confirmation screen are correct, the employee inputs a response requesting execution of the transfer with the contents to the home use terminal 5 (step S156). The gateway center 9 that has received the request response transmits a screen for requesting input of a confirmation password to the home use terminal 5 (step S157), and a screen as shown is displayed on the home use terminal 5. Here, the “confirmation password” is a password input for finally confirming that the transferee has certainly requested that the reverse transfer be executed with the contents. The necessity of inputting the “confirmation password” can prevent unauthorized use of the IC card 7 by a third party.

In response to this, the employee enters the confirmation password into the home use terminal 5 (step S158). The input confirmation password is first input to the IC card 7 and encrypted (step S159), and then transmitted from the home use terminal 5 to the gateway center 9 (step S160).

Upon receiving the encrypted confirmation password (step S161), the gateway center 9 obtains the confirmation password by decrypting it (step S162).

Thereafter, the gateway center 9 transmits a "fund transfer confirmation command" to the bank system 1 (step S1).
63), the bank system 1 receives this (step S)
164). This “fund transfer confirmation command” includes a confirmation password. After checking the received confirmation password, the bank system 1 transmits a "fund transfer confirmation report" to the gateway center 9 (step S165). This completes the reception of the fund transfer (transfer transfer) request, and the bank system 1 executes the transfer of expenses from the company account to the employee account.

FIG. 7 is performed following the operation of FIG.
An operation for storing the “transfer request result” in the IC card 7 will be described.

The gateway center 9 transmits a reception screen as shown to the home use terminal 5 based on the “fund transfer result report” received from the bank and displays it (step S166). If the contents of the reception screen are as requested by the employee, the employee inputs a confirmation response (step S16).
7), this is received by the gateway center 9 (step S168).

Next, the gateway center 9 transmits a “transfer settlement response” to the company host 3 (step S16).
9) The company host 3 confirms that the transfer processing at the bank has been normally completed based on the "transfer settlement response" (step S170).

Subsequently, the enterprise host 3 sends a request to the gateway center 9 to write the fact that the transfer has been normally completed into the IC card 7 (step S171).
Upon receiving this request (step S172), the gateway center 9 encrypts the "transfer request result" and records it in the work area (step S173), and transmits the "transfer request result" to the home use terminal 5. Here, the “transfer request result” includes a receipt number, transfer destination information, a transfer amount, a transfer status, and the like, and the transfer status indicates completion of the transfer.

The IC card 7 encrypts the “transfer request result” received by the home use terminal 5 and writes it in the work area (step S174), and returns the encrypted “transfer request result” to the gateway center 9. (Step S175). Here, the encryption method in the IC card 7 is the same as that in the gateway center 9.

The gateway center 9 checks the received “transfer request result” in the encrypted state with the “transfer request result” in the encrypted state in the center 9 (step S176). Is transmitted to the company host 3 (step S177).

Upon receiving the "transfer result write response" (step S178), the corporate host 3 confirms that the IC card 7, the gateway center 9 and the corporate host 3 have confirmed the "transfer request result". recognize.

Subsequently, the corporate host 3 transmits a request to write the "history reference memo" to the IC card 7 to the gateway center 9 (step S179), and the gateway center 9 receives this request (step S180). ),
The home use terminal 5 is instructed to write the “history reference memo” on the IC card 7 (step S181).

The home use terminal 5 displays a screen showing the transfer result based on this instruction (step S18).
2). If the employee desires to save the displayed result in the IC card 7, the operator selects "save" (step S183), and the transfer result is written in the IC card 7 (step S184). .

When the transfer result is stored in the IC card 7, a response to that effect is sent to the gateway center 9. Upon receiving this response (step S185), the gateway center 9 transmits a "history reference memo write response" to the enterprise host 3 (step S186). Upon receiving the "history reference memo writing response" (step S187), the company host 3 recognizes that the transfer result has been saved in the IC card 7, and subsequently displays a screen indicating the end of the provisional expense payment processing. The data is transmitted to the home use terminal 5 through the gateway center 9 (step S188).

