Payment information processing system, payment information processing device, payment information processing method, and payment information processing program

Abstract

To provide a payment information processing system that enables payment processing to be performed reliably and easily using a wallet address on a blockchain. [Solution] The payment information processing system has a payment terminal and a payment information processing device, and performs payment processing using smart contracts that function when a computer executes code recorded on a blockchain. The payment terminal is capable of sending and receiving information via near-field wireless communication with a user's identification document placed in the vicinity of a reader, and has a digital certificate acquisition unit, a first transmission unit, a user signature acquisition unit, and a second transmission unit. The payment information processing device has a digital certificate acquisition unit, a derivation unit, a generation unit, a user signature acquisition unit, a verification unit, and an approval unit.

Description

[Technical Field]

[0001] The present invention relates to a payment information processing system, a payment information processing device, a payment information processing method, and a payment information processing program for performing processing using a smart contract. [Background technology]

[0002] Blockchain is a distributed ledger technology that records data in a way that makes it difficult to tamper with. A smart contract is an application of blockchain, and is a system that allows the data to be managed on a distributed ledger and the processing conditions to be defined by a program, and is characterized by retrieving data recorded on the distributed ledger and executing a predetermined program and changing data on the distributed ledger in accordance with the contents of the transactions stored in the distributed ledger (see Non-Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Non-Patent Document 1] Ethereum Yellow Paper: a formal specification of Ethereum, a programmable blockchain<URL:https: / / ethereum.github.io / yellowpaper / paper.pdf> Summary of the Invention [Problem to be solved by the invention]

[0004] To make payments, transfers, and other settlements using crypto assets transferred over the blockchain, users create and use their own wallets that can be used on the blockchain. However, in recent years, advances in robotics and AI technology have led to an increase in wallets that are managed by robots, rather than actual humans, raising concerns about the security of transactions. For this reason, there is a demand for a system that allows safe and easy settlements using crypto assets on the blockchain.

[0005] The present invention has been made in consideration of the above circumstances, and aims to provide a payment information processing system, a payment information processing device, a payment information processing method, and a payment information processing program that enable payment processing to be performed safely and easily using a wallet address on a blockchain associated with a real person. [Means for solving the problem]

[0006] The above object can be achieved by the following means.

[0007] The payment information processing system includes a payment terminal and a payment information processing device, and is a system for performing payment processing using a smart contract that functions when a computer executes code recorded on a blockchain. The payment terminal is capable of transmitting and receiving information via near-field wireless communication with a user's identification document placed in the vicinity of a reader, and includes an electronic certificate acquisition unit and a first transmission unit. When receiving an instruction to perform payment processing, the electronic certificate acquisition unit requests an electronic certificate from the identification document and acquires at least a portion of the public key of the electronic certificate from the identification document. The first transmission unit transmits at least a portion of the public key acquired by the electronic certificate acquisition unit to the payment information processing device. The payment information processing device includes a derivation unit and a generation unit. The derivation unit transmits at least a portion of the public key transmitted from the payment terminal, or user identification information previously associated with at least a portion of the public key and stored, to the blockchain, and derives a wallet address usable by the user on the blockchain based on at least a portion of the public key or the user identification information using a first smart contract. The generation unit generates execution instruction information for executing payment processing and transmits the generated execution instruction information to the payment terminal. The payment terminal further includes a user signature acquisition unit and a second transmission unit. When the user signature acquisition unit receives the execution instruction information from the payment information processing device, it requests an execution electronic signature for the user's execution instruction information from the identification document and acquires the execution electronic signature generated using the private key of the electronic certificate from the identification document. The second transmission unit transmits the execution instruction information and the execution electronic signature to the payment information processing device. The payment information processing device further includes a verification unit and an approval unit. The verification unit transmits the execution instruction information and the execution electronic signature together with the user's address onto the blockchain and uses a second smart contract to obtain a public key from a portion of the public key recorded in association with the address and verify the execution electronic signature.If the verification by the verification unit is successful, the approval unit uses the second smart contract to approve the execution of the settlement process to transfer crypto assets from the user's wallet to a specified deposit wallet, and if the verification by the verification unit is unsuccessful, the approval unit uses the second smart contract to not approve the execution of the settlement process.

[0008] The payment information processing device is an information processing device for performing payment processing using a smart contract that functions when a computer executes code recorded on a blockchain. The payment information processing device has a digital certificate acquisition unit, a derivation unit, a generation unit, a user signature acquisition unit, a verification unit, and an approval unit. The digital certificate acquisition unit acquires at least a portion of the public key of the digital certificate included in the user's identification document from the payment terminal, which the payment terminal acquires from the user's identification document. The derivation unit transmits at least a portion of the public key acquired by the digital certificate acquisition unit or the user's identification information previously associated with at least a portion of the public key to the blockchain, and derives a wallet address that the user can use on the blockchain based on at least a portion of the public key or the user's identification information using a first smart contract. The generation unit generates execution instruction information for executing the payment processing and transmits the execution instruction information to the payment terminal. The user signature acquisition unit acquires from the payment terminal an execution digital signature for the user's execution instruction information, which is generated using the private key of the digital certificate of the identification document acquired by the payment terminal from the user's identification document. The verification unit transmits the execution instruction information and the execution digital signature together with the user's address to the blockchain, and has a second smart contract acquire a public key from a portion of the public key recorded in association with the address to verify the execution digital signature. If the verification by the verification unit is successful, the approval unit has the second smart contract approve the execution of a payment process to transfer crypto assets from the user's wallet to a specified deposit wallet, and if the verification by the verification unit is unsuccessful, has the second smart contract not approve the execution of the payment process.

[0009] The payment information processing method is executed in a payment system having a payment terminal and a payment information processing device, and for performing payment processing using a smart contract that functions when a computer executes code recorded on a blockchain. The payment terminal is capable of sending and receiving information via near-field wireless communication with a user's identification document placed in the vicinity of a reading unit. The payment information processing method includes an electronic certificate acquisition step, a first transmission step, a derivation step, a generation step, a user signature acquisition step, a second transmission step, a verification step, and an approval step. In the electronic certificate acquisition step, when the payment terminal receives an instruction to execute payment processing, the payment terminal requests an electronic certificate from the identification document and acquires at least a portion of the public key of the electronic certificate from the identification document. In the first transmission step, the payment terminal transmits at least a portion of the public key acquired in the electronic certificate acquisition step to the payment information processing device. In the derivation step, the payment information processing device transmits, to the blockchain, at least a portion of the public key transmitted from the payment terminal, or user identification information previously associated with and stored in association with at least a portion of the public key, and causes a first smart contract to derive a wallet address usable by the user on the blockchain based on at least a portion of the public key or the user's identification information. In the generation step, the payment information processing device generates execution instruction information for executing a payment process and transmits the generated execution instruction information to the payment terminal. In the user signature acquisition step, upon receiving the execution instruction information from the payment information processing device, the payment terminal requests an execution electronic signature for the user's execution instruction information from the user's identification document and acquires, from the identification document, an execution electronic signature generated using the private key of the electronic certificate. In the second transmission step, the payment terminal transmits the execution instruction information and the execution electronic signature to the payment information processing device. In the verification step, the payment information processing device transmits the execution instruction information and the execution electronic signature together with the user's address to the blockchain, and causes a second smart contract to obtain a public key from a portion of the public key recorded in association with the address and verify the execution electronic signature.In the approval step, if the verification in the verification step is successful, the second smart contract approves the execution of the payment process to transfer crypto assets from the user's wallet to a specified deposit wallet, and if the verification in the verification step is unsuccessful, the second smart contract does not approve the execution of the payment process.

[0010] The payment information processing program is configured to cause a computer to function as the payment information processing device. [Effects of the Invention]

[0011] According to the payment information processing system of the present invention, when a payment terminal receives an instruction to execute a payment process, it requests a digital certificate from the identification document, obtains at least a portion of the public key of the digital certificate from the identification document, and transmits it to the payment information processing device. The payment information processing device transmits at least a portion of the public key transmitted from the payment terminal or the user's identification information previously associated with the public key and stored to the blockchain, and derives a wallet address usable by the user on the blockchain based on the at least a portion of the public key or the user's identification information using a first smart contract. The payment information processing device generates execution instruction information for executing the payment process and transmits the generated execution instruction information to the payment terminal. When the payment terminal receives the execution instruction information from the payment information processing device, it obtains an execution digital signature generated using the private key of the digital certificate from the identification document and transmits it to the payment information processing device. The payment information processing device transmits the execution instruction information and the execution digital signature together with the user's address to the blockchain, and uses a second smart contract to obtain a public key from a portion of the public key recorded in association with the address and verify the execution digital signature. If the verification is successful, the payment information processing device uses the second smart contract to approve the execution of the payment process to transfer crypto assets from the user's wallet to a specified deposit wallet. If the verification is unsuccessful, the second smart contract does not approve the execution of the payment process. This makes it possible to derive the user's address on the blockchain using part of the public key of the digital certificate on the user's personal identification document, which proves the user's existence, and then execute the payment process. Furthermore, the user can attach an execution digital signature generated using the private key on the user's personal identification document to the execution instruction for the payment process, and the execution digital signature can be verified on the blockchain before the payment process is executed. Therefore, payment processes can be executed reliably and easily using a wallet address on the blockchain associated with a real person. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a diagram showing a schematic configuration of an information processing system to which an information processing device according to an embodiment of the present invention is applied; [Figure 2] FIG. 2 is a block diagram showing a schematic configuration of a payment terminal. [Figure 3] FIG. 1 is a block diagram showing a schematic configuration of an information processing device. [Figure 4] 1 is a block diagram showing a schematic configuration of an authentication system. [Figure 5] FIG. 1 is a block diagram showing a schematic configuration of a server that serves as a node connected to a peer-to-peer network. [Figure 6] 1 is a block diagram showing a schematic configuration of a financial institution system. [Figure 7] 3 is a block diagram showing the functional configuration of a CPU of the payment terminal. FIG. [Figure 8] FIG. 2 is a block diagram showing the functional configuration of a CPU of the information processing device. [Figure 9] FIG. 1 is a schematic diagram showing a smart contract program placed on a blockchain. [Figure 10] 1 is a sequence chart illustrating an example of a procedure of a process executed in an information processing system. DETAILED DESCRIPTION OF THE INVENTION

[0013] Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings. In the description of the drawings, the same elements are designated by the same reference numerals, and duplicate explanations will be omitted. Furthermore, the dimensional proportions in the drawings are exaggerated for the convenience of explanation and may differ from the actual proportions.

[0014] <Configuration of information processing system> FIG. 1 is a diagram showing a schematic configuration of an information processing system to which an information processing device according to an embodiment of the present invention is applied.

[0015] As shown in FIG. 1, the information processing system includes a payment terminal 100, an information processing device 200, an authentication system 300, a server 400 serving as a node connected to the peer-to-peer network, and a financial institution system 600. In this embodiment, the information processing device 200 constitutes a payment information processing device, and the information processing system constitutes a payment information processing system. The information processing system is a system for reliably and easily generating a wallet address on a blockchain associated with an actual person using an identification document C, safely executing various transactions using the address, and verifying and proving the existence of the address owner. The payment terminal 100 is connected to the information processing device 200, the server 400, etc. via a network such as the Internet or various wireless communications, etc., so that they can communicate with each other. The information processing device 200 is connected to the payment terminal 100, the authentication system 300, the server 400, the financial institution system 600, etc. via a network such as the Internet or various wireless communications, etc., so that they can communicate with each other. The server 400 is connected to the payment terminal 100, the information processing device 200, etc. via a network such as the Internet or various wireless communications, etc., so that they can communicate with each other. Furthermore, the server 400 is connected to other servers 400a, 400b, etc. via a peer-to-peer network so that they can communicate with each other. Note that the connections between the components are not limited to the above example, and the components may be connected to each other by any method.

[0016] Each component will be described in detail below.

[0017] <Payment terminal 100> The payment terminal 100 is an information terminal such as a mobile terminal like a smartphone, a notebook PC, or a desktop PC. The payment terminal 100 is a terminal used by store staff or the like when a user purchases and pays for goods or services at a store or the like. The payment terminal 100 is capable of transmitting and receiving information via near-field wireless communication with the user's identification document C placed in the vicinity of the reading unit. The payment terminal 100 may also be a terminal used by the user himself when purchasing and paying for goods or services through online shopping.

[0018] FIG. 2 is a block diagram showing a schematic configuration of the payment terminal.

[0019] 2, payment terminal 100 has a CPU (Central Processing Unit) 110, a ROM (Read Only Memory) 120, a RAM (Random Access Memory) 130, storage 140, a communication interface 150, and an operation display unit 160. Each component is connected to each other via a bus 170 so as to be able to communicate with each other.

[0020] The CPU 110 controls the above components and performs various arithmetic processing in accordance with programs stored in the ROM 120 and storage 140 .

[0021] The ROM 120 stores various programs and various data.

[0022] The RAM 130 serves as a working area for temporarily storing programs and data.

[0023] The storage 140 stores various programs including an operating system and various data. For example, applications are installed in the storage 140 for transmitting and receiving various information to and from other devices such as the information processing device 200 via a network, and for displaying various information provided by other devices. The storage 140 also has installed therein various data and wallet applications for transmitting and receiving various information such as digital certificates and digital signatures to and from the personal identification document C, and for accessing the information processing device 200 to execute the payment processing of this embodiment.

[0024] The communication interface 150 is an interface for communicating with external devices such as the information processing device 200 and the personal identification document C. The communication interface 150 for communication with external devices may use, for example, standards for mobile phone communication such as 3G or 4G, or standards such as Wi-Fi (registered trademark). The communication interface 150 may also use a standard for short-range wireless communication such as Bluetooth (registered trademark). The communication interface 150 for communication with the personal identification document C may also use, for example, a standard for short-range wireless communication such as NFC (Near Field Communication) for communication with a contactless IC card, or a wired communication standard for communication with a contactless IC card. In this case, the communication interface 150 functions as a reading unit. In this embodiment, an example will be described in which an IC card reader / writer conforming to the NFC Type B standard is used as the communication interface 150 to perform contactless communication with a My Number card, which is the personal identification document C.

[0025] The operation display unit 160 is, for example, a touch panel display, which displays various information and accepts various inputs from the user.

[0026] In this embodiment, the CPU 110 functions as a digital certificate acquisition unit, a first transmission unit, a user signature acquisition unit, a second transmission unit, and a terminal signature generation unit. The functions realized by the CPU 110 will be described in detail later.

[0027] <Information processing device 200> The information processing device 200 is, for example, a computer such as a server, etc. The information processing device 200 is provided, for example, by a business operator (service provider) that provides a service that enables the payment processing of this embodiment to be executed.

[0028] FIG. 3 is a block diagram showing a schematic configuration of the information processing device.

[0029] 3, information processing device 200 has CPU 210, ROM 220, RAM 230, storage 240, communication interface 250, and operation display unit 260. Each component is communicably connected to each other via bus 270. Note that CPU 210, ROM 220, RAM 230, storage 240, communication interface 250, and operation display unit 260 have the same functions as the corresponding components of payment terminal 100, and therefore redundant explanations will be omitted.

[0030] Programs and data for performing various processes are installed in storage 240. Also, various identification information and the like for communicating with payment terminal 100, authentication system 300, and server 400 are stored in storage 240. Also, various data, programs, and the like for performing the payment process of this embodiment are stored in storage 240.

[0031] In this embodiment, the CPU 210 functions as a digital certificate acquisition unit, a derivation unit, a generation unit, a user signature acquisition unit, a verification unit, an approval unit, a provider signature generation unit, and a conversion unit. The functions realized by the CPU 210 will be described in detail later.

[0032] <Authentication System 300> The authentication system 300 is a system provided in a certification authority, which is an organization that provides public personal authentication services related to personal identification documents C.

[0033] FIG. 4 is a block diagram showing a schematic configuration of the authentication system.

[0034] 4, authentication system 300 has CPU 310, ROM 320, RAM 330, storage 340, communication interface 350, and operation display unit 360. Each component is communicably connected to each other via bus 370. Note that CPU 310, ROM 320, RAM 330, storage 340, communication interface 350, and operation display unit 360 have the same functions as the corresponding components of payment terminal 100, and therefore redundant explanations will be omitted.

[0035] The storage 340 stores various programs and data for verifying the validity of the certificate of the personal identification document C transmitted from the information processing device 200 and notifying the information processing device 200 of the verification result.

[0036] <Server 400> Server 400 is a node connected to a peer-to-peer network and communicates with other nodes, such as servers 400a and 400b, via the peer-to-peer network. Each node, such as server 400, stores a common blockchain and executes smart contracts by running code recorded on the blockchain. Server 400 may be a full node that holds all information in the blockchain, or a light node that holds information such as hash values ​​to certify each piece of data.

[0037] FIG. 5 is a block diagram showing a schematic configuration of the server.

[0038] 5, server 400 has CPU 410, ROM 420, RAM 430, storage 440, communication interface 450, and operation display unit 460. Each component is communicably connected to each other via bus 470. Note that CPU 410, ROM 420, RAM 430, communication interface 450, and operation display unit 460 have the same functions as the corresponding components of payment terminal 100, and therefore redundant explanations will be omitted.

[0039] The storage 440 stores a blockchain 500 that records code, setting values, and the like for executing smart contracts. The blockchain 500 can be configured using a known blockchain platform such as Ethereum, which is capable of executing smart contracts, and therefore a detailed description thereof will be omitted. Furthermore, the method of digital signatures using private and public keys is also known technology, and therefore a detailed description thereof will be omitted.

[0040] For example, Ethereum is used as a blockchain platform for implementing smart contracts. However, the blockchain platform for implementing smart contracts is not limited to Ethereum, and various platforms such as BNB Smart Chain, Solana, Polygon, Arbitrum, Avalanche, Cardano, Polkadot, Tezos, Algorand, or independently developed platforms can also be used.

[0041] <Financial institution system 600> The financial institution system 600 is a system installed in a financial institution such as a bank. For example, a service provider can perform a deposit process to transfer funds from the service provider's bank account to the store's bank account by sending a fund transfer instruction such as a transfer from the information processing device 200 to the financial institution system 600. The fund transfer is not limited to a transfer between bank accounts, but includes various methods for transferring funds between accounts at various financial institutions.

[0042] FIG. 6 is a block diagram showing a schematic configuration of a financial institution system.

[0043] 6, financial institution system 600 has CPU 610, ROM 620, RAM 630, storage 640, communication interface 650, and operation display unit 660. Each component is communicably connected to each other via bus 670. Note that CPU 610, ROM 620, RAM 630, storage 640, communication interface 650, and operation display unit 660 have the same functions as the corresponding components of payment terminal 100, and therefore redundant explanations will be omitted.

[0044] The storage 640 stores various programs including an operating system and various data. For example, applications for transmitting and receiving various information to and from the information processing device 200 via a network and transferring funds between different accounts are installed in the storage 640.

[0045] <Functions of payment terminal 100> FIG. 7 is a block diagram showing the functional configuration of the CPU of the payment terminal.

[0046] As shown in Figure 7, the payment terminal 100 functions as an electronic certificate acquisition unit 111, a first transmission unit 112, a user signature acquisition unit 113, a second transmission unit 114, and a terminal signature generation unit 115 by the CPU 110 reading a program stored in the storage 140 and executing processing.

[0047] When receiving an instruction to execute a payment process, the digital certificate acquisition unit 111 requests a digital certificate from the personal identification document C and acquires at least a part of the public key of the digital certificate from the personal identification document C.

[0048] The first transmitting unit 112 transmits at least a part of the public key acquired by the digital certificate acquiring unit 111 to the information processing device 200.

[0049] When the user signature acquisition unit 113 receives execution instruction information from the information processing device 200, it requests an execution electronic signature related to the user's execution instruction information from the personal identification document C, and acquires the execution electronic signature generated using the private key of the electronic certificate from the personal identification document C. Furthermore, when requesting an execution electronic signature from the personal identification document C, the user signature acquisition unit 113 may request the execution electronic signature so that the user does not need to input a personal identification number.

[0050] The second transmission unit 114 transmits the execution instruction information and the digital signature for execution to the information processing device 200. In addition, the second transmission unit 114 may transmit terminal authentication information for authenticating the payment terminal 100 to the information processing device 200 together with the execution instruction information and the digital signature for execution.

[0051] The terminal signature generation unit 115 generates a terminal digital signature of the payment terminal 100 for the execution instruction information using the private key of the digital certificate held by the payment terminal 100. In this case, the second transmission unit 114 transmits the terminal digital signature to the information processing device 200 together with the execution instruction information and the digital signature for execution.

[0052] Furthermore, the digital certificate acquisition unit 111 may further acquire a digital confirmation signature related to the request for the digital certificate, which is generated from the personal identification document C. In this case, the first transmission unit 112 verifies the digital confirmation signature acquired by the digital certificate acquisition unit 111, and if the verification of the digital confirmation signature is successful, transmits at least a part of the public key to the information processing device 200, and if the verification of the digital confirmation signature is not successful, it may not be necessary to transmit at least a part of the public key to the information processing device 200.

[0053] <Functions of information processing device 200> FIG. 8 is a block diagram showing the functional configuration of the CPU of the information processing device.

[0054] As shown in Figure 8, the information processing device 200 functions as an electronic certificate acquisition unit 211, a derivation unit 212, a generation unit 213, a user signature acquisition unit 214, a verification unit 215, an approval unit 216, a provider signature generation unit 217, and a conversion unit 218 by the CPU 210 reading a program stored in the storage 240 and executing processing.

[0055] The digital certificate acquisition unit 211 acquires from the payment terminal 100 at least a part of the public key of the digital certificate included in the personal identification document C, which has been acquired by the payment terminal 100 from the personal identification document C held by the user.

[0056] The derivation unit 212 transmits at least a portion of the public key transmitted from the payment terminal 100, or user identification information previously associated with and stored in association with at least a portion of the public key, to the blockchain 500, and causes a first smart contract (first smart contract program) 510 to derive a wallet address that the user can use on the blockchain 500 based on at least a portion of the public key or the user identification information. For example, the derivation unit 212 may transmit a modulus, which is information unique to each user included in the public key, to the blockchain 500, and the first smart contract 510 may derive an address using the modulus. The first smart contract 510 uses a computer program module that deterministically outputs a unique and irreversible output value for an input value, and derives the address as an output value from the computer program module by inputting the modulus as an input value to the computer program module.

[0057] The generation unit 213 generates execution instruction information for executing the payment process, and transmits the execution instruction information to the payment terminal 100.

[0058] The user signature acquisition unit 214 acquires from the payment terminal 100 an execution electronic signature for the user's execution instruction information, which is generated using the private key of the electronic certificate of the identification document C, acquired by the payment terminal 100 from the identification document C held by the user.

[0059] The verification unit 215 sends the execution instruction information and the execution electronic signature together with the user's address onto the blockchain 500, and has the second smart contract (second smart contract program) 520 obtain a public key from a portion of the public key recorded in association with the user's address and verify the execution electronic signature.

[0060] Furthermore, the verification unit 215 may authenticate the payment terminal 100 based on the terminal authentication information transmitted from the payment terminal 100, and if the authentication is successful, may transmit the execution instruction information and the digital signature for execution to the blockchain 500, and have the second smart contract 520 verify the digital signature for execution. In other words, if the authentication of the payment terminal 100 is not successful, the verification unit 215 may not transmit the execution instruction information and the digital signature for execution to the blockchain 500, and may not have the second smart contract 520 verify the digital signature for execution. Furthermore, the verification unit 215 may verify the terminal digital signature transmitted from the payment terminal, and if the verification of the terminal digital signature is successful, may transmit the execution instruction information and the digital signature for execution to the blockchain 500, and have the second smart contract 520 verify the digital signature for execution. In other words, if the verification unit 215 does not successfully verify the terminal electronic signature, it does not send the execution instruction information and the execution electronic signature to the blockchain 500, and does not have the second smart contract 520 verify the execution electronic signature.

[0061] If the verification by the verification unit 215 is successful, the approval unit 216 causes the second smart contract 520 to approve the execution of the settlement process to transfer the crypto asset from the user's wallet to a specified deposit wallet. If the verification by the verification unit 215 is unsuccessful, the approval unit 216 causes the second smart contract 520 to not approve the execution of the settlement process. As the crypto asset, for example, a stable coin whose value is associated with a specified legal currency may be used, or any coin or token other than a stable coin may also be used. The crypto asset as described above is held in advance in the user's wallet.

[0062] The provider signature generation unit 217 generates a provider digital signature for the execution instruction information by the service provider. In this case, the verification unit 215 transmits the provider digital signature together with the execution instruction information and the digital signature for execution to the blockchain 500, and causes the second smart contract 520 to verify the provider digital signature. If the verification of the provider digital signature by the second smart contract 520 is successful, the approval unit 216 causes the second smart contract 520 to verify the digital signature for execution, and if the verification of the provider digital signature by the second smart contract 520 is unsuccessful, the approval unit 216 does not cause the second smart contract 520 to verify the digital signature for execution.

[0063] The conversion unit 218 converts the crypto assets transferred from the user's wallet to a designated deposit wallet through the payment process into the amount of legal tender, and performs processing to deposit the converted amount into the account of the store using the payment terminal 100.

[0064] <Smart contract functions> FIG. 9 is a schematic diagram showing a smart contract program placed on a blockchain.

[0065] 9, a first smart contract program 510 and a second smart contract program 520 are placed on a blockchain 500. Placing a smart contract (smart contract program) on the blockchain 500 is generally referred to as deploying it.

[0066] The first smart contract program 510 is a smart contract program for address derivation. The first smart contract program 510 is configured to derive a wallet address that a user can use on the blockchain 500 based on a portion of the public key of a digital certificate included in the personal identification document C or user identification information associated with the portion of the public key and stored in advance in the information processing device 200 or the like. For example, the first smart contract 510 is configured to derive a unique address using the modulus of the public key. The first smart contract 510 may derive the address using a computer program module that deterministically outputs a unique and irreversible output value for an input value. Specifically, the first smart contract 510 derives the address as an output value by inputting the modulus as an input value into the computer program module. The first smart contract program 510 is placed in an address for address derivation provided on the blockchain 500 by a service provider.

[0067] The second smart contract program 520 is a smart contract program for verifying electronic signatures and executing payment processing transactions. When an execution electronic signature is received, the second smart contract program 520 is configured to obtain a public key from a portion of the public key associated with the user's address and record it, and to verify the execution electronic signature using the obtained public key. If the verification is successful, the second smart contract program 520 approves the execution of a payment process to transfer crypto assets from the user's wallet to a specified deposit wallet. If the verification is unsuccessful, the second smart contract program 520 does not approve the execution of the payment process. The second smart contract program 520 is placed at the user's wallet address on the blockchain 500 derived by the first smart contract program 510.

[0068] Each of the above smart contract programs may execute additional processes or may not execute some of the above processes. Also, each smart contract program may be executed in combination with other smart contract programs, or may be divided into multiple smart contract programs and executed.

[0069] <Identification document C> The personal identification document C is an IC card for identity verification and authentication, and is issued to residents by a public institution such as a local government. The IC card may be a contact IC card using a contactless communication method, or a contactless IC card using a contactless communication method. The personal identification document C may also be included in a card application installed on a user device, such as a smartphone or tablet PC, owned by the user who owns the personal identification document C. An electronic certificate is recorded in the IC chip of the personal identification document C. The electronic certificate and its public key are stored as files in the IC chip and can be read externally via the reading unit of the payment terminal 100. The private key of the electronic certificate is stored in a secure element (tamper-resistant area) in the IC chip and cannot be read externally. Processing such as generating an electronic signature using the private key is performed only within the IC card, and only the results of the generated electronic signature are output externally. For example, the personal identification document C may be a My Number card, which is provided as a physical medium in Japan. Furthermore, the identity verification document C may be included in a My Number Card application installed on a user terminal such as a smartphone or tablet PC owned by the user who is the owner of the identity verification document C. In this case, the user authentication electronic certificate or signature electronic certificate included in the My Number Card is preferably used as the electronic certificate. Note that the identity verification document C is not limited to the My Number Card or My Number Card application, and any legitimate identity verification document that stores a valid electronic certificate can be used as the identity verification document C.

[0070] <Outline of processing in information processing systems> An example of processing executed in the information processing system will be described below.

[0071] FIG. 10 is a sequence chart showing an example of a procedure of a process executed in the information processing system.

[0072] 10, payment terminal 100 receives an instruction to execute payment processing based on an instruction from a store staff member or the like (step S101). Payment terminal 100 receives the instruction to execute payment processing, for example, on a screen displayed on operation display unit 160 by a payment application installed in storage 140. The instruction to execute payment processing also includes information indicating the amount to be paid.

[0073] When a user brings identification document C close to the reading unit of payment terminal 100, short-range wireless communication is executed between identification document C and payment terminal 100, and payment terminal 100 requests a digital certificate from identification document C. For example, the payment application of payment terminal 100 displays a message on operation display unit 160 urging the user to bring identification document C close to (touch) the IC card reader / writer unit of payment terminal 100 to read identification document C. When the user follows the displayed message and brings identification document C close to the IC card reader / writer unit of payment terminal 100, payment terminal 100 can send and receive information to and from identification document C.

[0074] The personal identification document C generates a confirmation digital signature for the request for the digital certificate sent from the payment terminal 100 (step S901). The personal identification document C sends the digital certificate and the confirmation digital signature to the payment terminal 100. The digital certificate also includes the public key of the digital certificate. If the personal identification document C is included in an application installed on a user terminal such as a smartphone, the payment terminal 100 may instruct the user terminal to perform biometric authentication of the user. If the user's biometric authentication is successful, the user terminal sends at least a portion of the public key of the digital certificate of the personal identification document C to the payment terminal 100. If the user's biometric authentication is unsuccessful, the user terminal does not send the information to the payment terminal 100. This makes it possible to confirm the user's intention regarding the request for the digital certificate using a simple and reliable method called biometric authentication.

[0075] The payment terminal 100 acquires the digital certificate and digital confirmation signature transmitted from the personal identification document C, and verifies the digital confirmation signature (step S102). If the verification of the digital confirmation signature is successful, the payment terminal 100 transmits the digital certificate and the public key of the digital certificate to the information processing device 200.

[0076] The information processing device 200 acquires the information transmitted from the payment terminal 100 and extracts a modulus from the public key of the digital certificate (step S201). The modulus is part of the public key and is unique information whose value differs for each public key. The information processing device 200 transmits the extracted modulus to the server 400 for transmission onto the blockchain 500. Alternatively, the information processing device 200 may identify the user's identification information, which is associated with the public key of the digital certificate or a part of the public key and stored in advance in the storage 240, etc., and transmit the identified identification information to the server 400 for transmission onto the blockchain 500.

[0077] The server 400 transmits the modulus or identification information transmitted from the information processing device 200 to an address derivation address on the blockchain 500 where the first smart contract 510 is located (step S401). The first smart contract 510 uses the transmitted modulus or identification information to derive a wallet address that the user can use on the blockchain 500. For example, the first smart contract 510 uniquely and deterministically derives a wallet address from the modulus using a function such as CREATE2, which is a computer program module that deterministically outputs a unique and irreversible output value for an input value. Specifically, the first smart contract 510 inputs the modulus as an input value into a function such as CREATE2 to derive an address as an output value. This establishes a one-to-one relationship between the modulus and the address, and the address generated from the modulus, which is unique information for each public key, can also be unique information. Therefore, it is possible to derive a user's wallet address that has a one-to-one relationship with the personal identification document C possessed by each individual. A second smart contract 520 is placed in the derived user wallet address, and information indicating the modulus used to derive the address or a public key including the modulus is recorded in association with the address. Even if a user's identification information is used instead of a modulus, a user's wallet address that has a one-to-one relationship with the user's identification information can be derived using a method similar to that described above. In this case, in addition to the identification information used to derive the address, information indicating the modulus of the public key associated with the identification information or a public key including the modulus is recorded in association with the address.

[0078] The server 400 acquires address information indicating the address of the user's wallet derived by the first smart contract 510 (step S402), and transmits the acquired address information to the information processing device 200.

[0079] The information processing device 200 acquires the transmitted address information and stores it in the storage 240, while generating execution instruction information, which is instruction information for executing the payment process (step S202). The execution instruction information also includes an instruction to request the payment terminal 100 to acquire a digital signature generated using the private key of the digital certificate stored in the personal identification document C, attach the digital signature to the execution instruction information, and transmit the digital signature to the information processing device 200. The execution instruction information includes information such as the wallet address of the user who is the sender of the remittance, the wallet address of the recipient of the remittance, the amount to be remitted (payment amount), and information for identifying the store. The wallet address of the recipient of the remittance may be a predetermined receiving wallet prepared by the service provider. Note that if the store owns a wallet and is capable of receiving crypto assets, the store's wallet address may be specified as the wallet address of the recipient of the remittance. The execution instruction information may be generated, for example, as a data structure called UserOperation in the Ethereum platform. The information processing device 200 transmits the generated execution instruction information to the payment terminal 100.

[0080] Based on the execution instruction information transmitted from the information processing device 200, the payment terminal 100 requests an execution digital signature for the execution instruction information from the personal identification document C. At this time, the payment terminal 100 sets the request content so that the user does not need to enter a personal identification number (PIN), and then requests an execution digital signature from the personal identification document C. The personal identification document C is in proximity to the reading unit of the payment terminal 100 so that a verification digital signature is generated and transmitted to the payment terminal 100 together with a digital certificate in the processing of step S901, and information can be transmitted and received via near-field wireless communication. Note that if the personal identification document C is not in proximity to the reading unit of the payment terminal 100, for example, the payment application of the payment terminal 100 may display a message on the operation display unit 160 prompting the user to bring the personal identification document C close (touch or tap).

[0081] The personal verification document C uses the private key stored in the personal verification document C to generate an execution digital signature, which is a digital signature related to the execution instruction information (step S920), and transmits it to the payment terminal 100.

[0082] When the payment terminal 100 acquires the execution digital signature from the personal identification document C, it generates a terminal digital signature, which is the payment terminal 100's digital signature related to the execution instruction information, using the private key of the payment terminal 100's digital certificate stored in the payment terminal 100 (step S103). The payment terminal 100 attaches the generated terminal digital signature and the execution digital signature acquired from the personal identification document C to the execution instruction information and transmits it to the information processing device 200.

[0083] The information processing device 200 verifies the terminal digital signature using the public key of the digital certificate of the payment terminal 100 (step S203). If the verification of the terminal digital signature is successful, the information processing device 200 generates a provider digital signature for the execution instruction information by the service provider using the private key of the digital certificate of the service provider recorded in the information processing device 200 (step S204). The information processing device 200 attaches the generated provider digital signature and the execution digital signature acquired from the payment terminal 100 to the execution instruction information, and transmits it to the server 400 to be sent onto the blockchain 500 together with the address information of the user.

[0084] The server 400 sends the execution instruction information with the provider digital signature and execution digital signature sent from the information processing device 200 to the address of the user's wallet where the second smart contract 520 is placed on the blockchain 500 (step S403).

[0085] For example, the information processing device 200 transmits UserOperation data, which is execution instruction information with a provider digital signature and an execution digital signature, to the blockchain 500 via a node called a bundler that aggregates multiple UserOperations. When the second smart contract 520 receives the execution instruction information with the provider digital signature and the execution digital signature, it verifies the provider digital signature and the execution digital signature. For example, the second smart contract 520 verifies the provider digital signature using a public key of the provider's digital certificate stored in advance. The second smart contract 520 also obtains a public key from a portion of the public key stored in association with the user's address and verifies the execution digital signature using the obtained public key.

[0086] If the verification of the provider digital signature and the execution digital signature is successful, the second smart contract 520 approves the execution of the payment process (transaction) indicated by the execution instruction information. In this case, the payment process is executed on the blockchain 500, and the crypto asset is transferred from the user's wallet to a designated deposit wallet. On the other hand, if the verification fails, the second smart contract 520 does not approve the execution of the payment process. In this case, the payment process is not executed, and the process ends with a verification error. The user's wallet already holds the crypto asset described above. For example, the user can charge their wallet with a crypto asset balance using a method similar to the payment process. The server 400 obtains the execution result of the payment process performed by the second smart contract 520 and transmits execution result information indicating the execution result to the information processing device 200. The information processing device 200 obtains the transmitted execution result information, stores it in the storage 240, and transmits it to the payment terminal 100.

[0087] The payment terminal 100 displays the transmitted execution result information on the operation display unit 160 so that the store staff and the user can view the results of the payment process, and also stores the execution result information in the storage 140 (step S104).

[0088] The information processing device 200 confirms, via a notification from the receiving wallet, that the crypto asset has been transferred from the user's wallet to a specified receiving wallet through the payment process. The information processing device 200 converts the crypto asset received in the receiving wallet into legal tender, such as Japanese yen or US dollars, and performs processing to deposit the converted amount into the account of the store using the payment terminal 100 (step S205). The deposit processing includes, for example, but not limited to, transfers between bank accounts, and includes processing to deposit the crypto asset into an account or other account that the store can receive. For example, if the store wishes to receive the crypto asset as points or value that can be used in a specific payment service, the information processing device 200 may perform processing to send points or value corresponding to the converted amount to the store's account for that payment service. The processing in which the service provider receives the crypto asset sent by the user on behalf of the store, converts the crypto asset into legal tender, and deposits the converted amount into the store's account is performed based on a non-liable debt assumption agreement or a bond assignment agreement. If the store has a cryptocurrency wallet and can directly receive cryptocurrency sent from the user's wallet, the processing of step S205 above is omitted.

[0089] The present invention is not limited to the above-described embodiment, but can be modified in various ways within the scope of the claims.

[0090] For example, each of the components of the information processing system, namely, the payment terminal 100, the information processing device 200, the authentication system 300, and the server 400, may include components other than those described above, or may not include some of the components described above.

[0091] Furthermore, payment terminal 100, information processing device 200, authentication system 300, and server 400 may each be configured with multiple devices, or may be configured with a single device. Furthermore, the functions of each component may be realized by other components. For example, information processing device 200 and server 400 may be realized by a single device. Furthermore, the functions of information processing device 200 may be implemented as an application for payment terminal 100 and executed by payment terminal 100. Furthermore, the functions of information processing device 200 and server 400 may be implemented as an application for payment terminal 100, and payment terminal 100 may function as information processing device 200 and server 400.

[0092] Furthermore, the processing in the information processing system according to the above-described embodiment may include steps other than those in the sequence chart above, or may not include some of the steps described above. The order of the steps is not limited to that of the above-described embodiment. Furthermore, each step may be combined with other steps and executed as a single step, may be included in other steps and executed, or may be divided into multiple steps and executed. Furthermore, some steps may be omitted, and other steps may be added.

[0093] 10 , the payment terminal 100 generates a terminal digital signature and transmits it to the information processing device 200, and the information processing device 200 verifies the terminal digital signature, thereby performing terminal authentication of the payment terminal 100. However, the method of terminal authentication is not limited to this. For example, instead of a terminal digital signature, the payment terminal 100 may transmit terminal authentication information, such as predetermined identification information, a password, or authentication information encrypted with a predetermined common key, together with the execution instruction information and the execution digital signature to the information processing device 200. In this case, the information processing device 200 authenticates the payment terminal 100 based on the terminal authentication information transmitted from the payment terminal 100, and if the authentication is successful, transmits the execution instruction information and the execution digital signature to the server 400 to be transmitted to the blockchain 500.

[0094] The information processing device 200 may transmit the digital certificate of the personal identification document C acquired from the payment terminal 100 to an authentication system 300 that provides a public personal authentication service, and confirm the validity of the digital certificate.

[0095] As described above, according to the payment information processing system of this embodiment, when the payment terminal 100 receives an instruction to execute a payment process, it requests a digital certificate from the personal identification document C, acquires at least a portion of the public key of the digital certificate from the personal identification document C, and transmits the digital certificate to the information processing device 200. The information processing device 200 transmits at least a portion of the public key transmitted from the payment terminal 100, or user identification information previously associated with at least a portion of the public key and stored, to the blockchain 500, and causes the first smart contract 510 to derive a wallet address that the user can use on the blockchain 500 based on at least a portion of the public key or the user identification information. The information processing device 200 generates execution instruction information for executing the payment process and transmits the generated execution instruction information to the payment terminal 100. When the payment terminal 100 receives the execution instruction information from the information processing device 200, it acquires an execution digital signature generated using the private key of the digital certificate from the personal identification document C and transmits the digital signature to the information processing device 200. The information processing device 200 transmits the execution instruction information and the digital signature for execution along with the user's address to the blockchain 500, and then uses the second smart contract 520 to obtain a public key from a portion of the public key associated with the address and verify the digital signature for execution. If the verification is successful, the information processing device 200 uses the second smart contract 520 to approve the execution of a payment process to transfer crypto assets from the user's wallet to a specified deposit wallet. If the verification is unsuccessful, the information processing device 200 uses the second smart contract 520 to deny approval of the execution of the payment process. This allows the user's address on the blockchain 500 to be derived using a portion of the public key of the digital certificate of the user's personal identification document C, which certifies the user's existence, and then the payment process can be executed. Furthermore, the user can attach a digital signature for execution generated by the user using the private key of the user's personal identification document C to the execution instruction for the payment process, and the digital signature for execution can be verified on the blockchain 500 before the payment process is executed.Therefore, payment processing can be carried out safely and easily using a wallet address on the blockchain associated with a real person.

[0096] For example, a unique address specific to a user can be derived by using a My Number Card as identification document C and deriving the address using a modulus, which is information specific to each user and included in the public key of a user-certified electronic certificate or a signature electronic certificate. Furthermore, a unique address specific to a user can be derived by deriving the address using user identification information that is pre-stored and associated with at least a portion of the public key. Even if the certificate of the user's identification document C is changed due to an update or reissue of the user's identification document C, resulting in a different public key, the same address can still be derived for the same user. This prevents multiple addresses from being derived for a single user and allows a single user's address to be unified, making address management easier.

[0097] Furthermore, when deriving an address, a computer program module that deterministically outputs a unique and irreversible output value for an input value is used, and the address can be derived as an output value by inputting the modulus as an input value. This allows a unique address to be deterministically derived from the modulus, which is a value unique to each user, and therefore the same address can be derived and used on different blockchain 500 networks without the user being aware of it.

[0098] Previously, the private keys used by users in blockchain transactions were complex character strings that were difficult for users to remember, manage, use, etc. Furthermore, if a private key were shared with a third party, the assets held by the user on the blockchain could be transferred by that third party, making private key management extremely important yet difficult, and this has been a major obstacle to the widespread adoption of various blockchain-based services.

[0099] Furthermore, due to the nature of wallet addresses on conventional blockchains, it is difficult to know who the owner is, making it difficult to know in advance whether the other party in a transaction on the blockchain is an AI or a bot, which has led to the problem that it is difficult for real people to conduct transactions with confidence. According to an embodiment of the present invention, it is possible to derive a wallet address on the blockchain that is linked one-to-one with an identification document C that proves the identity of a real person, thereby enabling real people to conduct transactions with confidence on the blockchain.

[0100] Furthermore, the payment terminal 100 further acquires and verifies a verification digital signature related to the request generated in the personal identification document, and if the verification is successful, transmits at least a part of the public key to the information processing device 200. This allows the payment terminal 100 to confirm that the public key acquired is appropriate from the legitimate personal identification document C, and transmit appropriate information to the information processing device 200. Therefore, the payment information processing system can execute payment processing safely and reliably.

[0101] Furthermore, the payment terminal 100 transmits terminal authentication information for authenticating the payment terminal 100 to the information processing device 200, along with the execution instruction information and the digital signature for execution. The information processing device 200 authenticates the payment terminal 100 based on the terminal authentication information transmitted from the payment terminal 100. If the authentication is successful, the information processing device 200 transmits the execution instruction information and the digital signature for execution to the blockchain 500, and has the second smart contract 520 verify the digital signature for execution. This allows the information processing device 200 to confirm that the execution instruction information and the digital signature for execution are appropriate and have been transmitted from a legitimate payment terminal 100, and to transmit appropriate information to the blockchain 500. Therefore, the payment information processing system can safely and reliably execute payment processing.

[0102] Furthermore, the payment terminal 100 generates a terminal digital signature for the payment terminal 100 regarding the execution instruction information using the private key of the payment terminal 100's digital certificate, and transmits the generated terminal digital signature to the information processing device 200 together with the execution instruction information and the digital signature for execution. The information processing device 200 verifies the terminal digital signature transmitted from the payment terminal 100. If the verification of the terminal digital signature is successful, the information processing device 200 transmits the execution instruction information and the digital signature for execution to the blockchain 500, and has the second smart contract 520 verify the digital signature for execution. This allows the information processing device 200 to confirm that the execution instruction information and the digital signature for execution are appropriate and transmitted from a legitimate payment terminal 100, and transmit appropriate information to the blockchain 500. Therefore, the payment information processing system can execute payment processing more safely and reliably.

[0103] Furthermore, the information processing device 200 generates a provider digital signature for the execution instruction information from the service provider, transmits the provider digital signature together with the execution instruction information and the digital signature for execution to the blockchain 500, and has the second smart contract 520 verify the provider digital signature. If the verification of the provider digital signature is successful, the information processing device 200 has the second smart contract 520 verify the digital signature for execution, and if the verification of the provider digital signature is unsuccessful, the information processing device 200 does not have the second smart contract 520 verify the digital signature for execution. This allows the second smart contract 520 to verify the digital signature for execution after confirming that the information is legitimate information to which the digital signature has been assigned by the service provider. Therefore, the payment information processing system can execute payment processing more safely and reliably.

[0104] Furthermore, the personal identification document C may be included in the My Number Card application installed on the user's terminal. This allows the payment process to be carried out safely and reliably not only using the My Number Card as a physical medium, but also using the My Number Card application installed on the user's smartphone or the like.

[0105] Furthermore, when the payment terminal 100 requests a digital certificate from a user terminal including an identification document C, the user terminal performs biometric authentication of the user. If the biometric authentication is successful, the user terminal acquires at least a portion of the public key of the digital certificate from the identification document C and transmits it to the payment terminal 100. In this way, because the user terminal performs biometric authentication of the user, it is possible to confirm that the user of the user terminal is a legitimate user, and then acquire information from the identification document C and transmit it to the payment terminal 100. Therefore, the payment information processing system can execute payment processing more safely and reliably.

[0106] Furthermore, when requesting an execution digital signature for the personal identification document C, the payment terminal 100 requests the execution digital signature so that the user does not need to input a personal identification number. This allows the user to execute the payment process by simply bringing the personal identification document C close to the reading unit of the payment terminal 100, without having to input a personal identification number. Therefore, the payment information processing system allows the user to execute the payment process easily and without any hassle.

[0107] Furthermore, the information processing device 200 converts the crypto assets transferred from the user's wallet to a predetermined deposit wallet through the payment process into the amount of legal tender, and performs processing to deposit the converted amount into the account of the store using the payment terminal 100. As a result, even if the store cannot directly receive the crypto assets sent from the user, the amount converted into legal tender can be received in the store's account. Therefore, the payment information processing system can execute payment processing safely, reliably, and easily using a method that is easily acceptable to the store.

[0108] The information processing system according to the above embodiment can provide a touch payment system linked to a blockchain cryptocurrency wallet using My Number cards. It can also provide an escrow settlement system that converts cryptocurrency into legal tender and transfers it to stores that have difficulty accepting cryptocurrency. More specifically, it can provide a payment system that integrates authentication by electronic signature without PIN entry via contactless near-field wireless communication, cryptocurrency settlement on the blockchain, and legal tender settlement via escrow, using a physical My Number card or its smartphone-mounted version that utilizes a public personal authentication service.

[0109] Conventional contactless IC payment systems, such as the information processing system of this embodiment, do not use personal authentication information included in government-issued identification documents such as My Number cards on a blockchain. While My Number cards now allow for signatures without PIN entry, no payment systems utilize this mechanism. Furthermore, payments using crypto assets on a blockchain pose challenges, including user and store preparation and operation, as well as price fluctuation risk. The information processing system of this embodiment allows for the use of personal authentication information included in government-issued identification documents such as My Number cards on a blockchain. Furthermore, a PIN-less signature mechanism can be utilized. Furthermore, users can execute payments simply by touching their My Number cards or other identification documents to the payment terminal 100, significantly simplifying user preparation and operation. Furthermore, crypto assets sent by users can be converted into legal tender and deposited into the store's account, significantly simplifying store preparation and operation. Furthermore, using stablecoins as crypto assets eliminates price fluctuation risk. That is, according to the information processing system of this embodiment, the user experience in payment processing using crypto assets on the blockchain can be completed by simply swiping a card. Furthermore, settlement with stores can be automatically carried out in legal tender, such as Japanese yen. Furthermore, each process can be executed with high security guaranteed by utilizing electronic signatures.

[0110] The means and methods for performing various processes in the systems according to the above-described embodiments can be realized by either dedicated hardware circuits or a programmed computer. The programs may be provided, for example, on a computer-readable recording medium such as a flexible disk or CD-ROM, or online via a network such as the Internet. In this case, the programs recorded on the computer-readable recording medium are typically transferred to and stored in a storage unit such as a hard disk. The programs may also be provided as standalone application software or may be incorporated into the software of the device as a function of the system. [Explanation of symbols]

[0111] 100 payment terminals, 110 CPUs, 111 Electronic Certificate Acquisition Department, 112 first transmission unit, 113 User signature acquisition unit, 114 second transmission unit, 115 terminal signature generation unit, 120 ROM, 130 RAM, 140 storage, 150 communication interface, 160 Operation display section, 170 bus, 200 information processing device, 210 CPUs, 211 Electronic Certificate Acquisition Department, 212 Derivation part, 213 generation section, 214 User signature acquisition unit, 215 Verification Department, 216 Approval Department, 217 Provider signature generation unit, 218 conversion section, 220 ROM, 230 RAM, 240 storage, 250 communication interface, 260 Operation display section, 270 bus, 300 authentication system, 310 CPUs, 320 ROM, 330 RAM, 340 storage, 350 communication interface, 360 operation display section, 370 bus, 400, 400a, 400b servers (nodes), 410 CPUs, 420 ROM, 430 RAM, 440 storage, 450 communication interface, 460 Operation display section, 470 bus, 500 Blockchain, 510 first smart contract (first smart contract program), 520 second smart contract (second smart contract program), 600 Financial Institution System 610 CPU, 620 ROM, 630 RAM, 640 storage, 650 communication interface, 660 Operation display section, 670 bus.

Claims

1. A payment information processing system having a payment terminal and a payment information processing device, for performing payment processing using a smart contract that functions by a computer executing code recorded on a blockchain, The payment terminal is It is possible to send and receive information via near field wireless communication between the user's identification document and the reader. an electronic certificate acquisition unit that, when receiving an instruction to execute a payment process, requests an electronic certificate from the personal identification document and acquires at least a part of a public key of the electronic certificate from the personal identification document; a first transmission unit that transmits at least a part of the public key acquired by the digital certificate acquisition unit to the payment information processing device, The payment information processing device a derivation unit that transmits, to the blockchain, at least a portion of the public key transmitted from the payment terminal or user identification information previously associated with at least a portion of the public key and stored, and derives, by a first smart contract, a wallet address that the user can use on the blockchain based on at least a portion of the public key or the identification information; a generation unit that generates execution instruction information for executing the payment process and transmits the generated execution instruction information to the payment terminal; The payment terminal is a user signature acquisition unit that, when receiving the execution instruction information from the payment information processing device, requests an execution digital signature related to the execution instruction information of the user from the personal identification document, and acquires the execution digital signature generated using the private key of the digital certificate from the personal identification document; a second transmission unit that transmits the execution instruction information and the execution digital signature to the payment information processing device, The payment information processing device a verification unit that transmits the execution instruction information and the digital signature for execution together with the address of the user onto the blockchain, and obtains the public key by a second smart contract to verify the digital signature for execution; an approval unit that, if the verification by the verification unit is successful, approves the execution of the settlement process of transferring crypto assets from the user's wallet to a predetermined deposit wallet using the second smart contract, and, if the verification by the verification unit is unsuccessful, does not approve the execution of the settlement process using the second smart contract; A payment information processing system further comprising:

2. the digital certificate acquisition unit further acquires a digital signature for verification of the request generated on the personal identification document; The payment information processing system of claim 1, wherein the first transmission unit verifies the confirmation electronic signature acquired by the electronic certificate acquisition unit, and if the verification of the confirmation electronic signature is successful, transmits at least a portion of the public key to the payment information processing device.

3. the second transmission unit of the payment terminal transmits, to the payment information processing device, terminal authentication information for authenticating the payment terminal together with the execution instruction information and the execution digital signature; The payment information processing system of claim 1 or 2, wherein the verification unit of the payment information processing device authenticates the payment terminal based on the terminal authentication information sent from the payment terminal, and if the authentication is successful, sends the execution instruction information and the execution electronic signature to the blockchain and verifies the execution electronic signature using the second smart contract.

4. The payment terminal is a terminal signature generation unit that generates a terminal digital signature of the payment terminal related to the execution instruction information using a private key of the digital certificate of the payment terminal; the second transmission unit transmits the terminal digital signature together with the execution instruction information and the digital signature for execution to the payment information processing device; The payment information processing system of claim 1 or 2, wherein the verification unit of the payment information processing device verifies the terminal electronic signature sent from the payment terminal, and if the verification of the terminal electronic signature is successful, transmits the execution instruction information and the execution electronic signature onto the blockchain, and has the execution electronic signature verified by the second smart contract.

5. The payment information processing device a provider signature generation unit that generates a provider digital signature related to the execution instruction information by a service provider; the verification unit transmits the provider digital signature together with the execution instruction information and the digital signature for execution onto the blockchain, and verifies the provider digital signature using the second smart contract; 3. The payment information processing system of claim 1 or 2, wherein if the verification of the provider electronic signature is successful, the second smart contract is caused to verify the execution electronic signature, and if the verification of the provider electronic signature is unsuccessful, the second smart contract is not caused to verify the execution electronic signature.

6. 3. The payment information processing system of claim 1, wherein the derivation unit transmits a modulus, which is information unique to each user and included in the public key, onto the blockchain, and the first smart contract derives the address using the modulus.

7. 7. The payment information processing system of claim 6, wherein the first smart contract uses a computer program module that deterministically outputs an output value that is unique and irreversible for an input value, and derives the address as an output value from the computer program module by inputting the modulus as an input value into the computer program module.

8. 3. The payment information processing system according to claim 1, wherein the personal identification document is a My Number card provided as a physical medium, and the electronic certificate is a user authentication electronic certificate or a signature electronic certificate.

9. 3. The payment information processing system according to claim 1, wherein the personal identification document is included in a My Number Card application installed on a user terminal held by the user.

10. A payment information processing system as described in claim 9, wherein when the electronic certificate acquisition unit requests the electronic certificate for the identification document, the user terminal performs biometric authentication of the user, and if the biometric authentication is successful, the user terminal obtains at least a portion of the public key of the electronic certificate from the identification document and transmits it to the payment terminal.

11. 3. The payment information processing system of claim 1, wherein the user signature acquisition unit requests the execution electronic signature for the identification document in a manner that does not require the user to enter a personal identification number.

12. A payment information processing system as described in claim 1 or 2, further comprising a conversion unit that converts the cryptocurrency moved from the user's wallet to the specified deposit wallet by the payment process into a legal tender amount and performs processing to deposit the amount into the account of a store using the payment terminal.

13. A payment information processing device for performing payment processing using a smart contract that functions by a computer executing code recorded on a blockchain, an electronic certificate acquisition unit that acquires, from the payment terminal, at least a part of a public key of an electronic certificate included in an identification document held by a user, the public key being acquired from the identification document by the payment terminal; a derivation unit that transmits, to the blockchain, at least a portion of the public key acquired by the digital certificate acquisition unit, or user identification information that is previously associated with at least a portion of the public key and stored, and derives, by a first smart contract, a wallet address that the user can use on the blockchain based on at least a portion of the public key or the identification information; a generation unit that generates execution instruction information for executing the payment process and transmits the execution instruction information to the payment terminal; a user signature acquisition unit that acquires, from the payment terminal, an execution digital signature for the execution instruction information of the user, the execution digital signature being generated using a private key of the digital certificate of the identification document acquired by the payment terminal from the identification document held by the user; a verification unit that transmits the execution instruction information and the digital signature for execution together with the address of the user onto the blockchain, and obtains the public key by a second smart contract to verify the digital signature for execution; an approval unit that, if the verification by the verification unit is successful, approves the execution of the settlement process of transferring crypto assets from the user's wallet to a predetermined deposit wallet using the second smart contract, and, if the verification by the verification unit is unsuccessful, does not approve the execution of the settlement process using the second smart contract; A payment information processing device having the same.

14. A payment information processing method executed in a payment system that has a payment terminal and a payment information processing device and performs payment processing using a smart contract that functions by a computer executing code recorded on a blockchain, the payment terminal is capable of transmitting and receiving information via near field wireless communication between the payment terminal and the user's identification document placed in the vicinity of the reading unit; an electronic certificate acquisition step of requesting an electronic certificate from the identification document when the payment terminal receives an instruction to execute payment processing and acquiring at least a part of a public key of the electronic certificate from the identification document; a first transmission step in which the payment terminal transmits at least a part of the public key acquired in the digital certificate acquisition step to the payment information processing device; a derivation step in which the payment information processing device transmits, to the blockchain, at least a portion of the public key transmitted from the payment terminal, or user identification information previously associated with at least a portion of the public key and stored, and derives, by a first smart contract, a wallet address that the user can use on the blockchain based on at least a portion of the public key or the identification information; a generation step in which the payment information processing device generates execution instruction information for executing the payment process and transmits the generated execution instruction information to the payment terminal; a user signature acquisition step of, when the payment terminal receives the execution instruction information from the payment information processing device, requesting an execution digital signature related to the execution instruction information of the user from the personal identification document, and acquiring the execution digital signature generated using a private key of the digital certificate from the personal identification document; a second transmission step in which the payment terminal transmits the execution instruction information and the execution digital signature to the payment information processing device; a verification step in which the payment information processing device transmits the execution instruction information and the digital signature for execution together with the address of the user to the blockchain, and causes a second smart contract to obtain the public key and verify the digital signature for execution; an approval step of, if the verification in the verification step is successful, approving the execution of the settlement process of transferring crypto assets from the user's wallet to a predetermined deposit wallet by the second smart contract, and, if the verification in the verification step is unsuccessful, not approving the execution of the settlement process by the second smart contract; A payment information processing method including:

15. A payment information processing program for causing a computer to function as the payment information processing device according to claim 13.

Images