Electronic settlement system, settlement management device, store device, client device, data storage device, computer program, and storage medium

Abstract

An electronic settlement system includes a data storage device such as an IC card in which value information is stored, a client device provided with an information input/output function to the data storage device, a settlement management device for managing settlement between the data storage device and a store device, and a communication system for connecting the client device, and the settlement management device so as to enable bidirectional communication. The settlement management device creates settlement information for making settlement by the data storage device, subjects the settlement information to an encryption processing by using a common key shared by the settlement management device and the data storage device, and transmits the settlement information subjected to the encryption processing to the client device, and the client device outputs the settlement information received from the settlement management device to the data storage device.

1 . A client system configured to communicate with a settlement management system using a non-contact connection and a network, the client system configured to perform the communication structured in multiple layers, the client system comprising:
 an IC chip including a built-in processing circuit and a built-in memory being configured as a tamper-resistant data storage storing information used for an electronic commercial transaction based on the communication, and being configured to perform processing relying on an encryption key stored in the built-in memory; and   a computing system including a processor and a memory device storing instructions which when executed by the processor, causes the processor to:   (a) access the IC chip via an interface program,   (b) access the network,   (c) display a service provided over the network,   (d) add a signature when transmitting information to the network based on a PKI protocol, and   (e) check validity of a signature when receiving information from the network based on the PKI protocol;   wherein the client system is configured to transmit transmitting information read from the IC chip and subject the transmitting information to an encryption processing based on the PKI protocol, and is configured to receive a response from the settlement management system including settlement completion information causing the computing system to present a payment completion screen to a user, wherein the transmitting information includes information used for safe electronic commercial transaction.   
     
     
         2 . A client system according to  claim 1 , wherein the information used for safe electronic commercial transaction is a point value. 
     
     
         3 . A client system according to  claim 1 , wherein the information used for safe electronic commercial transaction is a monetary value. 
     
     
         4 . A client system according to  claim 1 , further configured to receive another response from the settlement management system, wherein the other response includes a payment screen for causing the computing system to present a payment screen to the user. 
     
     
         5 . A client system according to  claim 1 , further configured to receive another response from the settlement management system, wherein the other response includes top page information for causing the computing system to present a top page screen to the user. 
     
     
         6 . A client system according to  claim 1 , wherein the processing relying on the encryption key performed in the IC chip uses a private key. 
     
     
         7 . A client system according to  claim 1 , wherein the IC chip is formed in a card at a client device. 
     
     
         8 . A client system according to  claim 1 , wherein the non-contact connection is established between the IC chip and the computing system. 
     
     
         9 . A client system according to  claim 1 , wherein the built-in memory of the IC chip stores value information. 
     
     
         10 . A client system according to  claim 1 , wherein the PKI protocol is for a layer for the IC chip. 
     
     
         11 . A client system according to  claim 1 , wherein the PKI protocol is for a layer for a browser program running on the computing system. 
     
     
         12 . A client system according to  claim 11 , wherein the PKI protocol is performed using HTTPS (Secured Hyper-Text Transfer Protocol). 
     
     
         13 . A client system according to  claim 1 , wherein the PKI protocol is for a layer for the interface program. 
     
     
         14 . A client system according to  claim 1 , further comprising a reader/writer for performing a non-contact communication. 
     
     
         15 . A client system according to  claim 1 , wherein the interface program is an Active X program. 
     
     
         16 . A client system according to  claim 1 , wherein the encryption key is a common key. 
     
     
         17 . A client system according to  claim 1 , wherein the IC chip is securely incorporated and integrally comprised in the client system, and the computing system is securely incorporated and integrally comprised in the client system. 
     
     
         18 . A client system according to  claim 1 , wherein the computing system is a portable telephone device. 
     
     
         19 . A client system according to  claim 1 , wherein the IC chip receives update information from the settlement management system via the computing system for updating the information used for safe electronic commercial transaction. 
     
     
         20 . A client system according to  claim 19 , wherein the computing system validates the update information using a common key. 
     
     
         21 . A client system according to  claim 1 , wherein the computing system adds a signature when transmitting information to the network using a private key. 
     
     
         22 . A client system according to  claim 1 , further configured to transmit purchase request information to the network. 
     
     
         23 . A settlement management method performed on a settlement management system configured to communicate with a client system using a non-contact connection and a network, the settlement management system configured to perform the communication structured in multiple layers, the method comprising:
 receiving, from the client system, transmitted information including information used for safe electronic commercial transaction, the information used for safe electronic commercial transaction read from an IC chip at the client system, wherein the IC chip includes a built-in processing circuit and a built-in memory being configured as a tamper-resistant data storage storing information used for an electronic commercial transaction based on the communication, and being configured to perform processing relying on an encryption key stored in the built-in memory;   decrypting the transmitted information based on a PKI protocol compatible with the client system;   decrypting the information used for safe electronic commercial transaction based on the encryption key;   completing a settlement processing required for the electronic commercial transaction based on the information used for safe electronic commercial transaction; and   transmitting, to the client system, a response including settlement completion information for causing the client system to present a payment completion screen to a user.   
     
     
         24 . A settlement management method according to  claim 23 , wherein the client system includes a processor and a memory device storing instructions which when executed by the processor, causes the processor to:
 (a) access the IC chip via an interface program,   (b) access the network,   (c) display a service provided over the network,   (d) add a signature when transmitting information to the network based on a PKI protocol, and   (e) check validity of a signature when receiving information from the network based on the PKI protocol.   
     
     
         25 . A settlement management method according to  claim 23 , wherein the information used for safe electronic commercial transaction is a point value. 
     
     
         26 . A settlement management method according to  claim 23 , wherein the information used for safe electronic commercial transaction is a monetary value. 
     
     
         27 . A settlement management method according to  claim 23 , further comprising:
 transmitting another response to the client system, wherein the other response includes a payment screen for causing the client system to present a payment screen to the user.   
     
     
         28 . A settlement management method according to  claim 23 , further comprising:
 transmitting another response to the client system, wherein the other response includes top page information for causing the client system to present a top page screen to the user.   
     
     
         29 . A settlement management method according to  claim 23 , wherein the non-contact connection is established between the IC chip and a computing system of the client system. 
     
     
         30 . A settlement management method according to  claim 23 , further comprising:
 transmitting, to the client system, update information for updating the information used for safe electronic commercial transaction.   
     
     
         31 . A settlement management method according to  claim 23 , further comprising:
 receiving settlement request information for requesting a settlement to a purchase request made by the client system.