US20100094757A1 - Electronic value exchange user device and third-party device - Google Patents
Electronic value exchange user device and third-party device Download PDFInfo
- Publication number
- US20100094757A1 US20100094757A1 US12/636,485 US63648509A US2010094757A1 US 20100094757 A1 US20100094757 A1 US 20100094757A1 US 63648509 A US63648509 A US 63648509A US 2010094757 A1 US2010094757 A1 US 2010094757A1
- Authority
- US
- United States
- Prior art keywords
- information
- session
- user device
- abort
- electronic signature
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q30/00—Commerce
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/02—Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/04—Payment circuits
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/105—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems involving programming of a portable memory device, e.g. IC cards, "electronic purses"
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3825—Use of electronic signatures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/407—Cancellation of a transaction
Abstract
A user device for performing an exchange of an electronic value with another user device is provided. The user device includes an agreement unit configured to acquire offer information corresponding to at least a first random number, from another user device, generate a second random number, generate session information, generate agreement object information, generate an electronic signature, and output agreement information including at least the agreement object information, the session information, and the electronic signature. The user device further includes a second confirmation unit and an abort request unit. The second confirmation unit is configured to acquire from another user device, first confirmation information, perform a verification on a predetermined verification item, and output second confirmation information. The abort request unit is configured to generate an electronic signature and output abort request information.
Description
- This application is a divisional application of U.S. application Ser. No. 11/371,106, filed on Mar. 9, 2006, which claims benefit of priority from the prior Japanese Application No. 2005-071690 filed Mar. 14, 2005; the entire contents of which are incorporated herein by reference.
- The present invention relates to an electronic value exchange method for implementing fair exchange of electronic values (e.g., electronic money, electronic tickets, etc.) being information electronically representing values, and relates to a user device and a third-party device for such electronic value exchange.
- There is the conventionally known technology concerning the electronic value exchange for safely exchanging electronic values (e.g., electronic money, electronic tickets, etc.) being information electronically representing values, and Japanese Patent Application Laid-Open No. 2004-341643 suggests the technology of implementing a fair trade in the electronic value exchange through the use of a third-party device. The “fair trade” stated herein means mutual exchange of electronic values meeting the condition that neither of two parties involved in the trade loses an electronic value of a trading object of its own, without gaining an electronic value as a consideration or without obtaining a guarantee for acquisition thereof.
- In the technology of implementing the fair trade in the electronic value exchange through the use of the third-party device as described above, however, various pieces of control information are exchanged multiple times between the parties involved in the trade, and on such occasions information containing essentially unnecessary control information is sometimes transmitted and received, so as to lead possibly to an increase in volume of data transmitted and received. In addition, the third-party device has to manage states while no proposal on technology of appropriately managing states of multiple electronic value exchanges. As described above, the technology for implementing the fair trade in the electronic value exchange is not mature yet, and there are desires for further promotion of efficiency of processing and improvement in processing.
- The present invention has been accomplished in order to solve the above problem and an object of the present invention is to provide an electronic value exchange method, a user device, and a third-party device capable of achieving further promotion of efficiency of processing and improvement in processing for assuring fairness in electronic value exchange.
- An electronic value exchange method according to the present invention is a method of exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, the method being an electronic value exchange method of: letting the first user device execute an offer step including: a step of generating a first random number; and a step of outputting offer information being information corresponding to at least the first random number; letting the second user device execute an agreement step including: a step of acquiring the offer information; a step of generating a second random number; a step of generating session information corresponding to the second random number; a step of generating agreement object information corresponding to information containing at least the session information; a step of generating an electronic signature Sa corresponding to information containing the agreement object information and the session information; and a step of outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa; letting the first user device execute a first confirmation step including: a step of acquiring the agreement information; a step of performing a verification on a predetermined verification item; a step of generating an electronic signature Se for information containing the session information; and a step of outputting first confirmation information being information containing at least the session information and the electronic signature Se; letting the second user device execute a second confirmation step including: a step of acquiring the first confirmation information; a step of performing a verification on a predetermined verification item; and a step of outputting second confirmation information being information containing the second random number; and letting the first user device execute an end step including: a step of acquiring the second confirmation information; and a step of performing a verification on a predetermined verification item; wherein the second user device executes an abort request step including: a step of generating an electronic signature for information containing information indicating an abort request, and the session information; and a step of outputting abort request information being information containing the information indicating the abort request, the session information, and the electronic signature; and wherein a third-party device executes an abort determination step including: a step of acquiring the abort request information; a step of performing a verification on a predetermined verification item; and a step of determining whether a session state corresponding to the session information is defined as commit, and, if the session state is not defined as commit, making the session state corresponding to the session information so as to define the session state as abort.
- In the above electronic value exchange method, the second user device generates the electronic signature for the information containing the session information and the information indicating the abort request, using only the session information contained in the agreement information, instead of the agreement information, and outputs the abort request information being the information containing the session information, the information indicating the abort request, and the electronic signature; therefore, transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of data transmitted and received. In addition, the third-party device makes the session state corresponding to the session information so as to define the session state as abort, and is thus able to manage states while appropriately discriminating a plurality of concurrent electronic value exchanges. In this manner, the method achieves further promotion of efficiency of processing and improvement in processing for assuring fairness in the electronic value exchange.
- The above electronic value exchange method is preferably configured as follows: when the session state is defined as abort, the third-party device executes an abort permission step including: a step of generating an electronic signature for information containing information indicating an abort permission, and the session information; and a step of outputting abort permission information being information containing the information indicating the abort permission, the session information, and the electronic signature; and the first user device further executes an abort performance step including: a step of acquiring the abort permission information; and a step of performing a verification on a predetermined verification item. In this manner, the third-party device generates the electronic signature for the information containing the session information and the information indicating the abort permission, using only the session information contained in the agreement information, instead of the agreement information, and outputs the abort permission information being the information containing the session information, the information indicating the abort permission, and the electronic signature, to the first user device; therefore, the transmission/reception can be performed between the third-party device and the first user device, without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data.
- The above electronic value exchange method is preferably configured as follows: when the session state is defined as abort, the third-party device executes an abort permission step including: a step of generating an electronic signature for information containing information indicating an abort permission, and the session information; and a step of outputting abort permission information being information containing the information indicating the abort permission, the session information, and the electronic signature; and the second user device further executes an abort performance step including: a step of acquiring the abort permission information; and a step of performing a verification on a predetermined verification item. In this manner, the third-party device generates the electronic signature for the information containing the session information and the information indicating the abort permission, using only the session information contained in the agreement information, instead of the agreement information, and outputs the abort permission information being the information containing the session information, the information indicating the abort permission, and the electronic signature, to the second user device; therefore, the transmission/reception can be performed between the third-party device and the second user device, without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data.
- Another electronic value exchange method according to the present invention is a method of exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, the method being an electronic value exchange method of: letting the first user device execute an offer step including: a step of generating a first random number; and a step of outputting offer information being information corresponding to at least the first random number; letting the second user device execute an agreement step including: a step of acquiring the offer information; a step of generating a second random number; a step of generating session information corresponding to the second random number; a step of generating agreement object information corresponding to information containing at least the session information; a step of generating an electronic signature Sa corresponding to information containing the agreement object information and the session information; and a step of outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa; letting the first user device execute a first confirmation step including: a step of acquiring the agreement information; a step of performing a verification on a predetermined verification item; a step of generating an electronic signature Se for information containing the session information; and a step of outputting first confirmation information being information containing at least the session information and the electronic signature Se; letting the second user device execute a second confirmation step including: a step of acquiring the first confirmation information; a step of performing a verification on a predetermined verification item; and a step of outputting second confirmation information being information containing the second random number; and letting the first user device execute an end step including: a step of acquiring the second confirmation information; and a step of performing a verification on a predetermined verification item; wherein the first user device executes a commitment request step including: a step of generating an electronic signature for information containing information indicating a commitment request, and the session information; and a step of outputting commitment request information being information containing the information indicating the commitment request, the session information, and the electronic signature; and wherein a third-party device executes a commitment determination step including: a step of acquiring the commitment request information; a step of performing a verification on a predetermined verification item; and a step of determining whether a session state corresponding to the session information is defined as abort, and, if the session state is not defined as abort, making the session state corresponding to the session information to define the session state as commit.
