Source: http://www.google.com/patents/US20020052838?dq=7,812,828
Timestamp: 2013-12-05 02:56:13
Document Index: 59137728

Matched Legal Cases: ['art 84', 'art 84', 'art 84', 'art 84', 'art 84', 'art 84', 'art 84', 'art 84', 'art 84', 'art 84']

Patent US20020052838 - Information processing system, information processing method, electronic ... - Google PatentsSearch Images Maps Play YouTube News Gmail Drive More »Advanced Patent Search | Sign inAdvanced Patent SearchPatentsAn electronic money system is provided which requires lower management and running cost, and features higher flexibility. An acquirer/brand holder managing an electronic money brand manages all keys used for authentication processing in the system, and issues the keys as necessary. The acquirer/brand...http://www.google.com/patents/US20020052838?utm_source=gb-gplus-sharePatent US20020052838 - Information processing system, information processing method, electronic money service providing system, and recording mediumPublication numberUS20020052838 A1Publication typeApplicationApplication numberUS 09/945,476Publication dateMay 2, 2002Filing dateAug 30, 2001Priority dateSep 1, 2000Also published asCN1340788A, CN100440254C, EP1197927A2, EP1197927A3, US7418425, US20080301014Publication number09945476, 945476, US 2002/0052838 A1, US 2002/052838 A1, US 20020052838 A1, US 20020052838A1, US 2002052838 A1, US 2002052838A1, US-A1-20020052838, US-A1-2002052838, US2002/0052838A1, US2002/052838A1, US20020052838 A1, US20020052838A1, US2002052838 A1, US2002052838A1InventorsKoji Ito, Shigeyuki Kawai, Tsutomu Okude, Junichi Sato, Nobumitsu Ukai, Makoto YamadaOriginal AssigneeMakoto Yamada, Nobumitsu Ukai, Junichi Sato, Shigeyuki Kawai, Tsutomu Okude, Koji ItoReferenced by (9), Classifications (30), Legal Events (4) External Links: USPTO, USPTO Assignment, EspacenetInformation processing system, information processing method, electronic money service providing system, and recording mediumUS 20020052838 A1Abstract An electronic money system is provided which requires lower management and running cost, and features higher flexibility. An acquirer/brand holder managing an electronic money brand manages all keys used for authentication processing in the system, and issues the keys as necessary. The acquirer/brand holder distributes keys according to a tie-up agreement to IC card issuers, a POS center, an MMK center, and an affiliate merchant terminal unit. The POS center, the MMK center, and the affiliate merchant terminal unit are apparatuses for users to use the IC cards or for managing them. The acquirer/brand holder, however, does not distribute issued keys to cybershops which users can access by using a personal computer and a reader/writer. Instead, in this case the acquirer/brand holder saves the issued key itself, and carries out authentication processing with a predetermined IC card upon a request from the cybershop. Images(22) Claims(14)
[0113] where Vf denotes a voltage drop in a diode (not shown) constituting a rectifying circuit for rectifying and smoothing in the ASK demodulator 91, and is typically about 0.7 volts. [0114] Upon receipt of the signal that has been rectified and smoothed by the ASK demodulator 91, the voltage regulator 92 stabilizes the signal and supplies it as a DC power source to individual circuits, including the operation part 84. In this case, as mentioned above, since the modulation degree k of the modulated wave is below 1, the fluctuation in voltage, i.e., the difference between the high level and the low level, after rectification is small. Hence, a DC power source can be easily generated in the voltage regulator 92. [0115] If, for example, a modulated wave having the modulation degree k of 5% is received so that V10 is 3 volts or more, then the low-level voltage VLR after rectification will be 2.15 (=3�(1−0.05)−0.7) volts or more, and the voltage regulator 92 will be able to supply a voltage that is sufficient as a power source to the circuits. Furthermore, in this case, an amplitude 2�k�V10 (peak-to-peak value) of the AC component (data component) of the voltage V1 after rectification will be 0.3 (=2�0.05�3) volts or more, allowing the ASK demodulator 91 to demodulate the data at a sufficiently high S/N ratio. [0116] Thus, utilizing the ASK-modulated waves having the modulation degree k below 1 accomplishes communication with a lower error rate, i.e., a higher S/N ratio, and also supplies a DC voltage, which is adequate as a power source, to the IC card 12. [0117] Upon receipt of data (BPSK-modulated signal) from the ASK demodulator 91, the BPSK demodulator 82 demodulates the data according to the clock signal supplied from the PLL 83, and outputs the demodulated data to the operation part 84. [0118] If the data supplied from the BPSK demodulator 82 has been encoded, then the operation part 84 decodes it by using the encoder/decoder 96, and supplies the data to the sequencer 95 for further processing. During that time, i.e., from the moment the data is transmitted to the IC card 12 to the moment a response thereto is received, the reader/writer 31 stands by after the data having a value of 1 is transmitted. Accordingly, during that time, the IC card 12 receives modulated waves having a fixed maximum amplitude. [0119] Upon completion of processing, the sequencer 95 outputs response data mainly relating to a result of the processing (the data to be transmitted to the reader/writer 31) to the BPSK modulator 88. The BPSK modulator 88 carries out the BPSK modulation (coding into Manchester codes) on the received data, then outputs the modulated data to the ASK modulator 94 of the interface 81. [0120] Subsequently, the ASK modulator 94 changes the load connected to both ends of the antenna 73 according to the data from the BPSK modulator 88 by using a switching device or the like thereby to perform the ASK modulation on the received modulated wave (the maximum amplitude of the modulated wave output from the reader/writer 31 is fixed when data is transmitted by the IC card 12, as mentioned above) according to the data to be transmitted. Thus, a terminal voltage of the antenna 46 of the reader/writer 31 is changed, and the data is sent to the reader/writer 31. [0121] Meanwhile, the modulating circuit 43 of the reader/writer 31 continues to transmit data having a value of 1 (high level) while receiving data from the IC card 12. In the demodulating circuit 44, the data transmitted from the IC card 12 is detected from a very small fluctuation (e.g., several tens of microvolts) in the terminal voltage of the antenna 46 electromagnetically connected to the antenna 73 of the IC card 12. [0122] In the demodulating circuit 44, the detected signal (the ASK-modulated wave) is amplified by a high-gain amplifier (not shown) and demodulated, then the resulting digital data is output to the SPU 52. The SPU 52 demodulates the received data (the BPSK-modulated signal) and outputs the demodulated data to the DPU 51 through the bus 55. The DPU 51 processes the data received from the SPU 52, and determines whether the communication should be terminated or not according to the result of the processing. If the DPU 51 determines that the communication should be performed again, then the communication between the reader/writer 31 and the IC card 12 is performed in the same manner as described above. Conversely, if the DPU 51 determines that the communication is to be terminated, then the processing for the communication between the reader/writer 31 and the IC card 12 is terminated. [0123] Thus, the reader/writer 31 utilizes the ASK modulation, wherein the modulation degree k is below 1, to transmit data to the IC card 12, and the IC card 12 receives the data and implements the processing associated with the data, then returns the data based on a result of the processing to the reader/writer 31. [0124] Referring now to FIG. 6, the logical format of the EEPROM 86 shown in FIG. 5 will be described. [0125] The EEPROM 86 is constituted in units of blocks. For instance, in FIG. 6, one block includes 16 bytes. [0126] In FIG. 6, logical addresses are given in an ascending order, the logical address of the uppermost block being #0000h (�h� denotes hexadecimal). The logical addresses shown in FIG. 6 range from #0000h to #FFFFh, so that 65536 (=216) blocks are included. [0127] Each block is used as a user block or a system block. The blocks of the EEPROM 86 are allotted to the user blocks in the ascending order of the logical addresses, and to the system blocks in the descending order of the logical addresses. This means that, in FIG. 6, the number 15 of the user blocks increases downward, whereas the number of the system blocks increases upward. When available blocks run out, then no more user blocks or system blocks can be made. Thus, the boundary between the user blocks and the system blocks is not fixed, and there is no particular limit on the number of the user blocks or the number of the system blocks. In the case shown in FIG. 6, however, the total number of the user blocks and the system blocks is limited to 65536 or less. [0128] There are five types of the system blocks, namely, manufacture ID (identification) blocks, issuance ID blocks, system definition block, area definition blocks, and service definition blocks. In the case shown in FIG. 6, the blocks indicated as the area definition blocks or the service definition blocks are indicated as area/service definition blocks. [0129] Of the system blocks, the three blocks, namely, the manufacture ID blocks, the issued ID blocks, and the system definition blocks, will have basically already been disposed when the IC card 12 is issued, and are located at logical addresses #FFFFh, #FFFEh, and #FFFDh, respectively. The area/service definition blocks are disposed in a preparing order at logical address #FFFCh and above. [0130] The information regarding the manufacture of the IC card 12 is disposed at the manufacture ID block. More specifically, the manufacture ID block carries, for example, a unique manufacture ID, a date of manufacture, or a manufacturer code. [0131] The information regarding the issuance of the IC card 12 is disposed at the issued ID block. More specifically, the issued ID block carries, for example, the date when the IC card 12 was issued, and a code indicating the order of issuance of the IC cards 12, or a card ID. [0132] The system definition block contains, for example, the number of the system blocks or user blocks that the EEPROM 86 has, or the keys distributed to the issuer 2, that has issued the IC card 12, from the acquirer/brand holder 1. The keys are used for mutual authentication among the IC card 12, the reader/writer 31, and the controller 32, as mentioned above. [0133] The area definition block is prepared by assigning it as a storage area for the storage area of the EEPROM 86 to implement a variety of services, including the present service, and mainly contains the information for managing the storage area where they are disposed. More specifically, the area definition block contains, for example, a code range corresponding to the area for recording the information regarding the service, and the available capacity of each storage area. [0134] The service definition block primarily contains information for managing a service area wherein applications for providing a variety of services to be discussed hereinafter are located, such information including the capacity of the service area and the keys required for implementing processing. [0135]FIG. 7 is a block diagram showing the configuration of the controller 32. [0136] A control unit 101 carries out various types of processing on the basis of signals corresponding to diverse commands entered using an input unit 103 through an internal bus 102. A memory 104 mainly stores programs used by the control unit 101, the parameters for operations, or parameters that are changed as necessary in running programs. The control unit 101 and the memory 104 are mutually connected by the internal bus 102. [0137] The internal bus 102 is also connected to the input unit 103, a display unit 105, a drive 106, and a network interface 107. The input unit 103 is constructed by, for example, a keyboard, a mouse, or a bar code reader, and is operated for entering diverse commands or data or the like to the control unit 101. The display unit 105 is formed of, for example, a cathode ray tube (CRT) or the like, and displays a variety of types of information in terms of texts or images or the like. A magnetic disk 111, an optical disk 112, a magneto-optical disk 113, and a semiconductor memory 114 are loaded, as necessary, onto the drive 106 to exchange data. [0138] The network interface 107 is connected to the reader/writer 31 through the intermediary of, for example, RS-485A, or connected to a local area network (LAN) by using a predetermined interface cable or the like, or a wide area network, such as the Internet 11, for example, through the intermediary of a telephone line (not shown). [0139] As explained in conjunction with FIG. 2, the user 3 is able to enjoy the service using the IC card 12, without going to a store, by connecting the reader/writer 15 to the personal computer 14. FIG. 8 is a block diagram showing the configuration of the personal computer 14. [0140] Through the intermediary of an input/output interface 122 and an internal bus 123, a CPU 121 receives, for example, signals corresponding to diverse commands entered by the user 3 by using an input unit 124 and signals entered through the intermediary of a network interface 125, and performs various types of processing on the basis of the signals. A ROM 126 stores a program, such as a web browser for browsing web contents opened on the Internet 11, used by the CPU 121, and data basically fixed among the parameters for operations. A RAM 127 stores a program used for execution by the CPU 121 and parameters that are changed as necessary in the execution. The CPU 121, the ROM 126, and the RAM 127 are mutually connected by the internal bus 123. [0141] The internal bus 123 is also connected to the input/output interface 122. The input unit 124 is constructed by, for example, a keyboard or a mouse, and is operated for entering diverse commands to the CPU 121. A display unit 128 is formed of, for example, a CRT or the like, and displays a variety of types of information in terms of texts or images or the like. A hard disk drive (HDD) 129 drives a hard disk to cause the programs used by the CPU 121 and data generated by processing implemented according to the programs to be recorded or reproduced. The magnetic disk 131, an optical disk 132, a magneto-optical disk 133, or a semiconductor memory 134 is loaded, as necessary, onto a drive 130 to exchange data. The network interface 125 is connected to the Internet 11 through the intermediary of a telephone line or the like (not shown), and also connected to the reader/writer 15 by using a predetermined connection cable to exchange information. [0142] The POS center 17 and the MMK center 19 described in conjunction with FIG. 2 basically share the same configuration as that of the personal computer 14 shown in FIG. 8; therefore the descriptions thereof will be omitted. [0143]FIG. 9 is a block diagram showing the configuration of the acquirer/brand holder 1. The internal configurations of a merchant management server 141 through an issuer gateway (G/W) server 151 are basically the same as the personal computer 14 described in conjunction with FIG. 8; hence, the description thereof will be omitted. [0144] The merchant management server 141 manages a merchant management database (DB) 142 for recording the information regarding the issuer 2 and the merchant 4 participating in the service. Recorded in the merchant management DB 142 are, for example, the names and addresses of the issuers 2 and the merchants 4 participating in the service or the account numbers of financial institutes used for settlement with associated issuers 2 or the merchants 4, the details of the agreement on the service, the key IDs for issued keys, etc. [0145] A customer DB server 143 manages a customer DB 144 for recording the information regarding the user 3 using the service (i.e., the user of the service of an electronic money brand managed by the acquirer/brand holder 1). Recorded in the customer DB 144 are, for example, the names and addresses of customers, the information regarding the financial institutes that customers use for settlement, such as the account numbers of financial institutes or the card numbers of the credit cards that associated customers have, and the card IDs of the IC cards 12 owned by customers. [0146] A security server 145 manages a key management DB 146 for recording the information regarding all keys used in the service and the information regarding the issuers 2 or the merchants 4 to which the individual keys are issued or distributed. As necessary, the security server 145 searches for keys to be issued to new participant issuers 2 or merchants 4, and output the keys to the issuer G/W server 151 or a merchant G/W server 149. [0147] An accounting server 147 performs accounting on the basis of accounting information from affiliate merchants received from the merchant G/W server 149 or a web server 150, calculates a charge amount to the issuer 2, and outputs the calculated charge amount to the issuer 2 through the intermediary of the issuer G/W server 151. The accounting may be performed at a predetermined interval, e.g., one week or one month. The accounting server also performs the processing the service of proxy loading of electronic money into the IC card 12 issued by the issuer 2-1, which will be discussed hereinafter in conjunction with FIG. 14 and FIG. 16. The accounting server records the information regarding the proxy loading in a proxy loading DB 148, and performs settlement with the associated issuer 2-1 at a predetermined interval, e.g., one week or one month. [0148] The merchant G/W server 149 is connected to the POS center 17, the MMK center 19, and the affiliate merchant terminal unit 21, which have been explained in conjunction with FIG. 2, to control the transfer of information to and from the POS center 17, the MMK center 19, and the affiliate merchant terminal unit 21. The merchant G/W server 149 outputs received data to an appropriate server among the merchant management server 141 through the accounting server 147. For example, if accounting information is received from the POS center 17, then the merchant G/W server 149 outputs the received data to the accounting server 147. [0149] The web server 150 is connected to the Internet 11, controls the exchange of information with the cybershop 16 or the personal computer 14, and outputs received data to an associated server among the merchant management server 141 through the accounting server 147. For example, if the authentication information is received from the cybershop 16, then the web server 150 outputs the received data to the security server 145. [0150] The issuer G/W server 151 is connected to the issuer 2 to control the transfer of information to and from the issuer 2, and outputs received data to an appropriate server among the merchant management server 141 through the accounting server 147. For example, if the issuer G/W server 151 receives a request from the issuer 2 for the issuance of a key associated to a new service, then the issuer G/W server 151 outputs the received data to the security server 145. [0151]FIG. 10 is a block diagram showing the configuration of the issuer 2-1. [0152] A security server 161 manages a key management DB 162 for saving keys issued from the acquirer/brand holder 1. When the IC card 12 is issued, the security server 161 finds and outputs a necessary key from the key management DB 162, and implements authentication processing by finding an associated key from the key management DB 162 on the basis of the authentication information regarding the IC card 12 that is received from the loading terminal unit 13 connected to the merchant G/W server 166, then outputs the authentication processing result to the merchant GIW server 166. [0153] A user management server 163 manages a user DB 164 for recording information regarding the users 3 using the IC cards 12 that have been issued, and is connected mainly to a processing unit (not shown) for registering users or issuing IC cards. The user management server 163 receives, for example, the name and address of a customer, an account number of a financial institute or the card number of a credit card that the associated customer has, the information of the financial institute used by the customer for settlement, and the card ID of the IC card 12 owned by the customer from the processing unit (not shown) for registering users and issuing IC cards. The user management server 163 records such information in the user DB 164, and supplies the keys output from the security server 161 to the processing unit for registering users and issuing IC cards. [0154] An acquirer/brand holder G/W server 165 is connected to the acquirer/brand holder 1 to control transfer of information, and outputs received data to an associated server among the security server 161 through an accounting server 167. For example, if the acquirer/brand holder G/W server 165 receives a key associated with a new service and issued from the acquirer/brand holder 1, then the acquirer/brand holder G/W server 165 outputs the received key to the security server 161. [0155] The merchant G/W server 166 is connected to the loading terminal unit 13 or the MMK center 19, which has been explained in conjunction with FIG. 2, to control transfer of information to and from the loading terminal unit 13 or the MMK center 19, and outputs received data to an associated server among the security server 161 through the accounting server 167. For instance, if the merchant G/W server 166 receives information regarding the loading of electronic money into the IC card 12 from the loading terminal unit 13, then the merchant G/W server 166 outputs the received data to the accounting server 167. If the merchant G/W server 166 receives authentication information regarding the IC card 12 from the loading terminal unit 13, then merchant G/W server 166 outputs the received data to the security server 161. [0156] The accounting server 167 performs accounting related to the loading of electronic money into the IC card 12 on the basis of the accounting information from the loading terminal unit 13 or the MMK center 19 that is entered from the merchant G/W server 166, and records the accounting result in the loading DB 168. [0157]FIG. 11 is a block diagram showing the configuration of the issuer 2-2. The components corresponding to those of the issuer 2-1 shown in FIG. 10 are assigned the same reference numerals, and the descriptions thereof will be omitted as appropriate (the same applies hereinafter). [0158] A web server 171 is connected to the Internet 11, and controls the transfer of information. The web server 171 outputs received data to an appropriate server among the security server 161 through the accounting server 167. For example, if the web server 171 receives authentication information regarding the IC card 12 from the personal computer 14, then the web server 171 outputs the received data to the security server 161. [0159] An accounting server 167 performs accounting related to the loading of electronic money into the IC card 12 in response to an electronic money loading request from the personal computer 14 that is received from not only the merchant G/W server 166 but the web server 171 also, and records the accounting result in the loading DB 168. [0160] Referring now to FIG. 12 through FIG. 16, the loading of electronic money into the IC card 12 and the dispositions of keys for implementing the loading of electronic money will be explained in detail. [0161] Referring to FIG. 12, the descriptions will be given of the dispositions of keys that enable the user 3 to accomplish the loading of electronic money into the IC card 12 by using the loading terminal unit 13 or the MMK 20 when the user 3 visits an actual store or the like. [0162] It is assumed, for example, that the acquirer/brand holder 1 owns keys A through C for authorizing the execution of writing of data (i.e., the loading of electronic money) to the IC card 12. For example, the key A allows the loading of electronic money by the cashing service of a credit company A, the key B allows the loading of electronic money by withdrawal from an account of a bank B, and the key C allows the loading of electronic money by a credit card C. [0163] It is further assumed that the key A and the key B are required to permit the cashing service of the credit company A and the loading of electronic money by the withdrawal from the account of the bank B at the loading terminal unit 13 managed by a bank center 181 on the basis of a contract between an issuer 2-3 and the bank center 181. In such a case, the acquirer/brand holder 1 checks with the issuer 2-3 whether the associated keys may be issued to the bank center 181, and issues and distributes the key A and the key B to the bank center 181 after obtaining a permission from the issuer 2-3. [0164] The bank center 181 basically shares the same configuration as that of the personal computer 14 that has been explained in conjunction with FIG. 8; therefore, the descriptions thereof will be omitted. [0165] Similarly, it is assumed that the key A and the key C are required to permit the cashing service of the credit company A and the loading of electronic money by the credit card C at an MMK 20 managed by the MMK center 19 on the basis of a contract between an issuer 2-4 and the MMK center 19. In such a case, the acquirer/brand holder 1 checks with the issuer 2-4 whether the associated keys may be issued to the MMK center 19, and issues and distributes the key A and the key C to the MMK center 19 after obtaining a permission from the issuer 2-4. [0166] More specifically, if the key A and the key B have been recorded in the IC card 12 issued by the issuer 2-3, the user 3 of the IC card 12 can perform the loading of electronic money by the cashing service of the credit company A at the MMK 20, while the user 3 cannot perform the loading of electronic money by withdrawal from an account of the bank B. Similarly, if the key A and the key C have been recorded in the IC card 12 issued by the issuer 2-4, the user 3 of the IC card 12 can perform the loading of electronic money by the cashing service of the credit company A at the loading terminal unit 13 managed by the bank center 181, while the user 3 cannot perform the loading of electronic money by the credit card C. [0167] The settlement method for commission charges or the like involved in such electronic money loading is similar to a conventional settlement processing. For instance, the settlement method may be individually established on the basis of the partnership agreement between the acquirer/brand holder 1 and the issuer 2-3, between the acquirer/brand holder 1 and the issuer 2-4, between the issuer 2-3 and the bank center 181, and between the issuer 2-4 and the MMK center 19. Alternatively, a supervisor of the service, namely, the supervisor of the acquirer/brand holder 1, may manage the settlement by the processing implemented by the accounting server 147 of the acquirer/brand holder 1. [0168]FIG. 12 illustrates that the single loading terminal unit 13 is connected to the bank center 181, and the single MMK 20 is connected to the MMK center 19. However, a plurality of loading terminal units 13 and MMK's 20 can be connected to the bank center 181 and the MMK center 19. It is needless to say that a plurality of the bank centers 181 and the MMK centers 19 may participate in the service. [0169] Referring to the flowchart shown in FIG. 13, the descriptions will be given of the loading of electronic money into the IC card 12 by using the loading terminal unit 13 or the MMK 20. In this case, the descriptions will be given of the loading of electronic money into the IC card 12 by using the loading terminal unit 13. Basically, the same processing will be implemented also in a case where the loading of electronic money into the IC card 12 is performed by using the MMK 20. [0170] In step S1, the antenna 46 of the reader/writer 31 of the loading terminal unit 13 monitors the load thereof by radiating a predetermined electromagnetic wave to detect the IC card 12. The DPU 51 generates a signal indicating that the IC card 12 has been detected, and outputs the signal to the controller 32 through the bus 55 and the SCC 53. [0171] In step S2, the control unit 101 of the controller 32 receives the signal which indicates that the IC card 12 has been detected and which has been transmitted from the reader/writer 31 through the intermediary of the network interface 107 and the internal bus 102. The control unit 101 then outputs, through the internal bus 102, the data associated with a menu screen that includes a message or the like for prompting the user 3 to perform the next operation to the display unit 105 so as to cause the display unit 105 to display the menu screen. [0172] In step S3, the control unit 101 of the controller 32 receives, through the internal bus 102, a command (e.g., a command instructing the loading of electronic money worth 5000 yen) entered by the user 3 through the input unit 103, and outputs the command to the reader/writer 31 through the intermediary of the internal bus 102 and the network interface 107. The reader/writer 31 implements predetermined processing to transmit the received command to the IC card 12. [0173] In step S4, the antenna 73 of the IC card 12 receives a modulated wave from the reader/writer 31, and the interface 81, the BPSK demodulator 82, and the operation part 84 perform predetermined processing. Then, authentication information that includes a key associated with the received command is read from the EEPROM 86. The read authentication information is subjected to predetermined processing in the operation part 84, the BPSK modulator 88, and the interface 81, then sent out to the reader/writer 31 through the antenna 73. [0174] In step S5, the antenna 46 of the reader/writer 31 receives the authentication information transmitted from the IC card 12, and outputs the authentication information to the demodulating circuit 44. The authentication information that has been demodulated in the demodulating circuit 44 is subjected to predetermined processing, such as the BPSK modulation, in the SPU 52, then supplied to the DPU 51. The DPU 51 generates a signal requesting for authentication processing, and outputs the generated signal together with the received authentication information and the command indicating the instruction given by the user 3 that has been entered in step S3 to the controller 32 through the intermediary of the bus 55 and the SCC 53. The control unit 101 of the controller 32 receives the signal requesting for authentication processing, the command indicating the instruction of the user 3, and the authentication information through the intermediary of the network interface 107 and the internal bus 102, then transmits them to the associated bank center 181 through the intermediary of the internal bus 102 and the network interface 107. [0175] In step S6, the CPU 121 of the bank center 181 (FIG. 8 shows the configuration of not only the personal computer 14 but also the configuration of the POS center 17, the MMK center 19, or the bank center 181) reads out a key, which has been supplied from the acquirer/brand holder 1 and saved at the RAM 127 or an HDD 129, and performs authentication processing on the basis of the request for authentication processing and the authentication information received through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123. [0176] In step S7, the CPU 121 of the bank center 181 determines whether the authentication of the IC card 12 detected in step SI has been found valid in the authentication processing implemented in step S6. If the CPU 121 determines in step S7 that the IC card 12 has been found invalid, then the CPU 121 proceeds to step S16. [0177] If it is determined in step S7 that the authentication of the IC card 12 has been found valid, then the CPU 121 of the bank center 181 verifies, in step S8, whether the loading of value according to a method specified by the user 3 (e.g., loading of electronic money worth 5000 yen by a predetermined credit card), that is, whether the processing for the addition to the balance of the electronic money recorded in the IC card 12, is acceptable or not on the basis of the received command. If, for example, the loading of value is performed by cash, then the CPU 121 of the bank center 181 checks with the loading terminal unit 13 whether the correct amount of cash has been loaded. If the loading of value is implemented by a credit card or the withdrawal from a bank account, then the CPU 121 inquires of the issuer 2 about the balance of the available amount of the credit card corresponding to the electronic money to be loaded, or whether there is a sufficient balance at a bank account. The issuer 2 inquires, for example, of a predetermined financial institute 5, such as a credit card company or a bank, about whether the associated user 3 is entitled to use the credit card for the amount corresponding to the value loading or withdrawal from his or her bank account. [0178] In step S9, the CPU 121 of the bank center 181 determines whether the value loading is acceptable or not on the basis of the response signal to the inquiry that is received from the loading terminal unit 13 or the issuer 2 through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123. If it is determined in step S9 that the value loading is not acceptable, then the CPU 121 proceeds to step S16. [0179] If it is determined in step S9 that the value loading is acceptable, then the control unit 101 of the controller 32 of the loading terminal unit 13 that has received the signal indicating that the value loading is acceptable transmits, in step SI 0, a signal indicating that the value loading is acceptable to the reader/writer 31 through the internal bus 102 and the network interface 103. The DPU 51 of the reader/writer 31 outputs a command for causing the value loading to be carried out (rewriting the value of electronic money recorded in the appropriate file of the IC card 12) to the SPU 52 through the bus 55 on the basis of the signal received through the intermediary of the SCC 53 and the bus 55. The SPU 52 performs predetermined processing, such as the BPSK modulation, for example, on the received command, then outputs the processed command to the modulating circuit 43. The modulating circuit 43 carries out the ASK modulation on a carrier wave of a predetermined frequency supplied from the oscillator 45 on the basis of the data supplied from the SPU 52, and outputs the generated modulated wave to the IC card 12 in the form of an electromagnetic wave through the antenna 46. [0180] In step S11, the antenna 73 of the IC card 12 receives the modulated wave from the antenna 46 of the reader/writer 31. The received modulated wave is detected by the interface 81 and subjected to the ASK demodulation and the BPSK demodulation in the BPSK demodulator 82, then decoded in the encoder/decoder 96 of the operation part 84. Thus, the data recorded in the EEPROM 86 is rewritten by the sequencer 95 to carry out the value loading, and the result is saved. [0181] In step S12, the control unit 101 of the controller 32 of the loading terminal unit 13 notifies the bank center 181 of the processing result through the intermediary of the internal bus 102 and the network interface 107. [0182] In step S13, the CPU 121 of the bank center 181 receives the value loading result from the loading terminal unit 13 through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, then notifies the issuer 2 of the processing result through the intermediary of the internal bus 123, the input/output interface 122, and the network interface 125. The issuer 2 records the received processing result in the loading DB 168 by means of the processing of the accounting server 167, and notifies the acquirer/brand holder 1 of the processing result, as necessary. The notification of value loading results may be performed sequentially each time the processing is carried out, or at a predetermined interval of, for example, one week or one month. [0183] In step S14, the control unit 101 of the controller 32 of the loading terminal unit 13 generates a control signal for recording the log of value loading result in the IC card 12, and transmits the generated control signal to the reader/writer 31 through the intermediary of the internal bus 102 and the network interface 107. The DPU 51 of the reader/writer 31 outputs a command to be transmitted to the IC card 12 to the SPU 52 through the bus 55 on the basis of the signal received through the intermediary of the SCC 53 and the bus 55. The command that has been subjected to predetermined processing in the SPU 52 and the modulating circuit 43 is output as an electromagnetic wave to the IC card 12 through the antenna 46. [0184] In step S15, the antenna 73 of the IC card 12 receives the modulated wave from the reader/writer 31. The modulated wave undergoes predetermined processing in the interface 81, the BPSK demodulator 82, and the operation part 84. The log is written to the EEPROM 86 thereby to save it. [0185] If it is determined in step S7 that the authentication of the IC card 12 is invalid, or if it is determined in step S9 that the value loading is not acceptable, then the CPU 121 of the bank center 181 outputs an error message to the loading terminal unit 13 through the intermediary of the internal bus 123, the input/output interface 122, and the network interface 125 in step S161. [0186] In step S17, the control unit 101 of the controller 32 of the loading terminal unit 13 outputs the received error message to the display unit 105 through the internal bus 102 to cause the display unit 105 to display the error message. [0187] Referring now to FIG. 14, the descriptions will be given of the dispositions of the keys and the authentication processing that enable the user 3 to implement the loading of electronic money into the IC card 12 over the Internet 11, without the need for visiting an actual store or the like. [0188] It is assumed that the acquirer/brand holder 1 owns a key D and a key E to, for example, authenticate the execution of writing data to the IC card 12, i.e., the loading of electronic money. It is further assumed that, for example, the key D permits the loading of electronic money by the cashing service of a credit company D, and the key E permits the loading of electronic money by withdrawal from an account of a bank E. [0189] It is also assumed that the key D is necessary for the user 3, who has the IC card 12 issued by the issuer 2-2, to be able to perform the loading of electronic money over the Internet 11 by using the cashing service of the credit company D by operating one of personal computers 14-1 to 14-n. In such a case, the acquirer/brand holder 1 issues and distributes the key D to the issuer 2-2. The issuer 2-2 is connected to the Internet 11 to perform authentication processing on the basis of the authentication information of the IC card 12 owned by the user 3 that is received through the intermediary of the reader/writer 15, the personal computer 14, and the Internet 11, and the key D supplied from the acquirer/brand holder 1. If the authentication processing result indicates that the authentication is valid, then the loading of electronic money is executed. [0190] Similarly, it is assumed that the key E is necessary for the user 3, who has the IC card 12 issued by the issuer 2-1, to be able to perform the loading of electronic money over the Internet 11 by withdrawal from an account of the bank E by operating one of the personal computers 14-1 to 14-n. In such a case, the acquirer/brand holder 1 issues and distributes the key E to the issuer 2-1. The issuer 2-1, however, is not connected to the Internet 11, so that it asks the acquirer/brand holder 1 to perform proxy loading. The acquirer/brand holder 1 records the key E, which has been issued to the issuer 2-1, in the key management DB 146 as the key for the proxy loading. [0191] The acquirer/brand holder 1 performs authentication processing on the basis of the authentication information of the IC card 12 owned by the user 3 that is received through the intermediary of the reader/writer 15, the personal computer 14, and the Internet 11, and the information regarding the key E recorded in the key management DB 146. If the authentication processing result indicates that the authentication is valid, then the loading of electronic money is executed by the processing carried out by the accounting server 147, and the result is recorded in the proxy loading DB 148. [0192] In this case also, the settlement method for commission charges or the like involved in such electronic money loading is similar to a conventional settlement processing. For instance, the settlement method may be individually established on the basis of the partnership agreement between the acquirer/brand holder 1 and the issuer 2-1, and between the acquirer/brand holder 1 and the issuer 2-2. Alternatively, a supervisor of the service, namely, the supervisor of the acquirer/brand holder 1, may manage the settlement by the processing implemented by the accounting server 147 of the acquirer/brand holder 1. [0193] Referring now to the flowchart shown in FIG. 15, the descriptions will be given of the loading of electronic money into the IC card 12 performed by the issuer 2-2 over the Internet [0194] In step S21, in response to a signal indicating the operation of the user 3 that is received from the input unit 124 through the intermediary of the input/output interface 122 and the internal bus 123, the CPU 121 of the personal computer 14 loads the web browser software stored in the HDD 129 into the RAM 127 and activates it thereby to start up the web browser. In step S22, the CPU 121 connects to the issuer 2-2 over the Internet 11. [0195] In step S23, the web server 171 of the issuer 2-2 outputs data associated with a loading request screen to the personal computer 14 over the Internet 11. [0196] In step S24, the CPU 121 of the personal computer 14 outputs the data associated with the loading request screen, which has been received through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, to a display unit 182 through the intermediary of the internal bus 123 and the input/output interface 122, and cause the display unit 182 to display the loading request screen. The loading request screen primarily shows a message prompting the user to set the IC card 12 at a predetermined reading position to allow the reader/writer 15 and the IC card 12 to communicate with each other, and a menu prompting an input operation. In this case, it is assumed that the loading of value into the IC card 12 has been selected and instructed by the user 3 by using the input unit 124. [0197] In step S25, the antenna 46 of the reader/writer 15 monitors the load thereof by radiating a predetermined electromagnetic wave to detect the IC card 12. The DPU 51 generates a signal indicating that the IC card 12 has been detected, and outputs the signal to the personal computer 14 through the bus 55 and the SCC 53. [0198] In step S26, the SCC 53 of the reader/writer 15 receives the command entered by the user 3 through the personal computer 14, then outputs the command to the SPU 52 through the bus 55. The command is subjected to predetermined processing in the SPU 52 and the modulating circuit 43, and transmitted to the IC card 12 through the antenna 46. [0199] In step S27, the same processing as that in step S4 shown in FIG. 13 is carried out. [0200] In step S28, the antenna 46 of the reader/writer 15 receives the authentication information transmitted from the IC card 12 and outputs the authentication information to the demodulating circuit 44. The data that has been demodulated by the demodulating circuit 44 is subjected to predetermined processing, such as the BPSK modulation, in the SPU 52, and supplied to the DPU 51. The DPU 51 generates a signal for requesting authentication processing, and transmits the generated signal to the personal computer 14 together with the received authentication information through the intermediary of the bus 55 and the SCC 53. [0201] In step S29, the CPU 121 of the personal computer 14 receives the authentication processing request and the authentication information through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, and transmits the authentication processing request and the authentication information to the issuer 2-2 over the Internet 11 together with the command associated with the operation performed by the user 3 (the command instructing the loading of value into the IC card 12 in this case). [0202] In step S30, the web server 171 of the issuer 2-2 receives the authentication processing request and the authentication information, and outputs the request and the information to the security server 161. The security server 161 carries out authentication processing on the basis of the received authentication processing request and the authentication information by referring to the key that has been supplied from the acquirer/brand holder 1 and stored in the key management DB 162. [0203] In step S31, the security server 161 determines whether the authentication of the IC card 12, which was detected in step S25, has been proven valid in the authentication processing implemented in step S30. If it is determined in step S31 that the authentication of the IC card 12 is invalid, then the processing proceeds to step S41. [0204] If it is determined in step S31 that the authentication of the IC card 12 is valid, then the accounting server 167 inquires, in step S32, a predetermined financial institute 5 (a credit company, a bank, etc.) about whether the loading of value according to the method specified by the user 3 (e.g., the loading of electronic money worth 5000 yen by a predetermined credit card) is acceptable (e.g., whether there is a balance of amount that allows the use of a credit for the loading of electronic money) on the basis of the received command for the purpose of verification. [0205] In step S32, the accounting server 167 determines whether the loading of value is acceptable on the basis of a response signal to the inquiry sent from the financial institute 5. If it is determined in step S32 that the loading of value is not acceptable, then the processing proceeds to step S41. [0206] If it is determined in step S33 that the loading of value is acceptable, the DPU 51 of the reader/writer 15 that has received a signal indicating that the loading of value is acceptable from the issuer 2-2 through the intermediary of the Internet 11 and the personal computer 14 generates, in step S34, a command for executing the loading of electronic money that is to be transmitted to the IC card 12 on the basis of the received signal, and outputs the command to the SPU 52 through the bus 55. Then, the SPU 52 and the modulating circuit 43 carry out predetermined processing to generate a modulated wave corresponding to the command, and the modulated wave is output as an electromagnetic wave to the IC card 12 through the antenna 46. [0207] In step S35, the antenna 73 of the IC card 12 receives the modulated wave from the antenna 46 of the reader/writer 15. The modulated wave is then subjected to predetermined processing in the interface 81, the BPSK demodulator 82, and the operation part 84. Based on the command, the data recorded in the EEPROM 86 is rewritten, that is, the value loading is implemented, and the result is saved. [0208] In step S36, the DPU 51 of the reader/writer 15 notifies the issuer 2-2 of the processing result through the intermediary of the bus 55, the SCC 53, the personal computer 14, and the Internet 11. [0209] In step S37, the web server 171 of the issuer 2-2 receives the value loading result from the reader/writer 15, and supplies the result to the accounting server 167. The accounting server 167 records the received result of the value loading in the loading DB 168. [0210] In step S38, the acquirer/brand holder G/W server 165 notifies the acquirer/brand holder 1 of the result of the value loading. The notification of value loading results may be performed sequentially each time the loading is implemented, or at a predetermined interval of, for example, one week or one month. [0211] In step S39, the DPU 51 of the reader/writer 15 generates a command for recording the log of a value loading result in the IC card 12 on the basis of the signal received through the intermediary of the SCC 53 and the bus 55, and outputs the generated command to the SPU 52 through the bus 55. The command that has been subjected to predetermined processing in the SPU 52 and the modulating circuit 43 is output in the form of an electromagnetic wave to the IC card 12 through the antenna 46. [0212] In step S40, the same processing as that of step S15 shown in FIG. 13 is performed. [0213] If it is determined that the authentication of the IC card 12 is invalid in step S31, or if the value loading is not acceptable in step S33, then the web server 171 of the issuer 2-2 outputs an error message to the personal computer 14 over the Internet 11 in step S41. [0214] In step S42, the CPU 121 of the personal computer 14 receives the error message through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, and outputs the received error message to the display unit 128 through the intermediary of the internal bus 123 and the input/output interface 122 so as to cause the display unit 128 to display the error message. [0215] Referring now to the flowchart shown in FIG. 16, the descriptions will be given of the loading of electronic money into the IC card 12 by the proxy loading performed by the acquirer/brand holder 1. [0216] In step S51, the same processing as that of step S21 shown in FIG. 15 is carried out. [0217] In step S52, the CPU 121 of the personal computer 14 connects to the acquirer/brand holder 1 over the Internet 11. [0218] In step S53, the web server 150 of the acquirer/brand holder 1 outputs data associated with a loading request screen to the personal computer 14 over the Internet 11. [0219] In step S54 through step S58, the same processing as that of step S24 through S28 shown in FIG. 15 is implemented. [0220] In step S59, the CPU 121 of the personal computer 14 receives an authentication processing request and the authentication information through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, and transmits the authentication processing request and the authentication information to the acquirer/brand holder 1 over the Internet 11 together with a command associated with an operation performed by the user 3 (the command instructing the loading of value into the IC card 12 in this case). [0221] In step S60, the web server 150 of the acquirer/brand holder 1 receives the authentication processing request and the authentication information, and outputs the request and the information to the security server 145. The security server 145 carries out authentication processing on the basis of the received authentication processing request and the authentication information by reading out the key that has been stored in the key management DB 146. [0222] In step S61, the security server 145 determines whether the authentication of the IC card 12, which was detected in step S55, has been proven valid in the authentication processing carried out in step S60. If it is determined in step S61 that the authentication of the IC card 12 is invalid, then the processing proceeds to step S71. [0223] If it is determined in step S61 that the authentication of the IC card 12 is valid, then the accounting server 145 inquires, in step S62, an associated issuer 2-1 about whether the loading of value according to the method specified by the user 3 (e.g., the loading of electronic money worth 5000 yen by a predetermined credit card) is acceptable (e.g., whether there is a balance of amount that allows the use of a credit for the loading of electronic money) on the basis of the received command for the purpose of verification. [0224] In step S63, the accounting server 147 determines whether the loading of value is acceptable on the basis of a response signal to the inquiry sent from the issuer 2-1. If it is determined in step S63 that the loading of value is not acceptable, then the processing proceeds to step S71. [0225] If it is determined in step S63 that the loading of value is acceptable, then the DPU 51 of the reader/writer 15 that has received a signal indicating that the loading of value is acceptable from the acquirer/brand holder 1 through the intermediary of the SCC 53 and the bus 55 carries out the same processing as that of step S34 shown in FIG. 15. [0226] In step S65, the same processing as that of step S35 shown in FIG. 15 is carried out. [0227] In step S66, the DPU 51 of the reader/writer 15 notifies the acquirer/brand holder 1 of the processing result through the intermediary of the bus 55, the SCC 53, the personal computer 14, and the Internet 11. [0228] In step S67, the web server 150 of the acquirer/brand holder 1 receives the value loading result from the reader/writer 15, and supplies the result to the accounting server 147. The accounting server 147 records the received result of the value loading in the proxy loading DB 148. [0229] In step S68, the issuer G/W server 151 notifies the issuer 2-1 of the result of the value loading. The notification of value loading results may be performed sequentially each time the loading is implemented, or at a predetermined interval of, for example, one week or one month. [0230] In step S69 and step S70, the same processing as that in step S39 and step S40 shown in FIG. 15 is performed. [0231] If it is determined that the authentication of the IC card 12 is invalid in step S61, or if the value loading is not acceptable in step S63, then the web server 150 of the acquirer/brand holder 1 outputs an error message to the personal computer 14 over the Internet 11 in step S71. [0232] In step S72, the same processing as that of step S42 shown in FIG. 15 is carried out. [0233] Referring now to FIG. 17 through FIG. 21, detailed descriptions will be given of the processing for the user 3 to purchase goods by using electronic money loaded in the IC card 12 or to use a variety of services, and the dispositions of keys for carrying out the processing. [0234] First, referring to FIG. 17, the descriptions will be given of the dispositions of the keys that allow the user 3 to visit an actual store or the like to purchase goods or services by using the electronic money loaded into the IC card 12 by employing the affiliate merchant terminal unit 18. [0235] As described above in conjunction with FIG. 2, when the merchant 4 that does not have an organization for general management independently participates in the service, the acquirer/brand holder 1 issues and distributes appropriate keys on the basis of a participation agreement to the affiliate merchant terminal unit 18 installed at each merchant 4. In other words, the affiliate merchant terminal units 18-1 -1 through 18-1-n shown in FIG. 17 store keys for services, which can be provided at the individual merchants 4, in readers/writers 31-3-1 through 31-3-n; therefore, authentication processing can be performed between the affiliate merchant terminal units 18 and the IC cards 12. [0236] The merchant 4 selects a service in line with the business thereof, concludes a tie-up for the service, and receives an associated key supplied from the acquirer/brand holder 1, thereby enabling the merchant 4 to provide the selected service to the user 3. More specifically, the user 3 having the IC card 12 in which a key F or a key J has been stored can use a service that can be supplied by the key F or the key J at a merchant equipped with the affiliate merchant terminal unit 18-1-1. The user 3 having the IC card 12 in which a key G has been stored can use a service that can be supplied by the key G at a merchant equipped with an affiliate merchant terminal unit 18-1-2. The user 3 having the IC card 12 in which the key G, a key H, or the key J has been stored can use a service that can be supplied by the key G, the key H, or the key J at a merchant equipped with the affiliate merchant terminal unit 18-1-n. [0237] For instance, if a corporation having a plurality of merchants 4, such as chain store merchants, provides the service, then the acquirer/brand holder 1 issues and distributes keys to the POS center 17 that has control over the plurality of the merchants 4. Affiliate merchant terminal units 18-2-1 through 18-2-m basically connect to the POS center 17 to carry out the authentication processing with the IC card 12 without receiving keys. Alternatively, if the affiliate merchant terminal units 18-2-1 through 18-2-m employ an advanced tamperproof technology, then the keys may be stored in the affiliate merchant terminal units 18-2-1 through 18-2-m, respectively, so as to implement the authentication processing between each of the affiliate merchant terminal units 18-2-1 through 18-2-m and the IC card 12. [0238] In other words, the user 3 having the IC card 12 in which the key F or the key H has been stored can use a service that can be supplied by the key F or the key H saved at the POS center 17 at the affiliate merchant terminal units 18-2-1 through 18-2-m, whereas the key F and the key H are not saved at reader/writers 31-4-1 through 31-4-m. [0239] In the following descriptions, unless it is necessary to individually distinguish among the affiliate merchant terminal units 18-1-1 through 18-1-n, the affiliate merchant terminal units will be generically referred to simply as the affiliate merchant terminal unit 18-1. Similarly, unless it is necessary to individually distinguish among the affiliate merchant terminal units 182-1 through 18-2-m, the affiliate merchant terminal units will be generically referred to simply as the affiliate merchant terminal unit 18-2. [0240] Referring to the flowchart shown in FIG. 18, the descriptions will be given of the processing performed when the user 3 having the IC card 12 purchases goods or a service by using the affiliate merchant terminal unit 18-1. [0241] In step S81, the antenna 46 of the reader/writer 31 of the affiliate merchant terminal unit 18-1 monitors the load thereof by radiating a predetermined electromagnetic wave so as to detect the IC card 12. The DPU 51 generates a signal indicating that the IC card 12 has been detected, and outputs the signal to the controller 32 through the intermediary of the bus 55 and the SCC 53. [0242] In step S82, the control unit 101 of the controller 32 receives the signal transmitted from the reader/writer 31 through the intermediary of the network interface 107 and the internal bus 102. The control unit 101 then outputs, through the internal bus 102, the data associated with a menu screen that includes a message or the like for prompting the user 3 to perform the next operation to the display unit 105 so as to cause the display unit 105 to display the menu screen. [0243] In step S83, the control unit 101 of the controller 32 receives a command (e.g., a command indicating the use of electronic money worth 2000 yen) from the input unit 103 through the internal bus 102, and outputs the command to the reader/writer 31 through the intermediary of the internal bus 102 and the network interface 107. The reader/writer 31 implements predetermined processing to transmit the received command to the IC card 12. [0244] In step S84, the same processing as that of step S4 shown in FIG. 13 is performed. [0245] In step S85, the antenna 46 of the reader/writer 31 receives the authentication information transmitted from the IC card 12, and outputs the authentication information to the demodulating circuit 44. The data that has been demodulated in the demodulating circuit 44 is subjected to predetermined processing, such as the BPSK modulation, in the SPU 52, and supplied to the DPU 51. Through the bus 55, the DPU 51 reads out a key from the flash memory 42 on the basis of the received authentication information, and carries out the authentication processing. [0246] In step S86, the DPU 51 of the reader/writer 31 determines whether the authentication of the IC card 12, which has been detected in step S81, is valid. In step S86, if the DPU 51 determines that the authentication of the IC card 12 is invalid, then the processing proceeds to step S94. [0247] If it is determined in step S86 that the authentication of the IC card 12 is valid, then the DPU 51 of the reader/writer 31 verifies whether the processing for the use of the IC card specified by the user 3 is acceptable on the basis of a received command primarily by reading out necessary information from the IC card 12. For example, if a command instructing the purchase of a commercial product worth 2,000 yen is received, the DPU 51 of the reader/writer 31 generates a command for checking if the IC card 12 has electronic money sufficient for covering the payment of the commercial product, implements predetermined processing, and transmits the generated command to the IC card 12. [0248] In step S88, the DPU 51 of the reader/writer 31 determines whether the processing of the command is acceptable mainly on the basis of a response signal to an inquiry that is received from the IC card 12 through the antenna 46. If it is determined, in step S88, that the processing of the command is not acceptable, then the processing proceeds to step S94. [0249] In step S88, if it is determined that the processing of the command is acceptable, then the DPU 51 of the reader/writer 31 generates, in step S89, a command for causing the IC card 12 to implement value loading (a predetermined value is subtracted from the value of the electronic money recorded in a file for the IC card 12), and outputs the generated command to the SPU 52 through the bus 55. Then, predetermined processing is carried out in the SPU 52 and the modulating circuit 43 to generate a modulated wave for the command, and the modulated wave is output to the IC card 12 as an electromagnetic wave through the antenna 46. [0250] In step S90, the antenna 73 of the IC card 12 receives the modulated wave from the antenna 46 of the reader/writer 31. The received modulated wave is subjected to predetermined processing in the interface 81, the BPSK demodulator 82, and the operation part 84 to implement command processing for the subtraction of electronic money recorded in the EEPROM 86, and the result is saved. [0251] In step S91, the control unit 101 of the controller 32 notifies the acquirer/brand holder 1 of the processing result through the intermediary of the internal bus 102 and the network interface 107. The notification of command processing results may be performed sequentially each time the processing is implemented, or at a predetermined interval of, for example, one week or one month. [0252] In step S92, the control unit 101 of the controller 32 generates a control signal for recording the log of a command processing result in the IC card 12, and transmits the generated control signal to the reader/writer 31 through the intermediary of the internal bus 102 and the network interface 107. The DPU 51 of the reader/writer 31 outputs a command to be transmitted to the IC card 12 to the SPU 52 through the bus 55 on the basis of the signal received through the intermediary of the SCC 53 and the bus 55. The command is subjected to predetermined processing in the SPU 52 and the modulating circuit 43 to generate a modulated wave for the command, and the modulated wave is output as an electromagnetic wave to the IC card 12 through the antenna 46. [0253] In step S93, the antenna 73 of the IC card 12 receives the modulated wave from the reader/writer 31. The modulated wave undergoes predetermined processing in the interface 81, the BPSK demodulator 82, and the operation part 84, and the log of the command processing is written to the EEPROM 86 thereby to save it. [0254] If it is determined in step S86 that the authentication of the IC card 12 is invalid, or if it is determined in step S88 that the command processing is not acceptable, then the control unit 101 of the controller 32 outputs an error message to the display unit 105 through the internal bus 102 to cause the display unit 105 to indicate the error message in step S94. [0255] Referring now to the flowchart shown in FIG. 19, the descriptions will be given of the processing implemented when the user 3 having the IC card 12 purchases a commercial product or a service by using the affiliate merchant terminal unit 18-2. [0256] In step S101 through S104, the same processing as that in step S81 through S84 shown in FIG. 18 is carried out. [0257] In step S105, the antenna 46 of the reader/writer 31 receives the authentication information transmitted from the IC card 12, and outputs the authentication information to the demodulating circuit 44. The authentication information that has been demodulated in the demodulating circuit 44 is subjected to predetermined processing, such as the BPSK modulation, in the SPU 52, then supplied to the DPU 51. The DPU 51 generates a signal requesting for authentication processing, and outputs the generated signal together with the received authentication information to the controller 32 through the intermediary of the bus 55 and the SCC 53. The control unit 101 of the controller 32 receives the signal requesting for authentication processing and the authentication information through the intermediary of the network interface 107 and the internal bus 102, then transmits them to the associated POS center 17 together with the command indicating the instruction of the user 3 through the intermediary of the internal bus 102 and the network interface 107. [0258] In step S106, the CPU 121 of the POS center 17 reads out a key, which has been supplied from the acquirer/brand holder 1 and saved at the RAM 127 or the HDD 129, and performs authentication processing on the basis of the request for authentication processing and the authentication information received through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123. [0259] In step S107, the CPU 121 of the POS center 17 determines whether authentication of the IC card 12 detected in step S101 has been found valid in the authentication processing implemented in step S106. If the CPU 121 determines in step S107 that the authentication of the IC card 12 has been found invalid, then the processing proceeds to step S117. [0260] If it is determined in step S107 that the authentication of the IC card 12 has been found valid, then the CPU 121 of the POS center 17 notifies the affiliate merchant terminal unit 18-2 of the authentication having been found valid through the intermediary of the internal bus 123, the input/output interface 122, and the network interface 125 in step S108. [0261] In step S109 through step S112, the same processing as that in step S87 through step S90 shown in FIG. 18 is carried out. [0262] In step S13, the control unit 101 of the controller 32 notifies the POS center 17 of the processing result through the intermediary of the network interface 107 and the internal bus 102. [0263] In step S114, the CPU 121 of the POS center 17 notifies the acquirer/brand holder 1 of the command processing result through the intermediary of the internal bus 123, the input/output interface 122, and the network interface 125. The notification of command processing results may be performed sequentially each time the processing is implemented, or at a predetermined interval of, for example, one week or one month. [0264] In step S115 and step S116, the same processing as that of step S92 and step S93 shown in FIG. 18 is carried out. [0265] If it is determined in step S107 that the authentication is invalid, or if it is determined in step S110 that the command processing is not acceptable, then the CPU 121 of the POS center 17 outputs an error message to the affiliate merchant terminal unit 18-2 through the intermediary of the internal bus 123, the input/output interface 122, and the network interface 125 in step S117. [0266] In step S108, the same processing as that of step S94 shown in FIG. 18 is carried out. [0267] In conjunction with FIG. 17 and FIG. 19, the descriptions have been made of the processing implemented when the user 3 having the IC card 12 uses the affiliate merchant terminal unit 18-2. Basically the same processing as that implemented at the affiliate merchant terminal unit 18-2 under the control of the POS center 17 is carried out when the MMK 20 under the control of the MMK center 19 is used. [0268] Referring now to FIG. 20, the detailed descriptions will be given of the processing carried out for the user 3 to purchase goods or use various types of services at the cybershop 16 opened on the Internet 11, without visiting an actual store, by using the electronic money loaded into the IC card 12, and the dispositions of the keys for carrying out the processing. [0269] A plurality of cybershops 16-1 through 16-m connected to the Internet 11 are arranged so as to be able to provide various types of services to the user 3 having the IC card 12 which uses the personal computer 14-1 through 14-n that can be connected to the Internet 11 and the readers/writers 15-1 through 15-n connected to the personal computers 14-1 through 14-n according to a tie-up agreement with the acquirer/brand holder 1. [0270] The cybershops 16-1 through 16-m is equipped with, for example, web servers 193-1 through 193-m that output a purchase request screen or the like over the Internet 11 to the personal computer 14 owned by the user 3 and receive, from the personal computer 14, authentication information of the IC card 12 or the information regarding a commercial product that the user 3 wishes to purchase, and sales management servers 191-1 through 191-m that manage inventory/sales management DBs 192-1 through 192-m for recording the inventories and sales of goods and carry out the processing for providing services. [0271] In the following descriptions, unless it is necessary to individually distinguish among the sales management servers 191-1 through 191-m, the sales management servers will be generically referred to simply as the sales management server 191. Unless it is necessary to individually distinguish among the inventory/sales management DBs 192-1 through 192-m, the inventory/sales management DBs will be generically referred to simply as the inventory/sales management DB 192. Unless it is necessary to individually distinguish among the web servers 193-1 through 193-m, the web servers will be generically referred to simply as the web servers 193. The configurations of the sales management server 191 and the web server 193 are basically the same as those of the personal computer 14 that have been described in conjunction with FIG. 8; therefore, the explanation thereof will be omitted. [0272] Even when a key K, a key L, or a key M is issued according to a tie-up agreement with each of the cybershop 16-1 through 16-m, the acquirer/brand holder 1 does not distribute the issued keys to the cybershops 16-1 through 16-m. The security server 145 of the acquirer/brand holder 1 registers in the key management DB 146 the individual keys issued to the cybershops 16-1 through 16-m, respectively. Hence, when an authentication processing request is received from any one of the cybershops 16-1 through 16-m, the security server 145 refers to the key management DB 146 to execute the authentication processing, and outputs the authentication processing result to the associated one of the cybershops 16-1 through 16-m over the Internet 11. [0273] In other words, the cybershops 16-1 through 16-m do not record any keys. When the cybershops 16-1 through 16-m receive the authentication information regarding the IC card 12, which has been read in by the reader/writer 15, from the personal computer 14 over the Internet 11, the cybershops output the authentication information to the acquirer/brand holder 1 over the Internet 11 to request for authentication processing, and receive the result of the authentication processing from the acquirer/brand holder 1 over the Internet 11. [0274] Referring to the flowchart shown in FIG. 21, the descriptions will be given of the processing performed when the user 3 having the IC card 12 uses the personal computer 14 to access the cybershop 16 over the Internet 11 thereby to purchase goods or services. [0275] In step S121, the same processing as that of step S21 shown in FIG. 15 is carried out. [0276] In step S122, the CPU 121 of the personal computer 14 accesses the cybershop 16 through the intermediary of the internal bus 123, the input/output interface 122, the network interface 125, and the Internet 11. [0277] In step S123, the web server 193 of the cybershop 16 outputs data associated with a purchase request screen to the personal computer 14 over the Internet 11. [0278] In step S124, the CPU 121 of the personal computer 14 outputs the data associated with the purchase request screen, which has been received through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, to the display unit 128 through the intermediary of the internal bus 123 and the input/output interface 122 to cause the display unit 128 to display an input request screen. The input request screen primarily shows a message prompting the user to set the IC card 12 at a predetermined reading position to allow the reader/writer 15 and the IC card 12 to communicate with each other, and a menu prompting an input operation. In this case, it is assumed that the purchase processing for a commercial product by using the IC card 12 has been selected and instructed by the user 3 by using the input unit 124. [0279] In step S125 through step S128, the same processing as that of step S25 through step S28 shown in FIG. 15 is carried out. [0280] In step S129, the CPU 121 of the personal computer 14 receives the authentication information through the intermediary of the network interface 125, the input/output interface 122, and the internal bus 123, and transmits the authentication information together with the command corresponding to the operation performed by the user 3 (the command for carrying out the processing for purchasing a commercial product by using the IC card 12 in this case) to the cybershop 16. [0281] In step S130, the web server 193 of the cybershop 16 receives the authentication information, generates a signal for requesting authentication processing to the acquirer/brand holder 1, and outputs the generated signal together with the received authentication information to the acquirer/brand holder 1. The web server 150 of the acquirer/brand holder 1 outputs the received information to the security server 145. The security server 145 carries out authentication processing on the basis of the received authentication processing request and the authentication information by referring to the key that has been issued to the associated cybershop 16 and stored in the key management DB 146, and outputs the authentication processing result to the cybershop 16 over the Internet 11. [0282] In step S131, the sales management server 191 of the cybershop 16 receives the authentication result from the acquirer/brand holder 1 over the Internet 11 and the web server 193, then determines in step S132 whether the authentication of the IC card 12, which was detected in step S125, has been proven valid. If it is determined in step S132 that the authentication of the IC card 12 is invalid, then the processing proceeds to step S144. [0283] I step S133, the sales management server 191 of the cybershop 16 notifies the personal computer 14 of the authentication having been found valid through the intermediary of the web server 193 and the Internet 11. [0284] In step S134, the CPU 121 of the personal computer 14 outputs the received authentication result to the reader/writer 15 through the intermediary of internal bus 123, the input/output interface 122, and the network interface 125. [0285] In step S135, on the basis of the received authentication result, the DPU 51 of the reader/writer checks whether the processing for the use of the IC card specified by the user 3 (e.g., the purchase of a commercial product worth 2,000 yen) is acceptable (e.g., whether there is a balance of electronic money for the payment of the commercial product) primarily by reading necessary information from the IC card 12, transmitting a sales approval request to the acquirer/brand holder 1 through the intermediary of the personal computer 14 and the Internet 11, and receiving a response to the sales approval request. [0286] In step S136, the DPU 51 of the reader/writer 15 outputs a response signal, which is received through the antenna 46 in response to an inquiry from the IC card 12, to the personal computer 14 through the intermediary of the bus 55 and the SCC 53. The CPU of the personal computer 14 determines whether the processing of the command is acceptable on the basis of the response received from the reader/writer 15 and the response to the sales approval request received from the acquirer/brand holder 1 over the Internet 11. If it is determined in step S136 that the processing for the command is not acceptable, then the processing proceeds to step S144. [0287] If it is determined in step S136 that the processing for the command is acceptable, then the DPU 51 of the reader/writer 15 generates, in step S137, a command for causing the IC card 12 to carry out value loading (a predetermined value is subtracted from the value of the electronic money recorded in a file for the IC card 12), and outputs the generated command to the SPU 52 through the bus 55. Then, predetermined processing is carried out in the SPU 52 and the modulating circuit 43 to generate a modulated wave for the command, and the modulated wave is output to the IC card 12 as an electromagnetic wave through the antenna 46. [0288] In step S138, the same processing as that of step S90 shown in FIG. 18 is carried out. [0289] In step S139, the DPU 51 of the reader/writer notifies the cybershop 16 of the command processing result through the intermediary of the bus 55, the SCC 53, the personal computer 14, and the Internet 11. [0290] In step S140, the sales management server 191 of the cybershop 16 updates the inventory/sales management DB 192 in step S140, and notifies the acquirer/brand holder 1 of the processing result through the intermediary of the web server 193 and the Internet 11 in step S141. The notification of the command processing results may be performed sequentially each time the processing is implemented, or at a predetermined interval of, for example, one week or one month. [0291] In step S142 and step S143, the same processing as that of step S39 and step S40 shown in FIG. 15 is carried out. [0292] If it is determined that the authentication is invalid in step S132, or if it is determined in step S136 that the command processing is not acceptable, then the sales management server 191 of the cybershop 16 outputs an error message to the personal computer 14 through the intermediary of the web server 193 and the Internet 11 in step S144. [0293] In step S145, the same processing as that of step S42 shown in FIG. 15 is carried out. [0294] In the processing described above, the descriptions have been made of the cases where the transfer of information is implemented by using a contactless IC card. Alternatively, the hardware for recording information regarding electronic money, etc. and for performing a variety of processing may be formed of various other information processing devices, such as, for example, a contact type IC card, a portable telephone, a PDA, a personal computer, or timepiece. [0295] A series of the processing steps described above may alternatively be implemented by software. The software is installed from a recording medium into a computer wherein a program constituting the software has been incorporated in the dedicated hardware thereof, or in a general-purpose personal computer, for example, that is capable of implementing a variety of functions by installing diverse programs. [0296] As shown in FIG. 4, FIG. 7, or FIG. 8, the recording medium is constructed by a magnetic disk 65, 111, or 131 (including a floppy disk), an optical disk 66, 112, or 132 (including CD-ROM and DVD), a magneto-optical disk 67, 113, or 133 (including MD), or a package medium formed of a semiconductor memory 68, 114, or 134, etc. in which the program has been recorded. These recording media are distributed separately from computers in order to provide the program to users. [0297] In the present specification, the steps describing the program recorded in a recording medium of course include the processing in which the steps are carried out in time series according to the sequence described, and also include the processing carried out in parallel or separately rather than being carried out in time series. [0298] In the present specification, the term �system� refers to an entire apparatus constructed by a plurality of devices. [0299] Thus, according to the inventive information processing system, information processing method, and program recorded in a recording medium, information is exchanged with the third information processing apparatus managed by the second business entity that issues the second information processing apparatus in which electronic money information and authentication information used for authentication processing related to an electronic money service are recorded, information is exchanged with a fourth information processing apparatus managed by the third business entity that provides a service using electronic money, the authentication information used for the authentication processing related to the electronic money service is recorded, the information regarding the second business entity and the information regarding a tie-up agreement between the first business entity and the second business entity are recorded, the information regarding the third business entity and the information regarding a tie-up agreement between the first business entity and the third business entity are recorded, the authentication information is output on the basis of the information regarding the tie-up agreement between the first business entity and the second business entity, and the authentication information is output on the basis of the information regarding the tie-up agreement between the first business entity and the third business entity. Hence, in an electronic money business, the distribution of cryptographic keys to issuers and affiliate merchants, and the operation and management of a system can be integrated in an information processing system managed by a business entity managing a single brand, thus enabling the business entity to reduce necessary cost. [0300] According to the inventive electronic money service providing system, the first information processing apparatus exchanges information with the third information processing apparatus managed by the second business entity, exchanges information with the fourth information processing apparatus managed by the third business entity, records the authentication information used for the authentication processing related to an electronic money service, records the information regarding the second business entity and the information regarding a tie-up agreement between the first business entity and the second business entity, records the information regarding the third business entity and the information regarding a tie-up agreement between the first business entity and the third business entity, outputs the authentication information on the basis of the information regarding the tie-up agreement between the first business entity and the second business entity, and outputs the authentication information on the basis of the information regarding the tie-up agreement between the first business entity and the third business entity. The second information processing apparatus records the authentication information, and also records electronic money information. The third information processing apparatus exchanges information with the first information processing apparatus, records the received authentication information, records the information regarding the issuance of the second information processing apparatus, and carries out the authentication processing with the second information processing apparatus on the basis of the recorded authentication information. The fourth information processing apparatus exchanges information with the first information processing apparatus, records received authentication information, and carries out authentication processing with the second information processing apparatus on the basis of the recorded authentication information. Hence, a number of issuers and affiliate merchants can participate in a single brand, and the cost required for distributing cryptographic keys to the issuers and affiliate merchants and for running and managing a system can be reduced. [0301] It should be understood that various changes and modifications to the presently preferred embodiments described herein will be apparent to those skilled in the art. Such changes and modifications can be made without departing from the spirit and scope of the present invention and without diminishing its intended advantages. It is therefore intended that such changes and modifications be covered by the appended claims. Referenced byCiting PatentFiling datePublication dateApplicantTitleUS7409072 *Oct 5, 2004Aug 5, 2008Sanyo Electric Co., Ltd.Content processing apparatusUS7720717Mar 5, 2004May 18, 2010Sony CorporationMobile terminal device, mobile terminal method, mobile terminal program, and electronic money serverUS7735724Dec 10, 2004Jun 15, 2010Sony CorporationInformation processing device, information providing device, information processing method and information providing methodUS7891559Apr 27, 2010Feb 22, 2011Sony CorporationInformation processing device, information providing device, information processing method and information providing methodUS7917432Sep 16, 2004Mar 29, 2011Starbucks CorporationDual cardUS7946482 *Jan 17, 2007May 24, 2011Sanden CorporationElectronic money paying-in systemUS8089341 *Nov 1, 2005Jan 3, 2012Dai Nippon Printing Co., Ltd.Management systemUS8156042Aug 26, 2004Apr 10, 2012Starbucks CorporationMethod and apparatus for automatically reloading a stored value cardWO2006033727A2 *Aug 17, 2005Mar 30, 2006Mastercard International IncCompliance assessment and security testing of smart cards* Cited by examinerClassifications U.S. Classification705/39International ClassificationG06Q20/34, G06Q10/00, G06Q50/00, G06Q20/06, G06Q20/00, G06F21/60, G06Q50/10, G06Q40/02, G06F21/62, G06Q40/00, G06Q30/04, G06Q30/06, G06F12/14, G06K19/10, G06F21/24, G07F7/08, G06K19/00Cooperative ClassificationG07F7/0866, G06Q20/10, G06Q20/363, G06Q40/10, G06Q40/025, G06Q40/04European ClassificationG06Q20/10, G06Q40/025, G06Q20/363, G06Q40/04, G06Q40/10, G07F7/08CLegal EventsDateCodeEventDescriptionOct 16, 2012FPExpired due to failure to pay maintenance feeEffective date: 20120826Aug 26, 2012LAPSLapse for failure to pay maintenance feesApr 9, 2012REMIMaintenance fee reminder mailedJan 10, 2002ASAssignmentOwner name: SONY CORPORATION, JAPANFree format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:YAMADA, MAKOTO;UKAI, NOBUMITSU;SATO, JUNICHI;AND OTHERS;REEL/FRAME:012459/0478;SIGNING DATES FROM 20011031 TO 20011106RotateOriginal ImageGoogle Home - Sitemap - USPTO Bulk Downloads - Privacy Policy - Terms of Service - About Google Patents - Send FeedbackData provided by IFI CLAIMS Patent Services©2012 Google