JP2002298056A - Disguise preventing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize a method for preventing illegal trade from being performed by a disguise in a user when a card is used and an access is gained to a building. SOLUTION: In this method, it is determined whether or not user position information transmitted from a portable device which is held by a user with high possibility matches trade terminal position information transmitted from a trade device to prevent a disguise in the user.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an ATM for a financial institution.
The present invention relates to a method for preventing impersonation of a user in transactions that require user authentication, such as cash withdrawal from an (automated transaction device), settlement when using a credit card, and entering and exiting a building.

[0002]

2. Description of the Related Art At the time of cash withdrawal from an ATM of a financial institution, settlement at the time of using a credit card, and entry / exit of a building, the user who intends to execute the transaction is proved to be the authorized person. Authentication procedure is required. Conventionally, as a means for personal authentication, a method of using a password input by a user, a method of using physical characteristics unique to a user such as a user's fingerprint, and the like have been used. However, the method using a password has a problem in that the password can be seen by others when the password is input. Also,
The method using the physical characteristics of the user has a privacy protection problem that registration of physical characteristics such as a fingerprint is required, and none of the methods is perfect.

[0003] Japanese Patent Application Laid-Open No. 11-339110 "Automatic Transaction System" describes a method of using geographical location information where a transaction device is installed. According to this technology, the user compares the time interval between the previous transaction and the current transaction during a financial transaction with the time required to move from the transaction device at the previous transaction to the transaction device at the time of the current transaction. A method is described for determining whether a transaction point can be present.

[0004]

However, the method of the prior art has a problem that a user's movable area is expanded as time elapses after execution of a transaction, and the effect of preventing impersonation is lost. In addition, if a user loses or stolen a cash card or credit card and the person who acquired the card tries to use the card illegally, there is no effect of preventing spoofing unless the user re-enters the transaction. There's a problem.

The present invention has been made in view of the above-mentioned problems, and has as its object to authenticate a user such as withdrawing cash from an ATM of a financial institution, making a payment when using a credit card, or entering or leaving a building. In a transaction that requires the user, the position information of the user transmitted from the portable device that is likely to be held by the user, and the position information of the transaction terminal transmitted from the transaction device in two directions at the same time. To provide an effective spoofing prevention method that is effective even when the card is lost or stolen as described above.

Another object of the present invention is to prevent impersonation by using position information obtained from a user's action schedule as means for detecting the user's position information.

[0007] Still another object of the present invention is to provide the above-mentioned spoofing by allowing a business operator providing a transaction to a user to give preferential treatment to a highly credible user who transmits location information at the time of the transaction. It is to promote the use of the method and reduce the number of spoof cases.

[0008]

SUMMARY OF THE INVENTION In order to solve the above-mentioned problems, the present invention provides a position information transmitting device for transmitting position information of a user, and a position information query for querying the position information of the user in a transaction relating to the user. The device and a location information management device that manages the location information of the user are interconnected, and the location information of the user transmitted from the location information transmission device and the location information of the device transmitted from the location information inquiry device are transmitted. Then, whether or not to permit the transaction is determined based on whether or not the transaction is within a distance suitable for the transaction. That is, while the above-described conventional technology is configured to compare two transaction location information at different times, the present invention compares the user location information at the same time with the transaction location information at the same time, so that the card is lost or stolen. It is effective even at times and can solve the problems of the prior art.

As means for obtaining the user's location information,
The position information of the user is detected based on the action schedule of the user's work and travel destinations, and impersonation is prevented using the detected position information.

[0010]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a flowchart showing a processing procedure of the embodiment, and FIG. 2 is an overall configuration diagram of the embodiment. Each flowchart constituting FIG. 1 shows a process in each device in FIG. FIG.
Is an example of the user location information 231 managed by the location information management device 230. As shown in FIG. 2, the user location information transmission device 210, the transaction location information inquiry device 220, and the location information management device 230 are connected by a communication network 240 such as a wired or wireless Internet or a dedicated line, and Information can be sent and received.

<User Location Information Transmitting Device 210> The user location information transmitting device 210 is a device that the user himself holds or wears, such as a mobile phone, a PHS, an IC card, a transceiver, and a wristwatch. The information and the position information on the user are transmitted to the position information management device 230 (step 111).

Methods for detecting position information include a method using GPS using radio waves from a communication satellite and a method using radio waves transmitted from a mobile phone or PHS to a base station. Alternatively, a method of detecting the position information of the user based on the work or travel address of the user registered as the behavior schedule information on the user may be used. Alternatively, when it is determined that the user is in a car or indoors, a form in which position information of a car or a building is used instead of the position information of the user may be used.

The user ID information corresponds to the ID information of the user location information 231 managed by the user location information management device 130, such as a subscriber number of a mobile phone, an IC card number, and an account number. It does not matter what kind it is. The user position information transmission device 210 continuously transmits the position information until the user inputs the end of the transmission of the position information (step 112).

<Transactional Location Information Inquiry Device 220> The transactional location information inquiry device 220 is incorporated in a transaction device for withdrawing cash from an ATM of a financial institution or using a credit card, or in a personal authentication device when entering or leaving a building. It is a device that inquires about location information about a user who is adjacent and wants to conduct a transaction. When a user attempts to make a transaction, the transaction location information inquiry device 220 transmits the ID information of the user who is conducting the transaction and the location information of the device to the location information management device 230 (step 121). .

The location information may be detected by using a GPS or the like as in the case of the user location information transmission device 210, or by a device in which the location information inquiry device 220 is used geographically fixed. If so, a method may be used in which the position information of the transaction position information inquiry device 220 is registered in advance. Alternatively, the ID information and the position information of the transaction location information inquiry device 220 are registered in the location information management device 230, and the transaction location information inquiry device 220
A method of transmitting only the D information may be used. The ID information of a user who intends to make a transaction may be an account number or an employee number obtained from a cash card, an employee ID card, or the like, or may be a user location information managed by the user location information management device 130 for the user. Any type may be used as long as it corresponds to the ID information 231.

Next, the transaction location information inquiry device 220
The inquiry result is received from the position information management device 230 (step 122). If the result of this inquiry is an abnormal position warning, it indicates that the position information of the user who intends to make a transaction is in an abnormal state, so that the transaction is refused (step 125). If the inquiry result is a normal position notification, the transaction is permitted (step 124).

<Location Information Management Device 230> The location information management device 230 processes transmission and inquiry from the user location information transmission device 210 or the transaction location information inquiry device 220. The ID information and the position information of the user transmitted from the user position information transmitting device 210 are stored in the user position information 231 (step 131). Step 13 which is a process for responding to the location information inquiry when the location information inquiry from the transaction location information inquiry device 220 is received.
Proceed to 3 and if there is no position information inquiry, the process of step 131 is continued (step 132).

When the user ID information transmitted from the transaction location information inquiry device 220 is received, the user location information 2
The position information of the user is extracted from 31 using the user ID information as a key, and is compared with the position information on the transaction device transmitted from the position information inquiry device 220 at the same time (step 133).

At this time, if the two pieces of position information are within a distance at which the transaction device can be operated, it is assumed that the user intends to conduct a transaction near the transaction-time position information inquiry device 220.
A notification that the location information is normal is transmitted to the transaction location information inquiry device 220 (step 136). If the two pieces of location information are farther than the distance at which the transaction device can be operated, the user is warned that the location information is abnormal even though the user is not near the transaction terminal and a transaction is about to be performed. The information is transmitted to the transaction location information inquiry device 220 (step 135).

Assuming that the user keeps transmitting the positional information while holding or wearing the user positional information transmitting device 210, the transaction is attempted even though the user is not near the transaction terminal. The state in which the user is present is a state in which a person other than the user is trying to make a transaction by impersonating the user. For example, it is possible to detect a state in which a transaction is going to be performed using a stolen user's cash card, thereby preventing improper use of the cash card due to impersonation.

In the above description, if there is a difference between the time when the two pieces of position information, that is, the user position information and the position information at the time of the transaction, are acquired, the user may make a transaction using a vehicle such as an automobile within the time difference. It is also possible to determine whether it is possible to move to the place. Further, in the above, a mode may be adopted in which preferential measures such as preferential deposit interest rates and discounts on settlement fees are given to users who transmit location information at the time of transactions, and the use of the spoofing prevention method of the present invention is promoted.

In the above, a warning that the position information is abnormal is transmitted to the user position information transmitting device 210,
The form which notifies a user of an abnormal state may be sufficient.

In the above description, a transaction may be permitted when the user does not hold the user location information transmitting device 210 or while holding the user and transmitting no location information, A form in which the position information must be transmitted only when the transaction amount is high may be used. While the user is not transmitting location information, the present invention has no direct effect of preventing spoofing, but hesitates the person who acquired the lost cash card to fraudulently use the card. It can be expected to have the effect of deterring crime, such as being able to do so.

[0024]

As described above in detail, according to the present invention, it is necessary to authenticate a user such as withdrawing cash from an ATM of a financial institution, making a payment when using a credit card, or entering or leaving a building. In the transaction, the user uses location information from two directions at the same time, that is, the location information of the user transmitted from the portable device which is likely to be held by the user and the location information of the transaction terminal transmitted from the transaction device. It prevents spoofing and is also effective for unauthorized use when a card is lost or stolen.

The means for detecting the position information of the user can use the action schedule information of the user. In addition, for users who transmit location information at the time of transaction, preferential treatment of users such as preferential deposit interest rate and discount of settlement fee promotes the use of the spoofing prevention method of the present invention, The number of occurrences can be reduced.

[Brief description of the drawings]

FIG. 1 is a flowchart illustrating a processing procedure according to an embodiment.

FIG. 2 is an overall configuration diagram of the embodiment.

FIG. 3 is a data example of user position information 231;

[Explanation of symbols]

111 ... Transmission process of user ID and user location information, 12
1 ... Transmission processing of user ID and transaction device position information 133
... Location information comparison processing, 210: User location information transmission device, 220: Transaction location information inquiry device, 230: Location information management device.

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Eiko Oshima 5030 Totsuka-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside the Software Division of Hitachi, Ltd. F-term in Hitachi Business Solutions Division (reference) 3E040 BA07 BA18 CB01 CB10 DA02 3E042 AA06 CC03 CD04 EA01

Claims (3)

[Claims] 1. A position information transmitting device for transmitting position information of a user, a position information inquiry device for querying the position information of the user when a transaction involving the user is performed, and managing the position information of the user. The location information management devices are connected to each other, the location information transmission device transmits a user ID and user location information to the location information management device, and the location information management device is transmitted from the location information transmission device. Storing the user ID and the user location information, the location information inquiry device transmits a user ID performing the transaction and the location information of the location information inquiry device to the location information management device, and the location information management device transmits the location information to the location information management device. User position information is estimated from the user ID transmitted from the information inquiry device, and the position information of the position information inquiry device transmitted from the position information inquiry device and the user position information are combined within a predetermined accuracy. The location information inquiry device determines whether or not to match, and transmits the determination result to the location information inquiry device, based on the determination result transmitted from the location information management device, whether or not to permit a transaction relating to the user. A spoofing prevention method, characterized in that it is determined whether the spoofing is performed. 2. The spoofing prevention method according to claim 1, wherein the location information transmission device transmits user location information obtained from user action schedule information. 3. The method for preventing impersonation according to claim 1, wherein preferential transaction measures for the user such as preferential deposit interest rate and settlement fee discount are performed based on the determination result regarding the user location information during the transaction. How to prevent spoofing.