- In the above electronic value exchange method, the first user device generates the electronic signature for the information containing the session information and the information indicating the commitment request, using only the session information contained in the agreement information, instead of the agreement information, and outputs the commitment request information being the information containing the session information, the information indicating the commitment request, and the electronic signature; therefore, the transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data. In addition, the third-party device makes the session state corresponding to the session information so as to define the session state as commit, and is thus able to manage states while appropriately discriminating a plurality of concurrent electronic value exchanges. In this manner, the method achieves further promotion of efficiency of processing and improvement in processing for assuring fairness in the electronic value exchange.
- The above electronic value exchange method is preferably configured as follows: when the session state is defined as commit, the third-party device executes a commitment permission step including: a step of generating an electronic signature for information containing information indicating a commitment permission, and the session information; and a step of outputting commitment permission information being information containing the information indicating the commitment permission, the session information, and the electronic signature; and the first user device further executes a commitment performance step including: a step of acquiring the commitment permission information; and a step of performing a verification on a predetermined verification item. In this manner, the third-party device generates the electronic signature for the information containing the session information and the information indicating the commitment permission, using only the session information contained in the agreement information, instead of the agreement information, and outputs the commitment permission information being the information containing the session information, the information indicating the commitment permission, and the electronic signature, to the first user device; therefore, the transmission/reception can be performed between the third-party device and the first user device, without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data.
- The above electronic value exchange method is preferably configured as follows: when the session state is defined as commit, the third-party device executes a commitment permission step including: a step of generating an electronic signature for information containing information indicating a commitment permission, and the session information; and a step of outputting commitment permission information being information containing the information indicating the commitment permission, the session information, and the electronic signature; and the second user device further executes a commitment performance step including: a step of acquiring the commitment permission information; and a step of performing a verification on a predetermined verification item. In this manner, the third-party device generates the electronic signature for the information containing the session information and the information indicating the commitment permission, using only the session information contained in the agreement information, instead of the agreement information, and outputs the commitment permission information being the information containing the session information, the information indicating the commitment permission, and the electronic signature, to the second user device; therefore, the transmission/reception can be performed between the third-party device and the second user device, without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data.
- Incidentally, the present invention permits various processing steps to be applied as processing steps before arrival at the processing steps associated with the abort request and the commitment request.
- For example, the aforementioned electronic value exchange method associated with the abort request can be described as stated below. “Second session information” in the description below corresponds to the “session information” in the aforementioned aspect of the present invention, and “start information” to the “offer information” in the aforementioned aspect of the invention.
- Another electronic value exchange method according to the present invention is a method of exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, the method being an electronic value exchange method of: letting the first user device execute a start step including: a step of generating a first random number; a step of generating first session information corresponding to the first random number; and a step of outputting start information being information containing the first session information, and a first electronic value; letting the second user device execute an agreement step including: a step of acquiring the start information and the first electronic value; a step of generating a second random number; a step of generating second session information corresponding to the second random number; a step of generating agreement object information corresponding to the first electronic value, a second electronic value, and the first session information; a step of generating an electronic signature Sa for information containing the agreement object information and the second session information; and a step of deleting the second electronic value, and outputting agreement information being information containing the agreement object information, the second session information, and the electronic signature Sa, and the second electronic value; letting the first user device further execute a first confirmation step including: a step of acquiring the agreement information and the second electronic value; a first verification step of performing a verification on a predetermined verification item; a step of generating an electronic signature Se for information containing the second session information; a step of deleting the first electronic value; and a step of outputting first confirmation information being information containing the second session information and the electronic signature Se; letting the second user device further execute a second confirmation step including: a step of acquiring the first confirmation information; a second verification step of performing a verification on a predetermined verification item; a step of storing the first electronic value; and a step of outputting second confirmation information being information containing the second random number; and letting the first user device further execute an end step including: a step of acquiring the second confirmation information; a third verification step of performing a verification on a predetermined verification item; and a step of storing the second electronic value; wherein the second user device executes an abort request step including: a step of generating an electronic signature Sab for information containing information indicating an abort request, and the second session information; and a step of outputting abort request information being information containing the information indicating the abort request, the second session information, and the electronic signature Sab; and wherein a third-party device executes an abort determination step including: a step of acquiring the abort request information; a fourth verification step of performing a verification on a predetermined verification item; and a step of determining whether a session state corresponding to the second session information is defined as commit, and, if the session state is not defined as commit, making the session state corresponding to the second session information so as to define the session state as abort.
- Similarly, the aforementioned electronic value exchange method associated with the commitment request can also be described as follows. Another electronic value exchange method according to the present invention is a method of exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, the method being an electronic value exchange method of: letting the first user device execute a start step including: a step of generating a first random number; a step of generating first session information corresponding to the first random number; and a step of outputting start information being information containing the first session information, and a first electronic value; letting the second user device execute an agreement step including: a step of acquiring the start information and the first electronic value; a step of generating a second random number; a step of generating second session information corresponding to the second random number; a step of generating agreement object information corresponding to the first electronic value, a second electronic value, and the first session information; a step of generating an electronic signature Sa for information containing the agreement object information and the second session information; and a step of deleting the second electronic value, and outputting agreement information being information containing the agreement object information, the second session information, and the electronic signature Sa, and the second electronic value; letting the first user device further execute a first confirmation step including: a step of acquiring the agreement information and the second electronic value; a first verification step of performing a verification on a predetermined verification item; a step of generating an electronic signature Se for information containing the second session information; a step of deleting the first electronic value; and a step of outputting first confirmation information being information containing the second session information and the electronic signature Se; letting the second user device further execute a second confirmation step including: a step of acquiring the first confirmation information; a second verification step of performing a verification on a predetermined verification item; a step of storing the first electronic value; and a step of outputting second confirmation information being information containing the second random number; and letting the first user device further execute an end step including: a step of acquiring the second confirmation information; a third verification step of performing a verification on a predetermined verification item; and a step of storing the second electronic value; wherein the first user device executes a commitment request step including: a step of generating an electronic signature Sco for information containing information indicating a commitment request, and the second session information; and a step of outputting commitment request information being information containing the information indicating the commitment request, the second session information, and the electronic signature Sco; and wherein a third-party device executes a commitment determination step including: a step of acquiring the commitment request information; a fifth verification step of performing a verification on a predetermined verification item; and a step of determining whether a session state corresponding to the second session information is defined as abort, and, if the session state is not defined as abort, making the session state corresponding to the second session information so as to define the session state as commit.
- Incidentally, the present invention can also be described as follows, as an aspect of the invention associated with the second user device. A user device according to the present invention is a user device for performing an exchange with another user device to exchange a first electronic value stored in said another user device, for a second electronic value stored in the user device itself, the user device comprising: agreement means for acquiring offer information being information corresponding to at least a first random number, from said another user device, generating a second random number, generating session information corresponding to the second random number, generating agreement object information corresponding to information containing at least the session information, generating an electronic signature Sa for information containing the agreement object information and the session information, and outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa; and second confirmation means for acquiring from said another user device, first confirmation information being information containing an electronic signature Se for information containing the session information, and said session information, performing a verification on a predetermined verification item, and outputting second confirmation information being information containing the second random number; the user device comprising abort request means for generating an electronic signature for information containing information indicating an abort request, and the session information, and for outputting abort request information being information containing the information indicating the abort request, the session information, and the electronic signature.
- The present invention can also be described as follows, as an aspect of the invention associated with the first user device. A user device according to the present invention is a user device for performing an exchange with another user device to exchange a second electronic value stored in said another user device, for a first electronic value stored in the user device itself, the user device comprising: offer means for generating a first random number, and outputting offer information being information corresponding to at least the first random number; first confirmation means for acquiring from said another user device, agreement information being information containing at least an electronic signature Sa for information containing agreement object information corresponding to information containing session information corresponding to a second random number, and the session information, the agreement object information, and the session information, performing a verification on a predetermined verification item, generating an electronic signature Se for information containing the session information, and outputting first confirmation information being information containing at least the session information and the electronic signature Se; and end means for acquiring second confirmation information being information containing the second random number, from said another user device, and for performing a verification on a predetermined verification item; the user device comprising commitment request means for generating an electronic signature for information containing information indicating a commitment request, and the session information, and for outputting commitment request information being information containing the information indicating the commitment request, the session information, and the electronic signature.
- The present invention can also be described as follows, as an aspect of the invention associated with the third-party device for performing the abort determination. A third-party device according to the present invention is a third-party device used in a system for exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, said third-party device being used in the system configured as follows: the first user device executes an offer step of generating a first random number, and outputting offer information being information corresponding to at least the first random number; the second user device executes an agreement step of acquiring the offer information, generating a second random number, generating session information corresponding to the second random number, generating agreement object information corresponding to information containing at least the session information, generating an electronic signature Sa for information containing the agreement object information and the session information, and outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa; the first user device executes a first confirmation step of acquiring the agreement information, performing a verification on a predetermined verification item, generating an electronic signature Se for information containing the session information, and outputting first confirmation information being information containing at least the session information and the electronic signature Se; the second user device executes a second confirmation step of acquiring the first confirmation information, performing a verification on a predetermined verification item, and outputting second confirmation information being information containing the second random number; and the first user device executes an end step of acquiring the second confirmation information, and performing a verification on a predetermined verification item; the third-party device comprising abort determination means configured so that when the second user device executes an abort request step of generating an electronic signature for information containing information indicating an abort request, and the session information, and outputting abort request information being information containing the information indicating the abort request, the session information, and the electronic signature, the abort determination means acquires the abort request information, performs a verification on a predetermined verification item, and determines whether a session state corresponding to the session information is defined as commit, and, if the session state is not defined as commit, the abort determination means makes the session state corresponding to the session information so as to define the session state as abort.
- The third-party device according to the present invention is preferably configured as follows: it further comprises abort permission means configured so that when the session state is defined as abort, the abort permission means generates an electronic signature for information containing information indicating an abort permission, and the session information, and outputs abort permission information being information containing the information indicating the abort permission, the session information, and the electronic signature.
- The present invention can also be described as follows, as an aspect of the invention associated with the third-party device for performing the commitment determination. A third-party device according to the present invention is a third-party device used in a system for exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, said third-party device being used in the system configured as follows: the first user device executes an offer step of generating a first random number, and outputting offer information being information corresponding to at least the first random number; the second user device executes an agreement step of acquiring the offer information, generating a second random number, generating session information corresponding to the second random number, generating agreement object information corresponding to information containing at least the session information, generating an electronic signature Sa for information containing the agreement object information and the session information, and outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa; the first user device executes a first confirmation step of acquiring the agreement information, performing a verification on a predetermined verification item, generating an electronic signature Se for information containing the session information, and outputting first confirmation information being information containing at least the session information and the electronic signature Se; the second user device executes a second confirmation step of acquiring the first confirmation information, performing a verification on a predetermined verification item, and outputting second confirmation information being information containing the second random number; and the first user device executes an end step of acquiring the second confirmation information, and performing a verification on a predetermined verification item; the third-party device comprising commitment determination means configured so that when the first user device executes a commitment request step of generating an electronic signature for information containing information indicating a commitment request, and the session information, and outputting commitment request information being information containing the information indicating the commitment request, the session information, and the electronic signature, the commitment determination means acquires the commitment request information, performs a verification on a predetermined verification item, and determines whether a session state corresponding to the session information is defined as abort, and, if the session state is not defined as abort, the commitment determination means makes the session state corresponding to the session information so as to define the session state as commit.
- The third-party device according to the present invention is preferably configured as follows: it further comprises commitment permission means configured so that when the session state is defined as commit, the commitment permission means generates an electronic signature for information containing information indicating a commitment permission, and the session information, and outputs commitment permission information being information containing the information indicating the commitment permission, the session information, and the electronic signature.
- The present invention successfully achieves further promotion of efficiency of processing and improvement in processing for assuring fairness in the electronic value exchange.
- A more complete appreciation of the invention and many of the attendant advantages thereof will be readily obtained as the same becomes better understood by reference to the following detailed description when considered in connection with the accompanying drawings, wherein:
-
FIG. 1 is an illustration showing a configuration of an electronic value exchange system in an embodiment of the present invention. -
FIG. 2 is an illustration showing a configuration ofuser device 1. -
FIG. 3 is an illustration showing a configuration ofuser device 2. -
FIG. 4 is an illustration showing a configuration of third-party device 3. -
FIG. 5 is an illustration showing a procedure in the first stage of main processing. -
FIG. 6 is an illustration showing a procedure in the second stage of main processing. -
FIG. 7 is an illustration showing a procedure of an abort request process. -
FIG. 8 is an illustration showing a procedure of a commitment request process. -
FIG. 9 is an illustration showing a procedure of an abort permission process. -
FIG. 10 is an illustration showing a procedure of a commitment permission process. -
FIG. 11 is an illustration showing an example of a management table of third session states. - Referring now to the drawings, wherein like reference numerals designate identical or corresponding parts throughout the several views.
- Embodiments of the present invention will be described below with reference to the drawings.
-
FIG. 1 is an illustration showing an overall configuration of an electronic value exchange system according to the present invention.FIG. 1 shows a case whereuser device 1 is connected through communication means 4 touser device 2 and where an exchange transaction is performed so as to eraseelectronic value 101 stored inuser device 1 and store it intouser device 2 and further to eraseelectronic value 201 stored inuser device 2 and store it intouser device 1, through communication means 4. Each of theuser devices - Furthermore, the system shown in
FIG. 1 includes third-party device 3 connected through communication means 5 to theuser devices user device 1 anduser device 2 find an abnormality in performance of the exchange transaction, e.g., detection of a blackout of communication means 4, theuser device party device 3. - The third-
party device 3 determines whether the exchange transaction is to be aborted or committed, according to the transmitted information, and returns information according to the determination result to the source user device. The user device, receiving the information returned from the third-party device, performs either an operation of aborting the exchange transaction according to the determination result and returning the electronic value to the original location, or an operation of deeming the exchange transaction as having been committed and storing the electronic value as an exchange object. - The communication means 4 herein is a temporary communication means, and does not have to establish a constant connection between the
user devices - Next, configurations and operations of the respective devices will be described in detail.
-
FIG. 2 is an illustration showing a configuration ofuser device 1 in an embodiment of the present invention. Theuser device 1 shown in the same figure hasstorage device 10, startdevice 11,first confirmation device 12,end device 13,commitment request device 14,abort performance device 15, andcommitment performance device 16. As described previously, theuser device 1 is comprised, for example, of a portable terminal equipped with a tamper-resistant device (an IC card or the like) at a predetermined location, and thestorage device 10 is comprised of a memory of the tamper-resistant device. For this reason, data stored in thestorage device 10 is prevented from being tampered. -
FIG. 3 is an illustration showing a configuration ofuser device 2 in an embodiment of the present invention. Theuser device 2 shown in the same figure hasstorage device 20,agreement device 21,second confirmation device 22,abort request device 23,abort performance device 24, andcommitment performance device 25. As described previously, theuser device 2 is comprised, for example, of a portable terminal equipped with a tamper-resistant device (an IC card or the like) at a predetermined location, and thestorage device 20 is comprised of a memory of the tamper-resistant device. For this reason, data stored in thestorage device 20 is prevented from being tampered. -
FIG. 4 is an illustration showing a configuration of third-party device 3 in an embodiment of the present invention. The third-party device 3 shown in the same figure hasabort determination device 31,commitment determination device 32, abortpermission device 33, andcommitment permission device 34. Typically, the third-party device 3 herein is comprised of a server connected to a public network such as the Internet, and awaits a connection from a user device. - The communication means 4 in
FIG. 1 can be two IC card reader/writers mutually connected through a communication medium such as an infrared communication line or the Internet. The communication means 5 can be an IC card reader/writer or the like connected through a communication medium such as the Internet to the third-party device 3. - The following will describe a method of fairly exchanging
electronic value 101 stored instorage device 10, forelectronic value 201 stored instorage device 20, using the devices of the configurations as described above. - It is assumed in the following description that the
user device 1 preliminarily retains a public key certificate CertP1 containing a public key P1, the user device 2 a public key certificate CertP2 containing a public key P2, and the third-party device 3 a public key certificate CertP3 containing a public key P3. Here the public key certificates CertP1, CertP2 are issued by a user device certificate authority being a first certificate authority, and the public key certificate CertP3 is a public key certificate issued by a third-party device certificate authority being a second certificate authority. - An exchange of electronic values by this method is started by executing the main processing shown in
FIGS. 5 and 6 , as an example. If an abnormality is found in performance of the main processing, execution of the main processing is suspended to branch into an abort request process or into a commitment request process. After execution of the abort request process and the commitment request process, the execution branches into an abort performance process or into a commitment performance process according to a state of the third-party device. These branching conditions will be described in the following description of processing. It is, however, noted that the main processing shown inFIGS. 5 and 6 is just an example and that the processing associated with recovery of fairness according to the present invention is also applicable to other modes of main processing. - [Main Processing]
- The procedure of main processing will be described with reference to
FIGS. 5 and 6 . - First, the
start device 11 ofuser device 1 executes a process below. - (step 101) It generates a first random number n1. It is noted that “S”, e.g., in “S101” described in
FIGS. 5 to 10 means “step”. - (step 102) It generates first session information s1 corresponding to the first random number n1. At this step, for example, the first session information s1 equal to the first random number n1 is generated.
- (step 103) It defines a first session state as “start”. For example, information indicating “start” is stored in correspondence to the “first session state”.
- (step 104) It references
electronic value 101 from thestorage device 10. In the description hereinafter, theelectronic value 101 is assumed to be an electronic value V1. - (step 105) It outputs the start information O and the electronic value V1 equivalent to the first session information s1, i.e., (O,V1) to the communication means 4. The start information O corresponds to the “offer information” in the present invention.
- The communication means 4 transfers (O,V1) from the
user device 1 to theuser device 2. - Subsequently, the
agreement device 21 of theuser device 2 executes a process below. - (step 106) It acquires the start information O and electronic value V1 from the communication means 4.
- (step 107) It references the
electronic value 201 from thestorage device 20. In the description below, theelectronic value 201 is assumed to be an electronic value V2. - (step 108) It generates a second random number n2.
- (step 109) Using a one-way function H( ), it generates second session information s2==H(n2) corresponding to the second random number n2. The second session information s2 corresponds to the “session information” in the present invention.
- (step 110) It defines a second session state as “valid”. For example, information indicating “valid” is stored in correspondence to the “second session state”.
- (step 111) Using the one-way function H( ), it generates agreement object information Ao=H(V1∥V2∥s1) corresponding to the electronic values V1, V2 and the first session information s1. The notation “∥” herein represents a concatenation.
- (step 112) It generates an electronic signature Sa=SigP2(Ao∥s2) for the information containing the agreement object information Ao and the second session information s2. Here SigP2( ) is a signature function to generate an electronic signature that can be verified by public key P2. Examples of this signature function to be applied include ESIGN, ECDSA, and so on.
- (step 113) It deletes the electronic value V2 from the
storage device 20, and outputs the agreement information A=(Ao,s2,Sa), the electronic value V2, and the public key certificate CertP2 to the communication means 4. Here the agreement information A is information containing the agreement object information Ao, the second session information s2, and the electronic signature Sa. - Then the communication means 4 transfers the agreement information A, the electronic value V2, and the public key certificate CertP2, i.e., (A,V2,CertP2) from the
user device 2 to theuser device 1. - Subsequently, the
first confirmation device 12 of theuser device 1 executes a process below. - (step 114) It acquires the agreement information A and the public key certificate CertP2 from the communication means 4.
- (step 115) It performs a verification on the items below and, if it results in a failure even about only one item, the subsequent processing is interrupted.
- The first session state is “start”.
- The public key certificate CertP2 is a valid public key certificate issued by the user certificate authority.
- The electronic signature Sa=SigP2(Ao∥s2) is successfully verified by the public key P2.
- The agreement object information Ao=H(V1∥V2∥s1) is approved.
- (step 116) It defines the first session state as “valid”.
- (step 117) It generates an electronic signature Se=SigP1(s2) for the information containing the second session information s2. Here SigP1( )is a signature function to generate an electronic signature that can be verified by the public key P1.
- (step 118) It deletes the electronic value V1 from the
storage device 10. - (step 119) It outputs first confirmation information E1=(s2,Se) being information containing the second session information s2 and the electronic signature Se, and the public key certificate CertP1 to the communication means 4.
- Then the communication means 4 transfers the first confirmation information E1 and the public key certificate CertP1, i.e., (E1,CertP1) from the
user device 1 to theuser device 2. When this transfer is not carried out within a fixed time, to result in detection of an abnormality, e.g., a time-out, theuser device 2 interrupts the subsequent processing and executes the “abort request process”. - Subsequently, the
second confirmation device 22 of theuser device 2 executes a process below. - (step 121) It acquires the first confirmation information E1 and the public key certificate CertP1 from the communication means 4.
- (step 122) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing and executes the “abort request process”.
- The second session state is “valid”.
- The public key certificate CertP1 is a valid public key certificate issued by the user certificate authority.
- The electronic signature Se=SigP1(s2) is successfully verified by the public key P1.
- The second session information s2 contained in the first confirmation information E1 is the same as the second session information s2 contained in the agreement information A.
- (step 123) It deletes the second session state.
- (step 124) It stores the electronic value V1 into the
storage device 20. - (step 125) It outputs second confirmation information being information containing the second random number, to the communication means 4. At this step, for example, it outputs the second confirmation information E2 equal to the second random number n2, to the communication means 4.
- Then the communication means 4 transfers the second confirmation information E2 from the
user device 2 to theuser device 1. If this transfer is not carried out within a fixed time, to result in detection of an abnormality, e.g., a time-out, theuser device 1 interrupts the subsequent processing and executes the “commitment request process”. - Subsequently, the end device of the
user device 1 executes a process below. - (step 126) It acquires the second confirmation information E2 from the communication means 4.
- (step 127) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing and executes the “commitment request process”.
- The first session state is “valid”.
- The second session information s2=H(n2) is approved.
- (step 128) It erases the first session state.
- (step 129) It stores the electronic value V2 into the
storage device 10. - After the main processing consisting of the procedure from
step 101 to step 129 described above has been executed to the end, the processing is terminated. At this point, the electronic value V2 (i.e., electronic value 201) is stored in thestorage device 10 of theuser device 1, and the electronic value V1 (i.e., electronic value 101) in thestorage device 20 of theuser device 2; therefore, the aforementioned electronic values are fairly exchanged. - (Abort Request Process)
- Next, the procedure of the “abort request process”, which is executed by the
user device 2 when one of the predetermined cases is met in the main processing, will be described with reference toFIG. 7 . - First, the
abort request device 23 of theuser device 2 executes a process below. - (step 201) It defines the second session state as “hold”.
- (step 202) It generates an electronic signature Sab=SigP2(Mab∥s2) for information containing information Mab indicating an abort request, and the second session information s2.
- (step 203) It outputs to the communication means 5, abort request information Rab=(Mab,s2,Sab) being information containing the information Mab indicating the abort request, the second session information s2, and the electronic signature Sab, and the public key certificate CertP2.
- The communication means 5 transfers the abort request information Rab and the public key certificate CertP2 from the
user device 2 to the third-party device 3. Then theabort determination device 31 of the third-party device 3 executes a process below. - (step 204) It acquires the abort request information Rab and the public key certificate CertP2 from the communication means 5.
- (step 205) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The public key certificate CertP2 is a valid public key certificate issued by the user certificate authority.
- The electronic signature Sab=SigP2(Mab∥s2) is successfully verified by the public key P2.
- (step 206) It references a third session state corresponding to the second session information s2 and branches the processing according to the content thereof The “third session state” corresponds to the “session state” according to the present invention.
- If the third session state is defined as “commit”, the flow goes to the commitment permission process by the
commitment permission device 34 inFIG. 10 which will be described later. - If the third session state is not defined as “commit”, step 207 below is executed.
- (step 207) It makes the third session state corresponding to the second session information s2 so as to define the third session state as “abort”. For example, as shown in
FIG. 11 , the third session state is made corresponding to the second session information s2-1 to be defined as “abort”. After that, the flow goes to the abort permission process by theabort permission device 33 inFIG. 9 which will be described later. - After commitment of the processing according to the above procedure, the abort request process is terminated.
- At the above steps 202, 203, the
abort request device 23 generates the electronic signature Sab for the information containing the second session information s2 and the information Mab indicating the abort request, using only the second session information s2 contained in the agreement information A, instead of the agreement information A, and outputs the abort request information Rab being information containing the second session information s2, the information Mab indicating the abort request, and the electronic signature Sab; therefore, the transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data and achieve promotion of efficiency of the processing. - At step 207 the
abort determination device 31 makes the third session state corresponding to the second session information s2 so as to define the third session state as “abort”; therefore, the third-party device is able to manage states while appropriately distinguishing a plurality of concurrent electronic value exchanges as shown inFIG. 11 . - [Commitment Request Process]
- Next, the procedure of the “commitment request process”, which is executed by the
user device 1 when one of the predetermined cases is met in the main processing, will be described with reference toFIG. 8 . The commitment request process is executed according to the procedure below. - The
commitment request device 14 of theuser device 1 executes a process below. - (step 301) It generates an electronic signature Sco=SigP1(Mco∥s2) for information containing information Mco indicating a commitment request, and the second session information s2.
- (step 302) It outputs commitment request information Rco=(Mco,s2,Sco) being information containing the information Mco indicating the commitment request, the second session information s2, and the electronic signature Sco, and the public key certificate CertP1 to the communication means 5.
- The communication means 5 transfers the commitment request information Rco and the public key certificate CertP2 from the
user device 1 to the third-party device 3. Then thecommitment determination device 32 of the third-party device 3 executes a process below. - (step 303) It acquires the commitment request information Rco and the public key certificate CertP1 from the communication means 5.
- (step 304) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The public key certificate CertP1 is a valid public key certificate issued by the user certificate authority.
- The electronic signature Sco=SigP1(Mco∥s2) is successfully verified by the public key P1.
- (step 305) It references the third session state corresponding to the second session information s2 and branches the processing according to the content thereof.
- If the third session state is defined as “abort”, the flow proceeds to the abort permission process by the
abort permission device 33 inFIG. 9 which will be described later. - If the third session state is not defined as “abort”, step 306 below is executed.
- (step 306) It makes the third session state corresponding to the second session information s2 so as to define the third session state as “commit”. For example, as shown in
FIG. 11 , the third session state is made corresponding to the second session information s2-2 to be defined as “commit”. After that, the flow goes to the commitment permission process by thecommitment permission device 34 inFIG. 10 which will be described later. - After commitment of the processing according to the above procedure, the commitment request process is terminated.
- In the above steps 301, 302, the
commitment request device 14 generates the electronic signature Sco for the information containing the second session information s2 and the information Mco indicating the commitment request, using only the second session information s2 contained in the agreement information A, instead of the agreement information A, and outputs the commitment request information Rco being the information containing the second session information s2, the information Mco indicating the commitment request, and the electronic signature Sco; therefore, the transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data and achieve promotion of efficiency of processing. - At the step 306, the
commitment determination device 32 makes the third session state corresponding to the second session information s2 so as to define the third session state as “commit”; therefore, the third-party device is able to manage states while appropriately distinguishing a plurality of concurrent electronic value exchanges as shown inFIG. 11 . - [Abort Permission Process]
- Next, the procedure of the abort permission process, which is executed when one of the predetermined cases is met in the commitment request process or in the abort request process, will be described with reference to
FIG. 9 . - The
abort permission device 33 of the third-party device 3 executes a process below. - (step 401) It generates an electronic signature Sabort=SigP3(abort∥s2) for information containing information abort indicating an abort permission, and the second session information s2.
- (step 402) It outputs abort permission information AT=(abort,s2,Sabort) being information containing the information abort indicating the abort permission, the second session information s2, and the electronic signature Sabort, and the public key certificate CertP3 to the communication means 5.
- (step 403) The communication means 5 transfers the abort permission information AT and the public key certificate CertP3 from the third-
party device 3 to theuser device 1 or to theuser device 2. To which the information is to be transferred is determined according to the following conditions. - If the preceding process is the commitment request process, the information is transferred to the
user device 1. - If the preceding process is the abort request process, the information is transferred to the
user device 2. When theuser device 1 is the one receiving the abort permission information AT and the public key certificate CertP3, theabort performance device 15 of theuser device 1 executes a process below. - (step 411) It acquires the abort permission information AT and the public key certificate CertP3 from the communication means 5.
- (step 412) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The first session state is “valid”.
- The public key certificate CertP3 is a valid public key certificate issued by the third-party device certificate authority.
- The electronic signature Sabort=SigP3(abort∥s2) is successfully verified by the public key P3.
- (step 413) It erases the first session state or defines it as invalid.
- (step 414) It generates an electronic value corresponding to the electronic value V1 and stores it into the
storage device 10. - On the other hand, when the
user device 2 is the one receiving the abort permission information AT and the public key certificate CertP3, theabort performance device 24 of theuser device 2 executes a process below. - (step 421) It acquires the abort permission information AT and the public key certificate CertP3 from the communication means 5.
- (step 422) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The second session state is “hold” or “valid”.
- The public key certificate CertP3 is a valid public key certificate issued by the third-party device certificate authority.
- The electronic signature Sabort=SigP3(abort∥s2) is successfully verified by the public key P3.
- (step 423) It erases the second session state or defines it as invalid.
- (step 424) It generates an electronic value corresponding to the electronic value V2 and stores it into the
storage device 20. - After commitment of the above processing, the abort permission process is terminated.
- At the above steps 401, 402, the
abort permission device 33 generates the electronic signature Sabort for the information containing the second session information s2 and the information abort indicating the abort permission, using only the second session information s2 contained in the agreement information A, instead of the agreement information A, and outputs the abort permission information AT being the information containing the second session information s2, the information abort indicating the abort permission, and the electronic signature Sabort; therefore, the transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data and achieve promotion of efficiency of processing. - [Commitment Permission Process]
- Next, the commitment permission process, which is executed when one of the predetermined cases is met in the commitment request process or in the abort request process, will be described with reference to
FIG. 10 . - The
commitment permission device 34 of the third-party device 3 executes a process below. - (step 501) It generates an electronic signature Scommit=SigP3(commit∥s2) for information containing information commit indicating a commitment permission, and the second session information s2.
- (step 502) It outputs commitment permission information CT=(commit,s2,Scommit) being information containing the information commit indicating the commitment permission, the second session information s2, and the electronic signature Scommit, and the public key certificate CertP3 to the communication means 5.
- (step 503) The communication means 5 transfers the commitment permission information CT and the public key certificate CertP3 from the third-
party device 3 to theuser device 1 or to theuser device 2. To which the information is to be transferred is determined depending upon the following conditions. - If the preceding process is the commitment request process, the information is transferred to the
user device 1. - If the preceding process is the abort request process, the information is transferred to the
user device 2. - When the
user device 1 is the one receiving the commitment permission information CT and the public key certificate CertP3, thecommitment performance device 16 of theuser device 1 executes a process below. - (step 511) It acquires the commitment permission information CT and the public key certificate CertP3 from the communication means 5.
- (step 512) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The first session state is “valid”.
- The public key certificate CertP3 is a valid public key certificate issued by the third-party device certificate authority.
- The electronic signature Scommit=SigP3(commit∥s2) is successfully verified by the public key P3.
- (step 513) It erases the first session state or defines it as invalid.
- (step 514) It generates an electronic value corresponding to the electronic value V2 and stores it into the
storage device 10. - On the other hand, when the
user device 2 is the one receiving the commitment permission information CT and the public key certificate CertP3, thecommitment performance device 25 of theuser device 2 executes a process below. - (step 521) It acquires the commitment permission information CT and the public key certificate CertP3 from the communication means 5.
- (step 522) It performs a verification on the following items and, if the verification results in a failure even about only one item, it interrupts the subsequent processing.
- The second session state is “hold” or “valid”.
- The public key certificate CertP3 is a valid public key certificate issued by the third-party device certificate authority.
- The electronic signature Scommit=SigP3(commit∥s2) is successfully verified by the public key P3.
- (step 523) It erases the second session state or defines it as invalid.
- (step 524) It generates an electronic value corresponding to the electronic value V1 and stores it into the
storage device 20. - After commitment of the above processing, the commitment permission process is terminated.
- At the above steps 501, 502, the
commitment permission device 34 generates the electronic signature Scommit for the information containing the second session information - After commitment of the above processing, the commitment permission process is terminated.
- At the above steps 501, 502, the
commitment permission device 34 generates the electronic signature Scommit for the information containing the second session information s2 and the information commit indicating the commitment permission, using only the second session information s2 contained in the agreement information A, instead of the agreement information A, and outputs the commitment permission information CT being the information containing the second session information s2, the information commit indicating the commitment permission, and the electronic signature Scommit; therefore, the transmission/reception can be performed without essentially unnecessary control information, so as to avoid an increase in volume of transmitted and received data and achieve promotion of efficiency of processing. - In the above embodiment, the
electronic values electronic value 101 is one or more electronic tickets and wherein theelectronic value 201 is electronic money representing a certain amount of money or by a configuration wherein theelectronic value 201 represents one or more electronic tickets and theelectronic value 101 electronic money representing a certain amount of money. - Programs to execute the processes of the present embodiment in the respective devices of the system in the present embodiment can be recorded, stored, or distributed in computer-readable recording media, e.g., FD (flexible disk), MO, ROM, a memory card, CD-ROM, DVD, a removable disk, or the like. The programs can also be provided through a network, such as the Internet or e-mail.
- It is noted that the present invention is not limited to the above embodiments and that a variety of changes and applications can be made within the scope of the claims.
- Obviously, numerous modifications and variations of the present invention are possible in light of the above teachings. It is therefore to be understood that within the scope of the appended claims, the invention may be practiced otherwise than as specifically described herein.
Claims (6)
1. A user device for performing an exchange with another user device to exchange a first electronic value stored in said another user device, for a second electronic value stored in the user device itself, the user device comprising:
an agreement unit configured to acquire offer information being information corresponding to at least a first random number, from said another user device, generate a second random number, generate session information corresponding to the second random number, generate agreement object information corresponding to information containing at least the session information, generate an electronic signature Sa for information containing the agreement object information and the session information, and output agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa;
a second confirmation unit configured to acquire from said another user device, first confirmation information being information containing an electronic signature Se for information containing the session information, and said session information, perform a verification on a predetermined verification item, and output second confirmation information being information containing the second random number; and
an abort request unit configured to generate an electronic signature for information containing information indicating an abort request, and the session information, and output abort request information being information containing the information indicating the abort request, the session information, and the electronic signature.
2. A user device for performing an exchange with another user device to exchange a second electronic value stored in said another user device, for a first electronic value stored in the user device itself, the user device comprising:
an offer unit configured to generate a first random number, and output offer information being information corresponding to at least the first random number;
a first confirmation unit configured to acquire from said another user device, agreement information being information containing at least an electronic signature Sa for information containing agreement object information corresponding to information containing session information corresponding to a second random number, and the session information, the agreement object information, and the session information, perform a verification on a predetermined verification item, generate an electronic signature Se for information containing the session information, and output first confirmation information being information containing at least the session information and the electronic signature Se;
an end unit configured to acquire second confirmation information being information containing the second random number, from said another user device, and perform a verification on a predetermined verification item; and
a commitment request unit configured to generate an electronic signature for information containing information indicating a commitment request, and the session information, and output commitment request information being information containing the information indicating the commitment request, the session information, and the electronic signature.
3. A device used in a system for exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, said device being used in the system configured as follows:
the first user device executes an offer step of generating a first random number, and outputting offer information being information corresponding to at least the first random number;
the second user device executes an agreement step of acquiring the offer information, generating a second random number, generating session information corresponding to the second random number, generating agreement object information corresponding to information containing at least the session information, generating an electronic signature Sa for information containing the agreement object information and the session information, and outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa;
the first user device executes a first confirmation step of acquiring the agreement information, performing a verification on a predetermined verification item, generating an electronic signature Se for information containing the session information, and outputting first confirmation information being information containing at least the session information and the electronic signature Se;
the second user device executes a second confirmation step of acquiring the first confirmation information, performing a verification on a predetermined verification item, and outputting second confirmation information being information containing the second random number;
the first user device executes an end step of acquiring the second confirmation information, and performing a verification on a predetermined verification item; and
the device comprising an abort determination unit configured so that when the second user device executes an abort request step of generating an electronic signature for information containing information indicating an abort request, and the session information, and outputting abort request information being information containing the information indicating the abort request, the session information, and the electronic signature, the abort determination unit acquires the abort request information, performs a verification on a predetermined verification item, and determines whether a session state corresponding to the session information is defined as commit, and, if the session state is not defined as commit, the abort determination unit makes the session state corresponding to the session information so as to define the session state as abort.
4. The device according to claim 3 , further comprising:
an abort permission unit configured so that when the session state is defined as abort, the abort permission unit generates an electronic signature for information containing information indicating an abort permission, and the session information, and outputs abort permission information being information containing the information indicating the abort permission, the session information, and the electronic signature.
5. A device used in a system for exchanging a first electronic value stored in a first user device, for a second electronic value stored in a second user device, said device being used in the system configured as follows:
the first user device executes an offer step of generating a first random number, and outputting offer information being information corresponding to at least the first random number;
the second user device executes an agreement step of acquiring the offer information, generating a second random number, generating session information corresponding to the second random number, generating agreement object information corresponding to information containing at least the session information, generating an electronic signature Sa for information containing the agreement object information and the session information, and outputting agreement information being information containing at least the agreement object information, the session information, and the electronic signature Sa;
the first user device executes a first confirmation step of acquiring the agreement information, performing a verification on a predetermined verification item, generating an electronic signature Se for information containing the session information, and outputting first confirmation information being information containing at least the session information and the electronic signature Se;
the second user device executes a second confirmation step of acquiring the first confirmation information, performing a verification on a predetermined verification item, and outputting second confirmation information being information containing the second random number;
the first user device executes an end step of acquiring the second confirmation information, and performing a verification on a predetermined verification item; and
the device comprising a commitment determination unit configured so that when the first user device executes a commitment request step of generating an electronic signature for information containing information indicating a commitment request, and the session information, and outputting commitment request information being information containing the information indicating the commitment request, the session information, and the electronic signature, the commitment determination unit acquires the commitment request information, performs a verification on a predetermined verification item, and determines whether a session state corresponding to the session information is defined as abort, and, if the session state is not defined as abort, the commitment determination unit makes the session state corresponding to the session information so as to define the session state as commit
6. The device according to claim 5 , further comprising a commitment permission unit configured so that when the session state is defined as commit, the commitment permission unit generates an electronic signature for information containing information indicating a commitment permission, and the session information, and outputs commitment permission information being information containing the information indicating the commitment permission, the session information, and the electronic signature.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US12/636,485 US20100094757A1 (en) | 2005-03-14 | 2009-12-11 | Electronic value exchange user device and third-party device |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2005071690A JP2006252462A (en) | 2005-03-14 | 2005-03-14 | Electronic value exchanging method, user device, and third person device |
JP2005-071690 | 2005-03-14 | ||
US11/371,106 US7865438B2 (en) | 2005-03-14 | 2006-03-09 | Electronic value exchange method, user device, and third-party device |
US12/636,485 US20100094757A1 (en) | 2005-03-14 | 2009-12-11 | Electronic value exchange user device and third-party device |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/371,106 Division US7865438B2 (en) | 2005-03-14 | 2006-03-09 | Electronic value exchange method, user device, and third-party device |
Publications (1)
Publication Number | Publication Date |
---|---|
US20100094757A1 true US20100094757A1 (en) | 2010-04-15 |
Family
ID=36588830
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/371,106 Expired - Fee Related US7865438B2 (en) | 2005-03-14 | 2006-03-09 | Electronic value exchange method, user device, and third-party device |
US12/636,485 Abandoned US20100094757A1 (en) | 2005-03-14 | 2009-12-11 | Electronic value exchange user device and third-party device |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/371,106 Expired - Fee Related US7865438B2 (en) | 2005-03-14 | 2006-03-09 | Electronic value exchange method, user device, and third-party device |
Country Status (6)
Country | Link |
---|---|
US (2) | US7865438B2 (en) |
EP (1) | EP1703455B8 (en) |
JP (1) | JP2006252462A (en) |
KR (1) | KR100847431B1 (en) |
CN (1) | CN1835013A (en) |
DE (1) | DE602006006105D1 (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9584492B2 (en) * | 2014-06-23 | 2017-02-28 | Vmware, Inc. | Cryptographic proxy service |
Citations (22)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5991749A (en) * | 1996-09-11 | 1999-11-23 | Morrill, Jr.; Paul H. | Wireless telephony for collecting tolls, conducting financial transactions, and authorizing other activities |
US6047270A (en) * | 1996-08-08 | 2000-04-04 | Joao; Raymond Anthony | Apparatus and method for providing account security |
US6097817A (en) * | 1997-12-10 | 2000-08-01 | Omnipoint Corporation | Encryption and decryption in communication system with wireless trunk |
US6208627B1 (en) * | 1997-12-10 | 2001-03-27 | Xircom, Inc. | Signaling and protocol for communication system with wireless trunk |
US20010034771A1 (en) * | 2000-01-14 | 2001-10-25 | Sun Microsystems, Inc. | Network portal system and methods |
US20010049731A1 (en) * | 2000-05-31 | 2001-12-06 | Jarmo Kuusinen | Suspend state |
US20010051920A1 (en) * | 2000-06-07 | 2001-12-13 | Joao Raymond Anthony | Financial transaction and/or wireless communication device authorization, notification and/or security apparatus and method |
US20030028484A1 (en) * | 2001-08-03 | 2003-02-06 | Cornelius Boylan | Method and devices for inter-terminal payments |
US20030033522A1 (en) * | 1997-12-10 | 2003-02-13 | Izzet M Bilgic | Authentication and security in wireless communication system |
US6526026B1 (en) * | 1997-12-10 | 2003-02-25 | Intel Corporation | Digit transmission over wireless communication link |
US20030070080A1 (en) * | 1991-11-15 | 2003-04-10 | Rosen Sholom S. | Electronic-monetary system |
US6581191B1 (en) * | 1999-11-30 | 2003-06-17 | Synplicity, Inc. | Hardware debugging in a hardware description language |
US20030144958A1 (en) * | 2002-01-28 | 2003-07-31 | Liang Eli Entze | Computer network based secure peer-to-peer file distribution system |
US20030225691A1 (en) * | 2002-04-24 | 2003-12-04 | Canon Kabushiki Kaisha | Method and device for processing an electronic transaction |
US20040078332A1 (en) * | 2002-03-14 | 2004-04-22 | Ferguson Ronald Gene | System and method for purchasing goods and services through data network access points over a point of sale network |
US20040103014A1 (en) * | 2002-11-25 | 2004-05-27 | Teegan Hugh A. | System and method for composing and constraining automated workflow |
US6823497B2 (en) * | 1999-11-30 | 2004-11-23 | Synplicity, Inc. | Method and user interface for debugging an electronic system |
US20050193280A1 (en) * | 1999-11-30 | 2005-09-01 | Bridges2Silicon, Inc. | Design instrumentation circuitry |
US7043453B2 (en) * | 1994-11-23 | 2006-05-09 | Contentguard Holdings, Inc. | Method and system for conducting transactions between repositories using a repository transaction protocol |
US7072818B1 (en) * | 1999-11-30 | 2006-07-04 | Synplicity, Inc. | Method and system for debugging an electronic system |
US20070033136A1 (en) * | 2005-08-05 | 2007-02-08 | Yih-Chun Hu | Secured financial transaction device |
US7512221B2 (en) * | 2002-07-31 | 2009-03-31 | Cerebrus Solutions Limited | System and method for the detection and termination of fraudulent services |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5745886A (en) | 1995-06-07 | 1998-04-28 | Citibank, N.A. | Trusted agents for open distribution of electronic money |
KR100277689B1 (en) | 1998-12-04 | 2001-01-15 | 정선종 | User Authentication Method in Open Network |
KR100729085B1 (en) | 1999-12-18 | 2007-06-14 | 주식회사 케이티 | Method of on-line electronic payment service using digital payment token |
KR100355660B1 (en) | 2001-02-22 | 2002-10-11 | 소프트포럼 주식회사 | Method for authenticating user in internet and system for the same |
JP4334916B2 (en) | 2002-12-19 | 2009-09-30 | 株式会社エヌ・ティ・ティ・ドコモ | Payment processing method, payment processing system, and client terminal device, store terminal device, and financial institution terminal device used therefor |
JP4020007B2 (en) | 2003-05-13 | 2007-12-12 | 日本電信電話株式会社 | Electronic value exchange system and method |
KR20050042694A (en) | 2003-11-04 | 2005-05-10 | 한국전자통신연구원 | Method for electronic commerce using security token and apparatus thereof |
-
2005
- 2005-03-14 JP JP2005071690A patent/JP2006252462A/en active Pending
-
2006
- 2006-03-09 US US11/371,106 patent/US7865438B2/en not_active Expired - Fee Related
- 2006-03-13 EP EP06005094A patent/EP1703455B8/en not_active Expired - Fee Related
- 2006-03-13 DE DE602006006105T patent/DE602006006105D1/en active Active
- 2006-03-14 CN CNA2006100648147A patent/CN1835013A/en active Pending
- 2006-03-14 KR KR1020060023662A patent/KR100847431B1/en not_active IP Right Cessation
-
2009
- 2009-12-11 US US12/636,485 patent/US20100094757A1/en not_active Abandoned
Patent Citations (24)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030070080A1 (en) * | 1991-11-15 | 2003-04-10 | Rosen Sholom S. | Electronic-monetary system |
US7043453B2 (en) * | 1994-11-23 | 2006-05-09 | Contentguard Holdings, Inc. | Method and system for conducting transactions between repositories using a repository transaction protocol |
US6047270A (en) * | 1996-08-08 | 2000-04-04 | Joao; Raymond Anthony | Apparatus and method for providing account security |
US5991749A (en) * | 1996-09-11 | 1999-11-23 | Morrill, Jr.; Paul H. | Wireless telephony for collecting tolls, conducting financial transactions, and authorizing other activities |
US20030033522A1 (en) * | 1997-12-10 | 2003-02-13 | Izzet M Bilgic | Authentication and security in wireless communication system |
US6097817A (en) * | 1997-12-10 | 2000-08-01 | Omnipoint Corporation | Encryption and decryption in communication system with wireless trunk |
US6208627B1 (en) * | 1997-12-10 | 2001-03-27 | Xircom, Inc. | Signaling and protocol for communication system with wireless trunk |
US20010036167A1 (en) * | 1997-12-10 | 2001-11-01 | Menon Narayan P. | Signaling and protocol for communication system with wireless trunk |
US6526026B1 (en) * | 1997-12-10 | 2003-02-25 | Intel Corporation | Digit transmission over wireless communication link |
US6823497B2 (en) * | 1999-11-30 | 2004-11-23 | Synplicity, Inc. | Method and user interface for debugging an electronic system |
US6581191B1 (en) * | 1999-11-30 | 2003-06-17 | Synplicity, Inc. | Hardware debugging in a hardware description language |
US6618839B1 (en) * | 1999-11-30 | 2003-09-09 | Synplicity, Inc. | Method and system for providing an electronic system design with enhanced debugging capabilities |
US7072818B1 (en) * | 1999-11-30 | 2006-07-04 | Synplicity, Inc. | Method and system for debugging an electronic system |
US20050193280A1 (en) * | 1999-11-30 | 2005-09-01 | Bridges2Silicon, Inc. | Design instrumentation circuitry |
US20010034771A1 (en) * | 2000-01-14 | 2001-10-25 | Sun Microsystems, Inc. | Network portal system and methods |
US20010049731A1 (en) * | 2000-05-31 | 2001-12-06 | Jarmo Kuusinen | Suspend state |
US20010051920A1 (en) * | 2000-06-07 | 2001-12-13 | Joao Raymond Anthony | Financial transaction and/or wireless communication device authorization, notification and/or security apparatus and method |
US20030028484A1 (en) * | 2001-08-03 | 2003-02-06 | Cornelius Boylan | Method and devices for inter-terminal payments |
US20030144958A1 (en) * | 2002-01-28 | 2003-07-31 | Liang Eli Entze | Computer network based secure peer-to-peer file distribution system |
US20040078332A1 (en) * | 2002-03-14 | 2004-04-22 | Ferguson Ronald Gene | System and method for purchasing goods and services through data network access points over a point of sale network |
US20030225691A1 (en) * | 2002-04-24 | 2003-12-04 | Canon Kabushiki Kaisha | Method and device for processing an electronic transaction |
US7512221B2 (en) * | 2002-07-31 | 2009-03-31 | Cerebrus Solutions Limited | System and method for the detection and termination of fraudulent services |
US20040103014A1 (en) * | 2002-11-25 | 2004-05-27 | Teegan Hugh A. | System and method for composing and constraining automated workflow |
US20070033136A1 (en) * | 2005-08-05 | 2007-02-08 | Yih-Chun Hu | Secured financial transaction device |
Also Published As
Publication number | Publication date |
---|---|
EP1703455B1 (en) | 2009-04-08 |
EP1703455B8 (en) | 2009-07-01 |
DE602006006105D1 (en) | 2009-05-20 |
CN1835013A (en) | 2006-09-20 |
JP2006252462A (en) | 2006-09-21 |
KR20060100234A (en) | 2006-09-20 |
US20060259430A1 (en) | 2006-11-16 |
US7865438B2 (en) | 2011-01-04 |
KR100847431B1 (en) | 2008-07-21 |
EP1703455A2 (en) | 2006-09-20 |
EP1703455A3 (en) | 2008-01-16 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN110096857B (en) | Authority management method, device, equipment and medium for block chain system | |
EP3776441A1 (en) | Digital asset exchange | |
US7933835B2 (en) | Secure money transfer systems and methods using biometric keys associated therewith | |
CN112767158A (en) | Transaction execution method and device based on block chain and electronic equipment | |
CN105719172A (en) | Information issuing method and device | |
JP2004538547A (en) | Method and apparatus for data interoperability and manipulation in computer networks | |
CN110046841A (en) | Logistics information source tracing method and device and electronic equipment based on block chain | |
EA002886B1 (en) | File transfer system | |
CN1312511A (en) | Electronic purse system | |
WO2021017485A1 (en) | Blockchain-based logistics physical item handover method, platform and storage medium | |
Hofreiter et al. | Transforming umm business collaboration models to bpel | |
CN110083661A (en) | A kind of expansion method of block catenary system, block catenary system, terminal device and storage medium | |
CN107730223A (en) | It is a kind of to polymerize the system and method paid | |
CN109523380A (en) | Across chain method of commerce and device | |
CN110503429B (en) | Decentralized content interaction method and system | |
US7865438B2 (en) | Electronic value exchange method, user device, and third-party device | |
US20020184101A1 (en) | Method and apparatus for integrating with multiple application systems | |
WO2022206433A1 (en) | Method and apparatus for pre-executing chaincode in fabric blockchain | |
CN110457876A (en) | Identity identifying method, apparatus and system | |
JP4020007B2 (en) | Electronic value exchange system and method | |
CN110020946A (en) | Resource object distribution method and device and electronic equipment based on block chain | |
CN113987598A (en) | Block migration method and device | |
US20190130401A1 (en) | Alternative payment server and method for providing alternative payment service using same | |
CN109150996A (en) | A kind of block chain method of reseptance and system | |
KR101775353B1 (en) | System and method for trading over-the-counter using image |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |