US20030041035A1 - Method and apparatus for managing electronic money and storage medium for storing an electronic money management program - Google Patents

Method and apparatus for managing electronic money and storage medium for storing an electronic money management program Download PDF

Info

Publication number
US20030041035A1
US20030041035A1 US10/270,444 US27044402A US2003041035A1 US 20030041035 A1 US20030041035 A1 US 20030041035A1 US 27044402 A US27044402 A US 27044402A US 2003041035 A1 US2003041035 A1 US 2003041035A1
Authority
US
United States
Prior art keywords
electronic money
terminal
money
network
nlu
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US10/270,444
Inventor
Tomoichi Ebata
Hiromichi Ito
Masato Saito
Yoshihiro Kamata
Hiroshi Yamada
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to US10/270,444 priority Critical patent/US20030041035A1/en
Publication of US20030041035A1 publication Critical patent/US20030041035A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/04Payment circuits
    • G06Q20/06Private payment circuits, e.g. involving electronic currency used among participants of a common payment scheme
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/08Payment architectures
    • G06Q20/10Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G06Q20/3674Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes involving authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G06Q20/3678Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes e-cash details, e.g. blinded, divisible or detecting double spending
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/381Currency conversion
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829Payment protocols; Details thereof insuring higher security of transaction involving key management
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Systems or methods specially adapted for specific business sectors, e.g. utilities or tourism
    • G06Q50/10Services
    • G06Q50/18Legal services; Handling legal documents
    • G06Q50/188Electronic negotiation

Definitions

  • the present invention relates to technology for managing electronic money that circulates on networks, such as the Internet.
  • Credit card settlement is used.
  • CyberCash a strong encryption process is conducted on information about giving and accepting orders and card numbers or the like before transmission.
  • SET provides means for authenticating credit card users and means for authenticating member stores where the credit cards can be used.
  • Ecash is an electronic settlement system proposed by DigiCash and uses the electronic money digital cash system. More specifically, cash settlement is made by electronic money having a value equal to an actual paper currency. The user draws electronic money corresponding to the sum of payment from the storage medium, and sends the money to the recipient.
  • the above examples (1) to (3) are applications of settlement by credit card to settlement in electronic commerce. Therefore, credit cards are required to settle accounts. Information about a card number or the like, which needs to be protected, must be sent in one form or another. Moreover, the flow of money (who spent how much, and where) is known to a third party, in other words, it shows low anonymity.
  • ecash is highly convenient because it does not use credit cards as a means of settlement.
  • Technology like ecash, which realizes settlement on a network by electronic money, is generally called network type electronic money. Unless otherwise defined, the network type electronic money is hereafter referred to simply as electronic money.
  • the present invention has been made with the above problems taken into consideration, and has its object to enable management of the transfer of electronic money without affecting the working environment of electronic commerce when settlement systems for different kinds of electronic money are used.
  • the present invention provides a method of managing electronic money in a network apparatus installed between a first network and a second network, wherein electronic money circulating only within the first network is designated as electronic money current on the first network (This electronic money is hereafter referred to as electronic money A), the method comprising the steps of:
  • the network apparatus is a gateway or a router, for example.
  • electronic money that can be handled by the first terminal connected to a certain network is assumed to be electronic money A current in that network, in other words, electronic money A is assumed to be a different kind of electronic money from electronic money B current on another network.
  • a network apparatus connected both to one network and another network is charged with performing a money change function between electronic money A and electronic money B.
  • the network apparatus when a user of the first terminal connected to a certain network conducts electronic commerce with a user of the second terminal connected to the other network, the network apparatus invariably performs the money change process between electronic money A and electronic money B to settle accounts.
  • the organization the administrative department, namely, the accounting or materials department
  • the organization that manages the users connected to that certain network can manage the settlement of accounts between the user at the first terminal connected to the certain network and the user at the second terminal connected to the other network by, for example, recording a history of the money change process at the network apparatus and monitoring the records.
  • the money change process may be designed such that electronic money A is sent back to the first terminal without being converted into electronic money B.
  • the network apparatus may be so arranged as to change electronic money A sent from the first terminal into a desired combination of different nominal values of electronic money A in response to a command from the first terminal.
  • the user at the first terminal can get a desired amount of electronic money A generated even if he is not aware of the quantities of different nominal values of electronic money A that he possesses.
  • FIG. 1 is a schematic configuration diagram of a network apparatus to which an embodiment of the present invention is applied;
  • FIG. 2 is a schematic block diagram showing the function realized by a CPU executing an electronic money management program in an information processing apparatus having a communication function using a network;
  • FIG. 3 is a diagram showing log files generated by a log recorder 117 ;
  • FIG. 4 is a diagram showing an example of the content of each log file in FIG. 3;
  • FIG. 4A shows an example of an electronic money receipt log 1171 ;
  • FIG. 4B shows an example of a local electronic money generation/sending log 1172 ;
  • FIG. 4C shows an example of a local electronic money collection/deletion log 1173 ;
  • FIG. 4D shows an example of an electronic money payment log 1174 ;
  • FIG. 5 is an example of a format of electronic money issued by terminal NB 3 ;
  • FIG. 6 is an example of a format of electronic money generated by a local electronic money generator 113 in FIG. 2;
  • FIG. 7 is a flowchart for explaining the operation of remittance from terminal NWU 2 to terminal NLU 4 ;
  • FIG. 8 is a flowchart for explaining the operation of remittance from terminal NLU 4 to terminal NWU 2 ;
  • FIG. 9 is a diagram showing an example of local electronic money in FIG. 6 added with a user's digital signature
  • FIG. 10 is a flowchart for explaining the operation of remittance from terminal NLU 4 a to terminal NWU 4 b;
  • FIG. 11 is a flowchart for explaining the operation of remittance from terminal NLU 4 a to terminal NLU 4 b in a first modification of the embodiment
  • FIG. 12 is a diagram showing an example of a message sent from terminal NLU 4 on the sender side to terminal GW 1 in the first modification of the embodiment of the present invention
  • FIG. 13 is a diagram showing local electronic money paid into a moneybox 1151 of the remittance destination as directed by the message shown in FIG. 12;
  • FIG. 14 is a diagram showing an example of the content stored in a permission file 1152 ;
  • FIG. 15 is a flowchart for explaining the operation for the user at the terminal NLU 4 a to obtain authority from the user at the terminal NLU 4 b in a second modification of the embodiment of the present invention
  • FIG. 16 is a diagram showing an example of local electronic money accompanied by a message asking for authority to remit in the second modification of the embodiment of the present invention.
  • FIG. 17 is a diagram showing an example of local electronic money accompanied by an authority transfer message in the second modification of the embodiment of the present invention.
  • FIG. 1 is a schematic configuration diagram of the network apparatus to which a preferred embodiment of the present invention is applied.
  • WAN 10 denotes a Wide Area Network
  • LAN 20 denotes a Local Area Network
  • GW 1 denotes a gateway located between WAN 10 and LAN 20 .
  • NB's 3 a , 3 b are terminals of a bank issuing electronic money, and are connected to WAN 10 (hereafter NB's 3 a , 3 b are referred to merely as NB 3 ).
  • NMU's 2 a , 2 b and NLU's 4 a , 4 b are terminals of the users of an accounts settling system by electronic money.
  • NWU's 2 a , 2 b are connected to WAN 10
  • NLU's 4 a , 4 b are connected to LAN 20
  • terminals NLU 4 connected to LAN 20 are assumed to be terminals used by users of an organization (a business firm, for example)
  • terminals NWU 2 connected to WAN 10 are assumed to be terminals used by users outside the organization.
  • LAN 20 is formed within an organization.
  • electronic money that can be handled by the terminals NLU 4 connected to LAN 20 is limited to electronic money that is current only within LAN 20 , namely, a kind of electronic money that is different from electronic money issued by the terminal NB 3 (hereafter electronic money current only within LAN 20 is referred to as local electronic money, while electronic money issued by the terminal NB 3 is referred to simply as electronic money.)
  • GW 1 is charged with performing a money change function between electronic money and local electronic money.
  • GW 1 intercepts local electronic money sent from the terminal NLU 4 , changes the local electronic money into the corresponding amount of electronic money, and sends it to the terminal NWU 2 .
  • GW 1 intercepts electronic money sent from the terminal NWU 2 and changes the electronic money into the corresponding amount of local electronic money. GW 1 then sends the local electronic money to the terminal NLU 4 .
  • the terminals NB 3 of the bank that issues electronic money will first be discussed. It is assumed that a user at a terminal NWU 2 has had an account opened and an organization in which LAN 20 has been established has had its account opened at this bank.
  • Each of the terminals NB 3 withdraws cash from the customer's account and changes cash into electronic money, or changes electronic money into cash and deposits cash in the customer's account.
  • the terminal NB 3 withdraws cash from the account of the user at the terminal NWU 2 , changes cash into electronic money, and sends electronic money through WAN 10 to the terminal NWU 2 . Also, the terminal NB 3 changes electronic money sent through WAN 10 from the terminal NWU 2 into cash, and deposits cash into the account of the user at the terminal NWU 2 .
  • NB 3 withdraws cash from the account of the organization in which LAN 20 is set up, changes cash into electronic money, and sends it through WAN 10 to GW 1 . Furthermore, NB 3 changes electronic money remitted through WAN 10 from GW 1 into cash, and deposits it into the account of the organization having LAN 20 formed therein.
  • the terminal NB 3 performs a certification process for electronic money sent and an authentication process on electronic money received.
  • the terminal NB 3 is basically the same as a terminal of a bank used for the electronic money digital cash system including ecash that has been described in the RELATED ART above.
  • the terminal NB 3 can be realized by a CPU executing a program loaded in memory from a recording medium, such as a magnetic disk in an information processing apparatus including a function of transferring electronic money on a network.
  • the NWU 2 calls on a terminal NB 3 to withdraw cash from a designated account and change it into electronic money, or sends electronic money to the terminal NB 3 , and directs it to change to cash and deposit the cash into a designated account.
  • the terminal NWU 2 is basically the same as a user's terminal which is used for utilizing the electronic money digital cash system, such as ecash described in the RELATED ART above.
  • the terminal NWU 2 can be realized by a CPU executing a predetermined program loaded in memory from a recording medium, such as a magnetic disk, in an information processing apparatus including a function of transferring electronic money on a network.
  • the NLU 4 is basically the same as the terminal NWU 2 . It should be noted that electronic money that can be handled by the terminal NWU 2 is electronic money issued by the terminal NB 3 , while electronic money that can be handled by the NWU 2 is local electronic money current only within LAN 20 .
  • GW 1 performs a money change process between local electronic money and electronic money, for which reason the terminal NLU 4 can execute settlement processes with the other parties to electronic commerce without worrying about whether the other party is at a terminal of LAN 20 or WAN 10 .
  • GW 1 has a function of controlling data transmitted between WAN 10 and LAN 20 .
  • This function is realized by a transport programs TP 12 a and 12 b loaded into memory by CPU from a recording medium, such as a magnetic disk, in an information processing apparatus incorporating a function of communication on a network as shown in FIG. 1.
  • the TP 12 a relays data and messages exchanged with the terminals of WAN 10 to a specified program (EMMP 11 , for example, which will be described later).
  • TP 12 B relays data and messages exchanged with the terminals of LAN 20 to a specified program (EMMP 11 , described later).
  • GW 1 in this embodiment further includes a function of controlling electronic money held by the organization using LAN 20 (including the money change process between local electronic money and electronic money).
  • This function is realized by a CPU executing an electronic money management program EMMP 11 loaded into memory from a recording medium, such as a magnetic disk, in an information processing apparatus having a function of communication on a network as illustrated in FIG. 1.
  • FIG. 2 is a schematic block diagram showing the functions realized by a CPU executing the electronic money management program EMMP 11 in an information processing apparatus having a function of communication on a network.
  • An electronic money content analyzer 112 analyzes electronic money received from a terminal NWU 2 , and sends the money to a terminal NB 3 .
  • the content analyzer 112 requests the terminal NB 3 to change the electronic money into cash and deposit the cash in the account.
  • the content analyzer 112 passes information obtained by analysis of the electronic money from the terminal NWU 2 to a local electronic money generator 113 .
  • the content analyzer 112 requests the terminal NB 3 to withdraw an amount of cash specified by the information from the account and change it into electronic money.
  • the content analyzer 112 receives electronic money from the terminal NB 3 , and sends it to the terminal NWU 2 .
  • the local electronic money generator 113 On the basis of information from the electronic money content analyzer 112 , the local electronic money generator 113 generates an amount of local electronic money corresponding to electronic money received from the terminal NWU 2 .
  • a local electronic money content analyzer 115 contains a moneybox 1151 for accommodating local electronic money held by a member of the organization having LAN 20 , and a permission file 1152 including information, such as the amount of local electronic money that the member can handle.
  • the local electronic money content analyzer 115 stores local electronic money generated by the local electronic money generator 113 in a moneybox 1151 corresponding to the user of a terminal NLU 4 being a receiver (a member of the organization having LAN 20 ), and also sends a notification of this to the terminal of the receiver. Furthermore, the local electronic money content analyzer 115 analyzes local electronic money received from the terminal NLU 4 by referring to the permission file 1152 and log recorder 117 , and sends analysis information to a local electronic money eraser 114 .
  • the local electronic money eraser 114 on the basis of information from the local electronic money content analyzer 115 , erases local electronic money corresponding to an amount, specified by the information, from the moneybox 1151 specified by the information, and sends a notification of this to the electronic money content analyzer 112 .
  • the log recorder 117 records the processes of the components shown in FIG. 2.
  • FIG. 3 is a diagram showing log files generated by the log recorder 117 .
  • an electronic money receipt log 1171 contains records on the process of remittance of electronic money from a terminal NWU 2 connected to WAN 10 to a terminal NB 3 and the process of money conversion to cash.
  • a local electronic money generation and transfer log 1172 contains records on the generation and transfer processes of local electronic money.
  • a local electronic money collection and erase log 1173 holds records on the collection and erasure processes of local electronic money.
  • An electronic money payment log 1174 stores records on the remittance process of electronic money.
  • FIG. 4A shows an example in the electronic money receipt log 1171 .
  • the processing date and time field indicates the date and time of acceptance of electronic money at the electronic money content analyzer 112 .
  • the sender field indicates data including the address of the user at the terminal (NWU 2 a or 2 b ) which remitted electronic money.
  • the receiver field shows data including the address of the user at the terminal (NLU 4 a or 4 b ) as the destination of electronic money.
  • the money-received field indicates the nominal value of electronic money.
  • the bank name field indicates data such as the address of the bank office (NB 3 a or 3 b ) where electronic money was cashed.
  • the authentication result field shows information about whether or not electronic money was successfully cashed.
  • FIG. 4B shows an example in the,local electronic money generation and transfer log 1172 .
  • the acceptance number field indicates the acceptance number of local electronic money generated by the local electronic money generator 113 and the receipt of local electronic money is written in the order of generation.
  • the index number field shows the acceptance number at the electronic money receipt log 1171 of electronic money, which was converted into local electronic money.
  • the processing date and time field indicates the dates and times of generation of local electronic money.
  • the sender field indicates the address of the user at the terminal (NWU 2 a or 2 b ) that remitted the electronic money converted to local electronic money.
  • the money receiver field shows data including the address of the user at the receiving terminal (NLU 4 a or 4 b ) of local electronic money.
  • the money-received field indicates the nominal value of local electronic money.
  • the server name field indicates the name of the gateway (GW 1 in this embodiment) which generated local electronic money.
  • the remittance result fields indicate information about whether local electronic money was remitted to the receiver successfully or not.
  • FIG. 4C shows an example in the local electronic money collection and erase log 1173 .
  • the acceptance number field the acceptance number of local electronic money erased by the local electronic money eraser 114 is written in the order of erasure.
  • the index field indicates the acceptance number at the local electronic money generation and transfer log 1172 , of erased local electronic money.
  • the processing date and time field indicates the date and time of erasure of local electronic money.
  • the sender field indicates data including the address of the user at the terminal (NLU 4 a or 4 b ) that remitted local electronic money.
  • the receiver field indicates data such as the address of the user at the terminal (NWU 2 a or 2 b ) as the destination of electronic money converted from local electronic money.
  • the money-received field indicates the nominal value of the erased local electronic money.
  • the server name field the name of the gateway (GW 1 in this embodiment) which erased local electronic money is written.
  • In the erasure result field information about whether or not the local electronic money was erased successfully is written.
  • FIG. 4D shows an example in the electronic money payment log 1174 .
  • the acceptance number field the acceptance number of electronic money sent by the electronic money content analyzer 112 is written in the order of remittance.
  • the index number field indicates the acceptance number, at the local electronic money collection and erasure log 1173 , of local electronic money converted to electronic money.
  • the processing date and time field shows the date and time of remittance of electronic money.
  • the sender field indicates information including the address of the user of the terminal (NLU 4 a or 4 b ) as the source of remittance of local electronic money converted to electronic money is written.
  • the receiver field indicates information such as an address of the user of the terminal (NWU 2 a or 2 b ) being the remittance destination of the local electronic money converted into electronic money.
  • the money received field shows the nominal value of local electronic money converted into electronic money.
  • the bank name field indicates information including the address of the bank office (NB 3 a or 3 b ) that issued the electronic money.
  • the remittance result field indicates information about whether the electronic money was remitted successfully or not.
  • FIG. 5 shows an example of the format of electronic money issued at the terminal NB 3 .
  • the Value field the value of electronic money is written.
  • the Serial field the serial number by which the bank manages the issuance of electronic money is written.
  • the Generator field the address of the bank office that generated electronic money is written.
  • the Signature field indicates a digital signature which was obtained by encrypting the contents of the above-mentioned fields using a secret key that the bank possesses. This digital signature certifies that the bank shown in the Generator field generated electronic money.
  • FIG. 6 shows an example of the format of local electronic money generated by the local electronic money generator 113 shown in FIG. 2.
  • the Value field indicates the value of electronic money converted to local electronic money.
  • the serial field the serial number of this local electronic money is written. This serial number indicates the number in the order of generation at GW 1 and the same number is not used again.
  • Written in the From field is data including the address of the user at the terminal (NWU 2 a or 2 b ) as the source of remittance of electronic money converted into the local electronic money.
  • the To field data including the address of the user at the receiving terminal (NLU 4 a or 4 b ) of local electronic money is written.
  • the Generator field indicates data including the address of the gateway (GW 1 in this embodiment) that issues local electronic money.
  • the Signature field indicates a digital signature which was obtained by encrypting the above-mentioned content of the fields with a secret key possessed by the bank.
  • all data or messages, including electronic money, are subject to encryption processing using the public-key encryption system before they are transmitted on the network.
  • a digital signature obtained by encrypting the data or message with the secret key of the user at the sending terminal is added to each data or message.
  • FIG. 7 is a flowchart for explaining the operation of making remittance from a terminal NWU 2 to a terminal NLU 4 .
  • a user at a terminal NWU 2 sends a connection request message to a terminal NB 3 of the bank where his own account has been opened.
  • the terminal NB 3 sends a connection-acknowledging message to the terminal NWU 2 .
  • a connection is established between the terminal NWU 2 and the terminal NB 3 .
  • the terminal NWU 2 performs a process by a specific function using the amount of money to remit to a terminal NLU 4 and a random number it generates as arguments to thereby generate a string of digits.
  • a message requesting the issuance of electronic money has a generated digit string (blind signature) appended and is sent to the terminal NB 3 (Step 2001 ).
  • the terminal NB 3 withdraws the amount requested from the account of the user at the terminal NWU 2 , changes the money into electronic money as shown in FIG. 5, and after encryption, sends an encrypted electronic money to the terminal NWU 2 (Step 1001 ). Then, NWU 2 releases the connection with the terminal NB 3 .
  • the terminal NWU 2 when receiving electronic money from the terminal NB 3 , sends a connection request message to the terminal NLU 4 as the receiver of remittance (Step 2002 ).
  • This connection request message is received by GW 1 before reaching the terminal NLU 4 .
  • the GW 1 performs a money receiving procedure on behalf of the terminal NLU 4 .
  • GW 1 passes the connection request message through TP 12 a to the electronic money content analyzer 112 of EMMP 11 . Accordingly, the electronic money content analyzer 112 sends a connection-acknowledging message accompanied by a public key of GW 1 to TP 12 a . TP 12 a sends this message received from the content analyzer 112 to the terminal NWU 2 that sent the connection request (Step 3001 ). Thus, a connection is established between GW 1 and the terminal NWU 2 .
  • the terminal NWU 2 when receiving the connection-acknowledging message, encrypts electronic money, which is to be remitted, using a public key attached to the connection-acknowledging message, and sends encrypted electronic money to the terminal NLU 4 as the destination of remittance (Step 2003 ).
  • the encrypted electronic money is received by GW 1 before reaching the terminal NLU 4 , and changed by GW 1 to local electronic money.
  • Local electronic money is transmitted to the terminal NLU 4 as the destination of remittance.
  • GW 1 passes encrypted electronic money through TP 12 a to the electronic money content analyzer 112 of EMMP 11 .
  • the electronic money content analyzer 112 decrypts encrypted electronic money using its own secret key, and checks the name of the bank that issued the electronic money from decrypted electronic money. Then, the electronic money content analyzer 112 sends a connection request message to TP 12 a .
  • TP 12 a sends the message received from the electronic money content analyzer 112 to the terminal NB 3 of the bank revealed at the electronic money content analyzer 112 (Step 3002 ).
  • the terminal NB 3 When receiving the connection request message, the terminal NB 3 sends a connection-acknowledge message along with its own public key to GW 1 that sent the connection request message(Step 1002 ). Consequently, a connection is established between the terminal NB 3 and GW 1 .
  • GW 1 sends the connection-acknowledge message from the terminal NB 3 through TP 12 a to the electronic money content analyzer 112 of EMMP 11 .
  • the electronic money content analyzer 112 encrypts electronic money received from the terminal NWU 2 using a public key attached to the connection-acknowledging message, and sends the encrypted electronic money to TP 12 a .
  • TP 12 a sends encrypted electronic money received from the electronic money content analyzer 112 to the terminal NB 3 (Step 3003 ).
  • the terminal NB 3 When receiving the encrypted electronic money, the terminal NB 3 decrypts the electronic money using its own secret key, and makes a judgment whether or not to approve the receipt of the electronic money by checking the serial number and the digital signature of decrypted electronic money (Step 1003 ). When receipt is rejected as a result of judgement, NB 3 sends a rejection message to GW 1 . After this, NB 3 releases the connection with GW 1 .
  • GW 1 sends a receipt rejection message, which has come from NB 3 , through TP 12 a to the electronic money content analyzer 112 of EMMP 11 .
  • the electronic money content analyzer 112 sends a transaction failure message to TP 12 a .
  • TP 12 a sends the transaction failure message transmitted from the electronic money content analyzer 112 to the terminal NWU 2 that sent the electronic money (Step 3004 ). Subsequently, GW 1 releases the connection with the terminal NWU 2 .
  • the terminal NWU 2 terminates the process after receiving a transaction failure message (Step 2004 ).
  • the terminal NB 3 when it approves the receipt of remittance as a result of judgement, the terminal NB 3 changes electronic money, received from GW 1 , to cash and deposits the cash into the account of the organization to which the user at the terminal NLU 4 belongs. Then, NB 3 sends a receipt success message to GW 1 (Step 1004 ). After this, the terminal NB 3 terminates the process by releasing the connection with GW 1 (Step 1005 ).
  • GW 1 When receiving the receipt success message from the terminal NB 3 , GW 1 sends this message through TP 12 a to the electronic money content analyzer 112 of EMMP 11 . In response to this, the electronic money content analyzer 112 sends a transaction success message to TP 12 a . TP 12 a sends the transaction success message, received from the electronic money content analyzer 112 , to the terminal NWU 2 that sent the electronic money. The connection established between the terminal NWU 2 and GW 1 is then released.
  • the log recorder 117 writes electronic money receipt information in the electronic money receipt log 1171 (Step 3005 ). As shown in FIG. 4A, the acceptance number, processing date and time, sender, receiver, money received, bank name, and receipt success/failure message are written in the related fields.
  • the terminal NWU 2 terminates the process after receiving the transaction success message (Step 2005 ).
  • the electronic money content analyzer 112 of GW 1 notifies the acceptance number, recorded by the log recorder 117 in the electronic money receipt log 1171 , to the local electronic money generator 113 .
  • the local electronic money generator 113 searches the electronic money receipt log 1171 by using the acceptance number received from the electronic money content analyzer 112 , and reads received money information corresponding to the acceptance number.
  • the local electronic money generator 113 generates an amount of local electronic money corresponding to the amount of money received.
  • the log recorder 117 writes information about generation and transfer of local electronic money in the local electronic money generation and transfer log 1172 (Step 3006 ). As shown in FIG.
  • the local electronic money generator 113 of GW 1 sends generated local electronic money along with information written in the local electronic money generation and transfer log 1172 to the local electronic money content analyzer 115 .
  • the local electronic money content analyzer 115 stores local electronic money in a moneybox 1151 of the receiver determined by the supplied information. Then, a message indicating the arrival of local electronic money is sent through TP 12 b to the terminal NLU 4 of the receiver (Step 3007 ). Subsequently, GW 1 releases the connection with the terminal NLU 4 .
  • the log recorder 117 writes a remittance result in the field of remittance result in the local electronic money generation and transfer log 1171 .
  • GW 1 terminates the process (Step 3008 ).
  • the user (a member of the organization) at the terminal NLU 4 that received the message if he wants to use local electronic money, establishes a connection with GW 1 , and sends his own public key to GW 1 (Step 4001 ).
  • GW 1 passes the public key through TP 12 b to the local electronic money content analyzer 115 .
  • the local electronic money content analyzer 115 withdraws local electronic money from the moneybox 1151 of the user at the terminal NLU 4 who sent the public key, and encrypts local electronic money with the public key, and sends the money to the terminal NLU 4 (Step 3009 ).
  • the terminal NLU 4 receives the encrypted local electronic money (Step 4002 ), and stores it in a suitable recording device.
  • the user can use the encrypted local electronic money by decrypting it with his own secret key.
  • FIG. 8 is a flowchart for explaining the operation of sending money from a terminal NLU 4 to a terminal NWU 2 .
  • Step 4101 an example of local electronic money shown in FIG. 6 having a user's digital signature attached is shown in FIG. 9.
  • the terminal NLU 4 sends a connection request message to a terminal NWU 2 as the destination of remittance (Step 4102 ).
  • This connection request message is received by GW 1 before reaching the terminal NWU 2 .
  • GW 1 performs a remittance procedure on behalf of the terminal NLU 4 .
  • GW 1 passes the connection request message through TP 12 b to the local electronic money content analyzer 115 of EMMP 11 .
  • the local electronic money content analyzer 115 sends a connection-acknowledge message accompanied by GW 1 's public key to TP 12 b .
  • TP 12 b sends the message conveyed by the local electronic money content analyzer 115 to the terminal NLU 4 that sent the connection request message (Step 3101 ). Consequently, a connection is established between GW 1 and the terminal NLU 4 .
  • the terminal NLU 4 When receiving the connection-acknowledge message, the terminal NLU 4 encrypts local electronic money, which is to be remitted, with a public key attached to the connection-acknowledge message, and sends the encrypted local electronic money to the terminal NWU 2 as the destination of remittance (Step 4103 ).
  • the encrypted local electronic money is received by GW 1 before reaching the terminal NWU 2 , and is converted into electronic money. This electronic money is sent to the terminal NWU 2 as the destination.
  • GW 1 sends encrypted local electronic money through TP 12 b to the electronic money content analyzer 115 of EMMP 11 .
  • the local electronic money content analyzer 115 decrypts the encrypted local electronic money using its own secret key.
  • GW 1 checks the digital signature attached to decrypted local electronic money against a previously registered public key of a user (a user using a digital signature) at the terminal NLU 4 (Step 3102 ).
  • GW 1 gets the public key transmitted by sending a message requesting the transmission of the public key to the terminal NLU 4 of the user who added the digital signature.
  • the local electronic money content analyzer 115 stores the local electronic money in a moneybox exclusively for abnormal local electronic money, installed inside the moneybox 1151 .
  • GW 1 sends a transaction termination message to TP 12 b .
  • TP 12 b passes the received transaction termination message to the terminal NLU 4 that transmitted the local electronic money.
  • An alarm is issued to notify the manager at GW 1 of the detection of abnormality in the digital signature (Step 3104 ).
  • GW 1 releases the connection with the terminal NLU 4 (Step 3105 ).
  • the terminal NLU 4 terminates the process (Step 4104 ).
  • the local electronic money content analyzer 115 searches the local electronic money generation and transfer log 1172 of the log recorder 117 to obtain a log with the acceptance number that coincides with the serial number of the local electronic money.
  • the local electronic money content analyzer 115 sends the local electronic money to the local electronic money eraser 114 .
  • the local electronic money eraser 114 passes the acceptance number of the local electronic money to the electronic money content analyzer 112 and also passes data and the acceptance number of the local electronic money to the log recorder 117 .
  • the log recorder 117 writes information about local electronic money, received from the local electronic money eraser 114 , in the local electronic money collection and erasure log 1173 (Step 3106 ). As shown in FIG. 4C, the number in the order of processing is written in the field of acceptance number. The serial number (equal to the acceptance number of the local electronic money generation and transfer log 1172 ) is written in the field of index number. The date and time of entry of this information is written in the field of processing date and time. The sender, the receiver and the nominal value of local electronic money are written in the fields of sender, receiver and money received, respectively. At this point in time, no information is written in the fields of money change server and erasure result.
  • the electronic money content analyzer 112 reads information from the local electronic money collection and erasure log 1173 , the information corresponding to the acceptance number received from the local electronic money eraser 114 . Next, the electronic money content analyzer 112 returns the read out information and the acceptance number to the log recorder 117 . In response, the log recorder 117 writes the information about local electronic money, received from the electronic money content analyzer 112 , to the electronic money payment log 1174 (Step 3106 ). As shown in FIG. 4D, the number in the order of processing is written in the field of acceptance number. The serial number of local electronic money (equal to the acceptance number at the local electronic money collection and erasure log 1173 ) is written in the field of index number.
  • the date and time of entry of this information is written in the field of processing date and time.
  • the sender, the receiver and the nominal value of electronic money are written in the fields of the sender, receiver and money received, respectively.
  • no information is written in the fields of bank name and remittance result.
  • the electronic money content analyzer 112 sends a connection request message to TP 12 a .
  • TP 12 a passes the received connection request message to a terminal NB 3 of a bank where an account of the organization to which the user at the terminal NLU 4 belongs has been opened.
  • the terminal NB 3 sends a connection-acknowledging message to the source of the connection request message.
  • a connection is established between GW 1 and the terminal NB 3 .
  • the electronic money content analyzer 112 performs a process with a specific function using the amount of money to remit (the nominal value of local electronic money written on the electronic money payment log 1174 ) and a random number it generates as arguments to thereby generate a string of digits.
  • the electronic money content analyzer 112 sends a message requesting the transmission of electronic money added with the above-mentioned string of digits (a blind signature) to the terminal NB 3 (Step 3107 ).
  • the terminal NB 3 When receiving this message to transmit electronic money, the terminal NB 3 withdraws the requested amount of money from the account of the user of GW 1 , that is, the organization in which LAN 20 is formed, and after converting the money into electronic money as shown in FIG. 5, NB 3 encrypts electronic money and sends it to GW 1 (Step 1101 ).
  • GW 1 on receiving electronic money from the terminal NB 3 , sends a connection request message to the terminal NWU 2 being the destination of remittance (Step 3109 ).
  • the terminal NWU 2 on receiving a connection request message, sends a connection-acknowledging message with an accompanying public key to GW 1 that gave NWU 2 the connection request message (Step 2101 ). Thus, a connection is established between GW 1 and the terminal NWU 2 .
  • GW 1 on receiving the connection-acknowledging message, encrypts a remittance amount of electronic money using the public key that came with the connection-acknowledging message, and sends encrypted electronic money to the terminal NWU 2 being the destination of remittance (Step 3110 ).
  • the terminal NWU 2 on receiving encrypted electronic money, decrypts the electronic money using its own secret key to thereby find a bank name that issued the electronic money from the decrypted electronic money. Then, NWU 2 sends a connection request message to a terminal NB 3 of that bank.
  • the terminal NB 3 on receiving the connection request message, sends a connection-acknowledging message with its own public key to the terminal NWU 2 that sent the connection request message. As a result, a connection is established between the terminal NWU 2 and the terminal NB 3 .
  • the terminal NWU 2 encrypts electronic money received from GW 1 with a public key that came with the connection-acknowledging message, and sends the encrypted electronic money to the terminal NB 3 (Step 2102 ).
  • the terminal NB 3 on receiving the encrypted electronic money, decrypts the electronic money using its own secret key.
  • the terminal NB 3 checks the serial number and a digital signature on the decrypted electronic money and thereby judges whether or not to approve the receipt of the electronic money (Step 1102 ). As a result of the check, if it rejects the receipt of electronic money, NB 3 sends a reject message to the terminal NWU 2 . Subsequently, NB 3 releases the connection with NWU 2 .
  • the terminal NWU 2 sends a transaction failure message to GW 1 (Step 2103 ), and then terminates the process.
  • GW 1 passes the transaction failure message, received from the terminal NWU 2 , through TP 12 a to the electronic money content analyzer 112 .
  • the electronic money content analyzer 112 sends this information to the log recorder 117 and the local electronic money content analyzer 115 .
  • the log recorder 117 writes “FAILURE” in the field of the remittance result of the electronic money payment log 1174 and the fields of erasure result of the local electronic money collection and erasure log 1173 (Steps 3111 and 3112 ).
  • the local electronic money content analyzer 115 returns local electronic money corresponding to the amount of electronic money involved in the transaction failure to the moneybox 1151 for the terminal NLU 4 of the money sender.
  • GW 1 sends the money sender at the terminal NLU 4 a message indicating that the local electronic money has been returned (Step 3112 ).
  • GW 1 then terminates the process by releasing the connection with the terminal NLU 4 (Step 3113 ).
  • the terminal NLU 4 terminates the process, when it receives the message indicating that the local electronic money has been returned (Step 4105 ).
  • the terminal NB 3 If the terminal NB 3 permits the receipt of the electronic money as a result of the check, it changes the electronic money received from the terminal NWU 2 into cash, has the cash deposited in the account of the user using the terminal NWU 2 , and sends a receipt success message to the terminal NWU 2 . Then, NB 3 terminates the process by releasing the connection with the terminal NWU 2 (Step 1103 ).
  • the terminal NWU 2 sends a transaction success message to GW 1 , and terminates the process by releasing the connection with GW 1 (Step 2104 ).
  • GW 1 When receiving the transaction success message from the terminal NWU 2 , GW 1 passes this message, sent from the terminal NWU 2 through TP 12 a , to the electronic money content analyzer 112 . In response to this, the electronic money content analyzer 112 passes this information to the log recorder 117 . The log recorder 117 writes “SUCCESS” in the remittance result field of the electronic money payment log 1174 and also in the erasure result field of the local electronic money collection and erasure log 1173 (Steps 3114 and 3115 ). Then, GW 1 terminates the process by releasing the connection with the terminal NLU 4 (Step 3116 ).
  • FIG. 10 is a flowchart for explaining the operation of remittance from a terminal NLU 4 a to a terminal NLU 4 b.
  • the terminal NLU 4 a sends a connection request message to the terminal NLU 4 b being the destination of remittance (Step 4201 ).
  • the terminal NLU 4 b when receiving the connection request message, sends a connection-acknowledging message with its own public key to the terminal NLU 4 a that gave NLU 4 b the connection request message (Step 4301 ). Thus, a connection is established between the terminals NLU 4 a and NLU 4 b.
  • the terminal NLU 4 a using its own secret key, decrypts the encrypted local electronic money which has been stored in a storage device, and adds a digital signature to the local electronic money by using the secret key (Step 4202 ). Then, the terminal NLU 4 a encrypts the local electronic money using a public key received from the terminal NLU 4 b , and sends the encrypted local electronic money to the terminal NLU 4 b (Step 4203 ). After this, NLU 4 a releases the connection with the terminal NLU 4 b.
  • the terminal NLU 4 b receives the encrypted local electronic money (Step 4302 ), and stores it in a suitable storage device.
  • the user can use the encrypted local electronic money by decrypting it using its own secret key.
  • electronic money that can be handled by the terminals NLU 4 connected to LAN 20 is limited to a kind of electronic money current only in LAN 20 . More specifically, the electronic money is limited to local electronic money, a different kind of electronic money from electronic money issued by terminals NB 3 .
  • the electronic money management apparatus which has a gateway adapted to perform a money change function and is located between LAN 20 and WAN 10 .
  • the present invention is not limited to this arrangement, but the apparatus (a network apparatus, such as a gateway or a router), which can intercept electronic money flowing from one network to another, should be provided with a money change function.
  • GW 1 is charged with not only with vicariously executing money remittance but also changing received local electronic money for local electronic money of proper nominal values and making remittance.
  • FIG. 11 is a flowchart for explaining the operation of remittance from the terminal NLU 4 a to the terminal NLU 4 b in the first modification of the present embodiment.
  • the terminal NLU 4 a retrieves a plurality of local electronic money stored in a storage device, creates a message including the local electronic money added with a script of the contents of a request to GW 1 and a digital signature, and sends the message to GW 1 (Step 4401 ).
  • FIG. 12 shows an example of a message to be sent by the terminal NLU 4 on the sender side to GW 1 in the first modification of the present embodiment.
  • reference numerals 701 to 703 denote a plurality of local electronic money retrieved from the storage device.
  • FIG. 12 shows the same format (but in a simple form) for these electronic money as in FIG. 6.
  • Reference numeral 704 denotes a script and a digital signature added to local electronic money 701 to 703 .
  • the digital signature at the end of the message is formed by encryption of the message from its head portion till the end of the script using a secret key of the user at the terminal NLU 4 a as the source of remittance.
  • GW 1 When receiving the message from the terminal NLU 4 a , GW 1 passes the message through TP 12 b to the local electronic money content analyzer 115 . In response to this, the local electronic money content analyzer 115 checks the digital signature attached at the end of the message (Step 3201 ).
  • GW 1 If abnormality is found by checking the digital signature, GW 1 performs an abnormal termination routine to close the process (Step 3202 ). On the other hand, when abnormality is not found, the local electronic money content analyzer 115 checks the digital signature on each piece of local electronic money (reference numerals 701 to 703 in FIG. 12) included in the message received (Step 3203 ).
  • an abnormal termination routine is performed to terminate the process (Step 3202 ).
  • the local electronic money content analyzer 115 searches the local electronic money generation and transfer log 1172 to retrieve a log with an acceptance number coincident with the serial number of each piece of local electronic money included in the message received. Then, the money content analyzer 115 checks for double use or the like of local electronic money from data on the log retrieved (Step 3204 ).
  • GW 1 performs an abnormal termination routine to close the process (Step 3202 ). If no abnormality is found, the local electronic money content analyzer 115 transfers the local electronic money received and its acceptance number to the local electronic money eraser 114 . The log recorder 117 writes information regarding each local electronic money included in the message received by the local electronic money content analyzer 115 in the local electronic money collection and erasure log 1173 (Step 3205 ). At this point, no data is written in the fields of the money change server and the erasure result in the local electronic money collection and erasure log 1173 . In addition, the local electronic money is not erased.
  • the local electronic money eraser 114 On receiving local electronic money and its acceptance number from the money content analyzer 115 , the local electronic money eraser 114 sends a request to the local electronic money generator 113 to generate local electronic money.
  • the request includes information about the receiver, sender, money received, and a script shown in FIG. 12.
  • the local electronic money generator 113 generates local electronic money according to the request from the local electronic money eraser 114 (specifically, the contents of the script in FIG. 12), adds information about destinations specified by the request ( ⁇ 1,000,000 to the terminal NLU 4 b; ⁇ 208,000 to be returned to the terminal NLU 4 a in the example in FIG. 12) to the local electronic money, and sends the local electronic money to the local electronic money content analyzer 115 .
  • the log recorder 117 records information required for generation and management of local electronic money to the local electronic money generation and transfer log 1172 . Subsequently, the local electronic money generator 113 sends a message to the local electronic money eraser 114 .
  • the local electronic money eraser 114 erases the local electronic money sent from the terminal NLU 4 a of the sender.
  • the log recorder 117 writes information in the empty fields, that is, in the money change server field and the erasure result field in the local electronic money collection and erasure log 1173 .
  • the local electronic money content analyzer 115 stores the local electronic money received from the local electronic money generator 113 into the moneybox 1151 of the user specified by the destinations information added to the local electronic money.
  • FIG. 13 shows, in the first modification of the present embodiment, the local electronic money to be deposited in the moneybox 1151 as the destination of remittance according to the message shown in FIG. 12.
  • local electronic money worth ⁇ 1,000,000 is transferred to the terminal NLU 4 b
  • local electronic money worth ⁇ 208,000 is transferred to the terminal NLU 4 a .
  • the format of the local electronic money is the same as in FIG. 6, but is illustrated here in a simplified form.
  • the local electronic money content analyzer 115 sends a paying-in message for the terminal NLU 4 of destination to TP 12 b .
  • TP 12 b sends the paying-in message to the destination (Step 3206 ).
  • GW 1 then terminates the process (Step 3207 ).
  • the terminals NLU 4 a and NLU 4 b can confirm that local electronic money has been paid in, by receiving a paying-in message from GW 1 . (Steps 4402 and 4501 )
  • the users of the terminals NLU 4 can use electronic money of various nominal values by having electronic money exchanged by GW 1 into electronic money of desired nominal values.
  • the establishment operation of a connection between a terminal NLU 4 and GW 1 in the present embodiment applies and its description is omitted.
  • GW 1 when money is sent from a terminal NLU 4 connected to LAN 20 to a terminal NWU 2 connected to WAN 10 , description has been given of a case where GW 1 performs the remittance procedure on behalf of the terminal NLU 4 .
  • the present invention is not limited to this method.
  • GW 1 may be arranged to manage the value of money that each user at a terminal NLU 4 connected to LAN 20 sends to a terminal NWU 2 connected to WAN 10 , in addition to its vicarious procedures of remittance.
  • GW 1 receives through TP 12 b local electronic money sent from the terminal NLU 4 and passes it to the local electronic money content analyzer 115 .
  • the local electronic money content analyzer 115 reads the nominal value from the Value field and information about the sender from the To field on the received local electronic money (FIG. 6), and examines a limit of remittance imposed on the sending user at the terminal NLU 4 stored in the permission file 1152 .
  • FIG. 14 shows an example of the data stored in the permission file 1152 .
  • the name of the user at the terminal NLU 4 that is, a member of the organization having LAN 20 formed therein, is written in the user field.
  • the maximum amount that can be sent by the user at a time is written in the maximum remittance amount field.
  • the address of the receiver to which the user can send money is written in the receiver address field.
  • the local electronic money content analyzer 115 stores the money in the money box 1151 of the user. Then, the content analyzer 115 sends a repayment message through TP 12 b to the user at the terminal NLU 4 . If the local electronic money content analyzer 115 decides that the upper limit is not exceeded, GW 1 performs the remittance procedure on behalf of the NLU 4 by following the same steps as in the present embodiment described above (by procedure from and after Step 3102 on in FIG. 8).
  • the second modification it may be so arranged that even if the sum of remittance is larger than the permissible upper limit, he can still make a remittance if he obtains approval from another member (his superior officer, for example) of the organization.
  • FIG. 15 is a flowchart for explaining the operation when a user at a terminal NLU 4 a obtains approval from a user at a terminal NLU 4 b in the second modification.
  • the user at the terminal NLU 4 a retrieves local electronic money that he is going to send outside the organization from a storage device, and attaches a remittance authorization request message, including a script and a digital signature, to the local electronic money, and sends the money to the terminal NLU 4 b to obtain approval (Step 4601 ).
  • FIG. 16 is a diagram showing an example of local electronic money with a remittance authorization request message attached thereto in the second modification.
  • reference numeral 711 denotes local electronic money retrieved from the storage device.
  • the format of this electronic money is the same as that in FIG. 6, but isillustrated here in a simple form.
  • Reference numeral 712 denotes a remittance authorization request message (a script and a digital signature) attached to the local electronic money 711 .
  • the script “This is to request that approval be given to my making a remittance as per settlement No. 35429 .” following the comment is sent as a message to the destination of remittance. The user at the receiving terminal reads this message and decides whether or not to approve the request.
  • the digital signature at the end of the message was formed by encrypting the contents from the beginning of the message to the end of script using a secret key of the user at the sending terminal NLU 4 a.
  • the user at the terminal NLU 4 b reads the comment of the script attached to the local electronic money received from the terminal NLU 4 a , and decides whether or not to grant authorization to remit this local electronic money (Step 4701 ). If authorization to remit is not granted (Step 4702 ), the local electronic money is sent back to the terminal NLU 4 a (Step 4703 ). In this case, even if the user at the terminal NLU 4 a wants to send the local electronic money to a user outside the organization (a user at the terminal NWU 2 ), money change to electronic money is refused by GW 1 , so that settlement is impossible. Therefore, the terminal NLU 4 a has to close the process (Step 4602 ).
  • Step 4702 when the authorization to remit money is granted (Step 4702 ), the user at the terminal NLU 4 b attaches an authorization grant message, consisting of a script and a digital signature, to the local electronic money having an authorization request message attached thereto and received from the terminal NLU 4 a , and sends the local electronic money back to the terminal NLU 4 a (Step 4704 ).
  • an authorization grant message consisting of a script and a digital signature
  • FIG. 17 is a diagram showing an example of local electronic money with an accompanying authorization grant message in the second modification.
  • reference numeral 713 denotes an authorization grant message.
  • Reference numerals 711 and 712 denote local electronic money accompanying authorization request message sent from the terminal NLU 4 a , which are identical with those in FIG. 16.
  • the script “message accepted” following the comment is sent to the terminal NLU 4 a .
  • the user at the terminal NLU 4 a knows that he is permitted to send money.
  • a money change server is used to change electronic money current only within one network into electronic money current within another network.

Abstract

According to the present invention, when electronic money is sent from a given network to another network, a money change apparatus performs a money change process to change electronic money current on the given network into electronic money current on another network, and therefore when a user of the given network uses a settling process, by managing this money change process, it is possible to manage the interchange of electronic money between each of the users of the given network and each of the users of another network without affecting the working environment of electronic commerce. Electronic money current on LAN20 is referred to as local electronic money current only on the network. When a terminal NLU4 connected to LAN20 sends money to a terminal NWU2 connected to WAN10, GW1 for controlling the flow of data between LAN20 and WAN10 receives local electronic money sent from the terminal NLU4, changes the local electronic money into electronic money current on WAN10, then sends the electronic money to the terminal NWU2, and when a terminal NWU2 sends money to a terminal NLU4, GW1 receives electronic money sent from the terminal NWU2, changes the electronic money into local electronic money and sends the local electronic money to the terminal NLU4.

Description

    BACKGROUND OF THE INVENTION
  • 1. Field of the Invention [0001]
  • The present invention relates to technology for managing electronic money that circulates on networks, such as the Internet. [0002]
  • 2. Description of Related Art [0003]
  • Electronic commerce (EC) on networks such as the Internet is now spreading widely. Under the circumstances, technology has been proposed for settling accounts in electronic commerce on a network. This technology is called electronic settlement. Some systems and protocols proposed so far are listed in the following. [0004]
  • (1) First Virtual [0005]
  • An electronic settlement system proposed by First Virtual. Credit card settlement is used. It is a precondition that only digital information goods transferable on a network are dealt with. Electronic mail is used to give and accept orders, but facsimile is used to transmit card numbers for security reasons. [0006]
  • (2) CyberCash [0007]
  • An electronic settlement system proposed by CyberCash. Credit card settlement is used. In addition to giving and accepting orders, networks such as the Internet are used to transmit information about card numbers or the like, which need to be safeguarded. Therefore, a powerful encryption process is performed on those items of information before transmission to ensure security. [0008]
  • (3) SET (Secure Electronic Transaction) [0009]
  • This is an electronic settlement protocol, proposed by Visa International, Master Card International, etc. Credit card settlement is used. As in CyberCash, a strong encryption process is conducted on information about giving and accepting orders and card numbers or the like before transmission. [0010]
  • Furthermore, SET provides means for authenticating credit card users and means for authenticating member stores where the credit cards can be used. [0011]
  • (4) Ecash [0012]
  • Ecash is an electronic settlement system proposed by DigiCash and uses the electronic money digital cash system. More specifically, cash settlement is made by electronic money having a value equal to an actual paper currency. The user draws electronic money corresponding to the sum of payment from the storage medium, and sends the money to the recipient. [0013]
  • The above examples (1) to (3) are applications of settlement by credit card to settlement in electronic commerce. Therefore, credit cards are required to settle accounts. Information about a card number or the like, which needs to be protected, must be sent in one form or another. Moreover, the flow of money (who spent how much, and where) is known to a third party, in other words, it shows low anonymity. [0014]
  • In contrast to these, ecash in (4) applies cash settlement by bills and coins for settlement in electronic commerce. Unlike (1) to (3) above, credit cards are not required. Like in cash settlement by bills or coins, it is difficult for a third party to detect the flow of money (strong anonymity). [0015]
  • As has been described, ecash is highly convenient because it does not use credit cards as a means of settlement. Technology, like ecash, which realizes settlement on a network by electronic money, is generally called network type electronic money. Unless otherwise defined, the network type electronic money is hereafter referred to simply as electronic money. [0016]
  • SUMMARY OF THE INVENTION
  • As described in RELATED ART above, there are a variety of kinds of electronic money. It can easily be foreseen that many other kinds of electronic money will appear and circulate intermingling on the networks in the future. At present, however, electronic commerce is impossible between the users of different kinds of electronic money, a fact which greatly reduces the effectiveness of electronic settlement. [0017]
  • With the progress of electronic money, it will become possible for individual persons to easily remit large sums of money across the boundaries of countries. Under such a situation, there are possibilities for the management of currency transfer from one country to another to get out of control, which easily gives rise to financial insecurity, such as inflation or deflation on an international scale. [0018]
  • As described above, electronic money is characterized by its strong protection of anonymity of the user. However, in the case of the conventional ecash described above, when members of organizations, such as business firms, use electronic money, owing to its characteristic, it is anticipated that problems will arise which would not be so troublesome when individual persons use electronic money. To cite some examples, [0019]
  • (1) When a member of an organization settles an account with a user outside the organization by using electronic money, the administrative department (e.g., the accounting or materials department) of the organization is unable to manage the settlement of the account. [0020]
  • (2) Since it becomes possible to send remittance outside the organization easily by the use of electronic money, the amount of damage may run up to an alarming sum in the case of a remittance error, embezzlement or fraud. [0021]
  • With the conventional form of ecash, if a payment is made by electronic money on hand, a sum of payment is collected as a combination of different nominal values of electronic money and the money is sent. For this reason, the user must always be cognizant of the numbers of different pieces of electronic money of different nominal values that he possesses. [0022]
  • The present invention has been made with the above problems taken into consideration, and has its object to enable management of the transfer of electronic money without affecting the working environment of electronic commerce when settlement systems for different kinds of electronic money are used. [0023]
  • To solve the above problems, the present invention provides a method of managing electronic money in a network apparatus installed between a first network and a second network, wherein electronic money circulating only within the first network is designated as electronic money current on the first network (This electronic money is hereafter referred to as electronic money A), the method comprising the steps of: [0024]
  • when a first terminal connected to the first network sends money to a second terminal connected to the second network, receiving electronic money A sent from the first terminal, changing the electronic money A into electronic money current on the second network (The latter electronic money is hereafter referred to as electronic money B), and sending electronic money B to said second terminal; and [0025]
  • when the second terminal sends money to the first terminal, receiving electronic money B sent from the second terminal, changing the electronic money B into electronic money A, and sending electronic money A to the first terminal. [0026]
  • In the above case, the network apparatus is a gateway or a router, for example. [0027]
  • In the present invention, electronic money that can be handled by the first terminal connected to a certain network is assumed to be electronic money A current in that network, in other words, electronic money A is assumed to be a different kind of electronic money from electronic money B current on another network. According to the present invention, a network apparatus connected both to one network and another network is charged with performing a money change function between electronic money A and electronic money B. By this arrangement, the money change process is always performed by the network apparatus during the settlement process when electronic commerce is performed between the first and the second terminals. [0028]
  • Therefore, according to the present invention, when a user of the first terminal connected to a certain network conducts electronic commerce with a user of the second terminal connected to the other network, the network apparatus invariably performs the money change process between electronic money A and electronic money B to settle accounts. Accordingly, the organization (the administrative department, namely, the accounting or materials department) that manages the users connected to that certain network can manage the settlement of accounts between the user at the first terminal connected to the certain network and the user at the second terminal connected to the other network by, for example, recording a history of the money change process at the network apparatus and monitoring the records. As a result, it is possible to minimize trouble in electronic commerce, such as errors in remittance or embezzlement. [0029]
  • Local electronic money can be transferred directly between the users of the terminals connected to a certain network without intervention of the network apparatus, so that anonymity as the advantage in payment by electronic money can be maintained. [0030]
  • In the present invention, when the first terminal sends money to the second terminal, if the nominal value of electronic money A sent from the first terminal is larger than the amount of money previously allotted to the user at the first terminal, the money change process may be designed such that electronic money A is sent back to the first terminal without being converted into electronic money B. [0031]
  • By this arrangement, in electronic commerce between the user at the first terminal connected to the certain network and the user at the second terminal connected to the other network, trouble in electronic commerce, such as an error in remittance or embezzlement, can be further minimized efficiently. [0032]
  • Further, in the present invention, the network apparatus may be so arranged as to change electronic money A sent from the first terminal into a desired combination of different nominal values of electronic money A in response to a command from the first terminal. [0033]
  • In this case, the user at the first terminal can get a desired amount of electronic money A generated even if he is not aware of the quantities of different nominal values of electronic money A that he possesses.[0034]
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • FIG. 1 is a schematic configuration diagram of a network apparatus to which an embodiment of the present invention is applied; [0035]
  • FIG. 2 is a schematic block diagram showing the function realized by a CPU executing an electronic money management program in an information processing apparatus having a communication function using a network; [0036]
  • FIG. 3 is a diagram showing log files generated by a [0037] log recorder 117;
  • FIG. 4 is a diagram showing an example of the content of each log file in FIG. 3; FIG. 4A shows an example of an electronic [0038] money receipt log 1171; FIG. 4B shows an example of a local electronic money generation/sending log 1172; FIG. 4C shows an example of a local electronic money collection/deletion log 1173; and FIG. 4D shows an example of an electronic money payment log 1174;
  • FIG. 5 is an example of a format of electronic money issued by terminal NB[0039] 3;
  • FIG. 6 is an example of a format of electronic money generated by a local [0040] electronic money generator 113 in FIG. 2;
  • FIG. 7 is a flowchart for explaining the operation of remittance from terminal NWU[0041] 2 to terminal NLU4;
  • FIG. 8 is a flowchart for explaining the operation of remittance from terminal NLU[0042] 4 to terminal NWU2;
  • FIG. 9 is a diagram showing an example of local electronic money in FIG. 6 added with a user's digital signature; [0043]
  • FIG. 10 is a flowchart for explaining the operation of remittance from terminal NLU[0044] 4 a to terminal NWU4 b;
  • FIG. 11 is a flowchart for explaining the operation of remittance from terminal NLU[0045] 4 a to terminal NLU4 b in a first modification of the embodiment;
  • FIG. 12 is a diagram showing an example of a message sent from terminal NLU[0046] 4 on the sender side to terminal GW1 in the first modification of the embodiment of the present invention;
  • FIG. 13 is a diagram showing local electronic money paid into a [0047] moneybox 1151 of the remittance destination as directed by the message shown in FIG. 12;
  • FIG. 14 is a diagram showing an example of the content stored in a [0048] permission file 1152;
  • FIG. 15 is a flowchart for explaining the operation for the user at the terminal NLU[0049] 4 a to obtain authority from the user at the terminal NLU4 b in a second modification of the embodiment of the present invention;
  • FIG. 16 is a diagram showing an example of local electronic money accompanied by a message asking for authority to remit in the second modification of the embodiment of the present invention; and [0050]
  • FIG. 17 is a diagram showing an example of local electronic money accompanied by an authority transfer message in the second modification of the embodiment of the present invention.[0051]
  • DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
  • A preferred embodiment of the present invention will be described in the following. [0052]
  • FIG. 1 is a schematic configuration diagram of the network apparatus to which a preferred embodiment of the present invention is applied. [0053]
  • WAN[0054] 10 denotes a Wide Area Network, LAN20 denotes a Local Area Network, and GW1 denotes a gateway located between WAN10 and LAN20. NB's 3 a, 3 b are terminals of a bank issuing electronic money, and are connected to WAN10 (hereafter NB's 3 a, 3 b are referred to merely as NB3). NMU's 2 a, 2 b and NLU's 4 a, 4 b are terminals of the users of an accounts settling system by electronic money. NWU's 2 a, 2 b (hereafter referred to also as NWU2) are connected to WAN10, while NLU's 4 a, 4 b (hereafter referred to also as NLU4) are connected to LAN20. In this embodiment, terminals NLU4 connected to LAN20 are assumed to be terminals used by users of an organization (a business firm, for example), and terminals NWU2 connected to WAN10 are assumed to be terminals used by users outside the organization. In other words, LAN20 is formed within an organization.
  • In this embodiment, electronic money that can be handled by the terminals NLU[0055] 4 connected to LAN20 is limited to electronic money that is current only within LAN20, namely, a kind of electronic money that is different from electronic money issued by the terminal NB3 (hereafter electronic money current only within LAN20 is referred to as local electronic money, while electronic money issued by the terminal NB3 is referred to simply as electronic money.) In this embodiment, GW1 is charged with performing a money change function between electronic money and local electronic money.
  • Under this arrangement, in an electronic transaction conducted between the terminals NLU[0056] 4 a and NLU4 b connected to LAN20, payment is made directly by local electronic money. Furthermore, in an electronic transaction between a terminal NLU4 connected to LAN20 and a terminal NWU2 connected to WAN10, a money change process is invariably carried out at GW1.
  • More specifically, when money is remitted from a terminal NLU[0057] 4 to a terminal NWU2, GW1 intercepts local electronic money sent from the terminal NLU4, changes the local electronic money into the corresponding amount of electronic money, and sends it to the terminal NWU2. On the other hand, when a terminal NWU2 remits money to a terminal NLU4, GW1 intercepts electronic money sent from the terminal NWU2 and changes the electronic money into the corresponding amount of local electronic money. GW1 then sends the local electronic money to the terminal NLU4.
  • Therefore, in this embodiment, when a member of an organization conducts electronic commerce with a user outside the organization, a money change process is always performed at GW[0058] 1 between electronic money and local electronic money. For this reason, the administrative department (accounting or materials) of the organization can manage the settling process between a member of the organization and a user outside the organization by monitoring the money change process at GW1. Because of this, it is possible to minimize damage caused by remittance errors, embezzlement, or the like.
  • Local electronic money can be transferred directly between the members of the organization without intervention by GW[0059] 1, so that anonymity as the advantage in settling accounts by electronic money can be maintained.
  • A detailed description will now be given of the components of the network apparatus to which this preferred embodiment is applied. [0060]
  • The terminals NB[0061] 3 of the bank that issues electronic money will first be discussed. It is assumed that a user at a terminal NWU2 has had an account opened and an organization in which LAN20 has been established has had its account opened at this bank.
  • Each of the terminals NB[0062] 3 withdraws cash from the customer's account and changes cash into electronic money, or changes electronic money into cash and deposits cash in the customer's account.
  • More specifically, in response to a command sent from the terminal NWU[0063] 2 through WAN10, the terminal NB3 withdraws cash from the account of the user at the terminal NWU2, changes cash into electronic money, and sends electronic money through WAN10 to the terminal NWU2. Also, the terminal NB3 changes electronic money sent through WAN10 from the terminal NWU2 into cash, and deposits cash into the account of the user at the terminal NWU2.
  • Similarly, in response to a command sent through WAN[0064] 10 from GW1, NB3 withdraws cash from the account of the organization in which LAN20 is set up, changes cash into electronic money, and sends it through WAN10 to GW1. Furthermore, NB3 changes electronic money remitted through WAN10 from GW1 into cash, and deposits it into the account of the organization having LAN20 formed therein.
  • In addition, the terminal NB[0065] 3 performs a certification process for electronic money sent and an authentication process on electronic money received.
  • The terminal NB[0066] 3 is basically the same as a terminal of a bank used for the electronic money digital cash system including ecash that has been described in the RELATED ART above. The terminal NB3 can be realized by a CPU executing a program loaded in memory from a recording medium, such as a magnetic disk in an information processing apparatus including a function of transferring electronic money on a network.
  • Description will next be given of the terminal NWU[0067] 2 operated by a user not belonging to the organization including LAN20.
  • The NWU[0068] 2 calls on a terminal NB3 to withdraw cash from a designated account and change it into electronic money, or sends electronic money to the terminal NB3, and directs it to change to cash and deposit the cash into a designated account.
  • The terminal NWU[0069] 2 is basically the same as a user's terminal which is used for utilizing the electronic money digital cash system, such as ecash described in the RELATED ART above. The terminal NWU2 can be realized by a CPU executing a predetermined program loaded in memory from a recording medium, such as a magnetic disk, in an information processing apparatus including a function of transferring electronic money on a network.
  • Description will next be given of the terminal NLU[0070] 4 used by a member of an organization incorporating LAN20.
  • The NLU[0071] 4 is basically the same as the terminal NWU2. It should be noted that electronic money that can be handled by the terminal NWU2 is electronic money issued by the terminal NB3, while electronic money that can be handled by the NWU2 is local electronic money current only within LAN20.
  • As mentioned earlier, GW[0072] 1 performs a money change process between local electronic money and electronic money, for which reason the terminal NLU4 can execute settlement processes with the other parties to electronic commerce without worrying about whether the other party is at a terminal of LAN20 or WAN10.
  • Description will now be given of GW[0073] 1 which performs the money change process between local electronic money and electronic money.
  • GW[0074] 1 has a function of controlling data transmitted between WAN10 and LAN20. This function is realized by a transport programs TP12 a and 12 b loaded into memory by CPU from a recording medium, such as a magnetic disk, in an information processing apparatus incorporating a function of communication on a network as shown in FIG. 1. The TP12 a relays data and messages exchanged with the terminals of WAN10 to a specified program (EMMP11, for example, which will be described later). On the other hand, TP12B relays data and messages exchanged with the terminals of LAN20 to a specified program (EMMP11, described later). These functions are the same as those in an ordinary gateway.
  • In addition to these functions, GW[0075] 1 in this embodiment further includes a function of controlling electronic money held by the organization using LAN20 (including the money change process between local electronic money and electronic money). This function is realized by a CPU executing an electronic money management program EMMP11 loaded into memory from a recording medium, such as a magnetic disk, in an information processing apparatus having a function of communication on a network as illustrated in FIG. 1.
  • FIG. 2 is a schematic block diagram showing the functions realized by a CPU executing the electronic money management program EMMP[0076] 11 in an information processing apparatus having a function of communication on a network.
  • An electronic [0077] money content analyzer 112 analyzes electronic money received from a terminal NWU2, and sends the money to a terminal NB3. The content analyzer 112 requests the terminal NB3 to change the electronic money into cash and deposit the cash in the account. The content analyzer 112 passes information obtained by analysis of the electronic money from the terminal NWU2 to a local electronic money generator 113. According to information from a local electronic money eraser 114, the content analyzer 112 requests the terminal NB3 to withdraw an amount of cash specified by the information from the account and change it into electronic money. The content analyzer 112 receives electronic money from the terminal NB3, and sends it to the terminal NWU2.
  • On the basis of information from the electronic [0078] money content analyzer 112, the local electronic money generator 113 generates an amount of local electronic money corresponding to electronic money received from the terminal NWU2.
  • A local electronic [0079] money content analyzer 115 contains a moneybox 1151 for accommodating local electronic money held by a member of the organization having LAN20, and a permission file 1152 including information, such as the amount of local electronic money that the member can handle.
  • The local electronic [0080] money content analyzer 115 stores local electronic money generated by the local electronic money generator 113 in a moneybox 1151 corresponding to the user of a terminal NLU4 being a receiver (a member of the organization having LAN20), and also sends a notification of this to the terminal of the receiver. Furthermore, the local electronic money content analyzer 115 analyzes local electronic money received from the terminal NLU4 by referring to the permission file 1152 and log recorder 117, and sends analysis information to a local electronic money eraser 114.
  • The local [0081] electronic money eraser 114, on the basis of information from the local electronic money content analyzer 115, erases local electronic money corresponding to an amount, specified by the information, from the moneybox 1151 specified by the information, and sends a notification of this to the electronic money content analyzer 112.
  • The [0082] log recorder 117 records the processes of the components shown in FIG. 2.
  • FIG. 3 is a diagram showing log files generated by the [0083] log recorder 117.
  • In FIG. 3, an electronic [0084] money receipt log 1171 contains records on the process of remittance of electronic money from a terminal NWU2 connected to WAN10 to a terminal NB3 and the process of money conversion to cash. A local electronic money generation and transfer log 1172 contains records on the generation and transfer processes of local electronic money. A local electronic money collection and erase log 1173 holds records on the collection and erasure processes of local electronic money. An electronic money payment log 1174 stores records on the remittance process of electronic money.
  • Those log files are described in the following. [0085]
  • FIG. 4A shows an example in the electronic [0086] money receipt log 1171.
  • In FIG. 4A, in the acceptance number field, the acceptance number of electronic money received at the electronic [0087] money content analyzer 112 is written in the order of acceptance. The processing date and time field indicates the date and time of acceptance of electronic money at the electronic money content analyzer 112. The sender field indicates data including the address of the user at the terminal (NWU2 a or 2 b) which remitted electronic money. The receiver field shows data including the address of the user at the terminal (NLU4 a or 4 b) as the destination of electronic money. The money-received field indicates the nominal value of electronic money. The bank name field indicates data such as the address of the bank office (NB3 a or 3 b) where electronic money was cashed. The authentication result field shows information about whether or not electronic money was successfully cashed.
  • FIG. 4B shows an example in the,local electronic money generation and [0088] transfer log 1172.
  • In FIG. 4B, the acceptance number field indicates the acceptance number of local electronic money generated by the local [0089] electronic money generator 113 and the receipt of local electronic money is written in the order of generation. The index number field shows the acceptance number at the electronic money receipt log 1171 of electronic money, which was converted into local electronic money. The processing date and time field indicates the dates and times of generation of local electronic money. The sender field indicates the address of the user at the terminal (NWU2 a or 2 b) that remitted the electronic money converted to local electronic money. The money receiver field shows data including the address of the user at the receiving terminal (NLU4 a or 4 b) of local electronic money. The money-received field indicates the nominal value of local electronic money. The server name field indicates the name of the gateway (GW1 in this embodiment) which generated local electronic money. The remittance result fields indicate information about whether local electronic money was remitted to the receiver successfully or not.
  • FIG. 4C shows an example in the local electronic money collection and erase [0090] log 1173.
  • In FIG. 4C, in the acceptance number field, the acceptance number of local electronic money erased by the local [0091] electronic money eraser 114 is written in the order of erasure. The index field indicates the acceptance number at the local electronic money generation and transfer log 1172, of erased local electronic money. The processing date and time field indicates the date and time of erasure of local electronic money. The sender field indicates data including the address of the user at the terminal (NLU4 a or 4 b) that remitted local electronic money. The receiver field indicates data such as the address of the user at the terminal (NWU2 a or 2 b) as the destination of electronic money converted from local electronic money. The money-received field indicates the nominal value of the erased local electronic money. In the server name field, the name of the gateway (GW1 in this embodiment) which erased local electronic money is written. In the erasure result field, information about whether or not the local electronic money was erased successfully is written.
  • FIG. 4D shows an example in the electronic [0092] money payment log 1174.
  • In FIG. 4D, in the acceptance number field, the acceptance number of electronic money sent by the electronic [0093] money content analyzer 112 is written in the order of remittance. The index number field indicates the acceptance number, at the local electronic money collection and erasure log 1173, of local electronic money converted to electronic money. The processing date and time field shows the date and time of remittance of electronic money. The sender field indicates information including the address of the user of the terminal (NLU4 a or 4 b) as the source of remittance of local electronic money converted to electronic money is written. The receiver field indicates information such as an address of the user of the terminal (NWU2 a or 2 b) being the remittance destination of the local electronic money converted into electronic money. The money received field shows the nominal value of local electronic money converted into electronic money. The bank name field indicates information including the address of the bank office (NB3 a or 3 b) that issued the electronic money. The remittance result field indicates information about whether the electronic money was remitted successfully or not.
  • Description will now move on to electronic money issued by the terminal NB[0094] 3. This electronic money is basically the same as that used in the electronic money digital cash system, such as ecash described in the RELATED ART above.
  • FIG. 5 shows an example of the format of electronic money issued at the terminal NB[0095] 3.
  • In the Value field, the value of electronic money is written. In the Serial field, the serial number by which the bank manages the issuance of electronic money is written. In the Generator field, the address of the bank office that generated electronic money is written. The Signature field indicates a digital signature which was obtained by encrypting the contents of the above-mentioned fields using a secret key that the bank possesses. This digital signature certifies that the bank shown in the Generator field generated electronic money. [0096]
  • Description will now proceed to local electronic money current only in LAN[0097] 20.
  • FIG. 6 shows an example of the format of local electronic money generated by the local [0098] electronic money generator 113 shown in FIG. 2.
  • The Value field indicates the value of electronic money converted to local electronic money. In the Serial field, the serial number of this local electronic money is written. This serial number indicates the number in the order of generation at GW[0099] 1 and the same number is not used again. Written in the From field is data including the address of the user at the terminal (NWU2 a or 2 b) as the source of remittance of electronic money converted into the local electronic money. In the To field, data including the address of the user at the receiving terminal (NLU4 a or 4 b) of local electronic money is written. The Generator field indicates data including the address of the gateway (GW1 in this embodiment) that issues local electronic money. The Signature field indicates a digital signature which was obtained by encrypting the above-mentioned content of the fields with a secret key possessed by the bank.
  • Description will next be given of the operation of the network apparatus to which this embodiment is applied. [0100]
  • In this embodiment, to avoid wiretapping on the network, all data or messages, including electronic money, are subject to encryption processing using the public-key encryption system before they are transmitted on the network. A digital signature obtained by encrypting the data or message with the secret key of the user at the sending terminal is added to each data or message. [0101]
  • Description will now continue with the operation of making remittance from a terminal NWU[0102] 2 connected to WAN10 to a terminal NLU4 connected LAN20.
  • FIG. 7 is a flowchart for explaining the operation of making remittance from a terminal NWU[0103] 2 to a terminal NLU4.
  • A user at a terminal NWU[0104] 2 sends a connection request message to a terminal NB3 of the bank where his own account has been opened. On receiving the connection request message, the terminal NB3 sends a connection-acknowledging message to the terminal NWU2. Thus, a connection is established between the terminal NWU2 and the terminal NB3.
  • Subsequently, the terminal NWU[0105] 2 performs a process by a specific function using the amount of money to remit to a terminal NLU4 and a random number it generates as arguments to thereby generate a string of digits. A message requesting the issuance of electronic money has a generated digit string (blind signature) appended and is sent to the terminal NB3 (Step 2001).
  • When receiving this message, the terminal NB[0106] 3 withdraws the amount requested from the account of the user at the terminal NWU2, changes the money into electronic money as shown in FIG. 5, and after encryption, sends an encrypted electronic money to the terminal NWU2 (Step 1001). Then, NWU2 releases the connection with the terminal NB3.
  • The terminal NWU[0107] 2, when receiving electronic money from the terminal NB3, sends a connection request message to the terminal NLU4 as the receiver of remittance (Step 2002). This connection request message is received by GW1 before reaching the terminal NLU4. In response to the message, the GW1 performs a money receiving procedure on behalf of the terminal NLU4.
  • GW[0108] 1 passes the connection request message through TP12 a to the electronic money content analyzer 112 of EMMP11. Accordingly, the electronic money content analyzer 112 sends a connection-acknowledging message accompanied by a public key of GW1 to TP12 a. TP12 a sends this message received from the content analyzer 112 to the terminal NWU2 that sent the connection request (Step 3001). Thus, a connection is established between GW1 and the terminal NWU2.
  • The terminal NWU[0109] 2, when receiving the connection-acknowledging message, encrypts electronic money, which is to be remitted, using a public key attached to the connection-acknowledging message, and sends encrypted electronic money to the terminal NLU4 as the destination of remittance (Step 2003). The encrypted electronic money is received by GW1 before reaching the terminal NLU4, and changed by GW1 to local electronic money. Local electronic money is transmitted to the terminal NLU4 as the destination of remittance.
  • GW[0110] 1 passes encrypted electronic money through TP12 a to the electronic money content analyzer 112 of EMMP11. The electronic money content analyzer 112 decrypts encrypted electronic money using its own secret key, and checks the name of the bank that issued the electronic money from decrypted electronic money. Then, the electronic money content analyzer 112 sends a connection request message to TP12 a. TP12 a sends the message received from the electronic money content analyzer 112 to the terminal NB3 of the bank revealed at the electronic money content analyzer 112 (Step 3002).
  • When receiving the connection request message, the terminal NB[0111] 3 sends a connection-acknowledge message along with its own public key to GW1 that sent the connection request message(Step 1002). Consequently, a connection is established between the terminal NB3 and GW1.
  • GW[0112] 1 sends the connection-acknowledge message from the terminal NB3 through TP12 a to the electronic money content analyzer 112 of EMMP11. The electronic money content analyzer 112 encrypts electronic money received from the terminal NWU2 using a public key attached to the connection-acknowledging message, and sends the encrypted electronic money to TP12 a. TP12 a sends encrypted electronic money received from the electronic money content analyzer 112 to the terminal NB3 (Step 3003).
  • When receiving the encrypted electronic money, the terminal NB[0113] 3 decrypts the electronic money using its own secret key, and makes a judgment whether or not to approve the receipt of the electronic money by checking the serial number and the digital signature of decrypted electronic money (Step 1003). When receipt is rejected as a result of judgement, NB3 sends a rejection message to GW1. After this, NB3 releases the connection with GW1.
  • GW[0114] 1 sends a receipt rejection message, which has come from NB3, through TP12 a to the electronic money content analyzer 112 of EMMP11. In response, the electronic money content analyzer 112 sends a transaction failure message to TP12 a. TP12 a sends the transaction failure message transmitted from the electronic money content analyzer 112 to the terminal NWU2 that sent the electronic money (Step 3004). Subsequently, GW1 releases the connection with the terminal NWU2.
  • The terminal NWU[0115] 2 terminates the process after receiving a transaction failure message (Step 2004).
  • On the other hand, when it approves the receipt of remittance as a result of judgement, the terminal NB[0116] 3 changes electronic money, received from GW1, to cash and deposits the cash into the account of the organization to which the user at the terminal NLU4 belongs. Then, NB3 sends a receipt success message to GW1 (Step 1004). After this, the terminal NB3 terminates the process by releasing the connection with GW1 (Step 1005).
  • When receiving the receipt success message from the terminal NB[0117] 3, GW1 sends this message through TP12 a to the electronic money content analyzer 112 of EMMP11. In response to this, the electronic money content analyzer 112 sends a transaction success message to TP12 a. TP12 a sends the transaction success message, received from the electronic money content analyzer 112, to the terminal NWU2 that sent the electronic money. The connection established between the terminal NWU2 and GW1 is then released.
  • The [0118] log recorder 117 writes electronic money receipt information in the electronic money receipt log 1171 (Step 3005). As shown in FIG. 4A, the acceptance number, processing date and time, sender, receiver, money received, bank name, and receipt success/failure message are written in the related fields.
  • The terminal NWU[0119] 2 terminates the process after receiving the transaction success message (Step 2005).
  • After the process at [0120] Step 3005 is closed, the electronic money content analyzer 112 of GW1 notifies the acceptance number, recorded by the log recorder 117 in the electronic money receipt log 1171, to the local electronic money generator 113. In response to this, the local electronic money generator 113, searches the electronic money receipt log 1171 by using the acceptance number received from the electronic money content analyzer 112, and reads received money information corresponding to the acceptance number. The local electronic money generator 113 generates an amount of local electronic money corresponding to the amount of money received. The log recorder 117 writes information about generation and transfer of local electronic money in the local electronic money generation and transfer log 1172 (Step 3006). As shown in FIG. 4B, in the field of acceptance number, the number in the order of processing is written. In the field of processing date and time, the date and time when the information is written is indicated. In the fields of sender, receiver and money received, information in the electronic money receipt log 1171 is copied. In the field of money change server, the name of GW1 is written. At this point in time, no information is written in the field of remittance result.
  • The local [0121] electronic money generator 113 of GW1 sends generated local electronic money along with information written in the local electronic money generation and transfer log 1172 to the local electronic money content analyzer 115. In response to this, the local electronic money content analyzer 115 stores local electronic money in a moneybox 1151 of the receiver determined by the supplied information. Then, a message indicating the arrival of local electronic money is sent through TP12 b to the terminal NLU4 of the receiver (Step 3007). Subsequently, GW1 releases the connection with the terminal NLU4.
  • Next, the [0122] log recorder 117 writes a remittance result in the field of remittance result in the local electronic money generation and transfer log 1171. GW1 terminates the process (Step 3008).
  • The user (a member of the organization) at the terminal NLU[0123] 4 that received the message, if he wants to use local electronic money, establishes a connection with GW1, and sends his own public key to GW1 (Step 4001). GW1 passes the public key through TP12 b to the local electronic money content analyzer 115. The local electronic money content analyzer 115 withdraws local electronic money from the moneybox 1151 of the user at the terminal NLU4 who sent the public key, and encrypts local electronic money with the public key, and sends the money to the terminal NLU4 (Step 3009).
  • The terminal NLU[0124] 4 receives the encrypted local electronic money (Step 4002), and stores it in a suitable recording device. The user can use the encrypted local electronic money by decrypting it with his own secret key.
  • Description will be given of the operation of making remittance from a terminal NLU[0125] 4 connected to LAN20 to a terminal NWU2 connected to WAN10.
  • FIG. 8 is a flowchart for explaining the operation of sending money from a terminal NLU[0126] 4 to a terminal NWU2.
  • In a terminal NLU[0127] 4, after encrypted local electronic money stored in the recording device is decrypted using the user's own secret key, the local electronic money has a digital signature appended using this secret key (Step 4101). Incidentally, an example of local electronic money shown in FIG. 6 having a user's digital signature attached is shown in FIG. 9.
  • The terminal NLU[0128] 4 sends a connection request message to a terminal NWU2 as the destination of remittance (Step 4102). This connection request message is received by GW1 before reaching the terminal NWU2. In response to the connection request message, GW1 performs a remittance procedure on behalf of the terminal NLU4.
  • GW[0129] 1 passes the connection request message through TP12 b to the local electronic money content analyzer 115 of EMMP11. In response to this, the local electronic money content analyzer 115 sends a connection-acknowledge message accompanied by GW1's public key to TP12 b. TP12 b sends the message conveyed by the local electronic money content analyzer 115 to the terminal NLU4 that sent the connection request message (Step 3101). Consequently, a connection is established between GW1 and the terminal NLU4.
  • When receiving the connection-acknowledge message, the terminal NLU[0130] 4 encrypts local electronic money, which is to be remitted, with a public key attached to the connection-acknowledge message, and sends the encrypted local electronic money to the terminal NWU2 as the destination of remittance (Step 4103). The encrypted local electronic money is received by GW1 before reaching the terminal NWU2, and is converted into electronic money. This electronic money is sent to the terminal NWU2 as the destination.
  • GW[0131] 1 sends encrypted local electronic money through TP12 b to the electronic money content analyzer 115 of EMMP11. In response thereto, the local electronic money content analyzer 115 decrypts the encrypted local electronic money using its own secret key. GW1 checks the digital signature attached to decrypted local electronic money against a previously registered public key of a user (a user using a digital signature) at the terminal NLU4 (Step 3102).
  • If the public key which is required for checking a digital signature has not been registered, GW[0132] 1 gets the public key transmitted by sending a message requesting the transmission of the public key to the terminal NLU4 of the user who added the digital signature.
  • As a result of the check, if abnormality is discovered in the digital signature (Step [0133] 3103), the local electronic money content analyzer 115 stores the local electronic money in a moneybox exclusively for abnormal local electronic money, installed inside the moneybox 1151. After this, GW1 sends a transaction termination message to TP12 b. TP12 b passes the received transaction termination message to the terminal NLU4 that transmitted the local electronic money. An alarm is issued to notify the manager at GW1 of the detection of abnormality in the digital signature (Step 3104). Then, GW1 releases the connection with the terminal NLU4 (Step 3105).
  • When receiving the transaction termination message, the terminal NLU[0134] 4 terminates the process (Step 4104).
  • On the other hand, as a result of the check, if abnormality is not found in the digital signature (Step [0135] 3103), the local electronic money content analyzer 115 searches the local electronic money generation and transfer log 1172 of the log recorder 117 to obtain a log with the acceptance number that coincides with the serial number of the local electronic money.
  • If the search ended in failure, or though the search was successful, if there is a possibility that the local electronic money is a counterfeit as a result of comparison of the data on the local electronic money with the data on the log, it follows that local electronic money not under control of GW[0136] 1 is circulating. Therefore, the above-described processes at Steps 3104 and 3105 are executed.
  • If the search is successful and if there is no possibility of counterfeit of the local electronic money according to the result of comparison between data on the local electronic money and data on the log, the local electronic [0137] money content analyzer 115 sends the local electronic money to the local electronic money eraser 114. In response, the local electronic money eraser 114 passes the acceptance number of the local electronic money to the electronic money content analyzer 112 and also passes data and the acceptance number of the local electronic money to the log recorder 117.
  • The [0138] log recorder 117 writes information about local electronic money, received from the local electronic money eraser 114, in the local electronic money collection and erasure log 1173 (Step 3106). As shown in FIG. 4C, the number in the order of processing is written in the field of acceptance number. The serial number (equal to the acceptance number of the local electronic money generation and transfer log 1172) is written in the field of index number. The date and time of entry of this information is written in the field of processing date and time. The sender, the receiver and the nominal value of local electronic money are written in the fields of sender, receiver and money received, respectively. At this point in time, no information is written in the fields of money change server and erasure result.
  • The electronic [0139] money content analyzer 112 reads information from the local electronic money collection and erasure log 1173, the information corresponding to the acceptance number received from the local electronic money eraser 114. Next, the electronic money content analyzer 112 returns the read out information and the acceptance number to the log recorder 117. In response, the log recorder 117 writes the information about local electronic money, received from the electronic money content analyzer 112, to the electronic money payment log 1174 (Step 3106). As shown in FIG. 4D, the number in the order of processing is written in the field of acceptance number. The serial number of local electronic money (equal to the acceptance number at the local electronic money collection and erasure log 1173) is written in the field of index number. The date and time of entry of this information is written in the field of processing date and time. The sender, the receiver and the nominal value of electronic money are written in the fields of the sender, receiver and money received, respectively. At this point in time, no information is written in the fields of bank name and remittance result.
  • Then, the electronic [0140] money content analyzer 112 sends a connection request message to TP12 a. TP12 a passes the received connection request message to a terminal NB3 of a bank where an account of the organization to which the user at the terminal NLU4 belongs has been opened. When receiving the connection request message, the terminal NB3 sends a connection-acknowledging message to the source of the connection request message. Thus, a connection is established between GW1 and the terminal NB3.
  • The electronic [0141] money content analyzer 112 performs a process with a specific function using the amount of money to remit (the nominal value of local electronic money written on the electronic money payment log 1174) and a random number it generates as arguments to thereby generate a string of digits. The electronic money content analyzer 112 sends a message requesting the transmission of electronic money added with the above-mentioned string of digits (a blind signature) to the terminal NB3 (Step 3107).
  • When receiving this message to transmit electronic money, the terminal NB[0142] 3 withdraws the requested amount of money from the account of the user of GW1, that is, the organization in which LAN20 is formed, and after converting the money into electronic money as shown in FIG. 5, NB3 encrypts electronic money and sends it to GW1 (Step 1101).
  • GW[0143] 1, on receiving electronic money from the terminal NB3, sends a connection request message to the terminal NWU2 being the destination of remittance (Step 3109).
  • The terminal NWU[0144] 2, on receiving a connection request message, sends a connection-acknowledging message with an accompanying public key to GW1 that gave NWU2 the connection request message (Step 2101). Thus, a connection is established between GW1 and the terminal NWU2.
  • GW[0145] 1, on receiving the connection-acknowledging message, encrypts a remittance amount of electronic money using the public key that came with the connection-acknowledging message, and sends encrypted electronic money to the terminal NWU2 being the destination of remittance (Step 3110).
  • The terminal NWU[0146] 2, on receiving encrypted electronic money, decrypts the electronic money using its own secret key to thereby find a bank name that issued the electronic money from the decrypted electronic money. Then, NWU2 sends a connection request message to a terminal NB3 of that bank.
  • The terminal NB[0147] 3, on receiving the connection request message, sends a connection-acknowledging message with its own public key to the terminal NWU2 that sent the connection request message. As a result, a connection is established between the terminal NWU2 and the terminal NB3.
  • The terminal NWU[0148] 2 encrypts electronic money received from GW1 with a public key that came with the connection-acknowledging message, and sends the encrypted electronic money to the terminal NB3 (Step 2102).
  • The terminal NB[0149] 3, on receiving the encrypted electronic money, decrypts the electronic money using its own secret key. The terminal NB3 checks the serial number and a digital signature on the decrypted electronic money and thereby judges whether or not to approve the receipt of the electronic money (Step 1102). As a result of the check, if it rejects the receipt of electronic money, NB3 sends a reject message to the terminal NWU2. Subsequently, NB3 releases the connection with NWU2.
  • In response to this, the terminal NWU[0150] 2 sends a transaction failure message to GW1 (Step 2103), and then terminates the process.
  • GW[0151] 1 passes the transaction failure message, received from the terminal NWU2, through TP12 a to the electronic money content analyzer 112. In response to this, the electronic money content analyzer 112 sends this information to the log recorder 117 and the local electronic money content analyzer 115. The log recorder 117 writes “FAILURE” in the field of the remittance result of the electronic money payment log 1174 and the fields of erasure result of the local electronic money collection and erasure log 1173 (Steps 3111 and 3112). The local electronic money content analyzer 115 returns local electronic money corresponding to the amount of electronic money involved in the transaction failure to the moneybox 1151 for the terminal NLU4 of the money sender. GW1 sends the money sender at the terminal NLU4 a message indicating that the local electronic money has been returned (Step 3112). GW1 then terminates the process by releasing the connection with the terminal NLU4 (Step 3113).
  • The terminal NLU[0152] 4 terminates the process, when it receives the message indicating that the local electronic money has been returned (Step 4105).
  • If the terminal NB[0153] 3 permits the receipt of the electronic money as a result of the check, it changes the electronic money received from the terminal NWU2 into cash, has the cash deposited in the account of the user using the terminal NWU2, and sends a receipt success message to the terminal NWU2. Then, NB3 terminates the process by releasing the connection with the terminal NWU2 (Step 1103).
  • In response to this, the terminal NWU[0154] 2 sends a transaction success message to GW1, and terminates the process by releasing the connection with GW1 (Step 2104).
  • When receiving the transaction success message from the terminal NWU[0155] 2, GW1 passes this message, sent from the terminal NWU2 through TP12 a, to the electronic money content analyzer 112. In response to this, the electronic money content analyzer 112 passes this information to the log recorder 117. The log recorder 117 writes “SUCCESS” in the remittance result field of the electronic money payment log 1174 and also in the erasure result field of the local electronic money collection and erasure log 1173 (Steps 3114 and 3115). Then, GW1 terminates the process by releasing the connection with the terminal NLU4 (Step 3116).
  • Description will be given of the operation in a transaction between terminals NLU[0156] 4 connected to LAN20.
  • FIG. 10 is a flowchart for explaining the operation of remittance from a terminal NLU[0157] 4 a to a terminal NLU4 b.
  • The terminal NLU[0158] 4 a sends a connection request message to the terminal NLU4 b being the destination of remittance (Step 4201).
  • The terminal NLU[0159] 4 b, when receiving the connection request message, sends a connection-acknowledging message with its own public key to the terminal NLU4 a that gave NLU4 b the connection request message (Step 4301). Thus, a connection is established between the terminals NLU4 a and NLU4 b.
  • Next the terminal NLU[0160] 4 a, using its own secret key, decrypts the encrypted local electronic money which has been stored in a storage device, and adds a digital signature to the local electronic money by using the secret key (Step 4202). Then, the terminal NLU4 a encrypts the local electronic money using a public key received from the terminal NLU4 b, and sends the encrypted local electronic money to the terminal NLU4 b (Step 4203). After this, NLU4 a releases the connection with the terminal NLU4 b.
  • The terminal NLU[0161] 4 b receives the encrypted local electronic money (Step 4302), and stores it in a suitable storage device. The user can use the encrypted local electronic money by decrypting it using its own secret key.
  • A preferred embodiment of the present invention has been described. [0162]
  • As described above, in this embodiment, electronic money that can be handled by the terminals NLU[0163] 4 connected to LAN20 is limited to a kind of electronic money current only in LAN20. More specifically, the electronic money is limited to local electronic money, a different kind of electronic money from electronic money issued by terminals NB3.
  • When a terminal NLU[0164] 4 connected to LAN20 conducts electronic commerce with a terminal NWU2 connected to WAN10, a money change process at GW1 is invariably involved in the settlement of accounts. In addition, the contents of the process are recorded in a log.
  • In other words, in the present embodiment, when a member of an organization having LAN[0165] 20 formed therein conducts electronic commerce with a user outside the organization, a money change process at GW1 between electronic money and local electronic money is always carried out in the settlement of accounts, and the process is recorded in a log. Therefore, the administrative department (accounting or materials department, for example) can manage the account settlement between a member of the organization and a user outside the organization by monitoring the log in which the details of the process at GW1 are recorded. Accordingly, it is possible to minimize damage resulting from an error in remittance or embezzlement.
  • Local electronic money can be interchanged directly between the members of an organization without intervention of GW[0166] 1, in which case anonymity as the advantage in settlement by electronic money can be maintained.
  • In the embodiment mentioned above, description has been given of the electronic money digital cash system on the assumption of the use of ecash that adopts blind signature that provides electronic money with superlative anonymity (Scientific American, August 1992, pp. 96-101). However, the present invention is not limited to this electronic money, but may be applied to various electronic money digital cash systems. [0167]
  • In the present embodiment, discussion has been devoted to the electronic money management apparatus which has a gateway adapted to perform a money change function and is located between LAN[0168] 20 and WAN10. However, the present invention is not limited to this arrangement, but the apparatus (a network apparatus, such as a gateway or a router), which can intercept electronic money flowing from one network to another, should be provided with a money change function.
  • Furthermore, in the present embodiment, description has been given of the electronic money management system wherein in the interchange of local electronic money, local electronic money can be transferred directly between the terminals NLU[0169] 4 a and NLU4 b connected to LAN20 without using an intervening GW1. However, the present invention is not limited to this type, but the intervening GW1 may be employed.
  • Description will now be given of a first modification of the present embodiment, in which an intervening GW[0170] 1 is used in the interchange of local electronic money between the terminals NLU4 a and NLU4 b.
  • In this first modification, GW[0171] 1 is charged with not only with vicariously executing money remittance but also changing received local electronic money for local electronic money of proper nominal values and making remittance.
  • FIG. 11 is a flowchart for explaining the operation of remittance from the terminal NLU[0172] 4 a to the terminal NLU4 b in the first modification of the present embodiment.
  • The terminal NLU[0173] 4 a retrieves a plurality of local electronic money stored in a storage device, creates a message including the local electronic money added with a script of the contents of a request to GW1 and a digital signature, and sends the message to GW1 (Step 4401).
  • FIG. 12 shows an example of a message to be sent by the terminal NLU[0174] 4 on the sender side to GW1 in the first modification of the present embodiment.
  • In FIG. 12, [0175] reference numerals 701 to 703 denote a plurality of local electronic money retrieved from the storage device. FIG. 12 shows the same format (but in a simple form) for these electronic money as in FIG. 6. Reference numeral 704 denotes a script and a digital signature added to local electronic money 701 to 703.
  • In FIG. 12, the contents of the script are as follows. [0176]
  • @ sum ([0177] 256, 303, 386)
  • Sum up local electronic money of [0178] serial numbers 256, 303 and 386.
  • @ div (¥1,000,000: user[0179] 1)
  • Send ¥1,000,000 to the user at the terminal NLU[0180] 4 b.
  • @ bal (:ME): [0181]
  • Return the balance to the source of remittance. [0182]
  • The digital signature at the end of the message is formed by encryption of the message from its head portion till the end of the script using a secret key of the user at the terminal NLU[0183] 4 a as the source of remittance.
  • When receiving the message from the terminal NLU[0184] 4 a, GW1 passes the message through TP12 b to the local electronic money content analyzer 115. In response to this, the local electronic money content analyzer 115 checks the digital signature attached at the end of the message (Step 3201).
  • If abnormality is found by checking the digital signature, GW[0185] 1 performs an abnormal termination routine to close the process (Step 3202). On the other hand, when abnormality is not found, the local electronic money content analyzer 115 checks the digital signature on each piece of local electronic money (reference numerals 701 to 703 in FIG. 12) included in the message received (Step 3203).
  • If abnormality is found as a result of the check, an abnormal termination routine is performed to terminate the process (Step [0186] 3202). On the other hand, if no abnormality is found, the local electronic money content analyzer 115 searches the local electronic money generation and transfer log 1172 to retrieve a log with an acceptance number coincident with the serial number of each piece of local electronic money included in the message received. Then, the money content analyzer 115 checks for double use or the like of local electronic money from data on the log retrieved (Step 3204).
  • If abnormality is found by the check, GW[0187] 1 performs an abnormal termination routine to close the process (Step 3202). If no abnormality is found, the local electronic money content analyzer 115 transfers the local electronic money received and its acceptance number to the local electronic money eraser 114. The log recorder 117 writes information regarding each local electronic money included in the message received by the local electronic money content analyzer 115 in the local electronic money collection and erasure log 1173 (Step 3205). At this point, no data is written in the fields of the money change server and the erasure result in the local electronic money collection and erasure log 1173. In addition, the local electronic money is not erased.
  • On receiving local electronic money and its acceptance number from the [0188] money content analyzer 115, the local electronic money eraser 114 sends a request to the local electronic money generator 113 to generate local electronic money. The request includes information about the receiver, sender, money received, and a script shown in FIG. 12.
  • The local [0189] electronic money generator 113 generates local electronic money according to the request from the local electronic money eraser 114 (specifically, the contents of the script in FIG. 12), adds information about destinations specified by the request (¥1,000,000 to the terminal NLU4 b; ¥208,000 to be returned to the terminal NLU4 a in the example in FIG. 12) to the local electronic money, and sends the local electronic money to the local electronic money content analyzer 115. The log recorder 117 records information required for generation and management of local electronic money to the local electronic money generation and transfer log 1172. Subsequently, the local electronic money generator 113 sends a message to the local electronic money eraser 114.
  • The local [0190] electronic money eraser 114 erases the local electronic money sent from the terminal NLU4 a of the sender. The log recorder 117 writes information in the empty fields, that is, in the money change server field and the erasure result field in the local electronic money collection and erasure log 1173.
  • Subsequently, the local electronic [0191] money content analyzer 115 stores the local electronic money received from the local electronic money generator 113 into the moneybox 1151 of the user specified by the destinations information added to the local electronic money. FIG. 13 shows, in the first modification of the present embodiment, the local electronic money to be deposited in the moneybox 1151 as the destination of remittance according to the message shown in FIG. 12. In this case, local electronic money worth ¥1,000,000 is transferred to the terminal NLU4 b, while local electronic money worth ¥208,000 is transferred to the terminal NLU4 a. The format of the local electronic money is the same as in FIG. 6, but is illustrated here in a simplified form.
  • The local electronic [0192] money content analyzer 115 sends a paying-in message for the terminal NLU4 of destination to TP12 b. TP12 b sends the paying-in message to the destination (Step 3206). GW1 then terminates the process (Step 3207).
  • The terminals NLU[0193] 4 a and NLU4 b can confirm that local electronic money has been paid in, by receiving a paying-in message from GW1. (Steps 4402 and 4501)
  • In the first modification of the present embodiment, the users of the terminals NLU[0194] 4 can use electronic money of various nominal values by having electronic money exchanged by GW1 into electronic money of desired nominal values. In the first modification, the establishment operation of a connection between a terminal NLU4 and GW1 in the present embodiment applies and its description is omitted.
  • In the present embodiment, when money is sent from a terminal NLU[0195] 4 connected to LAN20 to a terminal NWU2 connected to WAN10, description has been given of a case where GW1 performs the remittance procedure on behalf of the terminal NLU4. However, the present invention is not limited to this method. GW1 may be arranged to manage the value of money that each user at a terminal NLU4 connected to LAN20 sends to a terminal NWU2 connected to WAN10, in addition to its vicarious procedures of remittance.
  • As a second modification of the present embodiment, description will be given of a case where an upper limit is set for the value of money that a user of a terminal NLU[0196] 4 (a member of an organization) sends to another user at a terminal NWU2 (a user outside the organization).
  • Suppose that a user at a terminal NLU[0197] 4 sends a large sum of money higher than the upper limit allotted to the user, in other words, in excess of his authority, to another user at a terminal NWU2 (a user outside the organization).
  • GW[0198] 1 receives through TP12 b local electronic money sent from the terminal NLU4 and passes it to the local electronic money content analyzer 115. In response to this, the local electronic money content analyzer 115 reads the nominal value from the Value field and information about the sender from the To field on the received local electronic money (FIG. 6), and examines a limit of remittance imposed on the sending user at the terminal NLU4 stored in the permission file 1152.
  • FIG. 14 shows an example of the data stored in the [0199] permission file 1152.
  • In FIG. 14, the name of the user at the terminal NLU[0200] 4, that is, a member of the organization having LAN20 formed therein, is written in the user field. The maximum amount that can be sent by the user at a time is written in the maximum remittance amount field. The address of the receiver to which the user can send money is written in the receiver address field.
  • As a result of the remittance limit examination, if it makes a decision that the nominal value of the local electronic money that the user sent is larger than the upper limit, the local electronic [0201] money content analyzer 115 stores the money in the money box 1151 of the user. Then, the content analyzer 115 sends a repayment message through TP12 b to the user at the terminal NLU4. If the local electronic money content analyzer 115 decides that the upper limit is not exceeded, GW1 performs the remittance procedure on behalf of the NLU4 by following the same steps as in the present embodiment described above (by procedure from and after Step 3102 on in FIG. 8).
  • In a second modification, even when a member of an organization (a user at a terminal NLU[0202] 4) tries to send a large sum of money in excess of his authorization to a user out of the organization (terminal NWU2), this procedure is refused by GW1.
  • In the second modification, it may be so arranged that even if the sum of remittance is larger than the permissible upper limit, he can still make a remittance if he obtains approval from another member (his superior officer, for example) of the organization. [0203]
  • FIG. 15 is a flowchart for explaining the operation when a user at a terminal NLU[0204] 4 a obtains approval from a user at a terminal NLU4 b in the second modification.
  • The user at the terminal NLU[0205] 4 a retrieves local electronic money that he is going to send outside the organization from a storage device, and attaches a remittance authorization request message, including a script and a digital signature, to the local electronic money, and sends the money to the terminal NLU4 b to obtain approval (Step 4601).
  • FIG. 16 is a diagram showing an example of local electronic money with a remittance authorization request message attached thereto in the second modification. [0206]
  • In FIG. 16, [0207] reference numeral 711 denotes local electronic money retrieved from the storage device. The format of this electronic money is the same as that in FIG. 6, but isillustrated here in a simple form. Reference numeral 712 denotes a remittance authorization request message (a script and a digital signature) attached to the local electronic money 711.
  • In FIG. 16, the contents of the script are as follows. [0208]
  • @ message [0209] 35429:
  • A request for approval of remittance for settlement No. [0210] 35429
  • @ comment [0211]
  • The script “This is to request that approval be given to my making a remittance as per settlement No. [0212] 35429.” following the comment is sent as a message to the destination of remittance. The user at the receiving terminal reads this message and decides whether or not to approve the request.
  • The digital signature at the end of the message was formed by encrypting the contents from the beginning of the message to the end of script using a secret key of the user at the sending terminal NLU[0213] 4 a.
  • The user at the terminal NLU[0214] 4 b reads the comment of the script attached to the local electronic money received from the terminal NLU4 a, and decides whether or not to grant authorization to remit this local electronic money (Step 4701). If authorization to remit is not granted (Step 4702), the local electronic money is sent back to the terminal NLU4 a (Step 4703). In this case, even if the user at the terminal NLU4 a wants to send the local electronic money to a user outside the organization (a user at the terminal NWU2), money change to electronic money is refused by GW1, so that settlement is impossible. Therefore, the terminal NLU4 a has to close the process (Step 4602).
  • On the other hand, when the authorization to remit money is granted (Step [0215] 4702), the user at the terminal NLU4 b attaches an authorization grant message, consisting of a script and a digital signature, to the local electronic money having an authorization request message attached thereto and received from the terminal NLU4 a, and sends the local electronic money back to the terminal NLU4 a (Step 4704).
  • FIG. 17 is a diagram showing an example of local electronic money with an accompanying authorization grant message in the second modification. [0216]
  • In FIG. 17, [0217] reference numeral 713 denotes an authorization grant message. Reference numerals 711 and 712 denote local electronic money accompanying authorization request message sent from the terminal NLU4 a, which are identical with those in FIG. 16.
  • In FIG. 17, the contents of the script are as follows. [0218]
  • @ message accepted: [0219]
  • The request for approval of your message is accepted. [0220]
  • @ comment [0221]
  • The script “message accepted” following the comment is sent to the terminal NLU[0222] 4 a. By reading this message, the user at the terminal NLU4 a knows that he is permitted to send money.
  • Even when the local electronic [0223] money content analyzer 115 decides that the local electronic money received through TP12 b from the terminal NLU4 a is larger than the permissible maximum remittance of the user at the terminal NLU4 a stored in the permission file 1152, if an authorization grant message is attached to the local electronic money, GW1 performs the remittance procedure by following the same steps (from and after Step 3102 on in FIG. 8) as in the present embodiment.
  • As has been described, according to the present invention, when electronic money is remitted from one network to another, a money change server is used to change electronic money current only within one network into electronic money current within another network. [0224]
  • Therefore, when the users on a network utilize a settlement process using electronic money, by managing the money change process, it becomes possible to manage the interchange of electronic money with the users on another network without affecting the working environment of electronic commerce. [0225]

Claims (9)

What is claimed is:
1. A method of managing electronic money in a network apparatus installed between a first network and a second network, wherein electronic money circulating only within said first network is designated as electronic money current on said first network (this electronic money is hereafter referred to as electronic money A), said method comprising the steps of:
when a first terminal connected to said first network sends money to a second terminal connected to said second network, receiving electronic money A sent from said first terminal, changing said electronic money A into electronic money current on said second network (the latter electronic money is hereafter referred to as electronic money B), and sending electronic money B to said second terminal; and
when the second terminal sends money to said first terminal, receiving electronic money B sent from said second terminal, changing the electronic money B into electronic money A, and sending electronic money A to said first terminal.
2. A method of managing electronic money according to claim 1, wherein historical information is recorded with regard to a money change process from electronic money B to electronic money A and also about another money change process from electronic money A to electronic money B, both money change processes being performed in said network apparatus.
3. A method of managing electronic money according to claim 1, wherein when money is remitted from said first terminal to said second terminal, if the nominal value of electronic money A is larger than a sum of money previously allotted to the user at said first terminal, electronic money A is returned to said first terminal without being changed into electronic money B.
4. A method of managing electronic money according to claim 3, wherein even if the nominal value of electronic money A is larger than the sum of money allotted to the user at said first terminal, when said electronic money is added with a message indicating that the user at said first terminal is permitted to send more than said allotted sum of money, said electronic money A is changed to electronic money B current on said second network, and sent to said second terminal.
5. A method of managing electronic money according to claim 1, wherein said network changes electronic money A sent from said first terminal into electronic money in a desired nominal value unit in response to a command from said first terminal.
6. Apparatus which is installed between a first network and a second network for managing electronic money, said apparatus comprising:
means for receiving electronic money A current only within said first network from a first terminal connected to said first network, changing the electronic money A into electronic money B current on said second network, and sending the electronic money B current on said second network to said second terminal, when said first terminal sends money to a second terminal connected to said second network; and
means for receiving the electronic money B sent from said second terminal, changing the electronic money B into the electronic money A, and sending the electronic money A to said first terminal, when said second terminal sends money to said first terminal.
7. Apparatus for managing electronic money according to claim 6, further comprising historical information recording means for recording historical information about the money change process from electronic money B to electronic money A and the money change process from electronic money A to electronic money B, both money change processes being performed in said apparatus.
8. Apparatus for managing electronic money according to claim 6, further comprising:
remittance upper limit value storage means having recorded therein upper limits of remittance allotted to respective users at respective terminals connected to said first network; and
means for returning electronic money A to said first terminal without being converted into electronic money B, when said first terminal sends money to said second terminal, if a nominal value of the electronic money A sent by said first terminal is larger than a sum of money allotted to a user at said first terminal recorded in said remittance upper limit writing means.
9. A recording medium having recorded thereon an electronic money management program for managing electronic money current on networks, wherein said electronic money management program causes an information processing apparatus connected to a first network and a second network to perform a function to receive electronic money A current on said first network, sent from a first terminal connected to said first network, change the electronic money A into electronic money B current on said second network, and send the electronic money B to a second terminal connected to said second network when said first terminal sends money to said second terminal, and wherein said electronic money management program causes said information processing apparatus to perform a function to receive electronic money B sent from said second terminal, and change electronic money B into electronic money A, and send said electronic money A to said first terminal when said second terminal sends money to said first terminal.
US10/270,444 1997-08-14 2002-10-15 Method and apparatus for managing electronic money and storage medium for storing an electronic money management program Abandoned US20030041035A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US10/270,444 US20030041035A1 (en) 1997-08-14 2002-10-15 Method and apparatus for managing electronic money and storage medium for storing an electronic money management program

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
JP21940897A JPH1166193A (en) 1997-08-14 1997-08-14 Method and device for managing electronic money and storage medium where electronic money managing program is stored
JP9219408 1997-08-14
US09/132,770 US6487542B2 (en) 1997-08-14 1998-08-12 Method and apparatus for managing electronic money and storage for storing an electronic money management program
US10/270,444 US20030041035A1 (en) 1997-08-14 2002-10-15 Method and apparatus for managing electronic money and storage medium for storing an electronic money management program

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US09/132,770 Continuation US6487542B2 (en) 1997-08-14 1998-08-12 Method and apparatus for managing electronic money and storage for storing an electronic money management program

Publications (1)

Publication Number Publication Date
US20030041035A1 true US20030041035A1 (en) 2003-02-27

Family

ID=16734943

Family Applications (2)

Application Number Title Priority Date Filing Date
US09/132,770 Expired - Fee Related US6487542B2 (en) 1997-08-14 1998-08-12 Method and apparatus for managing electronic money and storage for storing an electronic money management program
US10/270,444 Abandoned US20030041035A1 (en) 1997-08-14 2002-10-15 Method and apparatus for managing electronic money and storage medium for storing an electronic money management program

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US09/132,770 Expired - Fee Related US6487542B2 (en) 1997-08-14 1998-08-12 Method and apparatus for managing electronic money and storage for storing an electronic money management program

Country Status (3)

Country Link
US (2) US6487542B2 (en)
JP (1) JPH1166193A (en)
CA (1) CA2244627C (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060118617A1 (en) * 2004-12-03 2006-06-08 Sanden Corporation Electronic money conversion apparatus
US20060208064A1 (en) * 2005-01-18 2006-09-21 Isaac Mendelovich Method for managing consumer accounts and transactions
US20080243703A1 (en) * 2007-03-28 2008-10-02 Ahmed Ibrahim Al-Herz Virtual account based new digital cash protocols with combined blind digital signature and pseudonym authentication

Families Citing this family (40)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CA2253920A1 (en) * 1996-05-10 1997-12-04 David M. Barcelou Automated transaction machine
US6945457B1 (en) 1996-05-10 2005-09-20 Transaction Holdings Ltd. L.L.C. Automated transaction machine
KR20000030760A (en) * 1999-08-05 2000-06-05 김동한 Method and Apparatus for Exchanging Mileage Points
KR20000006956A (en) * 1999-11-15 2000-02-07 박무홍 Exchange of mileage point on Internet
US8571975B1 (en) * 1999-11-24 2013-10-29 Jpmorgan Chase Bank, N.A. System and method for sending money via E-mail over the internet
KR20000012703A (en) * 1999-12-20 2000-03-06 장황진 mileage point dealing system
JP3684131B2 (en) * 2000-03-10 2005-08-17 株式会社東芝 Server computer, electronic commerce method, and storage medium
KR100379888B1 (en) * 2000-03-21 2003-04-14 조도원 cyber money administration system
US20040139000A1 (en) * 2000-05-05 2004-07-15 Amos Carl Raymond Advanced automatic instant money transfer machine
KR20010106986A (en) * 2000-05-24 2001-12-07 신경철 Method and system of settlement and integration for Cyber Money
US8374574B1 (en) * 2000-07-06 2013-02-12 Motorola Mobility Llc Method and apparatus for storing a message for playback during a user-initiated emergency telephone call from a wireless device
US20020013770A1 (en) * 2000-07-11 2002-01-31 Toshikazu Higashi Information processing method, and method for making payment for information processing by electronic money
US7447661B2 (en) * 2000-07-24 2008-11-04 Raja Ahsan I Electronic bearer bond online transaction system
US7457777B1 (en) * 2000-11-13 2008-11-25 At&T Intellectual Property I, L.P. Carried-forward service units and commoditization thereof
US8412633B2 (en) * 2002-03-04 2013-04-02 The Western Union Company Money transfer evaluation systems and methods
US7313545B2 (en) * 2001-09-07 2007-12-25 First Data Corporation System and method for detecting fraudulent calls
KR20040012247A (en) * 2002-08-01 2004-02-11 권태화 The method of coupon change in telecommunication line
SG145524A1 (en) * 2002-08-07 2008-09-29 Mobilastic Technologies Pte Lt Secure transfer of digital tokens
EP1632888A4 (en) * 2003-04-30 2006-05-17 Bitwallet Inc Electronic money management system, electronic money management method, and computer program
WO2005010650A2 (en) 2003-07-03 2005-02-03 Ebay Inc. Method and system for managing data transaction requests
US8874477B2 (en) 2005-10-04 2014-10-28 Steven Mark Hoffberg Multifactorial optimization system and method
US20070179883A1 (en) * 2006-01-18 2007-08-02 Verdicash Inc. System and method and computer readable code for visualizing and managing digital cash
US20070168266A1 (en) * 2006-01-18 2007-07-19 Patrick Questembert Systems, methods and computer readable code for visualizing and managing digital cash
US9177313B1 (en) * 2007-10-18 2015-11-03 Jpmorgan Chase Bank, N.A. System and method for issuing, circulating and trading financial instruments with smart features
US20100280949A1 (en) * 2007-10-29 2010-11-04 Fundamo (Pty) Ltd Cross-border or inter-currency transaction system
US8069114B2 (en) * 2008-05-29 2011-11-29 Ebay, Inc. Method and system for processing transfer requests
US8094021B2 (en) * 2008-06-16 2012-01-10 Bank Of America Corporation Monetary package security during transport through cash supply chain
US7982604B2 (en) * 2008-06-16 2011-07-19 Bank Of America Tamper-indicating monetary package
US9024722B2 (en) * 2008-06-16 2015-05-05 Bank Of America Corporation Remote identification equipped self-service monetary item handling device
US8210429B1 (en) 2008-10-31 2012-07-03 Bank Of America Corporation On demand transportation for cash handling device
JP2010142572A (en) * 2008-12-22 2010-07-01 Toshiba Tec Corp Commodity display position alert system and program
KR101534146B1 (en) * 2013-05-22 2015-07-14 박복태 The method for creating bit money managed by data and providing system thereof
US9830580B2 (en) 2014-03-18 2017-11-28 nChain Holdings Limited Virtual currency system
US10776761B2 (en) 2014-03-18 2020-09-15 nChain Holdings Limited Virtual currency system
US9398018B2 (en) 2014-03-18 2016-07-19 nTrust Technology Solutions Corp. Virtual currency system
US10515518B2 (en) 2017-05-18 2019-12-24 Bank Of America Corporation System for providing on-demand resource delivery to resource dispensers
US10275972B2 (en) 2017-05-18 2019-04-30 Bank Of America Corporation System for generating and providing sealed containers of traceable resources
US10217084B2 (en) 2017-05-18 2019-02-26 Bank Of America Corporation System for processing resource deposits
CN109242485B (en) * 2018-08-13 2020-07-10 阿里巴巴集团控股有限公司 Block chain transaction method and device and electronic equipment
JP2020129210A (en) * 2019-02-07 2020-08-27 株式会社メルカリ Information processing method, information processing device, and program

Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5453601A (en) * 1991-11-15 1995-09-26 Citibank, N.A. Electronic-monetary system
US5586937A (en) * 1993-05-19 1996-12-24 Menashe; Julian Interactive, computerised gaming system with remote terminals
US5644721A (en) * 1995-08-30 1997-07-01 System One Information Management, L.L.C. Multiple currency travel reservation information management system and method
US5774553A (en) * 1995-11-21 1998-06-30 Citibank N.A. Foreign exchange transaction system
US5787402A (en) * 1996-05-15 1998-07-28 Crossmar, Inc. Method and system for performing automated financial transactions involving foreign currencies
US5799087A (en) * 1994-04-28 1998-08-25 Citibank, N.A. Electronic-monetary system
US5802497A (en) * 1995-07-10 1998-09-01 Digital Equipment Corporation Method and apparatus for conducting computerized commerce
US5884274A (en) * 1996-11-15 1999-03-16 Walker Asset Management Limited Partnership System and method for generating and executing insurance policies for foreign exchange losses
US5897621A (en) * 1996-06-14 1999-04-27 Cybercash, Inc. System and method for multi-currency transactions
US5902983A (en) * 1996-04-29 1999-05-11 International Game Technology Preset amount electronic funds transfer system for gaming machines
US5905976A (en) * 1995-07-19 1999-05-18 France Telecom System of secured payment by the transfer of electronic money through an interbank network
US5952639A (en) * 1995-12-08 1999-09-14 Hitachi, Ltd. Depositing, withdrawal, balance check, exchange and transfer of electronic money in automatic cash handling machine
US6003765A (en) * 1996-05-16 1999-12-21 Nippon Telegraph And Telephone Corporation Electronic cash implementing method with a surveillance institution, and user apparatus and surveillance institution apparatus for implementing the same
US6023508A (en) * 1997-05-22 2000-02-08 Currency Scientific, Inc. Polymorphic data structures for secure operation of a virtual cash system
US6044360A (en) * 1996-04-16 2000-03-28 Picciallo; Michael J. Third party credit card
US6138107A (en) * 1996-01-04 2000-10-24 Netscape Communications Corporation Method and apparatus for providing electronic accounts over a public network

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH09237299A (en) * 1996-02-29 1997-09-09 Hitachi Ltd Electronic purse

Patent Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5453601A (en) * 1991-11-15 1995-09-26 Citibank, N.A. Electronic-monetary system
US5586937A (en) * 1993-05-19 1996-12-24 Menashe; Julian Interactive, computerised gaming system with remote terminals
US5799087A (en) * 1994-04-28 1998-08-25 Citibank, N.A. Electronic-monetary system
US5802497A (en) * 1995-07-10 1998-09-01 Digital Equipment Corporation Method and apparatus for conducting computerized commerce
US5905976A (en) * 1995-07-19 1999-05-18 France Telecom System of secured payment by the transfer of electronic money through an interbank network
US5644721A (en) * 1995-08-30 1997-07-01 System One Information Management, L.L.C. Multiple currency travel reservation information management system and method
US5774553A (en) * 1995-11-21 1998-06-30 Citibank N.A. Foreign exchange transaction system
US5952639A (en) * 1995-12-08 1999-09-14 Hitachi, Ltd. Depositing, withdrawal, balance check, exchange and transfer of electronic money in automatic cash handling machine
US6138107A (en) * 1996-01-04 2000-10-24 Netscape Communications Corporation Method and apparatus for providing electronic accounts over a public network
US6044360A (en) * 1996-04-16 2000-03-28 Picciallo; Michael J. Third party credit card
US5902983A (en) * 1996-04-29 1999-05-11 International Game Technology Preset amount electronic funds transfer system for gaming machines
US5787402A (en) * 1996-05-15 1998-07-28 Crossmar, Inc. Method and system for performing automated financial transactions involving foreign currencies
US6003765A (en) * 1996-05-16 1999-12-21 Nippon Telegraph And Telephone Corporation Electronic cash implementing method with a surveillance institution, and user apparatus and surveillance institution apparatus for implementing the same
US5897621A (en) * 1996-06-14 1999-04-27 Cybercash, Inc. System and method for multi-currency transactions
US5884274A (en) * 1996-11-15 1999-03-16 Walker Asset Management Limited Partnership System and method for generating and executing insurance policies for foreign exchange losses
US6023508A (en) * 1997-05-22 2000-02-08 Currency Scientific, Inc. Polymorphic data structures for secure operation of a virtual cash system

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060118617A1 (en) * 2004-12-03 2006-06-08 Sanden Corporation Electronic money conversion apparatus
US20060208064A1 (en) * 2005-01-18 2006-09-21 Isaac Mendelovich Method for managing consumer accounts and transactions
US20080243703A1 (en) * 2007-03-28 2008-10-02 Ahmed Ibrahim Al-Herz Virtual account based new digital cash protocols with combined blind digital signature and pseudonym authentication
US7958057B2 (en) * 2007-03-28 2011-06-07 King Fahd University Of Petroleum And Minerals Virtual account based new digital cash protocols with combined blind digital signature and pseudonym authentication

Also Published As

Publication number Publication date
JPH1166193A (en) 1999-03-09
US6487542B2 (en) 2002-11-26
CA2244627C (en) 2007-10-16
CA2244627A1 (en) 1999-02-14
US20020095370A1 (en) 2002-07-18

Similar Documents

Publication Publication Date Title
US6487542B2 (en) Method and apparatus for managing electronic money and storage for storing an electronic money management program
EP1001392B1 (en) Electronic payment system with inexpensive illegal acts detection scheme
US5848161A (en) Method for providing secured commerical transactions via a networked communications system
US6981154B2 (en) Account authority digital signature (AADS) accounts
US6516996B1 (en) Electronic payment system
US6282523B1 (en) Method and apparatus for processing checks to reserve funds
US5884288A (en) Method and system for electronic bill payment
US6047269A (en) Self-contained payment system with circulating digital vouchers
US7565326B2 (en) Dialect independent multi-dimensional integrator using a normalized language platform and secure controlled access
US6681328B1 (en) System and method for global internet digital identification
US5677955A (en) Electronic funds transfer instruments
KR20070051338A (en) Method of providing cash and cash equivalent for electronic transactions
CA2355785C (en) Electronic presentation of invoices using a trusted document repository
JPH10240848A (en) Method for transferring fund for electronic coin between user terminals
WO1998026364A9 (en) A method and system for electronic bill payment
CA2319919A1 (en) On-line payment system
Neuman et al. NetCheque, NetCash, and the characteristics of Internet payment services
Havinga et al. Survey of electronic payment methods and systems
JP4082268B2 (en) Electronic money management method, electronic money management device, and storage medium storing electronic money management program
JP2000285186A (en) Data exchange method
JP2000251146A (en) Method and system for electronic ticketing using ic card
Kravitz Highly scalable on-line payments via task decoupling
Fram et al. Altered states: electronic commerce and owning the means of value exchange
JP2000311196A (en) System for processing application procedure and ic card used therefor
KR100485243B1 (en) payment method by on-line account commerce using security system

Legal Events

Date Code Title Description
STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION