Booking certificate issuing apparatus and method

[0001] 1. Field of the Invention

[0002] The present invention relates to a technique for booking in advance a tangible product or a service through a computer system, and more particularly to issuance of a booking certificate for certifying that a consumer has booked in advance a tangible product or a service and to legitimacy verification of the booking certificate.

[0003] 2. Description of the Related Art

[0004] The method most extensively used today to allow the acquisition of a tangible product or the usage of a service, both often limited to a specific place or a specific time, independently of the place and/or time of the acquisition or the usage is the issuance of a booking certificate.

[0005] In selling a product item for which a rush of buyers is anticipated, it is a very extensively followed marketing practice to accept bookings in advance of its introduction to the market and, when it is introduced, to give priority to the consumers who booked for it in advance. To distinguish the consumers who did book from those who did not, something to certify the booking is issued. This booking certificate may be a piece of paper on which various items of information are printed or an identification number. The price of the product may be paid upon its delivery or at the time of advance booking.

[0006] In the supply of service, some of the most typical examples are advance tickets for cinemas and concerts, sold by ticket agencies ahead of scheduled presentation. In these cases, tickets, which are pieces of paper on which relevant information is printed, are the booking certificates.

[0007] Today, when computers have found their way into households and many consumers can have routine access to the Internet, various items have become available for booking through web sites opened on the Internet. Each site issues digital data, which serve as booking certificates, to the users who booked in advance an item of tangible product or service with the respective site. When the item is to be delivered to each booking consumer, he or she is required to present the data issued by the site, and if the data are found to be a legitimate booking certificate, the item will be delivered. This is the typical way of this kind of transaction.

[0008] Sales of goods and services through the Internet have given consumers the benefit of being able to book in advance the goods and services while staying at home. They also mean to the sellers of the goods and services the benefit of being able to expand their markets without having to pay the cost of maintaining physical stores, and this marketing channel is becoming indispensable especially for small venders who cannot afford to maintain large physical chains of stores.

[0009] At present, sales of goods and services through acceptance of bookings in advance via the Internet are carried out by individual venders independent of one another. Each vender manages its own site, where it generates and issues to consumers its own booking certificates. The vender, besides having to develop the system needed for issuing its booking certificates, has to bear the cost of managing the site that issues the certificates. Managing a system that handles booking certificates in the form of digital data, which are subject to the risk of being forged or copied, entails an enormous extra cost and thereby constitutes a high barrier to venders desiring to launch sales activities by accepting advance bookings via the Internet. This also imposes extra prices on the consumers who buy from these venders.

[0010] According to the present invention, these problems are solved by preparing a server to issue booking certificates (hereinafter to be referred to as the booking certificate issuing center or simply the center) on the Internet. The center is independent of any specific tangible product or service offered for sale by accepting advance booking. Moreover, the center is independent of any specific vender accepting advance booking. The booking certificate issuing center would take charge of everything relating to the preparation and maintenance of booking certificates. Venders offering goods or services by accepting advance booking (booking venders) could outsource to the booking certificate issuing center much of their workloads relating to booking certificates. Since many booking venders could use the common booking certificate issuing center, the development and operating costs of the booking certificate issuing center per booking vender could be kept lower than what they would have to pay if each of them had its own advance booking system.

[0011] According to the invention, each booking vender sends a booking certificate against each of the bookings that it receives from consumers. The booking certificates are issued by the booking certificate issuing center. Although each booking vender prepares on the Internet a server to accept bookings from consumers, the function to generate booking certificates is absent in this server. This function is performed by the booking certificate issuing center.

[0012] When a product or a service is to be delivered to the consumer who booked it, he or she will be required to present the booking certificate. The legitimacy of the certificate is then checked by using digital data, which are called verification information. The verification information is generated to satisfy a relational requirement with booking certificates, and the legitimacy of a given booking certificate is judged according to whether or not the booking certificate satisfies this requirement. If a specific product or a service is bound to a specific verification information, it can be judged whether or not a prospective buyer booked in a proper way according to whether or not the booking certificate he or she presents satisfies the requirement for a specific relationship with the pertinent verification information.

[0013] Verification information is generated by the center. Anybody who can use the pertinent verification information can check the legitimacy of a booking certificate.

[0014] This feature has an effect to further reduce the cost imposed on a vender undertaking a business to sell goods and/or services on an advance booking basis. The invention allows providers of goods and/or services and their booking venders to be viable independent of each other. A provider of goods and/or services, by commissioning retailing of the goods and/or services it deals in to many booking venders, can concentrate on the supply of those goods and/or services. A booking vender, even though it has no goods or services it can provide on its own, can attract advance bookings for many different goods and/or services available from many providers.

[0015] Some aspects of the present invention relate to the booking certificate center.

[0016] According to one aspect of the invention, there is provided a method for issuing electronic booking certificates each certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a step to prepare verification information needed for checking the legitimacy of booking certificates; a step to input information for specifying the verification information; a step to prepare a booking certificate that can be verified by the verification information that can be specified by the inputted information; and a step to supply the booking certificate so prepared.

[0017] According to another aspect of the invention, there is provided a computer system for issuing electronic booking certificates each certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a verification information preparing unit for preparing verification information needed for checking the legitimacy of booking certificates; a verification information output unit for supplying verification information prepared by the verification information preparing unit; a booking certificate preparing unit, into which information for specifying verification information is inputted, for preparing a booking certificate that can be verified by the verification information that is specified by the inputted information; and a booking certificate supplying unit for supplying the booking certificate prepared by the booking certificate preparing unit.

[0018] The booking certificate center according to either of these aspects of the invention issues not only booking certificates but also verification information for verifying booking certificates. This verification information is used for checking the legitimacy of a booking certificate presented by a consumer when delivering a product or a service. Since the set of booking certificates verifiable by specific verification information are limited, a different booking certificate can be issued for each specific item or product or service by allocation a different verification information to each specific item or product or service. However, the booking certificate center need not be concerned about which verification information matches a given item of product or service. The provider of each item of product or service can freely decide upon the linkage between a specific item of product or service and verification information. This enables the booking certificate issuing center to be an infrastructure concentrating on the issuance of booking certificates without being committed to any specific item or product or service.

[0019] Other aspects of the invention relate to a server for selling tangible products and services to consumers having booked for them in advance.

[0020] According to one of these aspects of the invention, there is provided a method for intermediating a request for an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a step to receive a first booking certificate request, which is a request for the issuance of a booking certificate certifying that the supply of a tangible product or a service to a specific consumer is committed; a step to prepare a second booking certificate request, which is a step to request the issuance of a booking certificate requested by the first booking certificate request so received; and a step to supply the second booking certificate request so prepared.

[0021] According to the other of these aspects of the invention, there is provided a computer system for intermediating a request for an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a booking certificate request receiving unit for receiving a first booking certificate request, which is a request for the issuance of a booking certificate certifying that the supply of a tangible product or a service to a specific consumer is committed; a booking certificate request preparing unit for preparing a second request for a booking certificate, which is a request for the issuance of a booking certificate requested by the first request for booking certificate so received; and a booking certificate request output means for supplying the second request for booking certificate prepared by the booking certificate request preparing unit.

[0022] A server, to which either of these aspects of the invention is applied, for selling tangible products and services to consumers having booked for them in advance accepts a request for the issuance of a booking certificate from a consumer or another booking vender connected to the Internet. However, it is not this server that prepares the booking certificate covered by the accepted request. Booking certificates are issued only by the booking certificate issuing center, and the server for selling products and services on an advance booking basis only intermediates the issuance of booking certificates. What the server does is confined to the intermediation of requests, and it is the responsibility of the center to provide some protection against such violations as the alteration, forging and copying of booking certificates. So, the costs of architecture and operation of any server engaged in the marketing of goods and/or services in accordance with these aspects of the invention can be kept much lower than otherwise.

[0023] Other aspects of the invention relate to a provider of products and services.

[0024] Where there exist providers of goods and/or services and their booking venders independent of each other, it would be basically more favorable for each provider to have the goods and/or services it offers for sale sold by a greater number of booking venders. However, having its products and/or services handled by unreliable booking venders would be liable to invite subsequent troubles and accordingly impermissible. Therefore, the provider needs a means by which it can limit booking venders who are authorized to handle the goods and/or services available from the provider.

[0025] According to one of these aspects of the invention, there is provided a method for approving intermediation of a request for an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a step to input information for specifying an intermediary to intermediate a request for a booking certificate regarding a product or a service; a step to input information for specifying the product or service regarding which intermediation is licensed for the intermediary; a step to prepare a booking certificate intermediation license certificate to certify that intermediation of the request for a booking certificate regarding the product or service specified by an input is licensed for an intermediary specified by another input; and a step to supply the booking certificate intermediation license certificate so prepared.

[0026] According to the other of these aspects of the invention, there is provided a computer system for approving intermediation of a request for an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a booking certificate intermediation license preparing unit, into which information for specifying an intermediary to intermediate a request for a booking certificate regarding a product or a service and information for specifying the product or service regarding which intermediation is licensed for the intermediary are inputted, for preparing a booking certificate intermediation license to certify that intermediation of the request for a booking certificate regarding the product or service specified by an input is licensed for an intermediary specified by another input; and a booking certificate intermediation license output unit for supplying a booking certificate intermediation license prepared by the booking certificate intermediation license preparing unit.

[0027] According to these aspects of the invention, a provider of goods and/or services issues a booking certificate intermediation license to each booking vender authorized to sell on an advance booking basis the goods and/or services offered by the provider. This booking certificate intermediation license is presented by the booking vender to the center when it requests the center to issue a booking certificate. The center can check, according to the booking certificate intermediation license so presented, whether or not the booking vender presenting it is authorized to sell on an advance booking basis the product of service regarding which the issuance of a booking certificate is requested.

[0028] Other aspects of the invention relates to verification of booking certificates.

[0029] According to one of these aspects of the invention, there is provided a method for checking the legitimacy of an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is commiitted, including: a step to store verification information for checking the legitimacy of booking certificates; a step to input a booking certificate; and a step to check the legitimacy of the inputted booking certificate by using the stored verification information.

[0030] According to the other of these aspects of the invention, there is provided an apparatus for checking the legitimacy of an electronic booking certificate for certifying that the supply of a tangible product or a service to a specific consumer is committed, including: a verification information storage unit for storing verification information for checking the legitimacy of booking certificates; and a booking certificate checking unit, to which a booking certificate is inputted, for checking the legitimacy of the booking certificate by using the verification information stored in the verification information storage unit.

[0031] Incidentally, although the invention is intended to enable an infrastructure to issue booking certificates independently of booking venders, it is obviously acceptable for a certificate issuing center affiliated with booking venders or providers of goods and/or services to issue booking certificates by availing itself of the invention. Also, providers directly selling goods and/or services can use the booking certificate issuing according to the invention.

[0032] Certificates may be issued via some other means of communication than the Internet, such as telephone lines. Further, certificates may as well be exchanged between apparatuses via a portable recording medium.

[0033] An advance booking in this context is an expression of a desire to receive the supply of a product or a service in the future. Therefore, the booking need not be made before the product or the service becomes commercially available. This invention can be used for the delivery of a product or a service take place some time after it is booked, For instance, if the buyer offers to buy a certain product at a certain point of time and receives it a few days later at his or her own home or a nearby convenience store, this still can be an advance booking in this context.

[0069] A preferred embodiment of the present invention will be described below.

[0070] FIG. 1 illustrates the configuration of a preferred embodiment of the present invention. This embodiment has plural computer systems connected to the Internet, and their coordinated operation enables goods and/or services to be sold on an advance booking basis.

[0071] Where this embodiment is at work, a consumer books a product or a service in advance via the Internet, and receives a booking certificate, made up of digital data certifying that his or her booking has been completed. The consumer, after storing the received booking certificate into a portable memory unit, such as an IC card, carries it to where the booked product or service is to be delivered. The place where the consumer receives the delivery of the product or the service, a verifying device, to which the portable memory unit can be connected, for checking the booking certificate is installed. If the legitimacy of the booking certificate is verified by this device, the product or the service will be delivered to the consumer.

[Group of Computer Systems Constituting the Embodiment]

[0072] The computer systems constituting this embodiment of the invention can be classified into the following four types, each of which is connected to the Internet 101 for mutual communication.

[0073] Consumer terminal: This is a computer system for use by the consumer to book a product or a service in advance, and corresponds to 109 in FIG. 1. It may be a computer used by the consumer at home or a terminal installed in a convenience store. It is connected to the Internet 101, and can access other computer systems via the Internet 101.

[0074] The consumer terminal 109 allows connection of a portable memory unit, such as an IC card. The consumer's portable memory unit 110 is connected to it to enable the booking certificate acquired by the consumer to be recorded into the portable memory unit 110. A laptop computer or a portable telephone set may as well be used so the functions of both a consumer terminal and a portable memory unit can be performed by a single device.

[0075] Although a single consumer terminal is shown in FIG. 1, numberless similar consumer terminals connected to the Internet are used as consumer terminals.

[0076] The portable memory unit held by the consumer using the consumer terminal stores a consumer identifier for identifying the consumer and consumer private information whose value is kept secret from even the consumer who is the owner of the portable unit.

[0077] Pairs each of a consumer identifier and consumer private information are held by the center for use in the generation of booking certificates.

[0078] Retailer: This is a computer system for selling goods and/or services to consumers on an advance booking basis, and corresponds to 103 or 104 in FIG. 1, and actually any number of retailers may be present on the network. It is connected to the Internet 101, and is accessible by consumers via the Internet 101. Although a retailer in this context is a system operated by a merchant selling goods and/or services on an advance booking basis, in the following description no distinction will be made between a retailing computer system and the retail merchant operating it. Both will be referred to as retailers.

[0079] Booking certificate issuing center: This is a computer system that generates and issues booking certificates, and corresponds to 102 in FIG. 1. It is connected to the Internet 101, accepts requests for booking certificates via the Internet, and generates and issues booking certificates on demand.

[0080] Provider: This is a computer system for use by the supplier of goods and/or services to exchange information with the retailer or the center, and is connected to the Internet 101. It corresponds to 105 or 107 in FIG. 1. Actually, any number of providers may be present on the network. In the following description, no distinction will be made between a supplier of goods and/or services and a computer system operated by the supplier, and both will be referred to as providers.

[0081] Certifying Authority (CA): Messages sent to and from consumer terminals, retailers, the center and providers are digitally signed to detect any alteration and to refuse negation. The legitimacy of the public key for verifying the digital signature is ensured by an X.509-based public key certificate. The certifying authority 111, which is a computer system having a function to prepare and issue such public key certificates, is connected to the Internet 101. The certifying authority issues public key certificates and holds them, and has a function to send one to a person having demanded it. The certifying authority will be hereinafter abbreviated to CA.

[Booking Certificates and Verification Public Keys]

[0082] Where this embodiment of the invention is employed, a set of digital data known as a booking certificate is issued to certify that the consumer holding the certificate booked a product or a service in advance. The legitimacy of the booking certificate is checked with a corresponding verification public key. As the term “verification public key” suggests, a public key encrypting technique is applied to booking certificates and verification public keys in this embodiment.

[0083] More specifically, a verification public key is a public key in public key encryption, and a booking certificate is made up of data including booking value prepared on the basis of a private key matching the public key. Only when the private key used in preparing the booking value contained in the booking certificate is found matching the verification public key, the booking certificate can be confirmed to be legitimate. In no other case the booking certificate can be acknowledged to be legitimate.

[0084] Selling a product or a service on an advance booking basis using this embodiment requires a verification public key bound to the specific product or service to be booked in advance for sale. By binding a specific verification public key to a specific product or service, a booking certificate valid only for the specific product or service can be realized.

[0085] Applying a public key encrypting technique to the booking certificate and the verification public key is to enable the verification public key to be made public. If the verification public key is a public key, making it public does not injure the security of the booking certificate. This not only facilitates transmission/reception and management of the verification public key but also provides the additional benefit of enabling third parties to check the legitimacy of the booking certificate and thereby preventing otherwise possible subsequent trouble.

[0086] A verification public key is prepared by the center 102 at the request of a provider and, contained in data known as verification public key information, sent to the client. Upon receiving a request for the issuance of a verification public key, the center 102 prepares a new pair of public keys. After holding the generated keys together with a verification public key identifier, which is information for uniquely identifying the public key pair, delivers to the client verification public key information including the public keys and the verification public key identifier. The provider having received the verification public key information will be called the user of the verification public key information or of the verification public key contained in the verification public key information.

[0087] The center 102 has no part in the binding of the specific verification public key to a specific product or service. The party who determines the binding is the provider to whom the verification public key was issued, and the provider should hold information on the binding it has determined between the specific product or service and the verification public key.

[0088] The provider having been granted a verification public key sets the booking certificate for the product or the service matching that verification public key into the verifying device 106 or 108.

[0089] A consumer acquires a booking certificate for a specific product or service on the Internet via a retailer. The acquired booking certificate is stored into the consumer's portable memory unit. The consumer brings the portable memory unit to the place where the product or the service is to be delivered. He or she connects the portable memory unit to the verifying device 106 or 108 installed there to have the legitimacy of the booking certificate verified.

[0090] Where a tangible product item is to be sold on an advance booking basis, a booking certificate verifying device is installed at the delivery outlet of the item, and the goods are delivered to only those consumers whose booking certificates have been verified to be legitimate by the verifying device. The delivery outlet may be any place where the verifying device can be physically installed, such as a convenience store or a kiosk in a railway station.

[0091] Products available to consumers in these modes of carrying out the invention include paper tickets, such as admission tickets for concerts or cinemas, passenger tickets for trains or aircraft, or accommodation tickets for hotels. In these modes of implementation, the booking certificate verifying device may be installed at the box office of the concert hall or the theater, the counter of the station or the airport, or the travel agency, where the ticket is delivered after the booking certificate has been verified to be legitimate.

[0092] Or else, the verifying device and the product delivering function can be automatically interlocked and houses in a common box, which automatically discharges the product after the verification of the booking certificate as an automatic vending machine does.

[0093] Where the booked product is to be delivered to the buyer's place, the delivering person may carry a portable device for checking booking certificates. The person checks the legitimacy of the booking certificate held by the consumer before delivering the product to its supposed buyer, and delivers only when the booking certificate is successfully verified.

[0094] Where the subject of booking is a service of admission to a concert hall or a film theater, it is conceivable to mount a booking certificate verifying function on the entrance gate of the hall or the theater to check the legitimacy of the booking certificate borne by each consumer he or she enters the gate, and to admit only the bearers of successfully verified certificates.

[0095] Where the subject of booking is a service to make available a specific seat in a concert hall or a film theater, a booking certificate verifying function may be appended to the seat. Only the consumer whose booking certificate has been successfully verified by the verifying device of the seat will be allowed to occupy that particular seat. The same arrangement would be applicable to use of a specific seat of a train or an aircraft.

[0096] Another suitable mode of implementation for reservation of a specific seat in a concert hall or a film theater or on a train or an aircraft is to have attendants carry a portable verifying device each and move from seat to seat check whether or not the occupant of each seat has the legitimate booking certificate.

[0097] Where the service to be provided is making a hotel room available for use, a verifying device may be installed at the front desk of the hotel to check the legitimacy of booking certificates. Or if a verifying device is installed at the door of each room and interlocked with the lock of each room to allow the door to be unlocked only when the booking certificate carried by the supposed occupant of the room is successfully verified, there will be an additional effect of the reduce the workload on the front desk personnel. A similar arrangement can be applied for the use of lockers, warehouses or the like.

[0098] The product which is the subject of booking needs not be a physical object, but may be digital data or the like. For instance, the invention can be applied to booking of downloading of digital data of pieces of music, visual images or software on the Internet. In this case, the verifying device is realized as a site on the Internet, and the consumer presents his or her booking certificate to the verifying site on the Internet via a personal computer (PC) at home or a terminal installed in a convenience store or elsewhere. The site allows only the consumer whose booking certificate has been successfully verified to receive downloading of the booked data.

[0099] As the portable memory unit for storing the booking certificate, a memory unit card or an IC card having only a storage function can be used. A smart card having a calculating function can be used as well. It may be either a contact type or a non-contact type card. For installation at the entrance gates of a concert hall where a heavy congestion is anticipated, the use of non-contact type card is preferable.

[0100] A terminal that can be connected to the Internet and at the same time is portable, such as a portable telephone, also offers a preferable mode of mounting. The use of a portable device having a function for wireless communication is particularly suitable because it would be more convenient for consumers.

[0101] The data structure of the verification public key information is as follows.

Verification public key information::={

• • [0102] Issuer field,
  • [0103] Recipient field,
  • [0104] Issue date field,
  • [0105] Start date/time of effective period field,
  • [0106] End date/time of effective period field,
  • [0107] Verification public key identifier field,
  • [0108] Public key information field,
  • [0109] Digital signature field

[0110] }

[0111] Issuer field: The identifier of the center, which is the issuer of this verification public key information, is entered.

[0112] Recipient field: The identifier of the provider, who is the recipient of this verification public key information, is entered.

[0113] Issue date field: The issue date of this verification public key information is entered.

[0114] Start date/time of effective period field: The starting date/time of the effective period of this verification public key information is entered.

[0115] End date/time of effective period field: The ending date/time of the effective period of this verification public key information is entered.

[0116] Verification public key identifier field: The verification public key identifier assigned by the center to this verification public key is entered.

[0117] Public key information: The public key information used in checking a booking certificate is entered. It includes designation of the public key encryption algorithm and the value of the public key.

[0118] Digital signature field: The digital signature by the center, which is the issuer, covering all this verification public key information is entered.

[0119] The data structure of the booking certificate is as follows.

Booking certificate::={

• • [0120] Issuer field,
  • [0121] Recipient field,
  • [0122] Issue date field,
  • [0123] Booking certificate identifier field,
  • [0124] Public key identifier field,
  • [0125] Booking conditions field,
  • [0126] Booking value field,
  • [0127] Digital signature field

[0128] }

[0129] Issuer field: The identifier of the center, which is the issuer of this booking certificate, is entered.

[0130] Recipient field: The identifier of the consumer, who is the recipient of this booking certificate, is entered.

[0131] Issue date field: The issue date of this booking certificate is entered.

[0132] Booking certificate identifier field: The identifier assigned by the center to this booking certificate is entered.

[0133] Public key identifier field: The verification public key identifier assigned to the verification public key matching this booking certificate is entered.

[0134] Booking conditions field: The booking conditions, which are the conditions to limit the extent of the effectiveness of the booking, are entered.

[0135] Booking value field: Data prepared on the basis of a private key matching the verification public key to which the identifier entered in the public key identifier field of this booking certificate is assigned is entered.

[0136] Digital signature field: The digital signature by the center, which is the issuer, covering all this booking certificate is entered.

[0137] As the booking conditions, conditions for limiting the extent of the effectiveness of booking with this booking certificate are entered.

[0138] The data structure of the booking conditions is as follows.

Booking conditions::={

• • [0139] Start date/time of effective period field,
  • [0140] End date/time of effective period field,
  • [0141] . . .

[0142] }

[0143] Start date/time of effective period field: The starting date/time of the effective period of this booking certificate is entered.

[0144] End date/time of effective period field: The ending date/time of the effective period of this booking certificate is entered.

[0145] At the time of checking the booking certificate, it is checked whether or not the conditions stated in the “Booking conditions” are satisfied. Unless these conditions are not satisfied, verification of the booking certificate will be unsuccessful.

[0146] The booking conditions may include various other conditions according to the purpose of the booking certificate than the starting date/time and the ending date/time of the effective period.

[0147] For instance, if the booking certificate is to reserve a specific seat in a concert or some other event or on a train or an aircraft, the reservation of that particular seat with the booking certificate can be certified by including that seat number as one of the booking conditions. If merely admission to a specific event or boarding a specific train or aircraft is to be booked, the title of the event or the train or flight number can be designated as one of the booking conditions. If the date/time of the event or boarding has to be specified, that date/time can be designated as one of the booking conditions.

[0148] Where the object of booking is a product bearing a specific name or number, that specific name or number can be designated as one of the booking conditions.

[0149] Where the consumer is to be charged a fee at the delivery counter when the booked product or service is to be delivered to him or her, it is conceivable to make an arrangement that the sum of the fee be designated as one of the booking conditions. The booking certificate be successfully verified only if that sum of the fee is paid at the delivery counter for the product or service. Similarly, it is also possible to designate a price discount as one of the booking conditions. Where points, such as mileage points, are to be given to the consumer at the time of delivering the booked product or service, the number of points to be given can be designated as one of the booking conditions.

[0150] A configuration is also conceivable in which information to specify the verifying device for the booking certificate or the verifier is designated as one of the booking conditions, and only the designated device or verifier can successfully verify the booking certificate.

[Booking Value]

[0151] The booking value is a data item contained in a booking certificate. The data, prepared on the basis of the private key matching the verification public key prepared by the center, ensure that the booking certificate match only the specific verification public key. In preparing a booking value, consumer private information, which is secret information held by each consumer, and the booking conditions entered in the booking certificate are also used. This is for ensuring that only a specific consumer can use the booking certificate and that it can be used only when specific booking conditions are satisfied.

[0152] The public key encryption algorithm used in this embodiment is RSA. A booking value t is prepared in accordance with the following equation (1) where n is the modulus, e is the public key, d is the private key, u is the consumer private information, and 1 is a booking condition.
t=d−f(n, e, u, 1)  (1)

[0153] The function f( ) here is a public one-way function. As this function, a cryptographic one-way hash function, such as SHA-1 or MD5, is used.

[0154] As (1) reveals, the booking value t works equivalently to the private key d only when it is used together with the modulus n, the verification public key e, the consumer private information u and the booking condition 1. Replacement of any single term would prevent it from working equivalently to the private key d.

[Verification of a Booking Certificate]

[0155] Verification of a booking certificate is a process to check whether or not the booking value t can work equivalently to the private key d. A number of variations are conceivable for the method of verification.

[0156] FIG. 28 illustrates an example of configuration of a portable memory unit and a booking certificate verifying apparatus where the portable memory unit held by a consumer has a computing function. This portable memory unit is realized with a smart card, a portable telephone, or a laptop PC in this case.

[0157] In FIG. 28, reference numeral 2801 denotes a booking certificate verifying apparatus, and 2811, a portable memory unit to be connected to the booking certificate verifying apparatus 2801. In this arrangement, the booking certificate verifying apparatus 2801 delivers a random value known as a challenge to the portable memory unit 2811. The portable memory unit 2811 calculates a value known as a response using the booking certificate stored in the portable memory unit and the challenge sent from the booking certificate verifying apparatus. The booking certificate verifying apparatus verifies the legitimacy of the booking certificate stored in the portable memory unit by verifying the correctness of the response.

[0158] The booking certificate verifying apparatus 2801 is provided with a conditions designation memory unit 2802, a challenge generating unit 2803, a public key information memory unit 2804, a response checking unit 2805, and a portable memory unit controller 2806.

[0159] The role of each constituent part of the booking certificate verifying apparatus 2801 will be described below.

[0160] Conditions designation memory unit 2802: Where the booking certificate verifying apparatus 2801 is so configured that a booking certificate is successfully verified only when booking conditions entered in the booking certificate satisfy specific conditions, designations concerning the booking conditions are held there.

[0161] Challenge generating unit 2803: It generates challenges to be delivered to the portable memory unit 2811.

[0162] Public key information memory unit 2804: It holds the identifier, the modulus and the public key of the verification public key assigned to this booking certificate verifying apparatus.

[0163] Response checking unit 2805: It checks the correctness of the response prepared by the portable memory unit 2811.

[0164] Portable memory unit controller 2806: It controls exchanges of information with the portable memory unit 2811.

[0165] Further, the portable memory unit 2811 is provided with an input/output control unit 2812, a consumer private information memory unit 2813, a response calculating unit 2814, a booking conditions assessing unit 2815, and a booking certificate memory unit 2816.

[0166] The role of each constituent part of the portable memory unit 2811 will be described below.

[0167] Input/output control unit 2812: It controls the data inputting to and outputting from the booking certificate verifying device 2801.

[0168] Consumer private information memory unit 2813: It holds consumer private information.

[0169] Response calculating unit 2814: It calculates responses to be delivered to the booking certificate verifying apparatus 2801.

[0170] Booking conditions assessing unit 2815: It assesses whether or not the booking conditions entered in the booking certificate are satisfied.

[0171] Booking certificate memory unit 2816: It holds plural booking certificates.

[0172] FIG. 29 is a flowchart showing the operation of the booking certificate verifying apparatus 2801 and the portable memory unit 2811 in checking a booking certificate. The operation of the booking certificate verifying apparatus 2801 and the portable memory unit 2811 in checking a booking certificate will be described below with reference to FIG. 29.

[0173] Operation to verify a booking certificate is started by the booking certificate verifying apparatus 2801.

[0174] First, the challenge generating unit 2803 prepares a challenge C (2901). A challenge is a random value that varies every time verification is done, and the challenge generating unit 2803 has a random generating function built into it.

[0175] After a challenge is generated, the identifier ID, the modulus n and the public key e of the verification public key held by the public key information memory unit 2804, the condition designation s held by the conditions designation memory unit 2802, and the generated challenge C are delivered to the portable memory unit 2811 via the portable memory unit controller 2806 (2902).

[0176] The portable memory unit 2811 having received C, ID, n, e and s first selects, out of the booking certificates held by the booking certificate memory unit 2816, what matches the verification public key identifier ID (2903). This selection is accomplished by checking whether or not any one of the booking certificates held by the booking certificate memory unit 2816 has a public key identifier field equal to the ID. If no such booking certificate is found here, an error notice is delivered to the booking certificate verifying apparatus 2801 via the input/output control unit 2812 to end the operation (2908).

[0177] If a booking certificate meeting the requirement is found, the booking conditions assessing unit 2815 checks whether or not the booking condition 1 contained in the booking certificate is satisfied (2904). To check the start and end requirements of the effective period of the booking certificate entered in the booking condition 1, the booking conditions assessing unit 2815 has a built-in clock. In addition, where the condition designation s is entered from the booking certificate verifying apparatus 2801, it is also judged whether or not the condition designation s satisfies the booking condition 1. If, for instance, the booking certificate verifying apparatus 2801 is installed on a seat in a concert hall and it is desired that only the booking certificate having the number of that seat as a booking condition be legitimate, the seat number can be stored in the conditions designation memory unit 2802 as the condition designation, the number be delivered to the portable memory unit 2811 as s, and the booking conditions assessing unit 2815 check whether or not the booking condition 1 contains the seat number entered in the condition designation s.

[0178] If it is judged at 2904 that the booking condition 1 is not satisfied, an error notice is delivered to the booking certificate verifying apparatus 2801 via the input/output control unit 2812 to end the operation (2908).

[0179] If it is judged at 2904 that the booking condition 1 is satisfied, the response calculating unit 2814 calculates the response R (2905). The calculated response is delivered to the booking certificate verifying apparatus 2801 via the input/output control unit 2812 (2906). The response R is calculated in accordance with the following equation (2) from the challenge C, the modulus n and the public key e inputted from the booking certificate verifying apparatus 2801 via the input/output control unit 2812, the booking value t and the booking condition 1 contained in the booking certificate selected at 2903, and the consumer private information u held by the consumer private information memory unit 2813.
R=C^{t+f(n, e, u, i)}mod n  (2)

[0180] The booking certificate verifying apparatus 2801 having received the response R via the portable memory unit controller 2806 checks the legitimacy of the response R with the response checking unit 2805 (2907). For this checking are used the challenge C generated by the challenge generating unit 2803, and the modulus n and the public key e stored in the public key information memory unit 2804 in addition to the response R. If the following equation (3) holds, the verification is successful, or if not, it is a failure.
C≡R^emod n  (3)

[0181] As is evident from (1), (2) and (3), verification can be successful only when the combination of the modulus, public key, booking value, booking conditions and consumer private information is right. Invasion is difficult whether by diverting the booking certificate of a product or a service having a different verification public key, by using somebody else's booking certificate or by falsely altering the booking conditions.

[0182] FIG. 30 illustrates another example of configuration of a portable memory unit and a booking certificate verifying apparatus where the portable memory unit held by the consumer has a computing function.

[0183] In FIG. 30, reference numeral 3001 denotes a booking certificate verifying apparatus and 3011, a portable memory unit connected to the booking certificate verifying apparatus 3001. The booking certificate verifying apparatus 3001 delivers a random value known as a challenge to the portable memory unit 3011. The portable memory unit 3011 calculates a value known as a response out of the received challenge. The legitimacy of the booking certificate that is held by the booking portable memory unit 3011 is verified by having the booking certificate verifying apparatus 3001 verify the correctness of the response. This configuration of FIG. 30 differs from that of FIG. 28 in that the booking value and the booking conditions contained in the booking certificate are used by the booking certificate verifying apparatus while they are used by the portable memory unit in the configuration of FIG. 28.

[0184] The booking certificate verifying apparatus 3001 is provided with a challenge generating unit 3002, a conditions designation memory unit 3003, a public key information memory unit 3004, a response checking unit 3005, a booking conditions assessing unit 3006, a booking certificate memory unit 3007, and a portable memory unit controller 3008.

[0185] The role of each constituent part of the booking certificate verifying apparatus 3001 will be described below.

[0186] Challenge generating unit 3002: It generates challenges to be delivered to the portable memory unit 3011.

[0187] Conditions designation memory unit 3003: Where the booking certificate verifying apparatus 3001 is so configured that a booking certificate is successfully verified only when booking conditions entered in the booking certificate satisfy specific conditions, designations concerning the booking conditions are held there.

[0188] Public key information memory unit 3004: It holds the identifier, the modulus and the public key of the verification public key assigned to this booking certificate verifying apparatus.

[0189] Response checking unit 3005: It checks the correctness of the response prepared by the portable memory unit 3011.

[0190] Booking conditions assessing unit 3006: It assesses whether or not the booking conditions entered in the booking certificate are satisfied.

[0191] Booking certificate memory unit 3007: It holds the booking certificate taken out of the portable memory unit 3011.

[0192] Portable memory unit controller 3008: It controls exchanges of information with the portable memory unit 3011.

[0193] Further, the portable memory unit 3011 is provided with an input/output control unit 3012, a consumer private information memory unit 3013, a response calculating unit 3014, and a booking certificate memory unit 3015.

[0194] The role of each constituent part of the portable memory unit 3011 will be described below.

[0195] Input/output control unit 3012: It controls the data inputting to and outputting from the booking certificate verifying apparatus 3001.

[0196] Consumer private information memory unit 3013: It holds consumer private information.

[0197] Response calculating unit 3014: It calculates responses to be delivered to the booking certificate verifying apparatus 3001.

[0198] Booking certificate memory unit 3015: It holds plural booking certificates.

[0199] FIG. 31 is a flowchart showing the operation of the booking certificate verifying apparatus 3001 and the portable memory unit 3011 in checking a booking certificate. The operation of the booking certificate verifying apparatus 3001 and the portable memory unit 3011 in checking a booking certificate will be described below with reference to FIG. 31.

[0200] Operation to verify a booking certificate is started by the booking certificate verifying apparatus 3001.

[0201] The booking certificate verifying apparatus 3001 accesses the booking certificate memory unit 3015 of the portable memory unit 3011 via the portable memory unit controller 3008, and searches for a booking certificate that can be, out of the booking certificates held by the booking certificate memory unit 3015, used for booking certificate verification by the booking certificate verifying apparatus 3001 (3101). Out of the booking certificates held by the booking certificate memory unit 3015, one of which the value of the public key identifier field is identical with the verification public key identifier held by the public key information memory unit 3004 is the booking certificate that is sought for. If no such booking certificate is found here, the attempt at booking certificate verification fails and, after error processing (3109), the operation is ended.

[0202] If a booking certificate meeting the requirement is found, the booking certificate is taken out, and stored into the booking certificate memory unit 3007 of the booking certificate verifying device 3001 (3102).

[0203] Next the booking conditions assessing unit 3006 checks whether or not the booking condition 1 contained in the booking certificate held by the booking certificate memory unit 3007 is satisfied (3103). To check the start and end requirements of the effective period of the booking certificate entered in the booking condition 1, the booking conditions assessing unit 3006 has a built-in clock. In addition, where a condition designation is held by the conditions designation memory unit 3003, it is also judged here whether or not the condition designation satisfies the booking condition 1. If, for instance, the booking certificate verifying device 3001 is installed on the door of a hotel room and it is desired that only the booking certificate having the number of that room as a booking condition be legitimate, the room number can be stored in the conditions designation memory unit 3003 as the condition designation, and the booking conditions assessing unit 3006 check whether or not the booking condition 1 contains the room number held by the conditions designation memory unit 3003.

[0204] If it is judged at 3103 that the booking condition 1 is not satisfied, the attempt at booking certificate verification fails and, after error processing (3109), the operation is ended.

[0205] If it is judged at 3103 that the booking condition 1 is satisfied, a challenge C is prepared by the challenge generating unit 3002 (3104). A challenge is a random value that varies every time verification is done, and the challenge generating unit 3002 has a random generating function built into it.

[0206] After a challenge is generated, the identifier ID, the modulus n and the public key e of the verification public key held by the public key information memory unit 3004, the booking condition 1 contained in the booking certificate stored in the booking certificate memory unit 3007, and the generated challenge C are delivered to the portable memory unit 3011 via the portable memory unit controller 3008 (3105).

[0207] The portable memory unit 3011 having received the challenge C calculates the response R with the response calculating unit 3014 (3106). The response R is delivered to the booking certificate verifying apparatus 3001 via the input/output control unit 3012 (3107). The response R is calculated in accordance with the following equation (4) from the challenge C, the modulus n, the public key e and the booking condition 1 inputted from the booking certificate verifying apparatus 3001 via the input/output control unit 3012, and the consumer private information u held by the consumer private information memory unit memory unit 3013.
R=C^{f(n, e, u, 1)}mod n  (4)

[0208] The booking certificate verifying apparatus 3001 having received the response R via the portable memory unit controller 3008 checks the legitimacy of the response R with the response checking unit 3005 (3108). For this checking are used the challenge C generated by the challenge generating unit 3002, the modulus n and the public key e stored in the public key information memory unit 3004, and a booking value t contained in the booking certificate held by the booking certificate memory unit 3007 in addition to the response R. If the following equation (5) holds, the verification is successful, or if not, it is a failure.
C≡(C^tR)^emod n  (5)

[0209] As is evident from (1), (4) and (5), verification can be successful only when the combination of the modulus, public key, booking value, booking conditions and consumer private information is right. Invasion is difficult whether by diverting the booking certificate for a product or a service having a different verification public key, by using somebody else's booking certificate or by falsely altering the booking conditions.

[0210] FIG. 32 illustrates another example of configuration of a portable memory unit and a booking certificate verifying apparatus where the portable memory unit held by the consumer has no computing function.

[0211] In FIG. 32, reference numeral 3201 denotes a booking certificate verifying apparatus and 3211, a portable memory unit connected to the booking certificate verifying apparatus 3201. The booking certificate verifying apparatus 3201 takes out a booking certificate that is held by the booking portable memory unit 3211 and checks its legitimacy.

[0212] The booking certificate verifying apparatus 3201 is provided with a conditions designation memory unit 3202, a booking conditions assessing unit 3203, a public key information memory unit 3204, a booking value checking unit 3205, a booking certificate memory unit 3206, a portable memory unit controller 3207, and a consumer private information memory unit 3208.

[0213] The role of each constituent part of the booking certificate verifying apparatus 3201 will be described below.

[0214] Conditions designation memory unit 3202: Where the booking certificate verifying apparatus 3201 is so configured that a booking certificate is successfully verified only when booking conditions entered in the booking certificate satisfy specific conditions, designations concerning the booking conditions are held there.

[0215] Booking conditions assessing unit 3203: It assesses whether or not the booking conditions entered in the booking certificate are satisfied.

[0216] Public key information memory unit 3204: It holds the identifier, the modulus and the public key of the verification public key assigned to this booking certificate verifying apparatus.

[0217] Booking value checking unit 3205: It checks the correctness of the booking value entered in the booking certificate.

[0218] Booking certificate memory unit 3206: It holds the booking certificate taken out of the portable memory unit 3211.

[0219] Portable memory unit controller 3207: It controls exchanges of information with the portable memory unit 3211.

[0220] Consumer private information memory unit 3208: It holds consumer private information taken out of the portable memory unit 3211.

[0221] Further, the portable memory unit 3211 is provided with an input/output control unit 3212, a consumer private information memory unit 3213, and a booking certificate memory unit 3214.

[0222] The role of each constituent part of the portable memory unit 3211 will be described below.

[0223] Input/output control unit 3212: It controls the data inputting to and outputting from the booking certificate verifying apparatus 3201.

[0224] Consumer private information memory unit 3213: It holds consumer private information.

[0225] Booking certificate memory unit 3214: It holds plural booking certificates.

[0226] FIG. 33 is a flowchart showing the operation of the booking certificate verifying apparatus 3201 and the portable memory unit 3211 in checking a booking certificate. The operation of the booking certificate verifying apparatus 3201 and the portable memory unit 3211 in checking a booking certificate will be described below with reference to FIG. 33.

[0227] The booking certificate verifying apparatus 3201 accesses the booking certificate memory unit 3214 of the portable memory unit 3211 via the portable memory unit controller 3207, and searches for a booking certificate that can be, out of the booking certificates held by the booking certificate memory unit 3214, used for booking certificate verification by the booking certificate verifying device 3201 (3301). Out of the booking certificates held by the booking certificate memory unit 3214, one of which the value of the public key identifier field is identical with the verification public key identifier held by the public key information memory unit 3204 is the booking certificate that is sought for. If no such booking certificate is found here, the attempt at booking certificate verification fails and, after error processing (3306), the operation is ended.

[0228] If a booking certificate meeting the requirement is found, the booking certificate is taken out, and stored into the booking certificate memory unit 3206 of the booking certificate verifying apparatus 3201 (3302).

[0229] Next the booking conditions assessing unit 3203 checks whether or not the booking condition 1 contained in the booking certificate held by the booking certificate memory unit 3206 is satisfied (3303). To check the start and end requirements of the effective period of the booking certificate entered in the booking condition 1, the booking conditions assessing unit 3203 has a built-in clock. In addition, where a condition designation is held by the conditions designation memory unit 3203, it is also judged here whether or not the condition designation satisfies the booking condition 1.

[0230] If it is judged at 3303 that the booking condition 1 is not satisfied, the attempt at booking certificate verification fails and, after error processing (3306), the operation is ended.

[0231] If it is judged at 3303 that the booking condition 1 is satisfied, the consumer private information memory unit 3213 of the portable memory unit 3211 is accessed via the portable memory unit controller 3207 to take out consumer private information u held in the consumer private information memory unit 3213. The accessed consumer private information is stored into the consumer private information memory unit 3208 of the booking certificate verifying apparatus 3201 (3304).

[0232] Finally, the booking value checking unit 3205 checks the legitimacy of the booking value t contained in the booking certificate held by the booking certificate memory unit 3206 (3305). For the verifying purpose, the booking value checking unit 3205 generates a random number r, and checks if the following equation (6) with respect to the modulus n and the public key e stored in the public key information memory unit 3204, the booking condition 1 contained in the booking certificate held by the booking certificate memory unit 3206, and the consumer private information u held by the consumer private information memory unit 3208.
r≡(r^{t+f(n, e, u, 1)})^e mod n  (6)

[0233] As is evident from (1) and (6), verification of the booking value can be successful only when the combination of the modulus, public key, booking value, booking conditions and consumer private information is right. Invasion is difficult whether by diverting the booking certificate for a product or a service having a different verification public key, by using somebody else's booking certificate or by falsely altering the booking conditions.

[Issuance of Verification Public Key Information]

[0234] Verification public key information is prepared by the center at the request of a provider, and delivered to the requesting provider. At the time of requesting, a set of data known as a verification public key information request is transmitted and received. Although the sender usually is the requesting provider, and the receiver, the center accepting the request. Where some other entity connected to the Internet makes a request on behalf of the provider or accepts a request on behalf of the center, some other entity than the provider or the center may as well act as the sender or the receiver.

[0235] The data structure of the verification public key information request is as follows.

Verification public key information Request::={

• • [0236] Sender field,
  • [0237] Receiver field,
  • [0238] Date/time field,
  • [0239] Public key specifications field,
  • [0240] Digital signature field,
  • [0241] Certificate field

[0242] }

[0243] Sender field: The identifier of the sender of this request is entered. Although the sender usually is a provider, it may as well be another entity connected to the Internet.

[0244] Receiver field: The identifier of the receiver of this request is entered. Although the receiver usually is the booking certificate issuing center, it may as well be another entity connected to the Internet.

[0245] Date/time field: The date/time of the preparation of this request is entered.

[0246] Public key specifications field: The requester's requirements regarding the verification public key to be prepared by the center are entered. The identifier of the provider intending to use the verification public key, the public key encryption algorithm and information on the key length can be stated here.

[0247] Digital signature field: The digital signature by the sender for this request to endorse this request is entered.

[0248] Certificate field: A group of public key certificates including the public key for verifying the digital signature of the digital signature field of this request are entered.

[0249] The center having received the verification public key information request prepares a public key pair according to the public key specifications stated in the request, and prepares verification public key information, which is handed over to the provider, who is the requester. The center can decide whether or not the to prepare the requested verification public key information or whether or not to prepare the public key in conformity with the public key specifications stated in the request.

[0250] When the verification public key information is delivered, a set of data known as verification public key information delivery is transmitted and received. Although the sender usually is the booking certificate issuing center, which prepared the verification public key information, and the receiver usually is the provider to use the issued verification public key information. Where another entity connected to the Internet delivers the verification public key information on behalf of the booking certificate issuing center or receives the verification public key information on behalf of the provider, some other entity than the center or the provider may as well act as the sender or the receiver as the case may be.

[0251] The data structure of the verification public key information delivery is as follows.

Verification public key information delivery::={

• • [0252] Sender field,
  • [0253] Receiver field,
  • [0254] Date/time field,
  • [0255] Verification public key information field,
  • [0256] Digital signature field,
  • [0257] Certificate field

[0258] }

[0259] Sender field: The identifier of the sender of this verification public key information delivery is entered. Although the sender usually is the booking certificate issuing center, it may as well be another entity connected to the Internet.

[0260] Receiver field: The identifier of the receiver of this verification public key information delivery is entered. Although the receiver usually is a provider, it may as well be another entity connected to the Internet.

[0261] Date/time field: The date/time of the preparation of this verification public key information delivery is entered.

[0262] Verification public key information field: The verification public key information delivered by this verification public key information delivery is entered.

[0263] Digital signature field: The digital signature by the sender of this verification public key information delivery to endorse this verification public key information delivery is entered.

[0264] Certificate field: A group of public key certificates including the public key for verifying the digital signature field of this verification public key information delivery and the digital signature of the digital signature field of the verification public key information contained in this verification public key information delivery are entered.

[Booking Certificate Intermediation License]

[0265] In this embodiment, providers and retailers can be viable independently of each other. A retailer can offer for sale on an advance booking basis diverse tangible goods and/or services available from many different providers. It is also possible for a specific provider to have its goods and/or services sold by many retailers on an advance booking basis.

[0266] For a provider, it is basically an advantage to have its products sold by many retailers on an advance booking basis. But the provider cannot accept to have its products handled for advance booking by a retailer with whom the provider has no previous business relations or who is dubious in creditability because of the high risk of subsequent trouble. Therefore, the provider finds it necessary to qualify retailers who can handle the provider's goods and/or services.

[0267] To make this qualification possible, this embodiment uses a set of data called a booking certificate intermediation license.

[0268] A booking certificate intermediation license is a set of data that certifies that a provider has commissioned a specific retailer to sell its specific goods and/or services on an advance booking basis. A booking certificate intermediation license is prepared at the request of the retailer and delivered to the requesting retailer.

[0269] The data structure of the booking certificate intermediation license is as follows.

Booking certificate intermediation license::={

• • [0270] Issuer field,
  • [0271] Recipient field,
  • [0272] Issue date field,
  • [0273] Booking certificate intermediation license identifier field,
  • [0274] Start date/time of effective period field,
  • [0275] End date/time of effective period field,
  • [0276] Verification public key identifier field,
  • [0277] Booking conditions limitation information field,
  • [0278] Digital signature field

[0279] }

[0280] Issuer field: The identifier of the provider, who is the issuer of this booking certificate intermediation license, is entered.

[0281] Recipient field: The identifier of the retailer, who is the recipient of this booking certificate intermediation license, is entered.

[0282] Issue date field: The issue date of this booking certificate intermediation license is entered.

[0283] Booking certificate intermediation license identifier field: The identifier assigned by the provider to this booking certificate intermediation license is entered.

[0284] Start date/time of effective period field: The starting date/time of the effective period of this booking certificate intermediation license is entered.

[0285] End date/time of effective period field: The ending date/time of the effective period of this booking certificate intermediation license is entered.

[0286] Public key identifier field: The verification public key identifier assigned to the verification public key for which intermediation of the booking certificate is approved by this booking certificate intermediation license is entered.

[0287] Booking conditions limitation information field: Booking conditions limitation information, which is information to limit the scope of booking conditions to be entered in the booking certificate, is entered.

[0288] Digital signature field: The digital signature by the provider, who is the issuer, covering all this booking certificate intermediation license is entered.

[0289] With the booking conditions limitation information entered in the booking conditions limitation information field, the provider can control in detail the booking conditions to be entered in the booking certificate issued by the retailer.

[0290] The data structure of the booking conditions limitation information is as follows.

Booking conditions limitation information::={

• • [0291] Minimum effective period field,
  • [0292] Maximum effective period field,
  • [0293] . . .

[0294] }

[0295] Minimum effective period field: The minimum length of time between the start and the end of the effective period entered in the booking conditions field of the booking certificate, which is issued based on the booking certificate intermediation license including this booking conditions limitation information, is entered. The length of time between the start and the end of the effective period entered in the booking conditions field of the booking certificate should not be shorter than the value entered here.

[0296] Maximum effective period field: The maximum length of time between the start and the end of the effective period entered in the booking conditions field of the booking certificate, which is issued based on the booking certificate intermediation license including this booking conditions limitation information, is entered. The length of time between the start and the end of the effective period entered in the booking conditions field of the booking certificate should not be longer than the value entered here.

[0297] In the booking conditions limitation information, it is possible to set various limitations on selling the product and/or the service on advance booking base in besides the minimum effective period and the maximum effective period. For instance, where the verification public key designated in the public key identifier field, which is specified in the booking certificate intermediation license, matches the reservation of a seat in a concert and it is desired to limit the seat to be offer for sale by a specific retailer on an advance booking basis, the set of seat numbers the retailer is authorized to offer can be entered in the booking conditions limitation information field. The seat numbers to be entered in the booking conditions fields of booking certificates can be thereby limited.

[Issuance of Booking Certificate Intermediation License]

[0298] A booking certificate intermediation license is prepared by a provider at the request of a retailer, and delivered to the requesting retailer. When one is requested, a set of data known as a booking certificate intermediation license request is transmitted and received. Usually the sender is the requesting retailer, and the receiver, the provider accepting the request. Where some other entity connected to the Internet makes a request on behalf of the retailer or accepts a request on behalf of the provider, some other entity than the retailer or the provider may as well act as the sender or the receiver.

[0299] The data structure of a booking certificate intermediation license request is as follows.

Booking certificate intermediation license request::={

• • [0300] Sender field,
  • [0301] Receiver field,
  • [0302] Date/time field,
  • [0303] Booking certificate intermediation license specifications field,
  • [0304] Digital signature field,
  • [0305] Certificate field

[0306] }

[0307] Sender field: The identifier of the sender of this request is entered. Although the sender usually is a retailer, it may as well be another entity connected to the Internet.

[0308] Receiver field: The identifier of the receiver of this request is entered. Although the receiver usually is the provider, it may as well be another entity connected to the Internet.

[0309] Date/time field: The date/time of the preparation of this request is entered.

[0310] Booking certificate intermediation license specifications field: The requester's requirements regarding the booking certificate intermediation license to be prepared are entered here.

[0311] Digital signature field: The digital signature by the sender for this to endorse this request is entered.

[0312] Certificate field: A group of public key certificates including the public key for verifying the digital signature of the digital signature field of this request are entered.

[0313] The data structure of the booking certificate intermediation license specifications entered in the booking certificate intermediation license specifications field of the request is as follows.

Booking certificate intermediation license specifications:: ={

• • [0314] Licenser field,
  • [0315] Licensee field,
  • [0316] Public key identifier field,
  • [0317] Desired booking conditions limitation information field

[0318] }

[0319] Licenser field: The identifier of the provider desiring to have a booking certificate intermediation license prepared is entered.

[0320] Licensee field: The identifier of the retailer licensed with the booking certificate intermediation license so desired is entered.

[0321] Public key identifier field: The verification public key identifier assigned to the verification public key subject to desired licensing of intermediation of the booking certificate with the booking certificate intermediation license is entered.

[0322] Desired booking conditions limitation information field: The booking conditions limitation information desired to be entered in the booking certificate intermediation license to be prepared is entered.

[0323] The provider having received the booking certificate intermediation license request prepares a booking certificate intermediation license according to the booking certificate intermediation license specifications stated in the request. The provider hands the prepared booking certificate intermediation license over to the retailer. The provider can decide whether or not to prepare the requested booking certificate intermediation license or whether or not to prepare the booking certificate intermediation license according to the designated booking certificate intermediation license specifications.

[0324] When the prepared booking certificate intermediation license is handed over, a set of data known as a booking certificate intermediation license delivery is transmitted and received. Usually the sender is the provider who prepared the booking certificate intermediation license, and the receiver, the retailer who will use the issued booking certificate intermediation license. Where some other entity connected to the Internet delivers the booking certificate intermediation license on behalf of the provider or accepts the booking certificate intermediation license on behalf of the retailer, some other entity than the provider or the retailer may as well act as the sender or the receiver.

[0325] The data structure of the booking certificate intermediation license delivery is as follows.

Booking certificate intermediation license delivery::={

• • [0326] Sender field,
  • [0327] Receiver field,
  • [0328] Date/time field,
  • [0329] Booking certificate intermediation license field,
  • [0330] Digital signature field,
  • [0331] Certificate field

[0332] }

[0333] Sender field: The identifier of the sender of this booking certificate intermediation license delivery is entered. Although the sender usually is a provider, it may as well be another entity connected to the Internet.

[0334] Receiver field: The identifier of the receiver of this booking certificate intermediation license delivery is entered. Although the receiver usually is a receiver, it may as well be another entity connected to the Internet.

[0335] Date/time field: The date/time of the preparation of this booking certificate intermediation license delivery is entered.

[0336] Booking certificate intermediation license field: The booking certificate intermediation license delivered by this booking certificate intermediation license delivery is entered.

[0337] Digital signature field: The digital signature by the sender of this booking certificate intermediation license delivery to endorse this booking certificate intermediation license delivery is entered.

[0338] Certificate field: A group of public key certificates including the public key for verifying the digital signature of this booking certificate intermediation license delivery and the digital signature of the booking certificate intermediation license contained in this booking certificate intermediation license delivery are entered.

[Issuance of Booking Certificate]

[0339] A booking certificate is issued at the request of a consumer. The consumer delivers to a retailer a booking certificate request for booking of a specific product or service under specific booking conditions. The retailer having received the request usually prepares a booking certificate request for requesting the center to issue a booking certificate to the consumer, who is the original requester, and delivers it to the center. The center having received the request from the retailer prepares a booking certificate for the consumer, and hands it over to the retailer who delivered the booking certificate request. The retailer having received the booking certificate delivers that booking certificate to the consumer, who is the requester. For delivering a booking certificate from the center or the retailer, a set of data known as a booking certificate delivery is transmitted and received.

[0340] It is also possible for plural retailers to intermediate between a consumer and the center. In this case, a retailer having received a request directly from the consumer delivers a booking certificate request to a second retailer, and the second delivers to the center a booking certificate request. The issued booking certificate reaches the consumer as booking certificate deliveries are delivered over the same route in the reverse direction.

[0341] The data structure of a booking certificate request is as follows.

Booking certificate request::={

• • [0342] Sender field,
  • [0343] Receiver field,
  • [0344] Date/time field,
  • [0345] Booking particulars field,
  • [0346] Digital signature field,
  • [0347] Certificate field

[0348] }

[0349] Sender field: The identifier of the sender of this request is entered.

[0350] Receiver field: The identifier of the receiver of this request is entered.

[0351] Date/time field: The date/time of the preparation of this request is entered.

[0352] Booking particulars field: This is a field for entering requirements regarding the particulars of the requested booking certificate. Usually, booking specifications stating requirements regarding booking particulars are entered. But, where the receiver is a retailer and the retailer's own reference number is assigned to the product or service sold by the retailer on an advance booking basis, that number may be entered.

[0353] Digital signature field: The digital signature by the sender for this request to endorse this request is entered.

[0354] Certificate field: A group of public key certificates including the public key for verifying the digital signature of this request are entered.

[0355] The data structure of a booking specification stated in the booking particulars field of the booking certificate request is as follows.

Booking specifications::={

• • [0356] Public key identifier field,
  • [0357] Consumer identifier field,
  • [0358] Booking conditions field,
  • [0359] Booking certificate intermediation license field

[0360] }

[0361] Public key identifier field: A verification public key identifier assigned to a verification public key with which the booking certificate covered by the booking certificate request is entered.

[0362] Consumer identifier field: The identifier of the consumer, whose booking is certified by the booking certificate requested with the booking certificate request is entered.

[0363] Booking conditions field: Booking conditions desired to be entered into the booking certificate requested with the booking certificate request is entered.

[0364] Booking certificate intermediation license field: This field includes, where the sender of the request for booking certificate is a retailer, a booking certificate intermediation license certifying that the retailer is licensed to intermediate a booking certificate matching the verification public key having an identifier designated in the public key identifier field of this set of booking specifications under the booking conditions entered in the booking conditions field of this set of booking specifications.

[0365] The center decides whether or not to issue a booking certificate having booking conditions exactly as stated in the booking conditions filed of the booking specifications. In particular, against a request not licensed by the booking certificate intermediation license contained in the booking specifications, no booking certificate is issued.

[0366] Further, in the process of requesting a booking certificate, the intermediating retailer may modify the particulars in the booking conditions field of the booking specifications.

[0367] The data structure of the booking certificate delivery is as follows.

Booking certificate delivery::={

• • [0368] Sender field,
  • [0369] Receiver field,
  • [0370] Date/time field,
  • [0371] Booking certificate field,
  • [0372] Digital signature field,
  • [0373] Certificate field

[0374] }

[0375] Sender field: The identifier of the deliverer of this booking certificate delivery is entered.

[0376] Receiver field: The identifier of the receiver of this booking certificate delivery is entered.

[0377] Date/time field: The date/time of the preparation of this booking certificate delivery is entered.

[0378] Booking certificate field: The booking certificate delivered by this booking certificate delivery is entered.

[0379] Digital signature field: The digital signature by the sender of this booking certificate delivery to endorse this booking certificate delivery is entered.

[0380] Certificate field: A group of public key certificates including the public key for verifying the digital signature field of this booking certificate delivery and the digital signature of the booking certificate contained in this booking certificate delivery are entered.

[Configuration of the Center]

[0381] The center in this embodiment has a function to process verification public key information requests and booking certificates requests entered via the Internet, a function to prepare the issuance history of booking certificates and to deliver it to providers or retailers via the Internet, and a function to prepare the issuance history of verification public key information and to deliver it to providers via the Internet.

[0382] FIG. 2 illustrates the configuration of the center in this embodiment.

[0383] The center is provided with an input/output control unit 201, processing selection unit 202, a verification public key information request processing unit 203, a for booking certificate request processing unit 204, a provider DB 205, a public key pair DB 206, a retailer DB 207, a consumer DB 208, a booking certificate issuance history DB 209, a signature key memory unit 210, a certificate memory unit 211, a booking certificate issuance history for provider preparing unit 212, a booking certificate issuance history for retailer preparing unit 213, and a verification public key information issuance history preparing unit 214. The center is connected to the Internet via the input/output control unit 201.

[0384] The role of each section of the center in this embodiment will be described below.

[0385] Input/output control unit 201: It accepts data inputs via the Internet and outputs via the Internet data prepared by the verification public key information request processing unit 203 and data prepared by the booking certificate request processing unit 204. Usable methods of inputting from the Internet to the input/output control unit 201 or from the input/output control unit 201 to the Internet include making ready a WWW site connected to the input/output control unit 201 and offering it for accessing by providers and retailers and either automatic or manual interlocking of an electronic mail system and the input/output control unit 201.

[0386] Processing selection unit 202: It judges whether the entered set of data is a verification public key information request or a booking certificate request, and calls the verification public key information request processing unit 203 if it is a verification public key information request or the booking certificate request processing unit 204 if it is a booking certificate request.

[0387] Verification public key information request processing unit 203: It processes a verification public key information request, prepares a verification public key information delivery, and delivers it to the requester via the input/output control unit 201. In the process of preparing a verification public key information delivery, it refers to the provider DB 205 and adds a new entry to the public key pair DB 206.

[0388] Booking certificate request processing unit 204: It processes a booking certificate request, prepares a booking certificate delivery, and delivers it to the requester via the input/output control unit 201. In the process of preparing a booking certificate delivery, it refers to the public key pair DB 206, the retailer DB 207, and the consumer DB 208, and adds a new entry to the booking certificate issuance history DB.

[0389] Provider DB 205: This DB holds data regarding the provider.

[0390] Public key pair DB 206: This DB holds the public key pair to be used for preparing verification public key information or a booking certificate.

[0391] Retailer DB 207: This DB holds data regarding the retailer.

[0392] Consumer DB 208: This DB holds data regarding the consumer.

[0393] Booking certificate issuance history DB 209: This DB holds data regarding the issuance history of booking certificates.

[0394] Signature key memory unit 210: It holds a signature key for the digital signature prepared by the center.

[0395] Certificate memory unit 211: It holds a public key certificate containing a verification key with which a digital signature prepared with the signature key stored in the signature key memory unit 210 can be checked.

[0396] Booking certificate issuance history for provider preparing unit 212: It prepares a booking certificate issuance history for each provider, and delivers it to the provider via the input/output control unit 201.

[0397] Booking certificate issuance history for retailer preparing unit 213: It prepares a booking certificate issuance history for each retailer, and delivers each to each retailer via the input/output control unit 201.

[0398] Verification public key information issuance history preparing unit 214: It prepares a verification public key information issuance history for each provider, and delivers it to the provider via the input/output control unit 201.

[Databases the Center has]

[0399] The center has five databases including the provider DB 205, the public key pair DB 206, the retailer DB 207, the consumer DB 208, and the booking certificate issuance history DB 209.

[0400] The provider DB 205 is a database holding information regarding entities recognized as providers by the center.

[0401] The structure of the provider DB 205 is FIG. 6. The provider DB 205 is a table having the following sole attribute.

[0402] Provider identifier attribute: The identifier of an entity recognized as a provider by the center.

[0403] The center recognizes no other entity as a provider than the providers registered in this database. Therefore the center never issues verification public key information to any unregistered entity; nor does it issue a booking certificate for any product or service offered by any such entity.

[0404] When it is desired to increase entities recognized as providers by the center, a new entry or entries can be added to this database.

[0405] The public key pair DB 206 is a database that holds information regarding verification public keys issued to providers and private keys respectively matching them. In this embodiment, RSA is used as the public key encryption algorithm for the verification public keys and the private key respectively matching them. Therefore, the public key pair DB 206 is a database that holds information regarding public key pairs of RSA.

[0406] The structure of the public key pair DB 206 is illustrated in FIG. 7. The public key pair DB 206 is a table listing the following 8 attributes, in which each entry is information regarding one public key pair.

[0407] Public key identifier attribute: The verification public key identifier assigned to the public key pair of this entry.

[0408] Modulus attribute: RSA modulus.

[0409] Public key attribute: RSA public key.

[0410] Private key attribute: RSA private key.

[0411] Provider identifier attribute: The identifier of the provider to whom verification public key information including the public key of the public key pair of this entry has been issued.

[0412] Start of effective period attribute: The starting date/time of the effective period of the verification public key information including the public key of the public key pair of this entry.

[0413] End of effective period attribute: The ending date/time of the effective period of the verification public key information including the public key of the public key pair of this entry.

[0414] Issue date attribute: The issue date/time of the verification public key information including the public key of the public key pair of this entry.

[0415] The retailer DB 207 is a database that holds information regarding entities recognized as retailers by the center.

[0416] The structure of the retailer DB 207 is illustrated in FIG. 8. The retailer DB 207 a table having the following sole attribute.

[0417] Retailer identifier attribute: The identifier of an entity recognized as a retailer by the center.

[0418] The center recognizes no other entity as a retailer than the retailers registered in this database. Therefore, the center never issues a booking certificate against a booking certificate request from any unregistered entity.

[0419] When it is desired to increase entities recognized as retailers by the center, a new entry or entries can be added to this database.

[0420] The consumer DB 208 is a database that holds information regarding entities recognized as consumers by the center.

[0421] The structure of the consumer DB 208 is illustrated in FIG. 9. The consumer DB 208 is a table having the following two attributes.

[0422] Consumer identifier attribute: The identifier of an entity recognized as a consumer by the center. It is a value also held in the portable memory unit carried by the consumer.

[0423] Consumer private information attribute: consumer private information held in the portable memory unit holding the consumer designated by the consumer identifier attribute.

[0424] The booking certificate issuance history DB 209 is a database that holds information regarding the booking certificates so far issued by the center.

[0425] The structure of the booking certificate issuance history DB 209 is illustrated in FIG. 10. The booking certificate issuance history DB 209 is a table listing the following six attributes, in which each entry is information regarding one booking certificate.

[0426] Public key identifier attribute: The verification public key identifier assigned to the verification public key of the booking certificate of this entry.

[0427] Provider identifier attribute: The identifier of the provider to whom verification public key information including the verification public key designated by the public key identifier attribute of this entry has been issued.

[0428] Consumer identifier attribute: The consumer identifier contained in the portable memory unit of the consumer whose booking is certified by the booking certificate of this entry.

[0429] Intermediary identifier attribute: The identifier of the retailer have request issuance of the booking certificate of this entry.

[0430] Booking conditions attribute: The result encoding the booking conditions entered in the booking certificate of this entry in accordance with Basic Encoding Rule: ITU-T Recommendation X. 690 (BER).

[0431] Issuance date attribute: The Issuance date/time of the booking certificate of this entry.

[0432] FIG. 3 is a flowchart showing the operation of the center in this embodiment. The operation of the center in this embodiment will be described with reference to the flowchart of FIG. 3.

[0433] As shown in FIG. 3, the center in this embodiment keeps on waiting for inputting of data and, if there is any, performs processing as the input requires, followed by a return to the input awaiting state. It is an endless process.

[0434] First, it is checked whether or not there is any input to the input/output control unit 201 (301). If there is no input, the center returns to input checking (301) again.

[0435] If any input is detected by input checking (301), the processing selection unit 202 judges whether or not the input is a verification public key information request (302). If the input is a verification public key information request, the verification public key information request processing unit 203 is called, and the verification public key information request is processed (303). Upon completion of the processing of the verification public key information request, the center returns to input checking (301) again.

[0436] If it is judged at step 302 that the input is not a verification public key information request, the processing selection unit 202 judges whether or not the input is a booking certificate request (304). If the input is a booking certificate request, the booking certificate request processing unit 204 is called, and the booking certificate request is processed (305). Upon completion of the processing of the booking certificate request, the center returns to input checking (301) again.

[0437] Or if it is judged at step 304 that the input is not a booking certificate request, the center returns to input checking (301) again.

[Verification Public Key Information Request Processing Unit]

[0438] FIG. 4 illustrates the internal structure of the verification public key information request processing unit 203 provided in the center of this embodiment.

[0439] The verification public key information request processing unit 203, having a function to process verification public key information requests. This unit is provided with a processing control unit 401, a signature verification unit 402, a public key pair preparing unit 403, a verification public key identifier preparing unit 404, a verification public key information preparing unit 405, a verification public key information delivery preparing unit 406, an error message preparing unit 407, and a signature preparing unit 408.

[0440] The role of each constituent part of the verification public key information request processing unit 203 will be described below.

[0441] Processing control unit 401: This unit performs the functions to accept an input from the processing selection unit 202, provide an output to the input/output control unit 201, refer to the provider DB 205, and add an entry to the public key pair DB 206. Furthermore, this unit carries out overall control of the processing of a verification public key information request.

[0442] Signature verification unit 402: It verifies the digital signature of a verification public key information request inputted from the processing selection unit 202.

[0443] Public key pair preparing unit 403: It prepares a public key pair used for the preparation of a verification public key information and a booking certificate.

[0444] Public key pair identifier preparing unit 404: It prepares a verification public key identifier assigned to a verification public key. It is designed to prevent duplication of generated identifiers, such as taking out a bit string at random from a sufficiently large space.

[0445] Verification public key information preparing unit 405: It prepares verification public key information. It calls the signature preparing unit 408 to affix a digital signature to the verification public key information.

[0446] Verification public key information delivery preparing unit 406: It prepares a verification public key information delivery. It calls the signature preparing unit 408 to affix a digital signature to the verification public key information delivery. It further accesses the certificate memory unit 211 to obtain a public key certificate for the verification key of the signature of the center.

[0447] Error message preparing unit 407: It prepares an error message.

[0448] Signature preparing unit 408: It prepares digital signatures for verification public key information and a verification public key information delivery. In order to obtain a signature key for the digital signature, it accesses the signature key memory unit 210.

[0449] FIG. 5 is a flowchart showing the operation of a processing control unit 401 of the verification public key information request processing unit 203 provided in the center of this embodiment. The operation of the processing control unit 401 will be described below with reference to FIG. 5.

[0450] First, the identifier of the entity, who is the user of the requested verification public key information and is specified in the public key specifications field of the verification public key information request inputted from the processing selection unit 202, is taken out. And it is checked whether or not the center recognizes the entity having this identifier as a provider by referencing the provider DB 205(501). If any entry having this identifier exists in the provider DB 205, it is found to be an entity recognized as a provider.

[0451] If it is judged at step 501 that it is an entity not recognized as a provider, an error message is prepared by the error message preparing unit 407 and, after supplying it to the input/output control unit 201 (509), the processing is ended.

[0452] If it is judged at step 501 that it is an entity recognized as a provider, the digital signature of the verification public key information request is checked (502). As the verification key, what is appended to the certificate field of the request is used, but if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111.

[0453] If the signature fails to be verified, an error message is prepared by the error message preparing unit 407 and, after it is supplied to the input/output control unit 201 (509), the processing is ended.

[0454] If the signature is successfully verified, the public key pair preparing unit 403 is called to have an RSA public key pair prepared, and the modulus, the public key and the private key that are prepared are received (503). Further, the public key pair identifier preparing unit 404 is called to have an identifier for assignment to the verification public key information prepared, and receives the identifier so prepared (504).

[0455] Next, after the starting date/time and the ending date/time of the effective period of the verification public key information are appropriately determined (505), a new entry is added to the public key pair DB (506). The following values are set for the attributes of the new entry.

[0456] Public key identifier attribute: The identifier prepared at step 504.

[0457] modulus attribute: The RSA modulus prepared at step 503.

[0458] Public key attribute: The RSA public key prepared at step 503.

[0459] Private key attribute: The RSA private key prepared at step 503.

[0460] Provider identifier attribute: The identifier of the provider, who is the user of the verification public key specified in the public key specifications field of the verification public key information request.

[0461] Start of effective period attribute: The starting date/time of the effective period prepared at step 505.

[0462] End of effective period attribute: The ending date/time of the effective period prepared at step 505.

[0463] Issuance date attribute: The current date/time.

[0464] Next, the verification public key information preparing unit (405) is called to have verification public key information prepared, and its result is received (507). The following values are set in the fields of the verification public key information.

[0465] Issuer field: The center's own identifier.

[0466] Recipient field: The identifier of the provider, who is the user of the verification public key specified in the public key specifications field of the verification public key information request.

[0467] Issue date field: The current point of time.

[0468] Start of effective period field: The starting date/time of the effective period prepared at step 505.

[0469] End of effective period field: The ending date/time of the effective period prepared at step 505.

[0470] Verification public key identifier field: The identifier prepared at step 504.

[0471] Public key information field: The modulus and the public key prepared at step 503.

[0472] Digital signature field: The digital signature for data in other fields of this verification public key information than this field. The signature preparing unit 408 is called to prepare the digital signature, and the resultant signature value is received and set in this field.

[0473] Finally, the verification public key information delivery preparing unit 406 is called to have a verification public key information delivery prepared and, after the result is received and supplied to the input/output control unit 201 (508), the processing is ended. The following values are set in the fields of the verification public key information delivery.

[0474] Sender field: The center's own identifier.

[0475] Receiver field: The identifier entered in the sender field of the verification public key information request.

[0476] Date/time field: The current point of time.

[0477] Verification public key information field: The verification public key information prepared at step 507.

[0478] Digital signature field: The digital signatures for data in other fields of this verification public key information delivery than this and certificate fields. The signature preparing unit 408 is called to prepare the digital signatures, and the resultant signature values are received and set in this field.

[0479] Certificate field: The public key certificate stored in the certificate memory unit 211.

[Booking Certificate Request Processing Unit]

[0480] FIG. 11 illustrates the internal configuration of the booking certificate processing request unit 204 the center in this embodiment has.

[0481] The booking certificate request processing unit 204 has a function to process a booking certificate request. This unit is provided with a processing control unit 1101, a signature verification unit 1102, a booking certificate intermediation license checking unit 1103, a booking certificate identifier preparing unit 1104, a booking certificate preparing unit 1105, a booking certificate delivery preparing unit 1106, an error message preparing unit 1107, a signature preparing unit 1108, a booking value preparing unit 1109, and a booking conditions preparing unit 1110.

[0482] The role of each constituent part of the booking certificate processing request unit 204 will be described below.

[0483] Processing control unit 1101: This unit performs the functions to accept an input from the processing selection unit 202, provide an output to the input/output control unit 201, refer to the public key pair 206, the retailer DB 207 and the consumer DB 208, and add an entry to the booking certificate issuance history DB 209. Furthermore, this unit carries out overall control of the processing of a booking certificate request.

[0484] Signature verification unit 1102: It checks digital signature in the booking certificate request inputted from the processing selection unit 202 and in the booking certificate intermediation license contained in the request.

[0485] Booking certificate intermediation license checking unit 1103: It checks whether or not the intermediation of a booking certificate requested with the booking certificate request inputted from the processing selection unit 202 is licensed by the booking certificate intermediation license contained in the request. Booking certificate identifier preparing unit 1104: It prepares a booking certificate identifier to be assigned to a booking certificate. It is designed to prevent duplication of generated identifiers, such as taking out a bit string at random from a sufficiently large space.

[0486] Booking certificate preparing unit 1105: It prepares a booking certificate, and calls the signature preparing unit 1108 to append a digital signature to the booking certificate.

[0487] Booking certificate delivery preparing unit 1106: It prepares a booking certificate delivery, and calls the signature preparing unit 1108 to append a digital signature to the booking certificate delivery. It further accesses the certificate memory unit 211 to obtain the public key certificate of a verification key for the signature of the center.

[0488] Error message preparing unit 1107: It prepares an error message.

[0489] Signature preparing unit 1108: It prepares a digital signature for the booking certificate and the booking certificate delivery, and accesses the signature memory unit 210 to obtain a signature key for a digital signature.

[0490] Booking value preparing unit 1109: It prepares a booking value to be contained in a booking certificate.

[0491] Booking conditions preparing unit 1110: It prepares booking conditions to be contained in a booking certificate.

[0492] FIG. 12 is a flowchart showing the operation of the processing control unit of the booking certificate request processing unit 204 provided in the center of this embodiment. The operation of the processing control unit 1101 will be described below with reference to FIG. 12.

[0493] First, the identifier entered in the sender field of a booking certificate request, which is inputted from the processing selection unit 202, is taken out. Further, it is checked by referencing the retailer DB 207 whether or not the entity of this identifier is recognized as a retailer by the center (1201). If there is an entry having this identifier in the retailer DB 207, it is found to be an entry recognized as a retailer.

[0494] If the entity is not found at step 1201 to be recognized as a retailer, an error message is prepared by the error message preparing unit 1107. After sending the prepared error message to the input/output control unit 201 (1210), the processing is ended.

[0495] If the entity is found at step 1201 to be recognized as a retailer, the digital signature of the booking certificate request and the digital signature of a booking certificate intermediation license contained in the request are checked (1202). As the verification key, what is appended to the certificate field of the request is used. But if the required public key certificate is absent in the certificate field, the signatures are checked after a public key certificate is obtained from the CA 111.

[0496] If the signature fails to be verified, an error message is prepared by the error message preparing unit 1107 and, after it is supplied to the input/output control unit 201 (1210), the processing is ended.

[0497] If the signature is successfully verified, it is checked whether or not the intermediation for a booking certificate requested with the request is licensed by the booking certificate intermediation license contained in the request (1203). More specifically, booking specifications contained in the booking particulars field of the request are checked by the booking certificate intermediation license checking unit 1103. The booking certificate intermediation license checking unit checks whether or not the issuance of a booking certificate matching the verification public key having a verification public key identifier designated in the public key identifier field of the booking specifications under the booking conditions entered in the booking conditions field of the booking specifications is licensed with the booking certificate intermediation license contained in the booking specifications.

[0498] If it is found at step 1203 that the issuance is not licensed, an error message is prepared by the error message preparing unit 1107 and, after it is supplied to the input/output control unit 201 (1210), the processing is ended.

[0499] If it is found at step 1203 that the issuance is licensed, the booking certificate identifier preparing unit 1104 is called to have an identifier to be assigned to the booking certificate prepared (1204). After receiving the prepared identifier, the booking conditions preparing unit 1110 is called to determine the booking conditions to be entered in the booking certificate (1205). Usually, the booking conditions generated by the booking conditions preparing unit may either exactly the values of the booking conditions field of the booking specifications contained in the booking particulars field of the booking certificate request. The generated booking conditions may be the result of appropriate modification of the values of the booking conditions field within an extend licensed by the booking certificate intermediation license contained in the booking certificate intermediation license field of the booking specifications.

[0500] After the preparation of the booking conditions, a new entry is added to the booking certificate issuance history DB 209 (1206). The following values are set for the attributes of the new entry.

[0501] Public key identifier attribute: The value of the public key identifier field of the booking specifications contained in the booking particulars field of the booking certificate request.

[0502] Provider identifier attribute: The public key pair DB is accessed to take out the provider identifier attribute of the entry, in the public key pair DB, whose public key identifier attribute has the same value as that of the public key identifier field of the booking specifications contained in the booking particulars field, and this value is set.

[0503] Consumer identifier attribute: The value of the consumer identifier field of the booking specifications contained in the booking particulars field of the request.

[0504] Intermediary identifier attribute: The value of the sender field of the request.

[0505] Booking conditions attribute: The booking conditions prepared by the booking conditions preparing unit at step 1205.

[0506] Issuance date attribute: The current date/time.

[0507] Next, the booking value preparing unit 1109 is called to have a booking value prepared, and the result is received (1207).

[0508] Then, the booking certificate preparing unit 1105 is called to have a booking certificate prepared, and the result is received (1208). The following values are set in the fields of the booking certificate.

[0509] Issuer field: The center's own identifier.

[0510] Recipient field: The value of the consumer identifier field of the booking specifications contained in the booking particulars field of the booking certificate request.

[0511] Issuance date field: The value of the issuance date attribute of the entry added to the booking certificate issuance history DB 209 at step 1206.

[0512] Booking certificate identifier field: The identifier prepared at step 1204.

[0513] Public key identifier field: The value of the public key identifier field of the booking specifications contained in the booking particulars field of the request.

[0514] Booking conditions field: The booking conditions prepared by the booking conditions preparing unit at step 1205.

[0515] Booking value field: The booking value prepared at 1207.

[0516] Digital signature field: Digital signatures for data in other fields of this booking certificate than this field. To prepare the digital signatures, the signature preparing unit 1108 is called, and the resultant signatures are received and set in this field.

[0517] Finally, the booking certificate delivery preparing unit 1106 is called to have a booking certificate delivery prepared. After the result is received and supplied to the input/output control unit 201 (1209), the processing is ended. The following values in the fields of the booking certificate delivery.

[0518] Sender field: The center's own identifier.

[0519] Receiver field: The value of the sender field of the booking certificate request.

[0520] Date/time field: The current point of time.

[0521] Booking certificate field: The booking certificate prepared at step 1208.

[0522] Digital signature field: The digital signatures for data in other fields of this booking certificate delivery than this and certificate fields. The signature preparing unit 1108 is called to prepare the digital signatures, and the resultant signature values are received and set in this field.

[0523] Certificate field: The public key certificate stored in the certificate memory unit 211.

[Other Functions the Center has]

[0524] The center in this embodiment can deliver booking certificate issuance history information to providers.

[0525] The booking certificate issuance history information delivered to a provider is information on the issuance of booking certificates matching the verification public key assigned to that provider. It is prepared by the booking certificate issuance history for provider preparing unit 212, and delivered to the provider via the input/output control unit 201. For the provider, this history information is reliable information indicating what quantity of the product or service it provides has been sold by which retailer on an advance booking basis. Further, this information is the essential basis of confirmation by the provider of the correctness of the margin of the sales on an advance booking basis delivered from a retailer to the provider.

[0526] The booking certificate issuance history for provider preparing unit 212 is given the designation of the identifier of the provider for whom the history is to be prepared and the starting date/time and the ending date/time of the period the history is to cover. Then, this unit takes out of the booking certificate issuance history DB 209 a group of entries the value of whose provider identifier attribute is identical with the designated provider identifier and the value of the issuance date attribute is within the designated period of coverage by the history. Furthermore, this unit takes out the values of the public key identifier attribute, the intermediary identifier attribute, the booking conditions attribute and the issuance date attribute from the extracted entries. In this embodiment, the designation of the identifier of the provider for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the center. But it may as well be inputted by the provider via the Internet.

[0527] The center of this embodiment can deliver booking certificate issuance history information to retailers as well.

[0528] The booking certificate issuance history information delivered to a retailer is information regarding the issuance of booking certificates requested by that retailer. It is prepared by the booking certificate issuance history for retailer preparing unit 213, and delivered to the retailer via the input/output control unit 201. This history serves as the basis of the margin for the booking certificate issuance the center receives from the retailer.

[0529] The booking certificate issuance retailer history preparing unit 213 is given the designation of the identifier of the retailer for whom the history is to be prepared and the starting date/time and the ending date/time of the period the history is to cover. Then, this unit takes out of the booking certificate issuance history DB 209 a group of entries the value of whose intermediary identifier attribute is identical with the designated retailer identifier and the value of the issuance date attribute is within the designated period of coverage by the history. Furthermore, the unit takes out the values of the public key identifier attribute, the retailer identifier attribute, the consumer identifier attribute, the booking conditions attribute and the issuance date attribute from the extracted entries. In this embodiment, the designation of the identifier of the retailer for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the center. But it may as well be inputted by the retailer via the Internet.

[0530] The center in this embodiment can also deliver verification public key information issuance history information to providers.

[0531] The verification public key information issuance history information delivered to a provider is information on the issuance of verification public key information to that provider. It is prepared by the verification public key information issuance history preparing unit 214, and delivered to the provider via the input/output control unit 201. This history information serves as the basis of collection by the center of commissions for the issuance of verification public key information from the provider.

[0532] The verification public key information issuance history preparing unit 214 is given the designation of the identifier of the provider for whom the history is to be prepared and the starting date/time and the ending date/time of the period the history is to cover. Then, this unit takes out of the public key pair DB 206 a group of entries the value of whose provider identifier attribute is identical with the designated provider identifier and the value of the issuance date attribute is within the designated period of coverage by the history. Furthermore, the unit takes out the values of the public key identifier attribute, the modulus attribute, the public key attribute, the start of effective period attribute, the end of effective period attribute and the issuance date attribute from the extracted entries. In this embodiment, the designation of the identifier of the provider for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the center. But it may as well be inputted by the provider via the Internet.

[0533] Such history information may be delivered to the provider or the retailer by electronic mail. Or it may be issued on demand on a WWW base. Where there is a fear of tapping or alteration, it is preferable to apply encryption or a digital signature.

[Configuration of a Provider]

[0534] FIG. 13 illustrates the configuration of a provider in this embodiment of the invention.

[0535] A provider in this embodiment has a function to prepare a verification public key information request and deliver it to the center via the Internet. Furthermore, the provider has a function to process a verification public key information delivery and a booking certificate intermediation license request inputted via the Internet. The provider has an input/output control unit 1301, a processing selection unit 1302, a verification public key information request preparing unit 1303, a verification public key information delivery processing unit 1304, a booking certificate intermediation license request processing unit 1305, a verification public key DB 1306, a signature key memory unit 1307, a certificate memory unit 1308, a booking certificate intermediation license issuance history DB 1309 and a booking certificate intermediation license issuance history preparing unit 1310. The provider is connected to the Internet via the input/output control unit 1301.

[0536] The roles of various parts of the provider in this embodiment will be described below.

[0537] Input/output control unit 1301: While monitoring data inputs via the Internet, this unit supplies via the Internet data prepared by the verification public key information request preparing unit 1303 and the booking certificate intermediation license request processing unit 1305. Methods usable for inputs from the Internet to the input/output control unit 1301 or outputs from the input/output control unit 1301 includes establishment of a WWW site connected to the input/output control unit 1301 to be offered for accessing by other entities. Posting data prepared by the provider to a WWW site available from another entity is included in the methods too. Automatic or manual interlocking of an electronic mail system and the input/output control unit 1301 can be used for connecting the input/output control unit 1301 and the Internet.

[0538] Processing selection unit 1302: It judges whether the set of data that is inputted is a verification public key information delivery or a booking certificate intermediation license request. Then, this unit calls the verification public key information delivery processing unit 1304 if it is a verification public key information delivery or the booking certificate intermediation license request processing unit 1305 if it is a booking certificate intermediation license request.

[0539] Verification public key information request preparing unit 1303: It prepares a verification public key information request, and delivers it to the center via the input/output control unit 1301. In the process of preparing the verification public key information request, it accesses the signature key memory unit 1307 and the certificate memory unit 1308.

[0540] Verification public key information delivery processing unit 1304: It processes the verification public key information delivery, and registers the verification public key into the verification public key DB 1306.

[0541] Booking certificate intermediation license request processing unit 1305: It processes a booking certificate intermediation license request, prepares a booking certificate intermediation license delivery, and delivers it to the requester via the input/output control unit 1301. In the process of preparing the booking certificate intermediation license delivery, it refers to the verification public key DB 1306, adds a new entry to the booking certificate intermediation license DB, and accesses the signature key memory unit 1307 and the certificate memory unit 1308.

[0542] Verification public key DB 1306: This DB holds information regarding verification public keys.

[0543] Signature key memory unit 1307: It holds a signature key to be used for the digital signature prepared by the provider.

[0544] Certificate memory unit 1308: It holds a public key certificate containing a verification key with which a digital signature prepared with a signature key stored in the signature key memory unit 1307 can be checked.

[0545] Booking certificate intermediation license issuance history DB 1309: This DB holds the booking certificate intermediation license issuance history.

[0546] Booking certificate intermediation license issuance history preparing unit 1310: It prepares a booking certificate intermediation license issuance history for each retailer.

[Databases Maintained by a Provider]

[0547] A provider has two databases including the verification public key DB 1306 and the booking certificate intermediation license issuance history DB 1309.

[0548] The verification public key DB 1306 is a database for holding the particulars of verification public key information issued by the center together with the uses of the verification public keys determined by the provider itself.

[0549] The structure of the verification public key DB 1306 is illustrated in FIG. 14. The verification public key DB 1306 is a table listing the following six attributes, in which each entry is information regarding one verification public key.

[0550] Public key identifier attribute: A verification public key identifier assigned to a verification public key by the center.

[0551] Modulus attribute: An RSA modulus contained in the verification public key information.

[0552] Public key attribute: An RSA public key contained in the verification public key information.

[0553] Start of effective period attribute: The starting date/time of the effective period of the verification public key information.

[0554] End of effective period attribute: The ending date/time of the effective period of the verification public key information.

[0555] Use attribute: The use assigned by the provider to the verification public key of this entry. It is information on a product or a service regarding which the legitimacy of a booking certificate is checked with the verification public key of this entry.

[0556] The booking certificate intermediation license issuance history DB 1309 is a database for holding the history of booking certificate intermediation licenses issued by the provider.

[0557] The structure of the booking certificate intermediation license issuance history DB 1309 is illustrated in FIG. 34. The booking certificate intermediation license issuance history DB 1309 is a table having the following seven attributes, in which each entry is information regarding one issuance of one booking certificate intermediation license.

[0558] Booking certificate intermediation license identifier attribute: An identifier assigned by the provider to the booking certificate intermediation license that has been issued.

[0559] Public key identifier attribute: A verification public key identifier assigned by the center to the verification public key for which intermediation of a booking certificate is licensed with the booking certificate intermediation license that has been issued.

[0560] Retailer identifier attribute: The identifier of the retailer to be licensed with the booking certificate intermediation license that has been issued.

[0561] Booking conditions limitation information attribute: The booking conditions limitation information entered in the booking certificate intermediation license that has been issued.

[0562] Start of effective period attribute: The starting date/time of the effective period of the booking certificate intermediation license that has been issued.

[0563] End of effective period attribute: The ending date/time of the effective period of the booking certificate intermediation license that has been issued.

[0564] Issuance date attribute: The issuance date/time of the booking certificate intermediation license that has been issued.

[Verification Public Key Information Request Preparing Unit]

[0565] A provider in this embodiment, when there is a product or a service it desires to newly start selling on an advance booking basis, requests the center to issue verification public key information containing a verification public key to be assigned to that product or service. When requesting verification public key information, the provider prepares a verification public key information request with the verification public key information request preparing unit 1303, and delivers it to the center via the input/output control unit 1301.

[0566] The verification public key information request preparing unit 1303 sets the following in the fields of the verification public key information request.

[0567] Sender field: The provider's own identifier.

[0568] Receiver field: The center's identifier.

[0569] Date/time field: The current point of time.

[0570] Public key specifications field: Requirements regarding the verification public key to be prepared. The provider enters its own identifier as the user of the verification public key, and further enters the required public key encryption algorithm and key length. Since this embodiment allows the use of only RSA as the public key encryption algorithm, the value of the public key encryption algorithm is fixed to RSA.

[0571] Digital signature field: The digital signatures for data in other fields of this request than this and certificate fields. For preparing digital signatures, the verification public key information request preparing unit 1303 includes a signature preparing unit, and the values of signature prepared by this signature preparing unit are set in this field. The signature key is obtained by accessing the signature key memory unit 1307.

[0572] Certificate field: A public key certificate stored in the certificate memory unit 1308.

[Verification Public Key Information Delivery Processing Unit]

[0573] When a verification public key information request is prepared by the verification public key information request preparing unit 1303 and delivered to the center, a verification public key information delivery is transmitted from the center in return. The verification public key information delivery is delivered via the input/output control unit 1301 and the processing selection unit 1302 to the verification public key information delivery processing unit 1304, where it is processed.

[0574] FIG. 15 is a flowchart showing the operation of a verification public key information delivery processing unit 1304 which a provider in this embodiment has. The operation of the verification public key information delivery processing unit 1304 will be described below with reference to FIG. 15.

[0575] First, the digital signature of the verification public key information delivery inputted from the processing selection unit 1302 and the digital signature of the verification public key information contained in the verification public key information delivery are checked (1501). As the verification key, what is appended to the certificate field of the verification public key information delivery is used. But if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111. For verification of signatures, the verification public key information delivery processing unit 1304 includes a signature verifying unit dedicated to checking of digital signatures.

[0576] If the digital signature fails to be verified at step 1501, the processing is ended after error processing (1505).

[0577] If the digital signature is successfully verified at step 1501, it is checked whether or not the issuer of the verifying public key contained in the verification public key information delivery is the center (1502). This checking can be accomplished by testing whether or not the identifier entered in the issuer field of the verification public key information is that of the center.

[0578] If it is found by checking at step 1502 that the issuer of the verification public key information is not the center, the processing is ended after error processing (1505).

[0579] If it is found by checking at step 1502 that the issuer of the verification public key information is the center, then a new entry is added to the verification public key DB 1306 (1503). The following values are set for the attributes of the new entry.

[0580] Public key identifier attribute: The value of the verification public key identifier field of the verification public key information contained in the verification public key information delivery.

[0581] Modulus attribute: The RSA modulus contained in the public key information field of the verification public key information contained in the verification public key information delivery.

[0582] Public key attribute: The RSA public key contained in the public key information field of the verification public key information contained in the verification public key information delivery.

[0583] Start of effective period attribute: The value of the start date/time of effective period field of the verification public key information contained in the verification public key information delivery.

[0584] End of effective period attribute: The value of the end date/time of effective period field of the verification public key information contained in the verification public key information delivery.

[0585] Use attribute: Information on the use assigned by the provider to this verification public key included in the verification public key information contained in the verification public key information delivery.

[Booking Certificate Intermediation License Request Processing Unit]

[0586] FIG. 16 illustrates the internal structure of a booking certificate intermediation license request processing unit 1305 the provider in this embodiment has.

[0587] The booking certificate intermediation license request processing unit 1305 has a function to process booking certificate intermediation license requests. This unit has a processing control unit 1601, a signature verification unit 1602, a booking certificate intermediation license identifier preparing unit 1603, an error message preparing unit 1604, a booking certificate intermediation license preparing unit 1605, a booking certificate intermediation license delivery preparing unit 1606, a signature preparing unit 1607 and a booking conditions limitation information preparing unit 1608.

[0588] The role of each constituent part of the booking certificate intermediation license request processing unit 1305 will be described below.

[0589] Processing control unit 1601: This unit performs the functions to accept an input from the processing selection unit 1302, provide an output to the input/output control unit 1301, refer to the verification public key DB 1306, and add an entry to the booking certificate intermediation license issuance history DB 1309. Furthermore, this unit carries out overall control of the processing of booking certificate intermediation license request.

[0590] Signature verification unit 1602: It verifies the digital signature of a booking certificate intermediation license request from the processing selection unit 202.

[0591] Booking certificate intermediation license identifier preparing unit 1603: It prepares a booking certificate intermediation license identifier assigned to a booking certificate intermediation license. It is designed to prevent duplication of generated identifiers, such as taking out a bit string at random from a sufficiently large space.

[0592] Error message preparing unit 1604: It prepares an error message.

[0593] Booking certificate intermediation license preparing unit 1605: It prepares a booking certificate intermediation license. To append a digital signature to the booking certificate intermediation license, it calls the signature preparing unit 1607.

[0594] Booking certificate intermediation license delivery preparing unit 1606: It prepares a booking certificate intermediation license delivery. To append a digital signature to the booking certificate intermediation license delivery, it calls the signature preparing unit 1607. It further accesses the certificate memory unit 1308 to obtain the public key certificate of a verification key for the signature of the provider.

[0595] Signature preparing unit 1607: It prepares a digital signature for a booking certificate intermediation license and a booking certificate intermediation license delivery, and accesses the certificate memory unit 1307 to obtain a signature key for a digital signature.

[0596] Booking conditions limitation information preparing unit 1608: It prepares booking conditions limitation information to be entered in a booking certificate intermediation license.

[0597] FIG. 17 is a flowchart showing the operation of a processing control unit of the booking certificate intermediation license request processing unit provided in the provider of this embodiment. The operation of the processing control unit 1601 will be described below with reference to FIG. 17.

[0598] First, the digital signature of the booking certificate intermediation license request inputted from the processing selection unit 1302 is checked (1701). As the verification key, what is appended to the certificate field of the request is used. But if the required public key certificate is absent in the certificate field, the signature is checked after a required public key certificate is obtained from the CA 111.

[0599] If the signature fails to be verified, an error message is prepared by the error message preparing unit 1604 and, after it is supplied to the input/output control unit 1301 (1709), the processing is ended.

[0600] If the signature is successfully verified, it is determined whether or not to issue the booking certificate intermediation license requested with the booking certificate intermediation license request (1702). It is up to the provider to decide whether or not to the booking certificate intermediation license. The provider doesn't issue a booking certificate intermediation license when the identifier entered in the licenser field of the booking certificate intermediation license specifications contained in the request is different from the provider's. And when the verification public key information having the verification public key identifier entered in the public key identifier field of the booking certificate intermediation license specifications contained in the request is not information issued to the provider, the provider doesn't issue a license. Also, when it is impossible to comply with the preference stated in the desired booking conditions limitation information field of the booking certificate intermediation license specifications contained in the request, the provider doesn't issue a license. Furthermore, the issuance of the booking certificate intermediation license is refrained if, for instance, the retailer to be licensed with the booking certificate intermediation license is not trustworthy.

[0601] If it is decided at step 1702 not to issue the booking certificate intermediation license, an error message is prepared by the error message preparing unit 1604. After it is supplied to the input/output control unit 1301 (1709), the processing is ended.

[0602] If it is decided at step 1702 to issue the booking certificate intermediation license, the booking certificate intermediation license identifier preparing unit 1603 is called to have an identifier to be assigned to the booking certificate intermediation license prepared. After receiving the identifier so prepared (1703), the effective period of the forthcoming booking certificate intermediation license is appropriately determined (1704).

[0603] Further, the booking conditions limitation information preparing unit 1608 is called to have the booking conditions limitation information to be contained in the forthcoming booking certificate intermediation license prepared, and the result is received (1705). The booking conditions limitation information prepared here may be what is entered in the desired booking conditions limitation information field of the booking certificate intermediation license specifications contained in the booking certificate intermediation license request. In addition, it may be what is determined by the provider at its own discretion to be appropriate booking conditions limitation information.

[0604] Next, the booking certificate intermediation license preparing unit 1605 is called to have the booking certificate intermediation license prepared, and the result is received (1706). The following values are set in the fields of the booking certificate intermediation license.

[0605] Issuer field: The provider's own identifier.

[0606] Recipient field: The value of the licensee field of the booking certificate intermediation license specifications contained in the booking certificate intermediation license request.

[0607] Issuance date field: The current date/time.

[0608] Booking certificate intermediation license identifier field: The identifier prepared at step 1703.

[0609] Start of effective period attribute: The starting date/time of the effective period determined at step 1704.

[0610] End of effective period attribute: The ending date/time of the effective period determined at step 1704.

[0611] Public key identifier field: The value of the identifier field of the public key of the booking certificate intermediation license specifications contained in the request.

[0612] Booking conditions limitation information field: The value of the booking conditions limitation information determined at step 1705.

[0613] Digital signature field: The digital signatures for data of other fields of this booking certificate intermediation license than this field. To prepare the digital signatures, the signature preparing unit 1607 is called, and the resulting signature values are received and set in this field.

[0614] Next, the booking certificate intermediation license delivery preparing unit 1606 is called to have a booking certificate intermediation license delivery prepared, and the result is received and supplied to the input/output control unit 1301 (1707). The following values are set in the fields of the booking certificate intermediation license delivery.

[0615] Sender field: The provider's own identifier.

[0616] Receiver field: The identifier entered in the sender field of the booking certificate intermediation license request.

[0617] Date/time field: The current date/time.

[0618] Booking certificate intermediation license field: The booking certificate intermediation license prepared at step 1706.

[0619] Digital signature field: The digital signatures for data of other fields of the booking certificate intermediation license delivery than this and certificate fields. To prepare the digital signatures, the signature preparing unit 1607 is called, and the resulting signature values are set in this field.

[0620] Certificate field: The public key certificate stored in the certificate memory unit 1308.

[0621] Finally, after adding a new entry representing the issuance booking certificate intermediation license to the booking certificate intermediation license issuance history DB 1309, the processing is ended. The following values are stored as the attributes of the additional entry.

[0622] Booking certificate intermediation license identifier attribute: The identifier prepared at step 1703.

[0623] Public key identifier attribute: The value of the public key identifier field of the booking certificate intermediation license specifications contained in the booking certificate intermediation license request.

[0624] Retailer identifier attribute: The value of the licensee field of the booking certificate intermediation license specifications contained in the request.

[0625] Booking conditions limitation information attribute: The value of the booking conditions limitation information determined at step 1705.

[0626] Start of effective period attribute: The starting date/time of the of the effective period determined at step 1704.

[0627] End of effective period attribute: The ending date/time of the effective period determined at step 1704.

[0628] Issuance date attribute: The value entered in the issuance date field of the booking certificate intermediation license prepared at step 1706.

[Other Functions the Provider has]

[0629] The provider in this embodiment can deliver booking certificate intermediation license issuance history information to retailers.

[0630] The booking certificate intermediation license issuance history information to be delivered to a retailer, which is information regarding booking certificate intermediation licenses issued to that retailer, is prepared by the booking certificate intermediation license issuance history preparing unit 1310, and delivered to the retailer via the input/output control unit 1301. This history serves as the basis of the fee for the issuance of any booking certificate intermediation license the provider charges to the retailer.

[0631] The booking certificate intermediation license issuance history preparing unit 1310 is given the identifier of the retailer for whom the history is to be prepared and the designation of the starting date/time and the ending date/time of the period to be covered by the history so prepared. Then, the unit takes out of the booking certificate intermediation license issuance history DB 1309 a group of entries the value of whose retailer identifier attribute is identical with the designated retailer identifier and the value of the issuance date attribute is within the designated period of coverage by the history. Furthermore, the unit takes out the values of the booking certificate intermediation license identifier attribute, the public key identifier attribute, the booking conditions limitation information attribute, the start of effective period attribute, the end of effective period attribute and the issuance date attribute from the extracted entries. In this embodiment, the designation of the identifier of the retailer for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the provider. But it may as well be inputted by the retailer via the Internet.

[0632] The means of delivering this history information may be either electronic mail or issuance on demand on a WWW base. Where there is a fear of tapping or alteration, it is preferable to apply encryption or a digital signature.

[Configuration of a Retailer]

[0633] FIG. 18 illustrates the configuration of a retailer in this embodiment of the invention.

[0634] A retailer in this embodiment has a function to prepare a booking certificate intermediation license request and deliver it to the provider via the Internet. In addition, the retailer has a function to process a booking certificate intermediation license delivery, a booking certificate request and a booking certificate delivery inputted via the Internet. Furthermore, the retailer has a function to prepare a booking certificate intermediation history and deliver it to the provider and/or the requestor of intermediation of booking certificate via the Internet. The retailer has an input/output control unit 1801, a processing selection unit 1802, a booking certificate intermediation license request preparing unit 1803, a booking certificate request processing unit 1804, a booking certificate intermediation license delivery processing unit 1805, a booking certificate delivery processing unit 1806, a booking certificate intermediation license DB 1807, a booking certificate intermediation history DB 1808, a signature key memory unit 1809, a certificate memory unit 1810, booking certificate intermediation history for provider preparing unit 1811 and a booking certificate intermediation history for requester preparing unit 1812. The retailer is connected to the Internet via the input/output control unit 1801.

[0635] The roles of various parts of the retailer in this embodiment will be described below.

[0636] Input/output control unit 1801: While monitoring data inputs via the Internet, this unit supplies via the Internet data prepared by the booking certificate intermediation license request preparing unit 1803, the booking certificate request processing unit 1804 and the booking certificate delivery processing unit 1806. Methods usable for inputs from the Internet to the input/output control unit 1804 or outputs from the input/output control unit 1804 include establishment of a WWW site connected to the input/output control unit 1804 to be offered for accessing by other entities. Accessing a WWW site prepared by another entity for delivery of data prepared by the retailer is another possible method. In addition, either automatic or manual interlocking of an electronic mail system and the input/output control unit 1804 is available method for connecting this unit and the Internet too.

[0637] Processing selection unit 1802: It judges whether the set of data that is inputted is a booking certificate request, a booking certificate intermediation license delivery or a booking certificate delivery. After the judgement, this unit calls the booking certificate request processing unit 1804 if it is a booking certificate request, the booking certificate intermediation license delivery processing unit 1805 if it is a booking certificate intermediation license delivery, or the booking certificate delivery processing unit 1806 if it is a booking certificate delivery.

[0638] Booking certificate intermediation license request preparing unit 1803: It prepares a booking certificate intermediation license request, and delivers it to the provider via the input/output control unit 1801. In the course of preparing the booking certificate intermediation license request, it accesses the signature key memory unit 1809 and the certificate memory unit 1810.

[0639] Booking certificate request processing unit 1804: It processes a booking certificate request from a consumer, prepares a second booking certificate request, and delivers it to the center via the input/output control unit 1801. In the course of processing, it refers to the booking certificate intermediation license DB 1807, and adds a new entry to the booking certificate intermediation history DB 1808. It further accesses the signature key memory unit 1809 and the certificate memory unit 1810.

[0640] Booking certificate intermediation delivery processing unit 1805: It processes the booking certificate intermediation license delivery from the provider, and registers the booking certificate intermediation license contained in the booking certificate intermediation license delivery into the booking certificate intermediation license DB 1807.

[0641] Booking certificate delivery processing unit 1806: It processes a booking certificate delivery delivered from the center, prepares a second booking certificate delivery, and delivers it to a consumer via the input/output control unit 1801. In the course of processing, it updates entries in the booking certificate intermediation history DB 1808, and accesses the signature key memory unit 1809 and the certificate memory unit 1810.

[0642] Booking certificate intermediation license DB 1807: This DB holds a booking certificate intermediation license issued by the provider to this retailer.

[0643] Booking certificate intermediation history DB 1808: This DB holds a history concerning booking certificates for which this retailer served as the intermediator.

[0644] Signature key memory unit 1809: It holds the signature key to be used for the digital signature prepared by the retailer.

[0645] Certificate memory unit 1810: It holds a public key certificate containing a verification key with which a digital signature prepared with a signature key stored in the signature key memory unit 1809 can be checked.

[0646] Booking certificate intermediation history for provider preparing unit 1811: It prepares a booking certificate intermediation history for each provider, and delivers it to the pertinent provider via the input/output control unit 1801.

[0647] Booking certificate intermediation history for requester preparing unit 1812: It prepares a booking certificate intermediation history for each requester pertaining to booking certificate intermediation requests the retailer has received, and delivers it to the pertinent requester via the input/output control unit 1801.

[Databases the Retailer has]

[0648] The retailer has two databases including the booking certificate intermediation license DB 1807 and the booking certificate intermediation history DB 1808.

[0649] The booking certificate intermediation license DB 1807 is a database that holds information regarding booking certificate intermediation licenses the retailer has received from plural providers.

[0650] The structure of the booking certificate intermediation license DB 1807 is illustrated in FIG. 19. The booking certificate intermediation license DB 1807 is a table listing the following five attributes, in which each entry corresponds to one booking certificate intermediation license.

[0651] Booking certificate intermediation license identifier attribute: The booking certificate intermediation license identifier assigned to the booking certificate intermediation license issued by the provider.

[0652] Public key identifier attribute: The identifier of the verification public key pertaining to which intermediation of a request for booking certificate has been licensed with a booking certificate intermediation license issued by the provider.

[0653] Provider identifier attribute: The identifier of the provider who issued the booking certificate intermediation license.

[0654] Booking certificate intermediation license attribute: Data resulting from the encoding, in accordance with BER, of the booking certificate intermediation license itself issued by the provider.

[0655] Provider certificate attribute: Data resulting from the encoding, in accordance with BER, of public key certificate containing the public key with which the digital signature of the provider who issued the booking certificate intermediation license can be checked.

[0656] The booking certificate intermediation history DB 1808 is a database holding information regarding booking certificates of which the retailer performed intermediation.

[0657] The structure of the booking certificate intermediation history DB 1808 is illustrated in FIG. 20. The booking certificate intermediation history DB 1808 is a table listing the following eight attributes, in which each entry corresponds to intermediation of one booking certificate.

[0658] Booking certificate identifier attribute: The identifier assigned by the center to the booking certificate pertaining to which intermediation was performed.

[0659] Public key identifier attribute: The identifier assigned by the center to the verification public key with which the legitimacy of the booking certificate having undergone intermediation can be checked.

[0660] Provider identifier attribute: The identifier of the provider who is the user of the verification public key information designated by the public key identifier attribute.

[0661] Consumer identifier attribute: The identifier of the consumer to whom the booking certificate has been issued.

[0662] Requester identifier attribute: The identifier of the entity who has delivered the booking certificate request to the retailer.

[0663] Booking conditions attribute: The booking conditions entered in the booking certificate having undergone intermediation.

[0664] Request date/time attribute: The preparation date/time of the booking certificate request the retailer has received.

[0665] Sending date/time attribute: The date/time of preparation of the booking certificate delivery by the retailer.

[Booking Certificate Intermediation License Request Preparing Unit]

[0666] A retailer in this embodiment, when it wishes to start selling on an advance booking basis any product or service available from a provider, should receive from the provider a booking certificate intermediation license for the intermediation of a booking certificate corresponding to the verification public key assigned to that product of service. In order to get the booking certificate intermediation license from the provider, the retailer prepares a booking certificate intermediation license request at the booking certificate intermediation license request preparing unit 1803, and delivers it to the provider via the input/output control unit 1801.

[0667] The booking certificate intermediation license request preparing unit 1803 sets the following values in the fields of the booking certificate intermediation license request.

[0668] Sender field: The retailer's own identifier.

[0669] Receiver field: The identifier of the provider, whom the booking certificate intermediation license is requested for.

[0670] Date/time field: The current point of time.

[0671] Booking certificate intermediation license specifications field: The preferences of the retailer regarding the booking certificate intermediation license to be prepared are entered.

[0672] Digital signature field: The digital signatures for data of other fields of this request than this and certificate fields. To prepare the digital signatures, the booking certificate intermediation license request preparing unit 1803 includes a signature preparing unit, and the values of signatures prepared by this signature preparing unit are set in this field. The signature key is obtained by accessing the signature key memory unit 1809.

[0673] Certificate field: The public key certificate stored in the certificate memory unit 1810.

[0674] The following values are set in the fields of the booking certificate intermediation license specifications entered in the booking certificate intermediation license specifications field of the booking certificate intermediation license request.

[0675] Licenser field: The identifier of the provider from whom a booking certificate intermediation license is desired.

[0676] Licensee field: The retailer's own identifier.

[0677] Public key identifier field: The verification public key identifier assigned to the verification public key with which the issuance of a booking certificate intermediation license is desired.

[0678] Desired booking conditions limitation information field: The booking conditions limitation information desired to be entered into the booking certificate intermediation license.

[Booking Certificate Intermediation Delivery Processing Unit]

[0679] As the booking certificate intermediation license request preparing unit 1803 prepares a booking certificate intermediation license request and delivers the request to the provider, a booking certificate intermediation license delivery is transmitted from the provider in return. The booking certificate intermediation license delivery is delivered to the booking certificate intermediation delivery processing unit 1805 via the input/output control unit 1801 and the processing selection unit 1802, and processed there.

[0680] FIG. 21 is a flowchart showing the operation of a booking certificate intermediation license delivery processing unit 1805 the retailer in this embodiment is provided with. The operation of the booking certificate intermediation delivery processing unit 1805 will be described below with reference to FIG. 21.

[0681] First, the digital signature of the booking certificate intermediation license delivery inputted from the processing selection unit 1802 and the digital signature of the booking certificate intermediation license contained in the booking certificate intermediation license delivery are checked (2101). As the verification key, what is appended to the certificate field of the booking certificate intermediation license delivery is used, but if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111. For verification of signatures, the booking certificate intermediation delivery processing unit 1805 includes a signature verifying unit dedicated to checking of digital signatures.

[0682] If the signature fails to be verified at step 2101, the processing is ended after error processing (2104).

[0683] If the digital signature is successfully verified at step 2101, it is checked whether or not the originator of the booking certificate intermediation license contained in the booking certificate intermediation license delivery is the right provider (2102). A number of variations are conceivable for the criterion of distinguishing the right provider from wrong ones. One of the conceivable criteria is, for instance, whether or not the value of the issuer field of the booking certificate intermediation license contained in the booking certificate intermediation license delivery is identical with the identifier entered in the licenser field of the booking certificate intermediation license specifications contained in the booking certificate intermediation license request by the requester. If it is desired to check the relationship between the verification public key with which intermediation of the booking certificate is to be licensed by the booking certificate intermediation license included in the booking certificate intermediation license delivery and the issuer of the booking certificate intermediation license included in the same booking certificate intermediation license delivery, the verification public key information issued by the center can be referred to. Since disclosure of verification public key information doesn't cause any security problem, it can be freely disclosed by either the center or the provider in the form of downloading the verification public key information.

[0684] If checking at step 2102 reveals that the originator of the booking certificate intermediation license is not the right provider, the processing is ended after error processing (2104).

[0685] If checking at step 2102 reveals that the originator of the booking certificate intermediation license is the right provider, a new entry is added to the booking certificate intermediation license DB 1807 (2103). The following values are set as the attributes of the new entry.

[0686] Booking certificate intermediation license identifier attribute: The value of the booking certificate intermediation license identifier field of the booking certificate intermediation license contained in the booking certificate intermediation license delivery.

[0687] Public key identifier attribute: The value of the identifier field in the booking certificate intermediation license contained in the booking certificate intermediation license delivery.

[0688] Provider identifier attribute: The value of the issuer field of the booking certificate intermediation license contained in the booking certificate intermediation license delivery.

[0689] Booking certificate intermediation license attribute: The result of encoding in accordance with BER of the booking certificate intermediation license contained in the booking certificate intermediation license delivery.

[0690] Provider certificate attribute: The result of encoding in accordance with BER of the public key certificate including the signature verification key of the provider contained in the booking certificate intermediation license delivery.

[FOR Booking Certificate Request Processing Unit]

[0691] FIG. 22 illustrates the internal structure of the booking certificate request processing unit 1804 the retailer in this embodiment has.

[0692] The booking certificate request processing unit 1804 has a function to process a booking certificate request transmitted from a consumer or another retailer, prepare a booking certificate request addressed to the center, and deliver it via the input/output control unit 1801. This unit has a processing control unit 2201, a signature verification unit 2202, an error message preparing unit 2203, a booking certificate request preparing unit 2204, a signature preparing unit 2205 and a booking conditions preparing unit 2206.

[0693] The roles of various constituent parts of the booking certificate request processing unit 1804 will be described below.

[0694] Processing control unit 2201: In addition to performing the functions to accept an input from the processing selection unit 1802, this unit provides an output to the input/output control unit 1801, refers to the booking certificate intermediation license DB 1807, and adds an entry to the booking certificate intermediation history DB 1808. Furthermore, this unit carries out overall control of the processing of a request for booking certificate.

[0695] Signature verification unit 2202: It verifies the digital signature of a booking certificate request inputted from the processing selection unit 1802.

[0696] Error message preparing unit 2203: It prepares an error message.

[0697] Booking certificate request preparing unit 2204: It prepares a booking certificate request to be delivered to the center. It calls the signature preparing unit 2205 to append a digital signature to the request. It further accesses the certificate memory unit 1810 to obtain the public key certificate of the verification key for the retailer's signature.

[0698] Signature preparing unit 2205: It prepares a digital signature for the booking certificate request prepared by the booking certificate request preparing unit 2204. It accesses the signature key memory unit 1809 to obtain the signature key for the digital signature.

[0699] Booking conditions preparing unit 2206: It prepares the booking conditions to be contained in the requested booking certificate.

[0700] FIG. 23 is a flowchart showing the operation of the processing control unit 2201 of the booking certificate request processing unit 1804 the retailer in this embodiment is provided with. The operation of the processing control unit 2201 will be described below with reference to FIG. 23.

[0701] First, the digital signature of the booking certificate request inputted from the processing selection unit 1802 is checked (2301). As the verification key, what is appended to the certificate field of the booking certificate request is used, but if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111.

[0702] If the signature fails to be verified, an error message is prepared by the error message preparing unit 2203 and, after it is supplied to the input/output control unit 1801 (2307), the processing is ended.

[0703] If the signature is successfully verified, it is checked whether or not intermediation of the booking certificate whose intermediation is requested with the inputted request is licensed (2302). If there exists in the booking certificate intermediation license DB 1807 a booking certificate intermediation license for the verification public key, the booking certificate matching with which is requested with the request and the booking conditions entered in the request are within the extent of the booking conditions limitation information entered in the booking certificate intermediation license held in the booking certificate intermediation license DB 1807, it is judged that the intermediation is licensed.

[0704] If it is judged by checking at step 2302 no intermediation is licensed, an error message is prepared by the error message preparing unit 2203 and, after it is supplied to the input/output control unit 1801 (2307), the processing is ended.

[0705] If it is judged by checking at step 2302 the intermediation is licensed, it is judged whether or not to accept the booking certificate request (2303). If the consumer or the retailer, who is the sender of the inputted request, is not trustworthy, it is determined here not to accept the request.

[0706] If it is determined at step 2303 not to accept the request, an error message is prepared by the error message preparing unit 2203 and, after it is supplied to the input/output control unit 1801 (2307), the processing is ended.

[0707] If it is determined at step 2303 to accept the booking certificate request, the booking conditions preparing unit 2206 is called to have booking conditions to be entered into the request for booking certificate for delivery to the center prepared, and its result is received (2304). The booking conditions prepared by the booking conditions preparing unit 2206 may either be the booking conditions entered in the inputted request as they are or be modified if necessary to some other appropriate booking conditions at the discretion of the retailer.

[0708] Once the booking conditions are determined, the entry holding information concerning the booking certificate request currently being processed is added to the booking certificate intermediation history DB 1808 (2305). The following values are set as the attributes of the new entry.

[0709] Booking certificate identifier attribute: No value is set at this point of time.

[0710] Public key identifier attribute: The value entered in the public key identifier field of the booking specifications contained in the inputted request.

[0711] Provider identifier attribute: The identifier of the provider, who is the user of the verification public key information identified by the identifier set in the public key identifier attribute. The identifier of the provider can be obtained by referencing the booking certificate intermediation license DB. Thus, it is the provider identifier attribute of an entry in the booking certificate intermediation license DB, having the value of the public key identifier attribute identical with the value of the public key identifier attribute described above.

[0712] Consumer identifier attribute: The value of the consumer identifier field of the booking specifications contained in the entered request.

[0713] Requester identifier attribute: The value of the sender field of the entered request.

[0714] Booking conditions attribute: The booking conditions determined at step 2304.

[0715] Request date/time attribute: The value of the date/time field of the entered request.

[0716] Sending date/time attribute: No value is set at this point of time.

[0717] Finally, the booking certificate request to be delivered to the center is prepared. After sending the generated request to the center via the input/output control unit 1801 (2306), the process is ended. The following values are set in the fields of the generated request to be delivered to the center.

[0718] Sender field: The retailer's own identifier.

[0719] Receiver field: The center's identifier.

[0720] Date/time field: The current date/time.

[0721] Booking particulars field: The booking specifications to be described below.

[0722] Digital signature field: The digital signatures for data of other fields of the generated request than this and certificate fields. To prepare the digital signatures, the signature preparing unit 2205 is called to have the signatures prepared, and the result is set in this field. The signature key is obtained by accessing the signature key memory unit 1809.

[0723] Certificate field: The public key certificate stored in the certificate memory unit 1810.

[0724] The following values are entered into the fields of the booking specifications to be stated in the booking particulars field.

[0725] Public key identifier field: The value entered in the public key identifier field of the booking specifications contained in the inputted booking certificate request.

[0726] Consumer identifier field: The value entered in the consumer identifier field of the booking specifications of the inputted request.

[0727] Booking conditions field: The booking conditions determined at step 2304.

[0728] Booking certificate intermediation license field: The booking certificate intermediation license for the verification public key with which the issuance of a booking certificate has been requested with the inputted request held by the booking certificate intermediation license DB 1807.

[Booking Certificate Delivery Processing Unit]

[0729] FIG. 24 illustrates the internal structure of the booking certificate delivery processing unit 1806 the retailer in this embodiment is provided with.

[0730] The booking certificate delivery processing unit 1806 has functions to process a booking certificate delivery transmitted from either the center or another retailer, prepare a booking certificate delivery to be delivered to the requester of the booking certificate, and deliver it to the requester via the input/output control unit 1801. The booking certificate delivery processing unit has a processing control unit 2401, a signature verification unit 2402, an error message preparing unit 2403, a booking certificate delivery preparing unit 2404 and a signature preparing unit 2405.

[0731] The roles of various constituent parts of the booking certificate delivery processing unit 1806 will be described below.

[0732] Processing control unit 2401: This unit has the functions to accept an input from the processing selection unit 1802, provide an output to the input/output control unit 1801, and update entries in the booking certificate intermediation history DB 1808. In addition, this unit carries out overall control of the processing of a booking certificate delivery.

[0733] Signature verification unit 2402: It verifies the digital signature of a booking certificate delivery entered from the processing selection unit 1802 and the digital signature of the booking certificate contained in the booking certificate delivery.

[0734] Error message preparing unit 2403: It prepares an error message.

[0735] Booking certificate delivery preparing unit 2404: It prepares a booking certificate delivery to be delivered to the requester of the booking certificate. The signature preparing unit 2405 is called to append a digital signature to the booking certificate delivery to be newly prepared. It further accesses the certificate memory unit 1810 to obtain the public key certificate of the verification key of the retailer's signature.

[0736] Signature preparing unit 2405: It prepares the digital signature for the booking certificate delivery to be prepared by the booking certificate delivery preparing unit 2404. It accesses the signature key memory unit 1809 to obtain the signature key for the digital signature.

[0737] FIG. 25 is a flowchart showing the operation of the processing control unit 2401 of the booking certificate delivery processing unit 1806 the retailer in this embodiment has. The operation of the processing control unit 2401 will be described below with reference to FIG. 25.

[0738] First, the digital signature of the booking certificate delivery entered from the processing selection unit 1802 and the digital signature of the booking certificate contained in the booking certificate delivery are checked (2501). As the verification key, what is appended to the certificate field of the booking certificate delivery is used. But if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111.

[0739] If the signature fails to be verified, an error message is prepared by the error message preparing unit 2403 and, after it is supplied to the input/output control unit 1801 (2504), the processing is ended.

[0740] If the signature is successfully verified, an entry in the booking certificate intermediation history DB 1808 is updated in accordance with the particulars delivered with the inputted booking certificate delivery (2502). The entry to be updated is the entry that was added when the booking certificate request matching the inputted booking certificate delivery was processed. The values of the public key identifier attribute and the consumer identifier attribute of the entry to be updated are respectively identical with the values of the public key identifier field and the recipient field of the booking certificate contained in the inputted booking certificate delivery. Furthermore, no values are set for the booking certificate identifier attribute and the sending date/time attribute of the entry to be updated.

[0741] The attributes of the entry are updated in the following manner.

[0742] Booking certificate identifier attribute: The value of the booking certificate identifier field of the booking certificate contained in the inputted booking certificate delivery.

[0743] Public key identifier attribute: No change.

[0744] Provider identifier attribute: No change.

[0745] Consumer identifier attribute: No change.

[0746] Requester identifier attribute: No change.

[0747] Booking conditions attribute: The value of the booking conditions field of the booking certificate contained in the inputted booking certificate delivery.

[0748] Request date/time attribute: No change.

[0749] Sending date/time attribute: The current point of time.

[0750] Finally, a new booking certificate delivery to be delivered to the requester of the booking certificate is prepared. After delivering it to the requester of the booking certificate via the input/output control unit 1801 (2503), the processing is ended. The following values are set in the fields of the newly prepared booking certificate delivery.

[0751] Sender field: The retailer's own identifier.

[0752] Receiver field: The value of the requester identifier attribute of the entry in the booking certificate intermediation history DB 1808 updated at step 2502.

[0753] Date/time field: The value of the sending date/time attribute of the entry in the booking certificate intermediation history DB 1808 updated at step 2502.

[0754] Booking certificate field: The booking certificate contained in the inputted booking certificate delivery.

[0755] Digital signature field: The digital signatures for data of other fields of this booking certificate delivery than this and certificate fields. To prepare the digital signatures, the signature preparing unit 2405 is called to have the signatures prepared, and the resultant signature values are set in this field.

[0756] Certificate field: Out of the public key certificate stored in the certificate memory unit 1810 and the certificate contained in the certificate field of the inputted booking certificate delivery, which includes a verification key with which the digital signature of the booking certificate contained in the booking certificate delivery can be verified.

[Billing or Account Settlement for a Booking Certificate Request]

[0757] The retailer in this embodiment can bill or settle the account for the issuance of a booking certificate in the course processing of the booking certificate request. The billing or the account settlement is done after the booking certificate request is received from the consumer and before the second booking certificate request is delivered to the center.

[0758] In the case of billing, fees for booking certificate issuance are added for each consumer in the course of processing booking certificate requests, and charged to the consumer afterwards. For this purpose, the retailer in this embodiment has a database for holding the current sum of booking certificate issuance fees to be received from each consumer.

[0759] The retailer in this embodiment can also settle the account for booking certificate issuance every time its booking certificate request is processed. There are number of available methods of settlement including the use of a credit card the consumer has and prepayment. In any case a booking certificate request for a consumer is delivered to the center only after the settlement of the account for issuance of the booking certificate request has been confirmed.

[0760] The fee for booking certificate issuance may as well be collected through the provider at the time of checking the legitimacy of the booking certificate.

[0761] In this case, fee information is entered in the booking conditions contained in the booking certificate. Either direct or automatic collection of the fee can be checked when the booking certificate verifying device installed at the provider checks the booking certificate and judges whether or not the booking conditions contained in the booking certificate are satisfied.

[History Information Issued by the Retailer]

[0762] The retailer in this embodiment can deliver booking certificate intermediation history information to the provider.

[0763] The booking certificate intermediation history information delivered to the provider concerns the intermediation of the booking certificate matching the verification public key assigned to that provider. It is prepared by the booking certificate intermediation history for provider preparing unit 1811, and delivered to the provider via the input/output control unit 1801. This history serves as the basis of the sum of the margin the retailer delivers to the provider.

[0764] The booking certificate intermediation history for provider preparing unit 1811, given the designation of the identifier of the provider for whom the history is prepared and of the starting date/time and the ending date/time of the period to be covered by the history. Then, this unit takes out of the booking certificate intermediation history DB 1808 a group of entries the value of whose provider identifier attribute is identical with the designated provider identifier and the value of the issue date attribute is within the designated period of coverage by the history. Furthermore, the unit gets the values of the booking certificate identifier attribute, the public key identifier attribute, the booking conditions attribute, the request date/time attribute and the sending date/time attribute from the extracted entries. In this embodiment, the designation of the identifier of the provider for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the retailer. It may as well be entered by the provider via the Internet.

[0765] The retailer in this embodiment can deliver booking certificate intermediation history information to the requester of booking certificate intermediation as well.

[0766] The booking certificate intermediation history information to be delivered to the requester concerns the intermediation of the booking certificate requested by that requester. It is prepared by the booking certificate intermediation history for requester preparing unit 1812, and delivered to the requester via the input/output control unit 1801. This history serves as the basis of the sum of the commission the retailer charges to the requester.

[0767] The preparing unit booking certificate intermediation history for requester preparing unit 1812, given the designation of the identifier of the requester for whom the history is prepared and of the starting date/time and the ending date/time of the period to be covered by the history. Then, this unit takes out of the booking certificate intermediation history DB 1808 a group of entries the value of whose requester identifier attribute is identical with the designated requester identifier and the value of the issue date attribute is within the designated period of coverage by the history. Furthermore, the unit gets the values of the booking certificate identifier attribute, the public key identifier attribute, the provider identifier attribute, the consumer identifier attribute, the booking conditions attribute, the request date/time attribute and the sending date/time attribute from the extracted entries. In this embodiment, the designation of the identifier of the requester for whom the history is to be prepared and of the period to be covered by the history so prepared is received from the operator of the retailer. It may as well be entered by the requester via the Internet.

[0768] The means of delivering this history information to the provider or the requester may be either electronic mail or issuance on demand on a WWW base. Where there is a fear of tapping or alteration, it is preferable to apply encryption or a digital signature.

[Configuration of a Consumer]

[0769] FIG. 26 illustrates the configuration of a consumer terminal in this embodiment of the invention.

[0770] A consumer terminal in this embodiment receives a booking certificate from a retailer via the Internet. It has functions to prepare a booking certificate request and deliver it to the retailer via the Internet. In addition, the consumer terminal has functions to process a booking certificate delivery delivered from the retailer via the Internet. The consumer terminal has an input/output control unit 2602, a booking certificate request preparing unit 2603, a booking certificate delivery processing unit 2604, a signature key memory unit 2605, a certificate memory unit 2606 and a portable memory unit controller 2607. The terminal is connected to the Internet via the input/output control unit 2602 and to a portable memory unit via the portable memory unit controller 2607.

[0771] The roles of various parts of the consumer terminal in this embodiment will be described below.

[0772] Input/output control unit 2602: While accepting data inputs via the Internet, this unit supplies via the Internet booking certificate requests prepared by the booking certificate request preparing unit 2603. Methods usable for inputs from the Internet to the input/output control unit 2602 or outputs from the input/output control unit 2602 include accessing a WWW site maintained by another entity for delivery of data prepared by the consumer terminal. Also, Either automatic or manual interlocking of an electronic mail system and the input/output control unit 2602 can be used for the method of connecting between the input/output control unit 2602 and the Internet.

[0773] Booking certificate request preparing unit 2603: It prepares a booking certificate request, and delivers it to a retailer via the input/output control unit 2602. In the course of preparing the request, it accesses the signature key memory unit 2605 and the certificate memory unit 2606, and accesses the portable memory unit 2608 via the portable memory unit controller 2607.

[0774] Booking certificate delivery processing unit 2604: This unit processes a booking certificate delivery from the retailer, and records the booking certificate contained in the booking certificate delivery into the portable memory unit 2608 via the portable memory unit controller 2607.

[0775] Signature key memory unit 2605: It holds the signature key for use in the digital signature prepared by the consumer terminal.

[0776] Certificate memory unit 2606: It holds a public key certificate containing a verification key with which a digital signature prepared with the signature key stored in the signature key memory unit 2605 can be checked.

[0777] Portable memory unit controller 2607: It writes data into and access the portable memory unit 2608.

[0778] In this embodiment, the signature key for use in applying a digital signature to a booking certificate request of a public key certificate containing a verification key with which a signature prepared with that signature key is verified are held by the consumer terminal. A configuration in which they are held by the portable memory unit is also acceptable.

[Booking Certificate Request Preparing Unit]

[0779] The consumer terminal in this embodiment, where there is a product or a service the consumer using that terminal desires to book in advance, prepares with the booking certificate request preparing unit 2603 a booking certificate request for requesting intermediation of a booking certificate, and delivers it to a retailer via the input/output control unit 2602.

[0780] The booking certificate request preparing unit 2603 sets the following values in the fields of the booking certificate request.

[0781] Sender field: The consumer terminal's own identifier.

[0782] Receiver field: The retailer's identifier.

[0783] Date/time field: The current point of time.

[0784] Booking particulars field: Booking specifications to be described below.

[0785] Digital signature field: The digital signatures for data of other fields of this booking certificate request than this and certificate fields. To prepare the digital signatures, the booking certificate request preparing unit 2603 includes a signature preparing unit, and the values of signatures prepared by this signature preparing unit are set in this field. The signature key is obtained by accessing the signature key memory unit 2605.

[0786] Certificate field: The public key certificate stored in the certificate memory unit 2606.

[0787] The following values are set in the fields of the booking specifications designated in the booking particulars field.

[0788] Public key identifier field: The identifier of the verification public key assigned to the product or the service desired to be booked in advance.

[0789] Consumer identifier field: The identifier of the consumer using the consumer terminal. The consumer identifier is stored in the portable memory unit 2608, and the booking certificate request preparing unit 2603 obtains the consumer identifier from the portable memory unit 2608 via the portable memory unit controller 2607.

[0790] Booking conditions field: Appropriate conditions reflecting the consumer's desire and other factors are determined by the booking certificate request preparing unit 2603 and set here.

[0791] Booking certificate intermediation license field: Nothing is set.

[Booking Certificate Delivery Processing Unit]

[0792] As a booking certificate request is prepared by the booking certificate request preparing unit 2603 and delivered to the retailer, a booking certificate delivery is transmitted from the retailer in return. The booking certificate delivery is entered via the input/output control unit 2602 into the booking certificate delivery processing unit 2604 and processed there.

[0793] FIG. 27 is a flowchart showing the operation of the booking certificate delivery processing unit 2604 the consumer terminal in this embodiment has. The operation of the booking certificate delivery processing unit 2604 will be described below with reference to FIG. 27.

[0794] First, the digital signature of the inputted booking certificate delivery entered and the digital signature of the booking certificate contained in the booking certificate delivery are checked (2701). As the verification key, what is appended to the certificate field of the verification public key information delivery is used. But if the required public key certificate is absent in the certificate field, the signature is checked after a public key certificate is obtained from the CA 111.

[0795] If the signature fails to be verified at step 2701, the processing is ended after error processing (2704).

[0796] If the digital signature is successfully verified at step 2701, it is checked whether or not the booking certificate contained in the inputted booking certificate delivery is intended for the consumer currently using the consumer terminal (2702). The checking refers to whether the consumer identifier obtained from the portable memory unit 2608 via the portable memory unit controller 2607 is identical with the value of the recipient field of the booking certificate contained in the inputted booking certificate delivery.

[0797] If it is judged by checking at step 2702 that the booking certificate contained in the inputted booking certificate delivery is not intended for the consumer currently using the consumer terminal, the processing is ended after error processing (2704).

[0798] If it is judged by checking at step 2702 that the booking certificate contained in the inputted booking certificate delivery is intended for the consumer currently using the consumer terminal, the booking certificate is recorded into the portable memory unit 2608 via the portable memory unit controller 2607 (2703), and the processing is ended.

[0799] As hitherto described, according to the present invention, no individual booking vender needs to spend a resource for issuing certificates when selling goods and/or services on an advance booking basis.