FIG. 8 is performed following the operation of FIG.
The operation for ending the provisional payment service will be described.

The home use terminal 5 displays the received end screen (step S189), and the employee selects “confirmation” if the end is acceptable (step S190). In response, the enterprise host 3 displays the same business selection menu screen as transmitted in step S122 of FIG.
(Step S191).

The home use terminal 5 displays the received job selection menu screen, and the employee selects "end" from this screen (step S192). Upon receiving this response (step S193), the enterprise host 3 transmits a "terminal disconnection request" to the gateway center 9 (step S1).
94).

Upon receiving the "terminal disconnection request" (step S195), gateway center 9 transmits the same service menu screen as that transmitted in step S110 of FIG. 3 to home use terminal 5 (step S196), and A terminal disconnection response is transmitted to the enterprise host 3 (step S197). The company host 3 that has received the “terminal disconnection response” ends the expense system and ends communication with the gateway center 9 (step S198).

On the other hand, upon receiving the service menu screen, home use terminal 5 ejects IC card 7 (step S199), and displays the service menu screen (step S200). The employee selects "end" from this screen (step S201).

Upon receiving this response (step S202), gateway center 9 transmits an "end request" to home use terminal 5 (step S203), and home use terminal 5 returns an "end response" to gateway center 9. (Step S204). The gateway center 9 receives the "end response" (step S20).
5) It is determined that the processing for the home use terminal 5 has been completed, and a “disconnection request (DCC)” is transmitted to the VTX network 13 (step S206).

Subsequently, the gateway center 9 receives the "disconnection response (DCR)" from the VTX network 13 (step S207), and determines that the connection with the home use terminal 5 has been released. Further, the VTX network 13 releases the connection between the gateway center 9 and the home use terminal 5 (Step S208). The home use terminal 5 displays the original menu screen (step S20).
9). This completes the reverse transfer procedure for provisional expense payment.

The preferred embodiment of the present invention has been described above. However, the present invention can be implemented in various modes other than this embodiment. For example, since the gateway center 9 is completely entrusted with the processing of the enterprise host 3 by the enterprise, the above-described operation is performed only with the communication between the home use terminal 5 and the bank system 1 without communicating with the enterprise host 3. Such a reverse transfer procedure may be performed.

Further, the above embodiment can be applied to a cash lending service by a money lending company for members registered in advance, an automatic collection system for money and accounts receivable, and the like.

[0131]

As described above, according to the present invention,
The security information of the other party is stored in a locked state on the IC card possessed by one of the transaction parties,
When one party inserts an IC card into the home use terminal and enters a transaction request, the gateway center determines whether the transaction is approved by the other party, and if approved, the IC card Is unlocked to read the security information, create a transaction execution request, and send it to the transaction processing system, so that the terminal operation of only one party does not bother the other party. Transactions can be executed, and at the same time, the security of the interests of the parties and the security of the security information can be securely protected.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of an embodiment of the present invention.

FIG. 2 is a flowchart showing an operation of transmitting a call from a home use terminal 5 and connecting to a gateway center 9 in the embodiment of FIG.

FIG. 3 is a flowchart showing an operation of mutual authentication between the gateway center 9 and the IC card 7, which is performed subsequent to the operation of FIG. 2;

FIG. 4 is a flowchart showing a communication operation between the home use terminal 5 and the enterprise host 3, which is performed subsequent to the operation in FIG. 3;

FIG. 5 is a flowchart showing an operation performed by the gateway center 9 for acquiring account information, which is performed after the operation in FIG. 4;

FIG. 6 is a flowchart showing an operation of instructing the bank system 1 to perform a transfer transfer from the gateway center 9 performed after the operation of FIG. 5;

FIG. 7 is a flowchart showing an operation for saving the “transfer request result” in the IC card 7 performed after the operation in FIG. 6;

FIG. 8 is a flowchart showing an operation for ending the provisional expense service, which is performed following the operation of FIG. 7;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Bank system 3 Corporate host 5 Home use terminal 7 IC card 9 Gateway center 11 Bank ANSER 13 VTX network 15 Public telephone network

──────────────────────────────────────────────────続 き Continuation of the front page (72) Inventor Kazuhiro Otani 3-3-3 Toyosu, Koto-ku, Tokyo Inside NTT Data Communication Co., Ltd. (56) References JP-A-6-60088 ( JP, A) JP-A-4-363759 (JP, A) JP-A-61-28184 (JP, A) JP-A-59-165194 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , (DB name) G06F 17/60

Claims (8)

(57) [Claims] 1. A communication system for transmitting a transaction execution request to a system (1) for processing a transaction between a first party and a second party, wherein the IC card ( 7), a terminal device (5) provided with a reader / writer for the IC card and usable by the first party, and a gateway center (9) provided between the terminal device and the transaction processing system. The IC card has an area storing security information of the second party required for the transaction execution request, and means for controlling locking / unlocking of an access right of the security information, The locking / unlocking control means unlocks the access right only when authentication according to a predetermined procedure is established. When the over-de coupled to the reader / writer of the terminal device, the hand to unlock the access right to execute the predetermined procedure with respect to the locking-unlocking control means
And stage, when the access right is unlocked, the means for the security information of the second party read from the IC card, receiving a transaction execution request of the first party from the terminal device, the requested transaction Means for judging whether or not has been approved by the second party; and when the judging means judges that the request has been approved, a request for executing the requested transaction is created using the security information from the reading means. And a means for transmitting to the transaction processing system. 2. The system according to claim 1, wherein the authentication according to the predetermined procedure is a mutual authentication between the IC card and the gateway center. Communication method. 3. The method according to claim 1, wherein the security information of the second party is encrypted and stored in the IC card, and the gateway center is configured to store the encrypted security information read from the IC card. A communication method, further comprising: means for decrypting the security information. 4. The system according to claim 1, wherein the gateway center receives a processing result of the requested transaction from the transaction processing system, and instructs the terminal device to write the processing result on the IC card. A communication method, further comprising: means for encrypting and storing the processing result from the gateway center. 5. The communication method according to claim 1, wherein the information on the first party required for the transaction execution request is registered in a predetermined place accessible by the gateway center in advance. . 6. The system according to claim 1, wherein the transaction processing system is a system for processing a transfer of funds from a second party's savings account to a first party's savings account. A transfer PIN of a second party; the IC card stores a transfer PIN of the second party and transfer source account information for specifying a deposit account of the second party; The reading means reads the transfer password and the transfer source account information from the IC card, and the transaction request transmission means of the gateway center reads the transferred transfer password and the transfer source account information. A communication method, wherein a request for executing the fund transfer is created and transmitted to the transaction processing system. 7. The method according to claim 6, wherein, among the transfer code and the transfer source account information,
At least the transfer password is encrypted and the I
A communication method stored in a C card, wherein the gateway center further comprises means for decrypting the encrypted transfer transfer password. 8. The system according to claim 6, further comprising an information processing system managed by said second party.
The information processing system managed by the second party is a transfer destination account for specifying a deposit account of the first party.
Remember informationMeans toCommunicatively connected to the gateway centerMeans to,Has,  The determining means of the gateway center, upon receiving the transaction execution request of the first party,
By communicating with an information processing system
The requested transaction has been approved by a second party
JudgeHave the means toThe transaction execution request transmitting means of the gateway center is
The information processing system managed by the second party
Receive destination account informationMeans toWhen the determining means determines that the payment has been approved,
Account information, the transfer ID code, and the transfer source account
Create the transaction execution request using informationMeans to,Having A communication method characterized by that: