JP3802023B2 - Mail order method - Google Patents

Description

  The present invention relates to a mail order method, and more particularly to a method for ordering and distributing merchandise using a communication network.

  In recent years, buying and selling of goods by mail order using catalogs has become popular in the market, and sales have gradually increased. In addition, network networks such as personal computer (hereinafter abbreviated as “PC”) communication have become widespread, and a large amount of detailed information that can be mistaken for verbal delivery by telephone can be accurately conveyed by PC communication. For this reason, mail order sales using a communication network using personal computer communication have been greatly developed. In particular, electronic products such as computer business software, game software, and multimedia electronic encyclopedias are frequently traded. Furthermore, sales of electronic products and provision of information services are being carried out on a mail order network using communication networks such as personal computer communication, digital CATV network, and B-ISDN network. In this case, of course, an electronic product that is an intangible product is sent to the orderer via the network for which the order has been received.

  FIG. 15 is a diagram showing the configuration of a mail order system using a conventional communication network. In FIG. 15, first, each orderer 5 sends a mail order system application form in which the name, personal computer communication address, transfer designated bank account, etc. are written to the sales company 6. If there is, please send a contract with the content that you can transfer from the account without the permission of the account owner. By this procedure, the orderer 5 obtains the orderer identifier UID in this system.

  In FIG. 15, the orderer 5 and the sales company 6 are connected by personal computer communication. The orderer 5 has an article purchasing apparatus 50 that orders an electronic product from the sales company 6 and receives the electronic product sent from the sales company 6. The article purchasing apparatus 50 is realized as software on a personal computer, for example. Also, as electronic products, computer software and multimedia software that can be used on a personal computer can be considered. Further, the sales company 6 includes a receiving device 60 that receives order information sent from the orderer, a product storage unit 61 that stores electronic products, an identifier of each orderer, a personal computer communication address, and a transfer designated bank. A personal data storage unit 62 for storing accounts and the like, and a product data storage unit 63 for storing product data such as prices are provided.

  The orderer inputs a product code PID of an electronic product desired for the product purchasing apparatus 50. In response, the article purchasing apparatus 50 transmits the orderer's identifier UID and product code PID to the sales company 6 via personal computer communication.

  In the sales company 6, the accepting device 60 receives the identifier UID and the product code PID sent from the orderer. Next, the accepting device 60 takes out the electronic product PDT corresponding to the product code PID from the product storage unit 60 and searches the product data storage unit 63 to obtain the price Pr corresponding to the electronic product PID. Next, the accepting device 60 reads the personal computer communication address and the transfer designated bank account of the corresponding orderer from the personal data storage unit 62 based on the identifier UID sent. Next, the accepting device 60 requests the bank to transfer the price Pr from the orderer's transfer designated bank account to the sales company's account. Next, the accepting device 60 refers to the personal computer communication address and transmits the ordered product PDT to the orderer.

  In the orderer, the article ordering apparatus 50 receives the ordered electronic product PDT and stores the received electronic product PDT in a hard disk such as a personal computer for use.

  In addition, even if the product to be sold is not an electronic product, it is possible to place an order for the product using personal computer communication, and the sales company can buy and sell the product by shipping it to the orderer's address by physical means. it can.

  However, in the above-mentioned conventional mail order system, it is necessary to specify a communication partner as long as it is necessary to transfer a product using a communication network. In addition, when trying to use a payment collection method such as a bank transfer or a credit card system, the orderer must naturally be specified. Therefore, there is a characteristic that the information “who bought what” is transmitted to the sales company. Compared to the traditional store sales of cash items, the purchaser, who is the orderer, does not need to provide a name, and the retailer did not fully know who bought it. The characteristic is a big problem in realizing mail order using a communication network. At present, the protection of each individual's privacy is screamed, and this problem seems to affect the spread of mail order systems using communication networks.

  Therefore, an object of the present invention is to reliably protect the orderer's privacy (for example, information on “who bought what”) when the orderer purchases a product via a communication network, and credits are provided. It is to provide a mail order system that can use an existing approval system such as a card or bank withdrawal.

The invention according to claim 1 performs the ordering and distribution of substantive merchandise using a system including a plurality of article purchasing devices, receiving devices, relay devices, and merchandise shipping devices connected via a communication network. A mail order method for
A key generation step in which the article purchasing device generates a key composed of electronic data;
An order purchase content encryption step in which the product purchase device encrypts the order content of the product using a key;
A key encryption step in which the article purchasing device encrypts the key; and
A first transmission step in which the article purchasing device adds the encrypted key, the orderer's identification information, and the identity verification information to the ordering content of the encrypted product, and transmits it to the accepting device;
A first receiving step in which the receiving device receives data transmitted from the article purchasing device;
A confirmation step in which the accepting device confirms whether or not the identity confirmation information received in the first reception step is valid;
When the receiving device confirms that the identity verification information is valid in the confirmation step, the orderer's content of the encrypted product received in the first reception step and the encrypted key are A second transmission step of adding kana information different from the identification information and transmitting it to the product shipping device;
A correspondence storage step in which the reception device stores the correspondence between the orderer's identification information and the pseudonym information in the correspondence storage;
A second receiving step in which the commodity shipping device receives data transmitted from the accepting device;
A key decrypting step in which the merchandise shipping device decrypts the encrypted key received in the second receiving step;
An order content decrypting step in which the product shipping device decrypts the order content of the encrypted product received in the second receiving step using the decrypted key;
An accepting device, referring to the correspondence stored in the correspondence storage means based on the pseudonym information sent from the commodity shipping device, and an article purchasing device identifying step for identifying the corresponding orderer; Prepare.

  The invention according to claim 2 is characterized in that, in the invention according to claim 1, in the second transmission step, the accepting apparatus uses different kana information for each order.

The invention according to claim 3 performs the ordering and distribution of substantial goods using a system including a plurality of article purchasing devices, receiving devices, relay devices, and product shipping devices connected via a communication network. A mail order method for
A key generation step in which the article purchasing device generates first and second keys comprising electronic data;
An order content encryption step in which the article purchase device double-encrypts the order content of the product using the first and second keys;
A key encryption step in which the article purchasing device encrypts the first and second keys separately;
The article purchasing apparatus adds the encrypted first and second keys, the orderer's identification information, and the identity verification information to the order contents of the double-encrypted merchandise, and the receiving apparatus A first transmission step of transmitting to
A first receiving step in which the receiving device receives data transmitted from the article purchasing device;
A confirmation step in which the accepting device confirms whether or not the identity confirmation information received in the first reception step is valid;
When the accepting device confirms that the identity verification information is valid in the confirmation step, the order information of the double encrypted product received in the first reception step and the encrypted first And a second transmission step of adding the first kana information different from the orderer's identification information to the second key and transmitting the second key to the relay device;
A first correspondence storage step in which the reception device stores the correspondence between the orderer's identification information and the first kana information in a first correspondence storage;
A second receiving step in which the relay device receives data transmitted from the accepting device;
A first key decryption step in which the relay device decrypts the encrypted first key received in the second reception step;
A first order content decryption step in which the relay device partially decrypts the order content of the double encrypted product received in the second reception step using the decrypted first key;
A third transmission step in which the relay device adds second kana information different from the first kana information to the order contents of the partially decrypted product, and transmits the second kana information to the product shipping device;
A second correspondence storage step in which the relay device stores the correspondence between the first kana information and the second kana information in a second correspondence storage means;
A third receiving step in which the commodity shipping device receives data transmitted from the relay device;
A second key decryption step in which the merchandise shipping device decrypts the encrypted second key received in the third reception step;
A second order content decrypting step in which the product dispatching device completely decrypts the order content of the partially decrypted product received in the third receiving step using the decrypted second key;
The relay device refers to the correspondence stored in the second correspondence storage means based on the second kana information sent from the commodity shipping device, and corresponds to the second kana information. A kana information specifying step for specifying 1 kana information;
The article purchase device specification for specifying the corresponding orderer by referring to the correspondence relationship stored in the first correspondence relationship storage means based on the first pseudonym information sent from the relay device by the accepting device Steps.

In the invention according to claim 4, in the second transmission step, the accepting device uses different first kana information for each order,
In the third transmission step, the relay device uses different second kana information for each order.

According to the first aspect of the present invention, the accepting device can only see the contents of the product ordered by the article purchasing device in an encrypted state, and cannot know what product has been ordered. Further, the merchandise shipping apparatus is sent with kana information different from the orderer's identification information added to the order contents of the encrypted merchandise, and therefore cannot know who ordered the merchandise. Therefore, unless the accepting device and the product device are collaborated, the sales side cannot grasp “who bought what”, and as a result, the privacy of the orderer can be effectively protected. In addition, since identity verification information is added to the order contents of products sent from the article purchasing device to the accepting device, by confirming the identity with the accepting device, an existing approval system such as credit card or bank withdrawal can be used. It can be used as it is.
Therefore, the privacy of the orderer can be protected by combining the invention of claim 1 with physical distribution such as packaging and shipping of substantial goods.

  According to the second aspect of the present invention, since different information is used for each order as the kana information in the second transmission step, fraud such as determining the correspondence between the kana information and the orderer is made effective. Can be prevented.

According to the invention of claim 3, the accepting device can only see the contents of the product ordered by the orderer in an encrypted state, and therefore cannot know what product has been ordered. Further, since the relay device can only see the contents of the product ordered by the orderer in an encrypted state, it cannot know what product has been ordered. Further, the relay device is sent with the first pseudonym information different from the orderer's identification information added to the encrypted product ordering information, so it knows which orderer ordered the product. I can't. In addition, since the merchandise shipping apparatus is sent with the second kana information that is different from the first kana information added to the order contents of the encrypted merchandise, which merchant ordered the merchandise. I can't know. Therefore, unless the accepting device, the relay device, and the product device are collaborated, the sales side cannot grasp “who bought what”, and as a result, the privacy of the orderer can be effectively protected. It should be noted that even if the accepting device and the merchandise device try to collaborate, there is no information to link the information held by both devices, so there is no attempt to collaborate. Accordingly, privacy infringement due to collusion can be effectively prevented. In addition, since identity verification information is added to the order contents of products sent from the article purchasing device to the accepting device, by confirming the identity with the accepting device, an existing approval system such as credit card or bank withdrawal can be used. It can be used as it is.
Therefore, the privacy of the orderer can be protected by combining the invention of claim 3 with physical distribution such as packaging and shipping of substantial goods.

  According to the invention of claim 4, in the second transmission step, the first kana information different for each order is used, and further, in the third transmission step, the second kana information different for each order is used. Therefore, it is possible to more effectively prevent fraud that finds the correspondence between the first and second kana information and the orderer.

  FIG. 1 is a block diagram showing the configuration of a mail order system using a communication network according to an embodiment of the present invention. In FIG. 1, the mail order system using the network of the present embodiment is composed of a plurality of orderers i and sales companies. The sales company is divided into a reception department a, a relay department b, and a product department c. Each department performs business independently, and no information is disclosed between the departments. Further, an orderer identifier IDi that can identify each individual is assigned to the orderer i who subscribes to this system. Also, the mail order system using the communication network of this embodiment handles electronic products such as games, business software, and multimedia information as products.

  In FIG. 1, an orderer i is connected to a reception department a of a sales company through personal computer communication, and exchanges information in both directions. The reception department a is connected to the orderer i and the relay department b through personal computer communication, and exchanges information in both directions. The relay department b is connected to the reception department a and the product department c by personal computer communication, and exchanges information in both directions. The merchandise department c is connected to the relay department b through personal computer communication, and exchanges information in both directions.

  Next, a schematic operation of the mail order system shown in FIG. 1 will be described. First, the orderer i double-encrypts the product code of the desired product, and encrypts two encryption keys for decrypting it for the relay department b and the product department c, respectively. Then, the orderer i sends the encrypted order contents including the double-encrypted product code and the encryption key encrypted for the relay department b and the product department c together with the identifier of the orderer to the sales company. To the reception department a. The reception department a sends the information sent from the orderer i, that is, the encrypted order contents, to the relay department b together with the reference number (kana information) Ref1. The relay department b decrypts the encryption key encrypted for the relay department b out of the encrypted order contents sent from the reception department a, and uses the product code that has been double-encrypted by using it. Partially decrypt. Then, the relay apparatus b sends the partially decrypted encrypted product code and the encryption key encrypted for the product department c together with the reference number Ref2 to the product department c. The product department c decrypts the encryption key encrypted for the product department c, and decrypts the encrypted product code using the decrypted encryption key. This makes it possible to know the name of the ordered product.

  Next, the merchandise department c encrypts the merchandise itself corresponding to the decrypted merchandise code, and sends the encrypted merchandise together with its price and reference number Ref2 to the relay department b. The relay department b further encrypts the encrypted product sent from the product department c, and sends the double encrypted product to the reception department a together with its price and reference number Ref1. The receiving department a associates the orderer i with the reference number Ref1, deducts an amount equal to the price of the goods from the bank account of the orderer i, and transmits the encrypted product sent from the relay department b via the communication network. To the orderer i. The orderer i decrypts the encrypted product sent from the reception department a and obtains the ordered product.

  FIG. 2 is a block diagram showing an example of the configuration of the article purchasing apparatus 10 possessed by the orderer i shown in FIG. In FIG. 2, the article purchasing apparatus 10 includes a control unit 101, a ROM 102, a RAM 103, an input operation unit 104, a display unit 105, a product catalog storage unit 106, a random number generation unit 107, and a secret key storage unit. 108, a communication unit 109, and an order data storage unit 110.

  The ROM 102 stores program data, the public key of the receiving department a, the public key of the relay department b, and the public key of the merchandise department c, and the control unit 101 operates according to the program data. The RAM 103 stores various data necessary for the operation of the control unit 101. The input operation unit 104 includes a keyboard, a mouse, and the like operated by the orderer, and inputs various data and instructions to the control unit 101. The display 105 is constituted by a CRT display or a liquid crystal display, and displays image data given from the control unit 101. The product catalog storage unit 106 stores a product catalog including electronic image data periodically sent from the reception department a. The random number generator 107 generates two random numbers necessary for encrypting the order contents. The secret key storage unit 108 stores a secret key unique to the orderer i. However, the private key cannot be read from the outside. The communication unit 109 is connected to the reception department a through personal computer communication, and transmits and receives each input data. The order data storage unit 110 stores data necessary for exchanging product order data.

  FIG. 3 is a block diagram illustrating an example of a configuration of the reception device 20 provided in the reception department a illustrated in FIG. In FIG. 3, the receiving device 20 includes a control unit 201, a ROM 202, a RAM 203, a personal data storage unit 204, a secret key storage unit 205, a communication unit 206, an order data storage unit 207, and a reference number issue. Part 208.

  The ROM 202 stores program data and the public key of the relay department b, and the control unit 201 operates according to this program data. The RAM 203 stores various data necessary for the operation of the control unit 201. In the personal data storage unit 204, personal information such as public keys, personal computer communication addresses, bank accounts, etc. of all users who subscribe to the system is stored in pairs with personal identifiers. The secret key storage unit 205 stores a secret key unique to the receiving department a. However, the private key cannot be read from the outside. The communication unit 206 is connected to each orderer and the relay department b by personal computer communication, and transmits and receives each input data. The order data storage unit 207 stores data necessary for exchanging product order data. A reference number issuing unit 208 issues a reference number necessary for exchanging merchandise ordering data.

  FIG. 4 is a block diagram showing an example of the configuration of the relay device 30 provided in the relay department b shown in FIG. In FIG. 4, the receiving apparatus 30 includes a control unit 301, a ROM 302, a RAM 303, a secret key storage unit 304, a communication unit 305, an order data storage unit 306, and a reference number issue unit 307. .

  The ROM 302 stores program data and the public key of the receiving department a, and the control unit 301 operates according to this program data. The RAM 303 stores various data necessary for the operation of the control unit 301. The secret key storage unit 304 stores a secret key unique to the receiving department b. However, the private key cannot be read from the outside. The communication unit 305 is connected to the reception department a and the merchandise department c through personal computer communication, and transmits and receives each input data. The order data storage unit 306 stores data necessary for exchanging product order data. The reference number issuing unit 307 issues a reference number necessary for exchanging merchandise ordering data.

  FIG. 5 is a block diagram showing an example of the configuration of the product shipping device 40 provided in the product department c shown in FIG. In FIG. 5, the product shipping apparatus 40 includes a control unit 401, a ROM 402, a RAM 403, a secret key storage unit 404, a communication unit 405, an order data storage unit 406, a product data storage unit 407, and a product storage. Part 408.

  The ROM 402 stores program data and the public key of the relay department b, and the control unit 401 operates according to this program data. The RAM 403 stores various data necessary for the operation of the control unit 401. The secret key storage unit 404 stores a secret key unique to the receiving department c. However, the private key cannot be read from the outside. The communication unit 405 is connected to the relay department b by personal computer communication, and transmits and receives each input data. The order data storage unit 406 stores data necessary for exchanging product order data. The product data storage unit 407 stores the price of each product. The merchandise storage unit 408 records all electronic merchandise sold by the merchandise department c. However, it cannot be read from the outside.

  FIG. 6 is a sequence chart showing the operation of the entire mail order system using the communication network shown in FIG. FIG. 7 is a flowchart showing the operation of the article purchasing apparatus 10 of FIG. FIG. 8 is a flowchart showing an operation at the time of order reception of the reception device 20 of FIG. FIG. 9 is a flowchart showing the operation of the relay device 30 of FIG. 1 during order relay. FIG. 10 is a flowchart showing the operation of the commodity shipping device 40 of FIG. FIG. 11 is a flowchart illustrating the operation of the relay device 30 in FIG. 1 during product relay. FIG. 12 is a flowchart showing the operation of the receiving device 20 of FIG. FIG. 13 is a flowchart showing the operation of the article purchasing apparatus 10 of FIG. The operation of the above embodiment will be described below with reference to FIGS.

  Each orderer i sends a system subscription application in which a name, a personal computer communication address, a designated bank account for transfer, etc. are written to the system manager when the system is subscribed. At the same time, if there is a legitimate charge transfer request from the reception department a to the bank with the bank account designated for transfer, a contract that states that the bank can transfer without the permission of the orderer i Send it. The system administrator confirms the contents of the system subscription application sent from the orderer i. If the confirmation is obtained, the system administrator must keep the individual identifier IDi and the orderer i different for each orderer and keep it secret. Distribute (rent, sell) the article purchasing apparatus 10 storing a secret key or the like. Further, the system administrator transmits the personal identifier IDi of the orderer i, the public key pi, and the transfer designated account to the reception department a in pairs, and the reception department a transmits the data to the reception device 10 in FIG. It is stored in the personal data storage unit 204 (see FIG. 3).

The system administrator distributes the secret key encryption algorithm F and the secret key decryption algorithm F-1 to each orderer i, the relay department b, and the merchandise department c. At this time, it is possible to decrypt the function F (K, X) obtained by encrypting the data X by the secret key encryption algorithm F using the key K, and hold both the secret key decryption algorithm F-1 and the key K. Limited to things. That is,
X = F-1 (K, F (K, X))
Is established.

Next, the system administrator distributes the public key encryption algorithm E and the public keys pb and pc of the relay department b and the merchandise department c to each ordering party i, to the relay department b and the merchandise department c. Then, the public key decryption algorithm D and the respective private keys sb and sc are distributed (the public key and the private key are different for each product department). At this time, it is possible to decrypt the function E (py, X) obtained by encrypting the data X by the public key encryption algorithm E using the public key py of y (y is either b or c). It is limited to the one holding the algorithm D and the secret key sy. That is,
X = D (sy, E (py, X))
Is established. The secret key sy knows only y. Also, the corresponding private key sy cannot be inferred from each public key py.

  In addition, the system administrator, for each orderer i, reception department a, relay department b, and product department c, the signature generation algorithm sign and signature verification algorithm verify, the reception department a, the relay department b, and the product department c. Distribute the public key (the same value as the public key / private key described earlier when explaining the public key encryption algorithm). At this time, the electronic signature sign (sy, X) created by the signature generation algorithm sign using the private key sy (y is any one of i, a, b, and c) for the data X is the secret key. Cannot be created unless sy is held. Further, by using the public key py of y and the signature verification algorithm verify, it is possible to confirm whether or not the electronic signature sign (sy, X) is indeed an electronic signature for the data X created by y.

  In each orderer i, reception department a, relay department b, and merchandise department c, the distributed algorithm and each public key are stored in ROMs 102, 202, 302, and 402 inside each apparatus, respectively. In addition, each private key is stored in a private key storage unit 108, 205, 304, 404 inside each device and cannot be read from the outside.

  The secret key encryption algorithm, public key encryption algorithm, and signature generation algorithm are described in detail in “Contemporary Cryptography” by Shinichi Ikeno and Kenji Koyama (The Institute of Electronics and Communication Engineers).

  The following processing describes processing when a certain orderer i purchases an electronic product PDT having a product code PID.

  An electronic catalog is periodically sent from the reception department a to the orderer i and stored in the product catalog storage unit 106. The orderer i looks at the electronic catalog stored in the product catalog storage unit 106 displayed on the display 105, and if there is a product that he / she wants, marks the screen with the input controller 104. Thus, the purchased product is selected and the result is input to the control unit 101 (step S101 in FIG. 7). In addition, it should be pointed out that various methods (for example, key input) can be used as the method for selecting purchased products. Next, the control unit 101 reads the product code PID corresponding to the input purchased product from the product catalog storage unit 106 (step S102).

Next, the control unit 101 generates two random numbers rb and rc using the random number generation unit 107 (step S103). Next, the control unit 101 reads the secret key encryption algorithm F from the ROM 102, and double-encrypts the product code PID as follows using the generated random numbers rb and rc as keys (step S104).
First, the PID is encrypted using rc as a key.
F (rc, PID)
Further, the data F (rc, PID) is encrypted using rb as a key.
F (rb, F (rc, PID))

Next, the control unit 101 reads from the ROM 102 the public key encryption algorithm E, the public key pb of the relay department b, and the public key pc of the product department c that sells the product to be purchased. The random number rb is encrypted by the public key encryption algorithm E using the public key pb as in (), and the random number rc is encrypted by the public key encryption algorithm E using the public key pc as shown in the following expression (2) (step) S105). E (pb, rb) (1)
E (pc, rc) (2)

Next, the control unit 101 concatenates F (rb, F (rc, PID)), E (pb, rb), and E (pc, rc), and encrypts an order as shown in the following equation (3). The content EOrd1 is generated (step S106).
EOrd1 = F (rb, F (rc, PID)) ‖
E (pb, rb) ‖E (pc, rc) (3)
However, in the above formula (3), ‖ represents the connection of information.

Next, the control unit 101 reads the orderer i's private key si from the private key storage unit 108 and the signature generation algorithm sign from the ROM 102, and generates an electronic signature for EOrd1 using the following equation (4). (Step S107).
sign (si, EOrd1) (4)
Here, the concatenation of the data X and the electronic signature sign (sy, X) of y with respect to the data X is simply expressed by X [y]. That is,
X [y] = X‖sign (sy, X)
It becomes.

  Next, the control unit 101 transmits the personal identifier IDi and EOrd1 [i] from the communication unit 109 to the reception department a using personal computer communication (step S108).

The receiving department a receives the data IDi and EOrd1 [i] sent from the orderer i using personal computer communication via the communication unit 206 in FIG. 3 (step S201 in FIG. 8). Next, the control unit 201 of the receiving apparatus 20 searches the personal data storage unit 204 for the corresponding public key pi from the IDi of the transmitted data and reads it (step S202). Next, the control unit 201 reads the signature verification algorithm verify from the ROM 202, and determines whether or not the electronic signature sign (si, EOrd1) of EOrd1 [i] is the electronic signature of the orderer i for EOOrd1 (5 ) (Step S203).
verify (pi, sign (si, EOrd1)) (5)
If the validity of the electronic signature can be confirmed, the control unit 201 proceeds to step S204. If the electronic signature cannot be confirmed, the control unit 201 notifies the orderer i via the communication unit 206 that the validity of the signature has not been confirmed (step S205). ).

Next, the control unit 201 issues a reference number Ref1 using the reference number issuing unit 208 (step S204). Next, the control unit 201 sets Ref1, IDi and EOrd1 [i] as a set and stores them in the order data storage unit 207 (step S206). Next, the control unit 201 reads the signature generation algorithm sign from the ROM 202 and the secret key sa from the secret key storage unit 205, and generates an electronic signature for the reference number Ref1 using the following equation (6) ( Step S207).
sign (sa, Ref1) (6)

  Next, the control unit 201 transmits Ref1 [a] as an acceptance number to the orderer i using the personal computer communication from the communication unit 206 (step S208).

  The orderer stores the Ref1 [a] sent from the reception department a, the encrypted order content EOrd1, and the two random numbers rb and rc in the order data storage unit 110 as a set.

Next, the control unit 210 of the receiving department a applies an electronic signature to the concatenation of the reference number Ref1 and the encrypted order content EOrd1 using the following equation (7) (step S209).
sign (sa, Ref1‖EOrd1) (7)
Next, the control unit 201 transmits (Ref1‖EOrd1) [a] to the relay department b from the communication unit 206 using personal computer communication (step S210).

The relay department b receives the data (Ref1‖EOrd1) [a] sent from the reception department a using personal computer communication via the communication unit 305 in FIG. 4 (step S301 in FIG. 9). The control unit 301 of the relay device 30 reads the signature verification algorithm verify and the public key pa of the receiving department a from the ROM 302, and the electronic signature sign (sa, Ref1‖EOrd1) of (Ref1‖EOrd1) [a] is It is confirmed using the following formula (8) whether or not it is the electronic signature of the receiving department a with respect to (Ref1‖EOrd1) (step S302).
verify (pa, sign (sa, Ref1‖EOrd1)) (8) If the validity of the electronic signature can be confirmed, the control unit 301 proceeds to step S303. If the validity cannot be confirmed, the control unit 301 proceeds to the reception department a via the communication unit 305. It is notified that the validity of the signature could not be confirmed (step S304).

Next, the control unit 301 extracts E (pb, rb) from the EOrd1, reads the secret key sb from the secret key storage unit 304, and reads the public key decryption algorithm D from the ROM 302, as shown in the following equation (9). , E (pb, rb) is decrypted by D using the key sb to obtain rb (step S303).
D (sb, E (pb, rb)) = rb (9)
Next, the control unit 301 reads the secret key decryption algorithm F-1 from the ROM 302, and partially uses rb for EOrd1 F (rb, F (rc, PID)) as shown in the following equation (10). Only decryption is performed (step S305).
F-1 (rb, F (rb, F (rc, PID)))
= F (rc, PID) (10)

Next, the control unit 301 connects F (rc, PID) and E (pc, rc) of EOrd1 to generate EOrd2 represented by the following equation (11) (step S306).
EOrd2 = F (rc, PID) ‖E (pc, rc) (11)

Next, the control unit 301 issues a reference number Ref2 using the reference number issuing unit 307 (step S307). Next, the control unit 301 sets (Ref1‖EOrd1) [a] and the reference number Ref2 as a set and stores them in the order data storage unit 306 (step S307). Next, the control unit 301 reads the signature generation algorithm sign from the ROM 302, and applies an electronic signature to the connection of Ref2 and EOrd2 using the following equation (12) (step S309).
sign (sb, Ref2‖EOrd2) (12)

  Next, the control unit 301 transmits (Ref2‖EOrd2) [b] to the product department c from the communication unit 305 using personal computer communication (step S310).

The merchandise department c receives the data (Ref2‖EOrd2) [b] sent from the relay department b using personal computer communication via the communication unit 405 in FIG. 5 (step S401 in FIG. 10). The control unit 401 of the product shipping apparatus 40 reads the signature verification algorithm verify and the public key pb of the relay department b from the ROM 402, and the electronic signature sign (sb, Ref2‖EOrd2) of (Ref2‖EOrd2) [b] is obtained. , (Ref2‖EOrd2) is confirmed using the following equation (13) whether or not it is the electronic signature of the relay department b (step S402).
verify (pb, sign (sb, Ref2‖EOrd2))
... (13)
If the validity of the electronic signature can be confirmed, the control unit 401 proceeds to step S403. If the confirmation is not possible, the control unit 401 notifies the relay department b via the communication unit 405 that the validity of the signature has not been confirmed (step S404).

Next, the control unit 401 extracts E (pc, rc) from EOrd2, reads the private key sc from the private key storage unit 404, and reads the public key decryption algorithm D from the ROM 402, and uses E (pc, rc) as the key sc. And rc represented by the following equation (14) is obtained (step S403).
D (sc, E (pc, rc)) = rc (14)
Next, the control unit 401 reads out the secret key decryption algorithm F-1 from the ROM 402, and decrypts F (rc, PID) of EOrd2 as shown in the following equation (15) using only rc (step S405).
F-1 (rc, F (rc, PID)) = PID (15)
Next, the control unit 401 stores (Ref2 || Ord2) [b] in the order data storage unit 406 (step S406).

Next, the control unit 401 reads the price Pr of the PID from the product data storage unit 406 (step S407), and takes out the electronic product PDT corresponding to the PID from the product storage unit 408 (step S408). Next, the control unit 401 reads the secret key encryption algorithm F from the ROM 402 and encrypts the PDT with F using the key rc, thereby generating EPDT1 represented by the following equation (16) (step S409).
EPDT1 = F (rc, PDT) (16)

Next, the control unit 401 reads the signature generation algorithm sign from the ROM 402, and creates an electronic signature as represented by the following equation (17) for the combination of Ref2, EDPT1, and Pr (step S410).
sign (sc, Ref2‖EDPT1‖Pr) (17)

  Next, the control unit 401 transmits (Ref2‖EDPT1‖Pr) [c] to the relay department b from the communication unit 405 using personal computer communication (step S411).

The relay department b receives the data (Ref2‖EDPT1‖Pr) [c] sent from the product department c using personal computer communication via the communication unit 304 in FIG. 4 (step S501 in FIG. 11). . The control unit 301 of the relay device 30 reads the signature verification algorithm “verify” and the public key pc of the merchandise department c from the ROM 302, and the electronic signature sign (sc, Ref2‖EDPT1‖) of (Ref2‖EDPT1‖Pr) [c]. Whether Pr) is an electronic signature of the merchandise department c for (Ref2‖EDPT1‖Pr) is confirmed using the following equation (18) (step S502).
verify (pc, sign (sc, Ref2‖EDPT1‖Pr))
... (18)
If the validity of the electronic signature can be confirmed, the control unit 401 proceeds to step S503. If the confirmation cannot be confirmed, the control unit 401 notifies the merchandise department c through the communication unit 305 that the validity of the signature has not been confirmed (step S504).

  Next, the control unit 301 searches the order data storage unit 306 based on the reference number Ref2 included in the received (Ref2ＰＴEDPT1‖Pr) [c], and is recorded together with the reference number Ref2. The random number rb is extracted from (Ref1‖EOOrd1) [a] in the same manner as in step S303 in FIG. 9 (step S503).

Next, the control unit 301 reads the secret key encryption algorithm F from the ROM 302, encrypts EPDT1 using the key rb, and generates EPDT2 represented by the following equation (19) (step S505).
EPDT2 = F (rb, EPDT1)
= F (rb, F (rc, PDT)) (19)

Next, the control unit 301 reads the signature generation algorithm sign from the ROM 302 and the secret key sb from the secret key storage unit 304, respectively, and the inquiry retrieved from the reference number Ref2 (Ref1‖EOrd1) [a]. An electronic signature is applied to the number Ref1, the EPDT2 and Pr sent from the merchandise department (Ref1‖EPDT2‖Pr) using the following equation (20) (step S506).
sign (sb, Ref1‖EPDT2‖Pr) (20)

  Next, the control unit 301 stores (Ref2‖EDPT1‖Pr) [c] sent from the merchandise department c in a pair with (Ref1ｒEOrd1) [a] in the order data storage unit 306 (step). S507). Next, the control unit 301 transmits (Ref1‖EPDT2‖Pr) [b] to the receiving department a from the communication unit 305 using personal computer communication (step S508).

The receiving department a receives the data (Ref1‖EPDT2‖Pr) [b] sent from the relay department b via personal computer communication via the communication unit 206 in FIG. 3 (step S601 in FIG. 12). The control unit 201 of the accepting device 20 reads the signature verification algorithm verify and the public key pb of the relay department b from the ROM 202, and the electronic signature sign (sb, Ref1‖EPDT2‖ of (Ref1‖EPDT2‖Pr) [b]. Whether Pr) is the electronic signature of the relay department b for (Ref1‖EPDT2‖Pr) is confirmed using the following equation (21) (step S602).
verify (pb, sign (sb, Ref1‖EPDT2‖Pr))
... (21)
If the validity of the electronic signature can be confirmed, the control unit 201 proceeds to step S603, and if not confirmed, the control unit 201 notifies the relay department b through the communication unit 206 that the validity of the signature has not been confirmed (step S604).

  Next, the control unit 201 searches the order data storage unit 207, extracts Ref1 from (Ref1‖EPDT2‖Pr) [b] sent from the relay department b, and (Ref1‖EPDT2‖Pr) [b ] In combination with IDi and EOrd1 [i] and recorded in the order data storage unit 207 (step S603).

Next, the control unit 201 extracts the signature generation algorithm sign from the ROM 202 and the secret key sa from the secret key storage unit 205, and generates an electronic signature for Ref1‖EDPT2‖Pr using the following equation (22). (Step S605).
sign (sa, Ref1‖EDPT2‖Pr) (22)

  Next, the control unit 201 obtains the personal identifier IDi stored in the order data storage unit 207 together with the reference number Ref1, searches the personal data storage unit 204 for the personal computer communication address corresponding to the IDi, and orders the customer i. (Ref1‖EDPT2‖Pr) [a] is transmitted from the communication unit 206 using personal computer communication (step S606).

The orderer i receives the data (Ref1‖EDPT2‖Pr) [a] sent from the reception department a through personal computer communication via the communication unit 109 in FIG. 2 (step S701 in FIG. 13). The control unit 101 of the article purchasing apparatus 10 reads the signature verification algorithm “verify” and the public key pa of the receiving department “a” from the ROM 102, and the electronic signature “sign (sa, Ref1‖EDPT2) of (Ref1‖EDPT2‖ZPr) [a]”. Whether or not (Pr) is the electronic signature of the receiving department a for (Ref1‖EDPT2‖Pr) is confirmed using the following equation (23) (step S702).
verify (pa, sign (sa, Ref1‖EDPT2‖Pr))
... (23)
If the validity of the electronic signature can be confirmed, the control unit 101 proceeds to step S703. If the electronic signature cannot be confirmed, the control unit 101 notifies the reception department a that the validity of the signature has not been confirmed via the communication unit 109 (step S704).

  Next, the control unit 101 retrieves Ref1 from the received (Ref1ＰＴEDPT2‖Pr) [a], searches for Ref1 [a] stored in the order data storage unit 110, and places an order therein It is ascertained whether the price of the product matches the Pr of (Ref1‖EDPT2‖Pr) [a] sent (step S703). If they match, the control unit 101 proceeds to step S705. If they do not match, the control unit 101 appeals to the receiving department a via the communication unit 109 that the price is different (step S706).

The control unit 101 reads the signature generation algorithm sign from the ROM 102 and the secret key si from the secret key storage unit 108, generates an electronic signature for Ref1‖EDPT2‖Pr using the following equation (24), and receives a product receipt It is set as Receive (step S705).
Receive = sign (si, Ref1‖EDPT2‖Pr)
... (24)
Next, the control unit 101 transmits a product receipt slip together with Ref1 from the communication unit 109 to the reception department a using personal computer communication (step S707).

Next, the control unit 101 reads the secret key decryption algorithm F-1 from the ROM 102, and reads the two random numbers rb and rc stored in the order data storage unit as a pair with Ref1. And the control part 101 decodes EPDT2 by substituting the key rb to F-1 like following Formula (25), and obtains EPDT1 (step S708).
F-1 (rb, EPDT2) = EPDT1 (25)
Next, the control unit 101 substitutes the key rc for F-1, thereby decrypting EPDT1 and obtaining the ordered electronic product PDT (step S709).
F-1 (rc, EPDT1) = PDT (26)

  If the decrypted product PDT is different from the ordered product, the control unit 101 uses PC communication to appeal the product difference to the reception department a (step S710).

  In the receiving department a, the control unit 201 searches whether or not Ref1 sent to the orderer i is recorded in the order data storage unit 207, and the Receive sent from the orderer i is stored together with Ref1. IDi, EOrd1 [i], and (Ref1‖EPDT2‖Pr). Then, the control unit 201 requests the bank to deduct the price Pr of the product PDT from the transfer designated bank account registered in advance of the orderer i and transfer it to the account of the reception department a.

  Next, in the mail order system using the communication network described above, it will be described that privacy protection that “I do not know who bought what” can be realized. First, it shows that the information “who bought what” cannot be known unless all three of the reception department a, the relay department b, and the commodity department c collide. After that, in each procedure, countermeasures when the orderer i, the reception department a, the relay department b, and the merchandise department c do not perform the normal procedure will be described.

  FIG. 14 shows which information each of the reception department a, the relay department b, and the merchandise department c know in each procedure in the mail order sales system using the communication network described above. ○ indicates that the information is retained, and × indicates that the information is not retained.

  The personal identifier IDi of the orderer i knows only the receiving department a, and the product name PID knows only the merchandise department c. This is because information regarding the product is processed in an encrypted state in the reception department a and the relay department b. Moreover, since the information shared by the receiving department a and the product department c is only the price Pr of the product, if the price of the product is almost uniform and the amount of information is large, the receiving department a and the product department c Even if you pass the information you own to the other party, there is no information that links the information that each holds. I don't know who bought what. In addition, since the relay department b has neither information about the product nor information about the orderer i, even if either the receiving department a or the product department c passes the information it owns to the other party, “who is what? I do n’t know if I bought it. Therefore, in order to know the information “who bought what”, the receiving department a, the relay department b, and the merchandise department c need to collaborate and pass each other's own information to the other party. As long as each department operates on the basis of normal organizational ethics, it is very unlikely that all three departments will collide. Therefore, privacy protection is realized that "I do not know who bought what". That is, the orderer can order and purchase the product anonymously through the communication network.

  Next, in each procedure, a countermeasure when the orderer i, the receiving department a, the relay department b, and the merchandise department c (hereinafter simply referred to as a section) does not perform a normal procedure will be described. Here, not to perform a normal procedure means to tamper with the information when the sent information is processed and sent to the next procedure. For example, in the mail order system using the communication network described above, there is a case where the content of the encrypted order content EOrd1 received by the receiving department a from the orderer i is different.

  In each procedure, when each section rewrites the sent information and sends it to the next procedure, when sending information in each procedure, an electronic signature that can only be created for that section is sent together. The electronic signature is found at the time of signature confirmation even if the contents are altered during transmission. That is, since the sent information and its electronic signature are stored in the order data storage section of each section, it becomes clear who has rewritten the information by following the information. Therefore, each section cannot rewrite information without permission.

  As described above, in the mail order system using the communication network of the above-described embodiment, privacy protection “I do not know who bought what” can be realized, and the orderer i, the reception department a, the relay department b Even if any of the product departments c does not perform the normal procedure, it can be specified in which department the procedure is performed.

  In the above embodiment, bidirectional communication between the orderer i, the reception department a, the relay department b, and the merchandise department c is performed using personal computer communication. However, interactive communication such as digital CATV network and B-ISDN is performed. Other communication networks that can perform communication may be employed, and in this case, the same effect as in the above embodiment can be obtained.

  In the above embodiment, the delivery of the product price from the orderer i to the reception department a is notified to the system administrator of the transfer designated bank account at the time of application for the system, and the reception department a receives the transfer department a from the transfer designation bank account. This is realized by requesting the bank to transfer the account to the customer's account, but at the time of joining the system, the member number of the credit card department to which the orderer i has joined is informed beforehand, and the reception department a is designated for the product price This may be realized by having the credit department pay in advance, and in this case, the same effect as in the above embodiment can be obtained.

  In the above embodiment, the relay department b is set between the reception department a and the product department c. However, the relay department can be omitted. In this case, the reception department a can specify who the ordering person is, but cannot specify what the purchaser has purchased because the order contents and the product itself are encrypted. Further, although the merchandise department c can identify what it has bought, the reference number sent from the reception department a cannot be associated with the orderer. In other words, it is not possible to identify who bought it. Therefore, also in this case, privacy protection can be realized without any department knowing who bought what, alone.

  In the above embodiment, the purchased product is an electronic product, but the mail order system using the communication network of the present invention that protects privacy is applied to a general product that is not electronic. It is possible. However, in this case, it is necessary to slightly change the procedure of the above embodiment. This will be described below.

  The same applies until the orderer i places an order for a product, the ordering information is received by the receiving department a, and is sent to the product department c via the relay department b using personal computer communication. However, since general merchandise that is not electronic cannot be encrypted, the merchandise department c physically packs the merchandise, seals it with a paper that only the merchandise department c has, and removes the sealed merchandise. Along with Ref2, it is physically sent to the relay department b. In the relay department b, the product with the seal of the merchandise department c that has been sent is further packaged and sealed with a sheet that only the relay department b has. Then, the double-sealed product is physically sent to the reception department a together with Ref1 corresponding to Ref2. The reception department a physically delivers the double-sealed product to the orderer i. Further, in the above embodiment, when sending a product from the product department c to the orderer i via the relay department b and the reception department a, an electronic signature is added and transmitted. It changes to a receipt of goods and a normal seal.

  As described above, it is possible to apply a mail order system using the communication network of the present invention that protects privacy to general products that are not electronic.

  Further, in the above-described embodiment, the description has been made assuming that there is one relay department. It is possible to apply. However, in this case, the procedure of the above embodiment needs to be slightly changed, and this will be described below.

The first relay department b1 replaces the relay department b in the above embodiment. At this time, the product department c directly from the first relay department b1
(Ref2‖EOrd2) [b1]
Is sent from the second relay department b2 via the nth relay department bn. That is, from the mth relay department bm to the (m + 1) th relay department b (m + 1),
(Ref (m + 1) ‖EOrd2) [bm]
Is sent. Here, Ref (m + 1) is the (m + 1) th reference number. Also, each value is different from Ref1 to Ref (n + 1). Then, from the nth relay department bn to the product department c,
(Ref (n + 1) ‖EOrd2) [bn]
Will be sent. The merchandise department c obtains the PID from the received (Ref (n + 1) ＋ １EOrd2) [bn], encrypts the PDT,
(Ref (n + 1) ‖EPDT1‖Pr) [c]
Is transmitted to the nth relay department bn. Also, from the mth relay department bm to the (m−1) th relay department b (m−1),
(Ref (m + 1) ‖EPDT1‖Pr) [bm]
Is sent. From the first relay department b1 to the reception department a,
(Ref2‖EPDT1‖Pr) [b1]
Is sent. The following procedure is the same as the above embodiment. The privacy safety in this case depends on the collusion possibility of each department, as described in the safety of the above embodiment, and the possibility is lower than that in the above embodiment.

  In the above embodiment, the reception department a, the relay department b, and the merchandise department c are provided in one company, but these departments may be organized as separate companies.

  The embodiments described above include at least the following inventions.

A first aspect of the invention is a mail order system for ordering and distributing electronic merchandise using a communication network connecting a plurality of orderers, reception departments, and merchandise departments,
The orderer, the reception department, and the product department are each provided with an article purchase device, a reception device, and a product shipment device,
The goods purchasing device
A key generating means for generating a key composed of electronic data;
Order content encryption means for encrypting the order content of the product using a key;
A key encryption means for encrypting the key;
A first transmission means for adding the encrypted key, the orderer's identification information, and the identity verification information to the ordering content of the encrypted product and transmitting it to the accepting device;
The receiving device
First receiving means for receiving data transmitted from the article purchasing device;
Confirmation means for confirming whether or not the identity confirmation information received by the first receiving means is valid;
When the confirmation means confirms that the identity confirmation information is valid, the ordering contents of the encrypted product received by the first receiving means and the encrypted key are different from the orderer's identification information. A second transmission means for adding information and transmitting the information to the product shipping device;
Correspondence relationship storage means for storing the correspondence relationship between the orderer's identification information and kana information,
Product shipping device
Second receiving means for receiving data transmitted from the accepting device;
Key decryption means for decrypting the encrypted key received by the second reception means;
Order content decrypting means for decrypting the order content of the encrypted product received by the second receiving means using the decrypted key;
Product storage means for storing electronic products;
Based on the order contents of the decrypted product, the product storage unit is searched, and the reading unit that reads out the corresponding electronic product;
Product encryption means for encrypting the electronic product read by the read means using the decrypted key;
A third transmitting means for transmitting the encrypted electronic product together with the pseudonym information received by the second receiving means to the accepting device;
The accepting device further includes third receiving means for receiving data transmitted from the product shipping device;
An orderer specifying means for specifying the corresponding orderer by searching the correspondence storage means based on the kana information received by the third receiving means;
Fourth transmitting means for transmitting the encrypted electronic merchandise received by the third receiving means to the orderer's article purchasing device specified by the orderer specifying means,
The article purchasing apparatus further includes means for decrypting the encrypted electronic merchandise sent from the accepting apparatus.

According to a second aspect of the present invention, in the first aspect,
As the kana information, different information is used for each order.

A third aspect of the invention is a mail order system for ordering and distributing electronic merchandise using a communication network connecting a plurality of orderers, reception departments, relay departments, and merchandise departments,
The orderer, the reception department, the relay department, and the product department are each provided with an article purchasing device, a reception device, a relay device, and a product shipping device,
The goods purchasing device
Key generating means for generating first and second keys comprising electronic data;
Order content encryption means for double-encrypting the product order content using the first and second keys;
Key encryption means for encrypting the first and second keys separately;
The first encrypted content and the second key, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device. Transmission means,
The receiving device
First receiving means for receiving data transmitted from the article purchasing device;
Confirmation means for confirming whether or not the identity confirmation information received by the first receiving means is valid;
When the confirmation means confirms that the identity confirmation information is valid, the order contents of the double encrypted product received by the first receiving means and the encrypted first and second keys are: Second transmission means for adding first kana information different from the orderer's identification information and transmitting it to the relay device;
First correspondence storage means for storing the correspondence between the orderer's identification information and the first kana information;
The relay device
Second receiving means for receiving data transmitted from the accepting device;
First key decryption means for decrypting the encrypted first key received by the second reception means;
First order content decrypting means for partially decrypting the order content of the double encrypted product received by the second receiving means using the decrypted first key;
A third transmitting means for adding the second kana information different from the first kana information to the order contents of the partially decrypted product and transmitting the second kana information to the product shipping device;
Second correspondence storage means for storing the correspondence between the first kana information and the second kana information;
Product shipping device
Third receiving means for receiving data transmitted from the relay device;
Second key decryption means for decrypting the encrypted second key received by the third reception means;
Second order content decrypting means for fully decrypting the order content of the partially decrypted product received by the third receiving means, using the decrypted second key;
Product storage means for storing electronic products;
Based on the order contents of the fully decrypted product, the product storage means is searched, and the reading means for reading out the corresponding electronic product,
First merchandise encryption means for encrypting the electronic merchandise read by the reading means using the decrypted second key;
And a fourth transmission means for transmitting the electronic product encrypted using the second key to the relay device together with the second pseudonym information received by the third reception means,
The relay device further includes fourth receiving means for receiving data transmitted from the product shipping device;
A second product encryption unit that double-encrypts the encrypted electronic product received by the fourth reception unit using the corresponding first key;
Based on the second kana information received by the fourth receiving means, the second correspondence storage means is searched, and the kana information specifying means for specifying the first kana information corresponding to the second kana information; ,
A fifth transmission means for transmitting the electronic product double-encrypted using the second key together with the first kana information specified by the kana information specifying means to the accepting device;
The accepting device further includes fifth receiving means for receiving data transmitted from the relay device;
An orderer specifying means for specifying the corresponding orderer by searching the first correspondence relationship storage means based on the first kana information received by the fifth receiving means;
A sixth transmitting means for transmitting the double encrypted electronic product received by the fifth receiving means to the orderer's article purchasing device specified by the orderer specifying means; And a means for decrypting the encrypted electronic merchandise sent from the accepting device.

According to a fourth invention, in the third invention,
As the first and second kana information, different information is used for each order.

A fifth aspect of the present invention is a mail-order sale that orders and distributes electronic products using a communication network that connects a plurality of orderers, reception departments, n (n is an integer of 2 or more) relay departments, and product departments. A system,
The orderer, the reception department, the relay department, and the product department are each provided with an article purchasing device, a reception device, a relay device, and a product shipping device,
The goods purchasing device
Key generating means for generating first and second keys comprising electronic data;
Order content encryption means for double-encrypting the product order content using the first and second keys;
Key encryption means for encrypting the first and second keys separately;
The first encrypted content and the second key, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device. Transmission means,
The receiving device
First receiving means for receiving data transmitted from the article purchasing device;
Confirmation means for confirming whether or not the identity confirmation information received by the first receiving means is valid;
When the confirmation means confirms that the personal identification information is valid, the order contents of the double encrypted product received by the first receiving means and the encrypted first and second keys are used. Adding a first pseudonym information different from the orderer's identification information and transmitting to a relay device belonging to the first relay department;
First correspondence storage means for storing the correspondence between the orderer's identification information and the first kana information;
The relay device belonging to the first relay department is
Second receiving means for receiving data transmitted from the accepting device;
First key decryption means for decrypting the encrypted first key received by the second reception means;
First order content decrypting means for partially decrypting the order content of the double encrypted product received by the second receiving means using the decrypted first key;
A third transmitting means for adding second kana information different from the first kana information to the order contents of the partially decrypted product and transmitting the second kana information to a relay apparatus belonging to the second relay apparatus;
Second correspondence storage means for storing the correspondence between the first kana information and the second kana information;
A relay device belonging to the mth relay station (m is an integer satisfying 2 ≦ m ≦ n−1)
Third receiving means for receiving data transmitted from a relay apparatus belonging to the (m−1) th relay department;
The (m + 1) -th kana information different from the m-th kana information is added to the order contents of the partially decrypted product received by the third receiving means, and belongs to the (m + 1) -th relay department. A fourth transmission means for transmitting to the relay device;
Third correspondence storage means for storing the correspondence between the m-th kana information and the (m + 1) -th kana information;
The relay device belonging to the nth relay department is
A fourth receiving means for receiving data transmitted from a relay apparatus belonging to the (n-1) th relay department;
A fifth transmission in which the (n + 1) -th kana information different from the n-th kana information is added to the order contents of the partially decrypted merchandise received by the fourth receiving means and transmitted to the merchandise shipping apparatus Means,
A fourth correspondence relationship storage means for storing a correspondence relationship between the nth kana information and the (n + 1) th kana information;
Product shipping device
Fifth receiving means for receiving data transmitted from a relay device belonging to the nth relay department;
Second key decryption means for decrypting the encrypted second key received by the fifth reception means;
Second order content decrypting means for fully decrypting the order content of the partially decrypted product received by the fifth receiving means, using the decrypted second key;
Product storage means for storing electronic products;
Based on the order contents of the fully decrypted product, the product storage means is searched, and the reading means for reading out the corresponding electronic product,
First merchandise encryption means for encrypting the electronic merchandise read by the reading means using the decrypted second key;
A sixth transmission for transmitting the electronic product encrypted using the second key to the relay apparatus belonging to the nth relay department together with the (n + 1) th pseudonym information received by the fifth receiving means. Means,
The relay device belonging to the nth relay department further includes sixth receiving means for receiving data transmitted from the product shipping device;
Based on the (n + 1) th kana information received by the sixth receiving means, the fourth correspondence storage means is searched to identify the nth kana information corresponding to the (n + 1) th kana information. 1 kana information specifying means;
Seventh transmitting means for transmitting the encrypted electronic merchandise received by the sixth receiving means to the relay device belonging to the mth relay department together with the nth kana information specified by the kana information specifying means. Including
The relay device belonging to the mth relay department further includes a seventh receiving means for receiving data transmitted from the relay device belonging to the (m + 1) th relay department;
Based on the m-th kana information received by the seventh receiving means, the third correspondence storage means is searched to identify the (m−1) -th kana information corresponding to the m-th kana information. 2 kana information specifying means;
A relay device belonging to the (m−1) th relay department, together with the (m−1) th kana information specified by the kana information specifying unit, the encrypted electronic product received by the seventh receiving unit. And an eighth transmitting means for transmitting to
The relay device belonging to the first relay department further includes an eighth receiving means for receiving data transmitted from the relay device belonging to the second relay department;
A second product encryption unit that double-encrypts the encrypted electronic product received by the eighth reception unit using the corresponding first encryption key;
Based on the second kana information received by the eighth receiving means, the third correspondence storage means is searched to identify the first kana information corresponding to the second kana information. Specific means,
Ninth transmission means for transmitting the encrypted electronic product received by the eighth receiving means to the accepting device together with the first kana information specified by the kana information specifying means,
The accepting device further includes ninth receiving means for receiving data transmitted from the relay device belonging to the first relay department;
Orderer specifying means for specifying the corresponding orderer by searching the first correspondence storage means based on the first kana information received by the ninth receiving means;
Sixth transmitting means for transmitting the double encrypted electronic product received by the ninth receiving means to the orderer's article purchasing device specified by the orderer specifying means;
The article purchasing apparatus further includes means for decrypting the encrypted electronic merchandise sent from the accepting apparatus.

The invention according to the sixth aspect is a mail-order sales method for ordering and distributing substantive products using a communication network connecting a plurality of orderers, reception departments, and product departments,
In the ordering party,
A key generation step for generating a key comprising electronic data;
Order content encryption step for encrypting the order content of the product using a key;
A key encryption step for encrypting the key;
Adding the encrypted key, the orderer's identification information, and the identity verification information to the encrypted product ordering content, and performing a first transmission step of transmitting to the accepting device;
In the reception department,
A first receiving step of receiving data transmitted from the orderer;
A confirmation step for confirming whether or not the identity confirmation information received in the first reception step is valid;
If the verification step confirms that the identity verification information is valid, the order name of the encrypted product received in the first reception step and the encrypted key are different from the orderer's identification information. A second transmission step of adding information and transmitting to the product shipping device;
A correspondence storage step for storing the correspondence between the orderer identification information and the kana information;
In the product department,
A second reception step of receiving data transmitted from the reception department;
A key decryption step for decrypting the encrypted key received in the second reception step;
An order content decrypting step for decrypting the order content of the encrypted product received in the second receiving step using the decrypted key;
A packaging and sealing step for identifying the corresponding product based on the decrypted product order content and packaging and sealing so that the content is not known to the reception department;
A first shipping step of shipping the package-sealed product together with the pseudonym information received in the second receiving step to the reception department;
In the reception department, further, based on the pseudonym information received from the product department, by searching the correspondence relationship stored in the correspondence relationship storage step, the orderer identification step for identifying the corresponding orderer,
A second shipping step is performed in which the package-sealed product received from the product department is sent to the orderer identified in the orderer identification step.

A seventh aspect of the invention is the sixth aspect of the invention,
As the kana information, different information is used for each order.

An invention according to an eighth aspect is a mail-order sales method for ordering and distributing substantive products using a communication network connecting a plurality of orderers, reception departments, relay departments, and merchandise departments.
In the ordering party,
A key generation step of generating first and second keys comprising electronic data;
An order content encryption step that double-encrypts the order content of the product using the first and second keys;
A key encryption step of individually encrypting the first and second keys;
The first encrypted content and the second key, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device. Including a sending step,
In the reception department,
A first receiving step for receiving data transmitted from the article purchasing apparatus; a confirmation step for confirming whether the personal identification information received in the first receiving step is valid;
If the identity verification information is confirmed to be valid by the confirmation step, the contents of the order of the double encrypted product received in the first reception step and the encrypted first and second keys are: A second transmission step of adding first kana information different from the orderer's identification information and transmitting it to the relay device;
Executing a first correspondence storing step for storing the correspondence between the orderer identification information and the first kana information;
In the relay department,
A second receiving step for receiving data transmitted from the accepting device;
A first key decryption step for decrypting the encrypted first key received in the second reception step;
A first order content decryption step for partially decrypting the order content of the double encrypted product received in the second reception step using the decrypted first key;
A third transmission step of adding the second kana information different from the first kana information to the order contents of the partially decrypted product and transmitting it to the product shipping device;
Executing a second correspondence storage step for storing the correspondence between the first kana information and the second kana information;
In the product department,
A third receiving step for receiving data transmitted from the relay device;
A second key decryption step for decrypting the encrypted second key received in the third reception step;
A second order content decrypting step for fully decrypting the order content of the partially decrypted product received in the third receiving step using the decrypted second key;
Based on the order contents of the fully decrypted product, the corresponding product is identified, and the first packaging and sealing step for packaging and sealing so that the contents are not known to the reception department; Together with the pseudonym information received in the receiving step, a first sending step for sending to the relay department,
In the relay department, a second packaging and sealing step for further packaging and sealing the package-sealed product received from the product department,
Based on the second kana information received from the merchandise department, the correspondence stored in the second correspondence storing step is searched to identify the first kana information corresponding to the second kana information. Steps,
A second shipping step of shipping the double-packed and sealed product together with the first kana information specified in the kana information specifying step to the reception department;
The receiving department further includes an orderer specifying step for specifying the corresponding orderer by searching the correspondence stored in the first correspondence storage step based on the first kana information received from the relay department. ,
A third shipping step is performed, in which the double-packed and sealed product received from the relay department is sent to the orderer specified by the orderer specifying step.

The ninth aspect of the invention is the eighth aspect of the invention,
As the first and second kana information, different information is used for each order.

In the first aspect of the invention, the orderer, the reception department, and the product department are connected to each other via a communication network, and an article purchasing device, a reception device, and a product shipping device are provided.
The article purchasing apparatus generates a key composed of electronic data, and encrypts the order contents of the product using the key. In addition, the key is encrypted. Further, the encrypted key, the orderer's identification information, and the identity verification information are added to the contents of the order for the encrypted product and transmitted to the accepting device.
The accepting device confirms whether or not the identity verification information received from the article purchasing device is legitimate, and if it is valid, the ordering content of the encrypted product received from the article purchasing device and the encrypted key In addition, kana information different from the orderer's identification information is added and transmitted to the product shipping device. Also, the correspondence relationship between the orderer identification information and the kana information is stored in the correspondence relationship storage means.
The product shipping device decrypts the encrypted key received from the accepting device, and decrypts the order content of the encrypted product received from the accepting device using the decrypted key. In addition, based on the order contents of the decrypted product, the corresponding electronic product is read from the product storage means, and the read electronic product is encrypted using the decrypted key, and is sent to the receiving apparatus together with the pseudonym information. Send.
The accepting device further searches the correspondence relationship storage means based on the kana information received from the product shipping device, and identifies the corresponding orderer. Then, the encrypted electronic merchandise is transmitted to the specified purchaser's article purchasing apparatus.
The article purchasing device decrypts the encrypted electronic product sent from the receiving device.

  In the second aspect of the invention, the privacy confidentiality is further improved by using different information for each order as the pseudonym information.

In the third aspect of the invention, the orderer, the reception department, the relay department, and the product department are connected to each other via a communication network, and an article purchase device, a reception device, a relay device, and a product shipping device are provided. .
The article purchasing apparatus generates first and second keys composed of electronic data, and uses the first and second keys to double-encrypt the order contents of the product. Further, the first and second keys are encrypted separately. Furthermore, the encrypted first and second keys, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device.
The accepting device confirms whether or not the identity verification information received from the article purchasing device is valid, and if it is valid, the ordering contents and encryption of the double encrypted product received from the article purchasing device are encrypted. The first kana information, which is different from the orderer's identification information, is added to the first and second keys, and transmitted to the relay device. Further, the correspondence relationship between the orderer identification information and the first kana information is stored in the first correspondence relationship storage means.
The relay device decrypts the encrypted first key received from the accepting device, and uses the decrypted first key to determine the order contents of the double encrypted product received from the accepting device. , Partially decrypt. In addition, second kana information different from the first kana information is added to the order contents of the partially decrypted merchandise and transmitted to the merchandise shipping apparatus. Further, the correspondence relationship between the first kana information and the second kana information is stored in the second correspondence storage means.
The merchandise shipping device decrypts the encrypted second key received from the relay device, and uses the decrypted second key to determine the order contents of the partially decrypted product received from the relay device. Decrypt all over. Further, based on the order contents of the fully decrypted product, the product storage means is searched, the corresponding electronic product is read, and the read electronic product is encrypted using the decrypted second key. Turn into. Further, the electronic merchandise encrypted using the second key is transmitted to the relay apparatus together with the second pseudonym information received by the third receiving means.
The relay apparatus further double-encrypts the encrypted electronic merchandise received from the merchandise shipping apparatus using the corresponding first key. Further, based on the second kana information received from the product shipping device, the second correspondence storage means is searched to identify the first kana information corresponding to the second kana information. Further, the electronic product that has been double-encrypted is transmitted to the accepting device together with the identified first kana information.
The accepting device further searches the first correspondence storage means based on the first kana information received from the relay device, and identifies the corresponding orderer. Also, the double encrypted electronic product received from the relay device is transmitted to the specified purchaser's product purchasing device.
The article purchasing device decrypts the encrypted electronic product sent from the receiving device.

  In the fourth aspect of the invention, privacy confidentiality is further improved by using different information for each order as the first and second kana information.

In the fifth aspect of the invention, a plurality of orderers, a reception department, n (n is an integer of 2 or more) relay departments, and a merchandise department are connected to each other using a communication network, A receiving device, a relay device, and a product shipping device are provided.
The article purchasing apparatus generates first and second keys composed of electronic data, and uses the first and second keys to double-encrypt the order contents of the product. Further, the first and second keys are encrypted separately. Furthermore, the encrypted first and second keys, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device.
The accepting device confirms whether or not the identity verification information received from the article purchasing device is valid. If it is valid, the ordering information of the double encrypted product received from the article purchasing device and the encryption First pseudonym information different from the orderer's identification information is added to the first and second keys thus converted, and transmitted to the relay device belonging to the first relay department. Further, the correspondence relationship between the orderer identification information and the first kana information is stored in the first correspondence relationship storage means.
The relay device belonging to the first relay department decrypts the encrypted first key received from the accepting device and uses the decrypted first key to encrypt the double received from the accepting device. The contents of the order of the converted product are partially decrypted. Further, the second kana information different from the first kana information is added to the order contents of the partially decrypted merchandise and transmitted to the relay device belonging to the second relay device. Further, the correspondence relationship between the first kana information and the second kana information is stored in the second correspondence storage means.
The relay device belonging to the m-th relay department (m is an integer of 2 ≦ m ≦ n−1) is a partially decrypted product received from the relay device belonging to the (m−1) -th relay department. The (m + 1) -th kana information different from the m-th kana information is added to the contents of the order, and transmitted to the relay apparatus belonging to the (m + 1) -th relay department. The correspondence relationship between the m-th kana information and the (m + 1) -th kana information is stored in the third correspondence storage means.
The relay device belonging to the nth relay department is different from the nth pseudonym information in the order contents of the partially decrypted product received from the relay device belonging to the (n−1) th relay department. The kana information of (n + 1) is added and transmitted to the product shipping device. The correspondence relationship between the nth kana information and the (n + 1) th kana information is stored in the fourth correspondence storage means.
The merchandise shipping device decrypts the encrypted second key received from the relay device belonging to the nth relay department, and belongs to the nth relay department using the decrypted second key. The contents of the order of the partially decrypted product received from the relay device are completely decrypted. In addition, based on the order contents of the fully decrypted product, the corresponding electronic product is read from the product storage means, and the read electronic product is encrypted using the decrypted second key. Further, the relay device belonging to the nth relay department, together with the (n + 1) th kana information received from the relay device belonging to the nth relay department, the electronic product encrypted using the second key Send to.
The relay device belonging to the nth relay department further searches the fourth correspondence storage means based on the (n + 1) th kana information received from the merchandise shipping device, and uses the (n + 1) th kana information. The corresponding nth kana information is specified. Further, the encrypted electronic merchandise received from the merchandise shipping device is transmitted to the relay device belonging to the mth relay department together with the identified nth kana information.
The relay apparatus belonging to the m-th relay department further searches the third correspondence storage means based on the m-th pseudonym information received from the relay apparatus belonging to the (m + 1) -th relay department, and The (m-1) th kana information corresponding to the m kana information is specified. In addition, the encrypted electronic merchandise received from the relay apparatus belonging to the (m + 1) th relay department, together with the identified (m-1) kana information, is the (m-1) th relay department. To the relay device belonging to
The relay device belonging to the first relay department further double-encrypts the encrypted electronic product received from the relay device belonging to the second relay department using the corresponding first encryption key. To do. Further, the third correspondence storage means is searched based on the second kana information received from the relay device belonging to the second relay department, and the first kana information corresponding to the second kana information is obtained. Identify. Furthermore, the encrypted electronic merchandise received from the relay device belonging to the second relay department is transmitted to the accepting device together with the specified first pseudonym information.
The accepting device further identifies the corresponding orderer by searching the first correspondence storage means based on the first pseudonym information received from the relay device belonging to the first relay department. Also, the double encrypted electronic product received from the relay device belonging to the first relay department is transmitted to the specified purchaser's product purchasing device. The article purchasing device decrypts the encrypted electronic product sent from the receiving device.

In the sixth aspect of the invention, a plurality of orderers, reception departments, and merchandise departments are connected to each other using a communication network, and substantive goods are ordered and distributed among them. That is,
The orderer generates a key composed of electronic data, and uses this key to encrypt the order content of the product. Also, the key is encrypted. Further, the encrypted key, the orderer's identification information, and the identity verification information are added to the contents of the order for the encrypted product and transmitted to the accepting device.
The reception department confirms whether or not the identity verification information received from the orderer is valid, and if it is valid, the order information of the encrypted product received from the orderer and the encrypted key are used. The pseudonym information different from the identification information of the orderer is added and transmitted to the product shipping device. Further, the correspondence relationship between the orderer identification information and the kana information is stored.
The merchandise department decrypts the encrypted key received from the reception department, and decrypts the order contents of the encrypted product received from the reception department using the decrypted key. In addition, the corresponding product is identified based on the decrypted product order content, and the package is sealed so that the content is not known to the reception department. Further, the package-sealed product is sent to the reception department together with the kana information received in the second receiving step.
The reception department further identifies the corresponding orderer based on the pseudonym information received from the product department, and sends the packaged and sealed product received from the product department to the identified orderer.

  In the seventh aspect of the invention, the privacy confidentiality is further improved by using different information for each order as the kana information.

In the eighth aspect of the invention, a plurality of orderers, a reception department, a relay department, and a merchandise department are connected to each other using a communication network, and order and distribution of substantive merchandise are performed between them. That is,
The orderer generates first and second keys made up of electronic data, and uses the first and second keys to double-encrypt the order contents of the product. Further, the first and second keys are encrypted separately. Furthermore, the encrypted first and second keys, the orderer's identification information, and the identity verification information are added to the contents of the order of the double encrypted product and transmitted to the accepting device.
The reception department confirms whether or not the identity verification information received from the article purchasing device is valid, and if it is valid, the order contents and encryption of the double encrypted product received from the article purchasing device are encrypted. The first kana information, which is different from the orderer's identification information, is added to the first and second keys, and transmitted to the relay device. Further, the correspondence relationship between the orderer identification information and the first kana information is stored in the first correspondence relationship storage means.
The relay department decrypts the encrypted first key received from the accepting device, and uses the decrypted first key to determine the order contents of the double encrypted product received from the accepting device. , Partially decrypt. In addition, second kana information different from the first kana information is added to the order contents of the partially decrypted merchandise and transmitted to the merchandise shipping apparatus. Further, the correspondence relationship between the first kana information and the second kana information is stored in the second correspondence storage means.
The merchandise department decrypts the encrypted second key received from the relay device, and uses the decrypted second key to fully display the order contents of the partially decrypted product received from the relay device. Decrypts automatically. In addition, the corresponding product is identified based on the order contents of the fully decrypted product, and the package is sealed so that the content is not known to the reception department. Further, the packaged and sealed product is sent to the relay department together with the kana information received from the relay device.
The relay department further double-packs and seals the package-sealed product received from the product department. Further, based on the second kana information received from the merchandise department, the corresponding first kana information is identified, and the double-packed and sealed merchandise is received together with the identified first kana information. Ship to.
The reception department further identifies the corresponding orderer based on the first kana information received from the relay department, and sends the double-packed and sealed product received from the relay department to the specified orderer. To do.

  In the ninth aspect of the invention, the privacy confidentiality is further improved by using different information for each order as the first and second pseudonym information.

  According to the first invention, the receiving department can only view the contents of the goods ordered by the orderer and the electronic goods sent from the goods department in an encrypted state. I can't know what was done. In addition, the merchandise department is sent with pseudonym information different from the orderer's identification information added to the order contents of the encrypted merchandise, and therefore cannot know who ordered the merchandise. Therefore, unless the reception department and the merchandise department collide, the sales side cannot grasp "who bought what", and as a result, the orderer's privacy can be effectively protected. In addition, since identity verification information is added to the order contents of products sent from the orderer to the reception department, existing confirmation systems such as credit cards and bank withdrawals can be used as is by confirming the identity in the reception department. Can be used.

  According to the second invention, since different information is used for each order as the kana information, it is possible to effectively prevent fraud such that the merchandise department finds the correspondence between the kana information and the orderer. .

  According to the third aspect of the invention, the receiving department can only view the contents of the goods ordered by the orderer and the electronic goods sent from the relay department in an encrypted state. I can't know what was done. In addition, since the relay department can only see the contents of the product ordered by the orderer and the electronic product sent from the product department in an encrypted state, it can know what product has been ordered. Can not. Further, the relay department is sent with the first kana information different from the orderer's identification information added to the order contents of the encrypted product, and therefore cannot know who ordered the product. . In addition, the merchandise department is sent with the second kana information different from the first kana information added to the order contents of the encrypted merchandise, and therefore cannot know who ordered the merchandise. . Therefore, unless the reception department, the relay department, and the merchandise department collide, the sales side cannot grasp "who bought what", and as a result, the orderer's privacy can be effectively protected. Even if the reception department and the product department try to collaborate, there is no information to link the information held by both departments, so there is no way to collaborate. Accordingly, privacy infringement due to collusion can be effectively prevented. In addition, since identity verification information is added to the order contents of products sent from the orderer to the reception department, existing confirmation systems such as credit cards and bank withdrawals can be used as is by confirming the identity in the reception department. Can be used.

  According to the fourth invention, since different information is used for each order as the first and second kana information, the relay department or the merchandise department finds out the correspondence between the kana information and the orderer. Injustice can be effectively prevented.

  According to the fifth invention, since a plurality of relay departments are provided, and the order contents of the products and the ordered products are transmitted via the plurality of relay departments, the collusion of each department becomes even more difficult. The user's privacy can be protected more reliably.

  According to the sixth aspect of the invention, the receiving department can only view the contents of the product ordered by the orderer in an encrypted state, and the substantial product sent from the product department is sealed and packed. As a result, it is impossible to know what product has been ordered. In addition, the merchandise department is sent with pseudonym information different from the orderer's identification information added to the order contents of the encrypted merchandise, and therefore cannot know who ordered the merchandise. Therefore, unless the reception department and the merchandise department collide, the sales side cannot grasp "who bought what", and as a result, the orderer's privacy can be effectively protected. In addition, since identity verification information is added to the order contents of products sent from the orderer to the reception department, existing confirmation systems such as credit cards and bank withdrawals can be used as is by confirming the identity in the reception department. Can be used.

  According to the seventh aspect, since different information is used for each order as the kana information, it is possible to effectively prevent fraud such that the product department finds the correspondence between the kana information and the orderer. .

  According to the eighth invention, the receiving department can only view the contents of the product ordered by the orderer in an encrypted state, and the substantial product sent from the relay department is sealed and packed. As a result, it is impossible to know what product has been ordered. In addition, the relay department can only view the contents of the product ordered by the orderer in an encrypted state, and the actual product sent from the product department is sealed and packed, so any product I can't know if an order has been placed. Further, the relay department is sent with the first kana information different from the orderer's identification information added to the order contents of the encrypted product, and therefore cannot know who ordered the product. . In addition, the merchandise department is sent with the second kana information different from the first kana information added to the order contents of the encrypted merchandise, and therefore cannot know who ordered the merchandise. . Therefore, unless the reception department, the relay department, and the merchandise department collide, the sales side cannot grasp "who bought what", and as a result, the orderer's privacy can be effectively protected. Even if the reception department and the product department try to collaborate, there is no information to link the information held by both departments, so there is no way to collaborate. Accordingly, privacy infringement due to collusion can be effectively prevented. In addition, since identity verification information is added to the order contents of products sent from the orderer to the reception department, existing confirmation systems such as credit cards and bank withdrawals can be used as is by confirming the identity in the reception department. Can be used.

  According to the ninth aspect, since a plurality of relay departments are provided, and the order contents of the products and the ordered products are transmitted via the plurality of relay departments, the collusion of each department becomes even more difficult. The user's privacy can be protected more reliably.

It is a block diagram which shows the structure of the mail order system using the communication network which concerns on one Example of this invention. It is a block diagram which shows an example of a structure of the goods purchasing apparatus 10 provided in the orderer i shown in FIG. It is a block diagram which shows an example of a structure of the reception apparatus 20 provided in the reception department a shown in FIG. It is a block diagram which shows an example of a structure of the relay apparatus 30 provided in the relay department b shown in FIG. It is a block diagram which shows an example of a structure of the goods dispatch apparatus 40 provided in the goods department c shown in FIG. It is a sequence chart which shows the operation | movement of the mail order system whole using the communication network shown in FIG. It is a flowchart which shows the operation | movement at the time of goods ordering of the goods purchasing apparatus 10 of FIG. It is a flowchart which shows the operation | movement at the time of order reception of the reception apparatus 20 of FIG. 3 is a flowchart showing an operation at the time of order relay of the relay device 30 of FIG. 1. It is a flowchart which shows operation | movement of the goods dispatch apparatus 40 of FIG. It is a flowchart which shows the operation | movement at the time of goods relay of the relay apparatus 30 of FIG. It is a flowchart which shows the operation | movement at the time of the merchandise dispatch of the reception apparatus 20 of FIG. It is a flowchart which shows the operation | movement at the time of the goods receipt of the goods purchasing apparatus 10 of FIG. In the example of FIG. 1, it is a figure for demonstrating the information which can be known in each department. It is a block diagram which shows an example of a structure of the mail order system using the conventional communication network.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Ordering person 10 Goods purchase apparatus 2 Reception department 20 Reception apparatus 3 Relay department 30 Relay apparatus 4 Merchandise department 40 Goods dispatch apparatus 101,201,301,401 Control part 102,202,302,402 ROM
103, 203, 303, 403 RAM
104 Input operation unit 105 Display unit 106 Product catalog storage unit 107 Random number generation unit 108, 205, 304, 404 Private key storage unit 109, 206, 305, 405 Communication unit 110, 207, 306, 406 Order data storage unit 204 Personal data Storage unit 208,307 Reference number issuing unit 407 Product data storage unit 408 Product storage unit

Claims (4)

A mail order method for ordering and distributing substantive merchandise using a system including a plurality of article purchasing devices, receiving devices, relay devices, and merchandise shipping devices connected via a communication network. ,
A key generation step in which the article purchasing device generates a key comprising electronic data;
An order content encryption step in which the article purchase device encrypts the order content of a product using the key;
A key encryption step in which the article purchasing device encrypts the key; and
The article purchasing apparatus adds the encrypted key, the orderer's identification information, and the identity verification information to the order contents of the encrypted product, and transmits the first order to the reception apparatus. Sending step;
A first receiving step in which the receiving device receives data transmitted from the article purchasing device;
A confirmation step for confirming whether or not the identity confirmation information received by the reception device in the first reception step is valid;
When the accepting device confirms that the identity verification information is valid by the confirmation step, the order content of the encrypted product received in the first reception step and the encrypted key And adding a pseudonym information different from the identification information of the orderer and transmitting it to the commodity shipping device;
A correspondence relationship storage step in which the reception device stores a correspondence relationship between the identification information of the orderer and the kana information in a correspondence relationship storage unit;
A second receiving step in which the commodity shipping device receives data transmitted from the accepting device;
A key decryption step in which the commodity shipping device decrypts the encrypted key received in the second reception step;
An order content decrypting step in which the product shipping device decrypts the order content of the encrypted product received in the second receiving step using the decrypted key;
The article purchase device specifying step of specifying the corresponding orderer by referring to the correspondence stored in the correspondence storage unit based on the kana information sent from the product shipping device by the accepting device. When,
A mail order method comprising:   2. The mail order method according to claim 1, wherein in the second transmission step, the reception device uses different kana information for each order. A mail order method for ordering and distributing substantive merchandise using a system including a plurality of article purchasing devices, receiving devices, relay devices, and merchandise shipping devices connected via a communication network. ,
A key generation step in which the article purchasing device generates first and second keys comprising electronic data;
An order content encryption step in which the article purchase device uses the first and second keys to double-encrypt product order content;
A key encryption step in which the article purchasing device encrypts the first and second keys separately;
The article purchasing apparatus adds the encrypted first and second keys, the orderer identification information, and the identity verification information to the order contents of the double encrypted product, A first transmission step of transmitting to the accepting device;
A first receiving step in which the receiving device receives data transmitted from the article purchasing device;
A confirmation step for confirming whether or not the identity confirmation information received by the reception device in the first reception step is valid;
When the accepting device confirms that the identity confirmation information is valid by the confirmation step, the order contents of the double encrypted product received in the first reception step and the encryption A second transmission step of adding the first pseudonym information different from the orderer's identification information to the first and second keys, and transmitting to the relay device;
A first correspondence relationship storing step in which the reception device stores a correspondence relationship between the identification information of the orderer and the first kana information in a first correspondence relationship storage unit;
A second receiving step in which the relay device receives data transmitted from the accepting device;
A first key decryption step in which the relay device decrypts the encrypted first key received in the second reception step;
First order content in which the relay device partially decrypts the order content of the double encrypted product received in the second reception step using the decrypted first key A decryption step;
A third transmission step in which the relay device adds second pseudonym information different from the first pseudonym information to the order contents of the partially decrypted merchandise, and transmits the second pseudonym information to the merchandise shipping device; ,
A second correspondence storage step in which the relay device stores a correspondence between the first kana information and the second kana information in a second correspondence storage means;
A third receiving step in which the commodity shipping device receives data transmitted from the relay device;
A second key decrypting step in which the commodity shipping device decrypts the encrypted second key received in the third receiving step;
Second order content decryption in which the product shipping device decrypts the order content of the partially decrypted product received in the third receiving step using the decrypted second key. Steps,
The relay device refers to the correspondence stored in the second correspondence storage means based on the second kana information sent from the commodity shipping device, and the second kana information A kana information specifying step for specifying the first kana information corresponding to
Based on the first pseudonym information sent from the relay device, the accepting device refers to the correspondence stored in the first correspondence storage means and identifies the corresponding orderer An article purchasing device specifying step;
A mail order method comprising: In the second transmission step, the receiving device uses different first kana information for each order,
4. The mail order method according to claim 3, wherein, in the third transmission step, the relay device uses different second pseudonym information for each order. 5.

Images