JP2005174019A - Transaction device, system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an IC card with the functions of conventional cash cards so that a user can conduct transactions using a transaction device such as an ATM or a debit terminal simply when owning the IC card while having no cash cards. <P>SOLUTION: When a menu for "cellular phone records" is selected at an ATM 10, cash card information is read from a cash card by a magnetic card reader part 38 and written via an IC card communication part 42 into a noncontact IC card 28 built into a cellular phone 12. Thereafter, the IC card communication part 42 can conduct transactions based on the cash card information read from the IC card 28. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a transaction apparatus, a transaction system, and a transaction method for a user to perform a financial transaction with a financial institution.

  Transactions with financial institutions such as withdrawals, balance inquiries, and transfers are generally performed using ATMs (automated teller machines). In ATM, after inserting a cash card into a machine and receiving authentication by a personal identification number, a transaction can be selected by selecting a transaction menu on the screen. In debit card payments, you can make an immediate payment by debiting from a bank account by inserting a cash card into a debit terminal located at the store and entering your PIN.

Patent Document 1 discloses a system in which an IC chip is built in a mobile phone, and an ATM transaction can be performed from the mobile phone by inputting a password or financial processing information into the mobile phone. Similarly, Patent Document 2 discloses a system in which an ATM transaction can be performed from a mobile phone by giving the same function as the operation performed on the operation unit of the ATM to the operation performed on the mobile phone. Yes.
JP 2001-297198 A Japanese Patent Laid-Open No. 2003-115075

  Since a conventional cash card is composed of a magnetic card, there is a possibility that a third party can read data from the card. In addition, it is troublesome for the user to always carry a cash card that is only used for ATM.

  On the other hand, according to the systems disclosed in Patent Documents 1 and 2, ATM can be used from a mobile phone without using a cash card. However, in any system, the cellular phone is provided with a function corresponding to ATM so that all operations performed on the ATM operation panel can be performed from the cellular phone. For this reason, the ATM cannot be used unless it is a mobile phone that supports ATM, and lacks versatility. Further, when using a mobile phone, it is not possible to conduct a transaction by an operation on an ATM that the user is familiar with.

  The present invention has been made in view of the above points. By providing the function of a conventional cash card to the IC card, the user does not have the cash card as long as the user has the IC card. However, it is an object to enable transactions using a transaction device such as an ATM or a debit terminal.

To achieve the above object, the present invention provides a transaction apparatus for a user to perform a transaction with a financial institution,
An IC card communication unit for communicating with an IC card possessed by the user;
Account information acquisition unit for reading account identification information for identifying an account of the user recorded in the IC card by the IC card communication unit;
A transaction execution unit that executes the transaction by transmitting the read account identification information and the password entered by the user to a host computer system that performs account management of the financial institution. .

The transaction apparatus further includes a card accepting unit that accepts a cash card,
A card reader for reading the account identification information recorded in the accepted cash card;
A password identification unit that transmits the account identification information and a password entered by a user to the host computer, and determines whether the password is valid based on a response signal from the host computer;
An account information writing unit that writes the read account specifying information into the IC card by the IC card communication unit when the password is determined to be valid may be further provided.

Further, the transaction apparatus of the present invention is configured as an ATM having a transaction selection unit that allows a user to select a transaction such as withdrawal, deposit, transfer, balance inquiry,
The transaction execution unit may transmit the account specifying information and the personal identification number, and information indicating the selected transaction to the host computer system.

  Alternatively, the transaction apparatus of the present invention may be configured as a debit card terminal.

  In the present invention, the IC card may be a non-contact IC card built in a mobile terminal.

  Moreover, the transaction apparatus of the present invention may include a personal identification number input unit that receives an input of a personal identification number from a user, or includes a means for receiving the personal identification number input from the portable terminal from the portable terminal. Also good.

The transaction system of the present invention is composed of a transaction terminal for performing transactions with financial institutions, and an IC card possessed by the user,
In the IC card, account specifying information for specifying the account of the user is recorded,
The transaction terminal
An IC card communication unit for communicating with an IC card possessed by the user;
An account information acquisition unit for reading account identification information recorded on the IC card by the IC card communication unit for identifying an account of the user;
A transaction execution unit that executes the transaction by transmitting the read account identification information and the password entered by the user to a host computer system that performs account management of the financial institution. .

The transaction method of the present invention is
Storing in advance an account identification information for identifying an account held by the user in an IC card possessed by the user;
Reading from the IC card the account identification information recorded on the IC card;
And executing the transaction by transmitting the read account specifying information and the password entered by the user to a host computer system that manages the account of the financial institution.

  According to the present invention, by providing an IC card with the function of a conventional cash card, even if the user has only this IC card, even if the user does not have a cash card, such as an ATM or a debit terminal. Transactions using transaction devices can be performed.

== System configuration ==
FIG. 1 is an overall configuration diagram of a system according to an embodiment of the present invention. As shown in the figure, the system according to the present embodiment includes an ATM 10 installed at a store of the financial institution X or ATM corners in various places, and a mobile phone 12 possessed by a customer of the financial institution X.

  The ATM 10 is connected to the host computer 16 via the in-house network 14 of the financial institution X. An account information database 18 is connected to the in-house network 14. The account information database 18 is a database managed by the host computer 16, and as illustrated in FIG. 2, for each account of the financial institution X, a holder, account information (store name, account type, account number), password, Account balance, transaction history details, etc. are recorded.

  FIG. 3 is a block diagram showing a hardware configuration of the ATM 10 and the mobile phone 12. As shown in the figure, the cellular phone 12 includes a CPU 20, a memory 22, a display unit 24 constituted by a display screen such as a liquid crystal, an operation unit 26 constituted by input keys, a non-contact IC card 28, and the like. . The CPU 20 can access the non-contact IC card 28 by executing the program 22 a stored in the memory 22. In addition, you may use not only the mobile telephone 12 but other portable terminals, such as PDA. In short, the non-contact IC card 28 may be built in a terminal that is always carried by the user.

  The ATM 10 includes a CPU 30, a memory 32, a touch panel display 34, a card receiving unit 36, a magnetic card reader unit 38, a deposit / withdrawal unit 39, a mobile phone installation unit 40, an IC card communication unit 42, a host communication unit 44, and the like. . The magnetic card reader unit 38 reads magnetic information from the cash card inserted in the card receiving unit 36. The deposit / withdrawal unit 39 is a cash deposit / withdrawal port at the time of withdrawal or deposit. The host communication unit 44 controls communication with the host computer 16. The IC card communication unit 42 communicates with the non-contact IC card 28 built in the mobile phone 12 installed in the mobile phone installation unit 40 to access the non-contact IC card 28. The memory 32 stores a program 32a. The CPU 30 executes the program 32a and controls each part of the ATM 10 to realize a function as the ATM 10.

  4 and 5 are flowcharts showing the processing contents of the program 32a executed by the CPU 30 of the ATM 10. As shown in FIG. 4, the CPU 30 first displays the transaction menu screen illustrated in FIG. 6 on the touch panel display 34 (S100), and determines the menu item selected on this transaction menu screen (S102). As shown in FIG. 6, the transaction menu screen has menu items such as “Balance inquiry”, “Drawer”, “Payment”, “Transfer”, etc., as well as ATM 10 called “mobile phone record”. Contains menu items. In this embodiment, a user who intends to use the ATM 10 using the mobile phone 12 stores the magnetic information of the cash card in the non-contact IC card 28 of the mobile phone 12 in advance using the ATM 10. In that case, the “mobile phone recording” menu is selected. When the magnetic information of the cash card is stored in the non-contact IC card 28, it becomes possible to use the ATM transaction by the mobile phone 12 thereafter.

== Storage of cash card recording information in IC card ==
When the “mobile phone recording” menu is selected on the transaction menu screen of FIG. 6, the CPU 30 displays a message to the effect that a cash card should be inserted on the touch panel display 34 (S104 of FIG. 4). When a cash card is inserted into the card reception unit 36 in response to this message, the CPU 30 causes the magnetic card reader unit 38 to read magnetic information (hereinafter referred to as cash card information) recorded on the cash card (S106). . The cash card information includes information such as a bank number, an account type, and an account number, and corresponds to “account specifying information” of the present invention. Further, the CPU 30 displays a message to the effect that the personal identification number should be input on the touch panel display 34 (S108), and acquires the personal identification number input in response to this message (S110).

  Next, the CPU 30 causes the host communication unit 44 to transmit the cash card information read from the cash card by the magnetic card reader unit 38 and the input personal identification number to the host computer 16 (S112). The host computer 16 refers to the account information database 18 to determine whether or not the personal identification number is valid corresponding to the cash card information (S114), and transmits a signal indicating the determination result to the ATM 10. (S116).

  When the data communication unit 44 of the ATM 10 receives the above signal from the host computer 16, the CPU 30 determines whether the password is valid based on the signal (S118). A message to the effect that a mobile phone with a built-in card should be set is displayed on the touch panel display 34 (S120). Then, the CPU 30 instructs the IC card communication unit 42 to write the cash card information to the non-contact IC card 28 (S122). In response to this, the IC card communication unit 42 communicates with the non-contact IC card 28 by a predetermined communication procedure, and writes the cash card information to the non-contact IC card 28. On the other hand, if the password is not valid, a message to that effect is displayed on the touch panel display 34 (S124).

  FIG. 7 shows an example of a communication procedure between the IC card communication unit 42 and the non-contact IC card 28. As shown in the figure, first, the IC card communication unit 42 transmits a polling signal to the non-contact IC card 28 (S200). The non-contact IC card 28 built in the mobile phone 32 installed in the IC card communication unit 42 returns its own ID (hereinafter referred to as a card ID) to the IC card communication unit 42 in response to this polling signal ( S202). The IC card communication unit 42 that has received this reply sends the data block name that the non-contact IC card 28 wants to access (that is, the data block name storing the contractor number and the confirmation number) together with the card ID to the non-contact IC card 28. (S204). The non-contact IC card 28 confirms that the notified card ID matches its own card ID (S206), and sends the version information of the encryption key necessary for accessing the designated data block to the IC card communication unit. Return to 42 (S208).

  The IC card communication unit 42 generates the encryption key Kc from the data block name to be accessed and the version information of the encryption key (S210). On the other hand, the non-contact IC card 28 also generates the encryption key Kc from the data block name (S212). In this way, the encryption key Kc is shared between the IC card communication unit 42 and the non-contact IC card 28, and mutual authentication is performed using this encryption key Kc. The mutual authentication procedure is as follows.

  First, the IC card communication unit 42 generates a random number R1 (S214), and transmits M1 = E1 (R1) obtained by encrypting the random number R1 to the contactless IC card 28 (S216). The non-contact IC card 28 decrypts M1 and obtains P1 = D1 (M1) (S218). Then, M2 = E2 (P1) obtained by encrypting P1 is transmitted to the IC card communication unit 42 (S220). The IC card communication unit 42 decodes M2 received from the non-contact IC card 28 to obtain P2 = D2 (M2) (S222), and checks whether this P2 matches R1 (S224).

  Next, the non-contact IC card 28 generates a random number R2 (S226), and transmits M3 = E1 (R2) obtained by encrypting the random number R2 to the IC card communication unit 42 (S228). The IC card communication unit 42 decrypts M3 to obtain P3 = D1 (M3) (S230). Then, M4 = E2 (P3) obtained by encrypting this P3 is transmitted to the non-contact IC card 28 (S232). The non-contact IC card 28 decrypts M4 to obtain P4 = D2 (M4) (S234), and checks whether this P4 matches R2 (S236).

  If the match can be confirmed in S224 and S236, the mutual authentication between the IC card communication unit 42 and the non-contact IC card 28 is completed. Then, the IC card communication unit 42 and the non-contact IC card 28 set R1 as a sequence ID and R2 as a transaction key (S238, S240), respectively, and perform encrypted communication using these sequence ID and transaction key to perform IC communication. The card communication unit 42 can access the contactless IC card 28 (S242) and write the cash card information.

  When the writing of the cash card information to the non-contact IC card 28 is completed in this way, the CPU 30 displays a writing completion message on the touch panel display 34 (S126), and then returns to S100 to display the transaction menu screen again. .

  The communication procedure between the IC card communication unit 42 and the non-contact IC card 28 shown in FIG. 7 is an example, and a communication procedure according to the specifications of the non-contact IC card 28 to be used can be used.

== ATM transactions using mobile phones ==
When a transaction menu other than “record mobile phone data” is selected on the transaction menu screen in FIG. 6, for example, when “balance inquiry” is selected, the CPU 30 inserts a cash card or inserts a mobile phone with a built-in IC card. A message to the effect of setting is displayed on the touch panel display 34 (S150 in FIG. 5). Accordingly, when the mobile phone 12 is set in the mobile phone installation unit 40, the IC card communication unit 42 communicates with the non-contact IC card 28 by the same procedure as in FIG. The stored cash card information is read, and the CPU 30 acquires the cash card information (S152). In addition, the CPU 30 displays a message to the effect that the personal identification number should be input on the touch panel display 34 (S154), and acquires the personal identification number input in response thereto (S156). Then, the host communication unit 44 causes the host communication unit 44 to transmit the cash card information read from the non-contact IC card 28, the input personal identification number, and information indicating the selected transaction (balance inquiry in this example) to the host computer 16. (S158). The host computer 16 refers to the account information database 18 to determine whether or not the password is valid (S160). If it is valid, the balance information of the corresponding account is read and transmitted to the ATM 10 (S162). ). The CPU 30 displays the balance information received from the host computer 16 on the touch panel display 34 (S164). On the other hand, if the password is not valid, the host computer 16 transmits a signal indicating that to the ATM 10 (S166), and the CPU 30 causes the touch panel display 34 to display a message or the like indicating that the password is incorrect (S166). S168). When the end operation is performed on the touch panel display 34 (S170), the transaction is completed, and the process returns to S100 in FIG. 4 to display the transaction menu screen again.

  If a cash card is inserted in response to the message in S150, a transaction using the cash card is performed in the same manner as in the previous ATM. In the above example, the case where the balance inquiry menu is selected has been described. However, when another transaction menu such as withdrawal, deposit, or transfer is selected, the CPU 30 determines whether or not the withdrawal is performed. In this case, the withdrawal amount is input, the withdrawal instruction to the host computer 16 and the withdrawal from the depositing / withdrawing unit 39 are performed. In the case of depositing, the depositing / withdrawing unit 39 accepts the deposit, counts the deposit amount, The payment instruction to the host computer is performed. In the case of the transfer, the transfer destination / transfer amount is input and the transfer instruction to the host computer is performed.

  As described above, according to the system of the present embodiment, cash card information can be stored in the non-contact IC card 28 built in the mobile phone 12 by the ATM 10, and thereafter, the mobile phone 12 is stored in the ATM 10. Transactions using ATM 10 can be performed simply by setting the mobile phone installation unit 40. That is, the user can use the ATM 10 as long as he / she has the mobile phone 12 without having a cash card.

  In the present embodiment, the cash card information is stored in the non-contact IC card 28 built in the cellular phone 12 so that the cellular phone 12 has only the cash card function, and the transaction menu can be selected or the transaction is being performed. The input operation is performed by the ATM 10. For this reason, it is possible to support the system of the present embodiment only by adding the IC card communication unit 42 while utilizing the functions of the existing ATM 10.

  Furthermore, users who are familiar with existing ATMs can perform transactions as before by simply setting the mobile phone 12 instead of inserting a cash card, thus ensuring good operability for users. be able to.

  Further, the mobile phone 12 only needs to have a configuration in which the non-contact IC card 28 can be incorporated, and it is not necessary to mount a special application program in order to use the ATM 10, so that the general versatility of the system is improved.

  In the above embodiment, the password is input from the ATM 10. However, the password may be input from the mobile phone 14. In that case, a means for communicating the personal identification number directly between the cellular phone 14 and the ATM 10 may be provided, or the personal identification number input by the cellular phone 14 is stored in the non-contact IC card 28, The IC card communication unit 42 of the ATM 10 may be configured to read the password together with the cash card information.

  Further, in the above embodiment, in consideration of the fact that a user normally carries a portable terminal such as the cellular phone 12, the non-contact IC card 28 is built in the portable terminal. If the contact IC card 28 is a multi-purpose card that is always carried by the user, the contact IC card 28 is not necessarily built in the portable terminal.

  Further, in the above embodiment, the case where the transaction apparatus of the present invention is configured as ATM 10 has been described. However, the transaction apparatus of the present invention is not limited to ATM, and can also be configured as a debit card terminal for performing debit payment. It is.

  In the above-described embodiment, the CPU 30 executes the process of S106, and the “card reading unit” of the present invention executes the processes of S112 to S118. By executing the “account information writing unit”, executing the processing of S100 and S102, the “transaction selecting unit” executing the processing of S152, and the “account information acquiring unit” of S154 and S156. By executing the process, the “password input part” is realized, and by executing the processes of S158 and 164, the “transaction executing part” is realized.

1 is an overall configuration diagram of a system according to an embodiment of the present invention. It is a figure which shows the structural example of the data recorded on the account information database. It is a hardware block diagram of ATM and a mobile telephone in this embodiment. It is a flowchart (the 1) which shows the processing content of the program which CPU of ATM runs. It is a flowchart (the 2) which shows the processing content of the program which CPU of ATM runs. It is a figure which shows an example of the transaction menu screen displayed on ATM. It is a figure which shows the communication procedure between an IC card communication part and a non-contact IC card.

Explanation of symbols

10 ATM
12 cellular phone 16 host computer 18 account information database 28 contactless IC card 30 CPU
32 memory 32a program 34 touch panel display 36 card receiving unit 38 magnetic card reader unit 40 host communication unit 42 IC card communication unit

Claims (9)

A transaction device for a user to conduct a transaction with a financial institution,
An IC card communication unit for communicating with an IC card possessed by the user;
Account information acquisition unit for reading account identification information for identifying an account of the user recorded in the IC card by the IC card communication unit;
A transaction execution unit that executes the transaction by transmitting the read account identification information and the password entered by the user to a host computer system that performs account management of the financial institution. Trading device. The transaction apparatus according to claim 1,
A card acceptance unit for accepting a cash card;
A card reader for reading the account identification information recorded in the accepted cash card;
A password identification unit that transmits the account identification information and a password entered by a user to the host computer, and determines whether the password is valid based on a response signal from the host computer;
A transaction apparatus further comprising: an account information writing unit that writes the read account specifying information to the IC card by the IC card communication unit when it is determined that the personal identification number is valid . In the transaction apparatus according to claim 1 or 2,
It is configured as an ATM having a transaction selection section that allows the user to select transactions such as withdrawal, deposit, transfer, balance inquiry, etc.
The transaction execution unit transmits the account specifying information and the personal identification number, and information indicating the selected transaction to the host computer system.   The transaction apparatus according to claim 1 or 2, configured as a debit card terminal.   The transaction device according to claim 1, wherein the IC card is a contactless IC card built in a mobile terminal.   The transaction apparatus according to any one of claims 1 to 5, further comprising a password input unit that receives an input of a password from a user.   6. The transaction apparatus according to claim 5, further comprising means for receiving a personal identification number input from the portable terminal from the portable terminal. Consists of a transaction terminal for performing transactions with financial institutions and an IC card possessed by the user,
In the IC card, account specifying information for specifying the account of the user is recorded,
The transaction terminal
An IC card communication unit for communicating with an IC card possessed by the user;
An account information acquisition unit for reading account identification information recorded on the IC card by the IC card communication unit for identifying an account of the user;
A transaction execution unit that executes the transaction by transmitting the read account identification information and the password entered by the user to a host computer system that performs account management of the financial institution. Trading system. A transaction method for users to conduct transactions with financial institutions,
Storing in advance an account identification information for identifying an account held by the user in an IC card possessed by the user;
Reading from the IC card the account identification information recorded on the IC card;
A transaction method comprising: performing the transaction by transmitting the read account identification information and the password input by the user to a host computer system that manages the account of the financial institution. .

Images