JP2011123651A - Automatic teller machine - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic teller machine continuing a transaction without leaking history of the transaction even when a failure occurs. <P>SOLUTION: The automatic teller machine is connected to a host for carrying out a prescribed transaction between a user and managing the transaction through a first network and is connected to a center for monitoring the transaction through a second network. In this case, the automatic teller machine includes: an operating section for accepting an operation for carrying out the transaction from the user; an authentication section for authentication based on biological information of the user; and a control section for determining whether or not communication is possible with the host through the first network when the operation is accepted, making the authentication section authenticate the user in a state of having the automatic teller machine switched from online to offline when determined that communication with the host is not possible through the first network, and transmitting the transaction history of the process regarding the transaction for which the operation is accepted to the center through the second network. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an automatic transaction apparatus that performs biometric authentication to perform personal authentication.

  In recent years, companies have been trying to continue their business even in the event of a disaster. Similarly, in the financial industry, countermeasures against damage such as earthquakes and acute infectious diseases are being studied. For example, countermeasures are planned and implemented for each level of damage situation, such as backing up system center data etc. to another location different from the system center, or installing system centers in multiple locations. Yes. In a financial institution, buildings such as stores where ATMs (Automated Teller Machines) serving as contact points with users are reinforced, or power is supplied to ATMs by private power generation.

  Generally, when online is interrupted, ATM cannot be authenticated and the system must be down. This is because the personal identification is used as a center inquiry in order to reduce the damage impersonated by reading the personal identification number from the card. Therefore, regardless of damage such as earthquakes, even if the above-mentioned measures are taken for buildings and ATMs themselves, withdrawals cannot be made at ATMs until online connection is established. For this reason, in a financial institution, it is necessary to perform all operations normally performed by an ATM at a window such as a branch office, resulting in user confusion.

  At present, there is biometric authentication based on biometric information using a biometric information IC card as a personal authentication means that uses an ATM relatively easily and has a high authentication probability. In the biometric authentication, authentication is performed based on the biometric information in the IC card and the biometric information of the user, so that the user can be authenticated even if the center and the ATM are offline. Therefore, it is possible to improve the convenience of the user and withdraw it by ATM while suppressing the above-mentioned confusion. For example, Patent Document 1 discloses a technology that, when offline, determines whether there is past transaction data using ATM, and enables transaction with a user when there is past transaction data. It is disclosed.

JP 2008-171227 A

  However, in the technique described in Patent Document 1, since the transaction history is held inside the ATM, there is a problem that the risk of the history leaking to a third party occurs. Further, there has been a problem that when the ATM that the user is trying to trade has never been used in the past, the transaction at that ATM cannot be executed.

  This invention is made in view of the subject mentioned above, Comprising: Even if a failure arises, it is providing the automatic transaction apparatus which can continue transaction, without the log | history of transaction leaking. Objective.

  In order to achieve the above-described object, an automatic transaction apparatus according to the present invention performs a predetermined transaction with a user, is connected to a host that manages the transaction via a first network, and performs the transaction. An automatic transaction apparatus connected to a monitoring center via a second network, an operation unit for receiving an operation for performing the transaction from the user, and authentication based on the biometric information of the user When the authentication unit and the operation are accepted, it is determined whether or not communication with the host via the first network is possible, and the host communicates with the host via the first network. If the automatic transaction apparatus is switched from online to offline, the authentication unit authenticates the user and determines that the operation has been accepted. The transaction history of processing related through the second network characterized by comprising a control unit to be transmitted to the center.

  ADVANTAGE OF THE INVENTION According to this invention, even if a failure arises, the automatic transaction apparatus which can continue transaction without the log | history of transaction leaking can be provided.

It is a figure which shows the structure of the automatic transaction system concerning this embodiment. It is a figure which shows a mode that a user operates ATM and transacts when a failure generate | occur | produces in an automatic transaction system. It is a flowchart which shows the process sequence for ATM1 to switch (transition) of an offline transaction and an online transaction when a failure arises. It is a flowchart which shows the process sequence in case various conditions are determined and ATM1 switches an offline transaction and an online transaction. It is a flowchart which shows the process sequence in case ATM1 performs an offline transaction. It is a flowchart which shows the process sequence at the time of making it transfer from an offline transaction to an online transaction from a monitoring apparatus. It is a flowchart which shows the process sequence of the transaction process shown in FIG.

  Embodiments of an automatic transaction apparatus according to the present invention will be described below in detail with reference to the accompanying drawings.

  FIG. 1 is a diagram showing a configuration of an automatic transaction system 1000 according to the present embodiment. As shown in FIG. 1, the automatic transaction system 1000 includes an ATM (Automated Teller Machine) 1, a network 2, a host 3, a network 4, and a monitoring device 5. The communication networks 2 and 4 are wide area networks such as a WAN (Wide Area Network), but the communication network 2 is an accounting communication network (accounting communication network 2), and the communication network 4 is a monitoring communication. This is a network (monitoring communication network 4). In the following, a finger vein is described as an example of biometric information, but various biometric information such as a fingerprint, a palm vein, a face, and an iris can be used.

  ATM1 is comprised including the main body control part 101, the IC card handling mechanism 102, the finger vein reading part 103, the display part 104 with a touch panel, the banknote handling mechanism 105, and the journal printing mechanism 106.

  The main body control unit 101 communicates with the host 3 that manages transactions performed by the ATM 1 and controls the entire ATM 1. For example, the main body control unit 101 includes a unit including an arithmetic device such as a CPU (Central Processing Unit). Has been. The main body control unit 101 includes an HDD 1011 and a DVD drive 1012. The HDD 1011 and the DVD drive 1012 will be described later.

  In response to an instruction from the main body control unit 101, the IC card handling mechanism 102 is inserted into an insertion port (not shown) when an IC card or the like used when a user makes a transaction with the ATM 1 is inserted. The inserted IC card is accessed and the user's biometric information stored in the IC card is read.

  In response to an instruction from the main body control unit 101, the finger vein reading unit 103 displays an authentication screen for performing user authentication on the display unit 104 with a touch panel, and the user's finger is placed on a finger placement unit (not shown). When placed, it reads the user's finger vein and authenticates the user.

  The display unit 104 with a touch panel is, for example, a panel having an LCD (Liquid Crystal Display), and in accordance with instructions from the main body control unit 101, operation guidance (guidance) regarding various transactions such as withdrawal and withdrawal of deposits, Various instructions (selection) for performing these transactions are accepted.

  The banknote handling mechanism 105 deposits and withdraws banknotes traded by the user. The banknote handling mechanism 105 determines the authenticity of the deposited banknote and stores it in a storage box (not shown), or stores it in a storage box (not shown) according to the deposit amount input from the display unit 104 with a touch panel. The stored banknotes are paid out and withdrawn.

  The journal printing mechanism 106 prints the history of transactions performed by the user with the ATM 1 on a predetermined sheet (journal) and holds the history of transactions.

  FIG. 2 is a diagram illustrating a state in which a user performs a transaction by operating the ATM 1 when a failure occurs in the automatic transaction system 1000. Normally, ATM1 performs online communication with the host 3, but as shown in FIG. 2, the billing communication network 2 is cut off due to a disaster such as an earthquake, and ATM1 can communicate with the host 3 online. If it disappears, ATM1 will be discontinued.

  In this case, the main body control unit 101 of the ATM 1 switches the transaction mode to the offline mode in which online communication is not performed, and can execute the transaction with the user. Then, the main body control unit 101 causes the journal printing mechanism 106 to output a transaction record when a failure occurs, prints the transaction record on the journal, and stores the output transaction history in the HDD 1011.

  Thereafter, when the accounting communication network 2 is restored, the main body control unit 101 transmits the transaction history stored in the HDD 1 to the host 3 to continue the transaction with the host 3, or the accounting communication network 2 Is not restored, the transaction history stored in the HDD 1011 is copied to an external medium by the DVD drive 1012. Thereafter, the external media on which the transaction history is copied is set in the host 3 by an attendant or the like, and the transaction is continued.

  FIG. 3 is a flowchart showing a processing procedure for the ATM 1 to switch (transition) between offline trading and online trading when a failure occurs.

  As shown in FIG. 3, when the billing communication network 2 goes offline (step S3001), the main body control unit 101 of the ATM 1 stops handling the transaction (step S3002). After that, the main body control unit 101 determines whether there is an input indicating that the display unit 104 with a touch panel instructs an offline transaction from an attendant or the like (step S3003), and the display unit 104 with a touch panel performs an offline transaction from the attendant or the like. If it is determined that there is an input for instructing (step S3003; Yes), an offline transaction is started (step S3004).

  On the other hand, when the main body control unit 101 determines that the display unit 104 with a touch panel has not received an input from the attendant or the like to instruct an offline transaction (step S3003; No), the bill communication network 2 is restored (see FIG. It is determined whether or not it is in a connected state (step S3005), and if it is determined that the billing communication network 2 is in a restored state (step S3005; Yes), an online transaction is started (step S3006). ).

  On the other hand, when the main body control unit 101 determines that the accounting communication network 2 is not in a restored state (step S3005; No), the main body control unit 101 returns to step S3003 and waits as it is.

  In the flowchart described above, it is determined only whether or not the accounting communication network 2 has been restored. For example, the main body control unit 101 determines whether or not the monitoring communication network 4 has been restored, When it is determined that the monitoring communication network 4 is restored, online transaction may be started via the monitoring communication network 4.

  Furthermore, the main body control unit 101 determines whether or not the accounting communication network 2 and the monitoring communication network 4 have been restored within a certain time, and the accounting communication network 2 and the monitoring communication network 4 are restored within a certain time. If it is determined that the transaction has not been performed, the offline transaction may be started.

  FIG. 4 is a flowchart showing a processing procedure in the case where ATM 1 switches between offline trading and online trading by determining such various conditions. As shown in FIG. 4, when the billing communication network 2 goes offline (step S4001), the main body control unit 101 of the ATM 1 stops handling the transaction (step S4002).

  Thereafter, the main body control unit 101 determines whether or not it is connected to the monitoring device 5 via the monitoring communication network 4 (step S4003), and determines that it is connected to the monitoring device 5 via the monitoring communication network 4 If it is (step S4003; Yes), it is further determined whether or not an instruction for offline transaction is received from the monitoring device 5 (step S4004).

  And when the main body control part 101 determines with having received the instruction | indication of an offline transaction from the monitoring apparatus 5 (step S4004; Yes), an offline transaction is performed (step S4005).

  On the other hand, in step S4003, when the main body control unit 101 determines that the monitoring communication network 4 is not connected to the monitoring device 5 (step S4003; No), the main body control unit 101 receives from the monitoring device 5 an instruction for an offline transaction. If it is determined that it is not present (step S4004; No), it is further determined whether or not there is an input indicating that the display unit 104 with the touch panel instructs an offline transaction from an attendant or the like (step S4006).

  If the main body control unit 101 determines that there is an input indicating that the touch panel-equipped display unit 104 instructs an offline transaction from an attendant or the like (step S4006; Yes), the process proceeds to step S4005.

  On the other hand, when the main body control unit 101 determines that the display unit 104 with the touch panel has not received an input from the attendant or the like to instruct offline transactions (step S4006; No), the offline time has elapsed for a predetermined time or more. It is determined whether or not (step S4007).

  If the main body control unit 101 determines that the offline time has not exceeded a predetermined time (step S4007; No), the process proceeds to step S4005. On the other hand, when it is determined that the offline time has elapsed for a predetermined time or more (step S4007; Yes), it is further determined whether the bill communication network 2 has been restored (step S4008).

  If the main body control unit 101 determines that the bill communication network 2 has been restored (step S4008; Yes), it executes an online transaction (step S4009). On the other hand, when it is determined that the billing communication network 2 has not been restored (step S4008; No), the process returns to step S4003 and the processes in steps S4003 to S4009 are repeated.

  Here, a process when ATM1 performs an offline transaction will be described. FIG. 5 is a flowchart showing a processing procedure in the case where the ATM 1 performs an offline transaction.

  As illustrated in FIG. 5, when the main body control unit 101 of the ATM 1 starts an offline transaction (step S5001), the display unit 104 with a touch panel determines whether or not a transaction start instruction has been received from the user (step S5002).

  And when the main body control part 101 determines with the display part 104 with a touch panel having received the transaction start instruction from the user (step S5002; Yes), it performs the received transaction (step S5003). On the other hand, when it determines with the display part 104 with a touch panel not receiving the transaction start instruction from a user (step S5002; No), it progresses to step S5004. Note that specific processing performed in step S5003 will be described later.

  After that, the main body control unit 101 determines whether or not the display unit 104 with a touch panel has received an input to end the offline transaction from the clerk (step S5004), and the display unit with touch panel 104 ends the offline transaction from the clerk. When it is determined that an input to that effect has been received (step S5004; Yes), ATM1 is discontinued (step S5005).

  On the other hand, when the main body control unit 101 determines that the display unit 104 with a touch panel has not received an input from the attendant to end the offline transaction (step S5004; No), the process returns to step S5002, and steps S5002 to S5004 are performed. Repeat each process.

  If the ATM 1 is canceled in step S5005, the main body control unit 101 determines whether or not the accounting communication network 2 has been restored (connected or not) (step S5006). Is determined to have recovered (step S5006; Yes), it is shifted to online transaction (step S5007).

  On the other hand, if the main body control unit 101 determines that the accounting communication network 2 has not recovered (step S5006; No), the main body control unit 101 returns to step S5002 and repeats the processes from step S5002 to S5006.

  In the above-described flowchart, it is determined whether or not only the accounting communication network 2 has recovered, but when the monitoring communication network 4 has recovered, the monitoring device 5 changes from offline transaction to online transaction. It is also possible to migrate.

  FIG. 6 is a flowchart showing a processing procedure when the monitoring device 5 is shifted from offline transaction to online transaction. As shown in FIG. 6, the main body control unit 101 of the ATM 1 performs the same processing as the steps S5001 to S5003 shown in FIG. 5 in the steps S6001 to S6003, and the processing of the steps S6002 or S6003. When the process ends, the main body control unit 101 determines whether or not the monitoring apparatus 5 is connected to the monitoring communication network 4 (step S6004).

  If the main body control unit 101 determines that the monitoring device 5 is connected via the monitoring communication network 4 (step S6004; Yes), the main body control unit 101 further receives an instruction from the monitoring device 5 to end the offline transaction. It is determined whether or not (step S6005).

  In step S6005, when it is determined that the main body control unit 101 has received an instruction to end the offline transaction from the monitoring device 5 (step S6005; Yes), ATM1 is discontinued (step S6006).

  On the other hand, when the main body control unit 101 determines that it is not connected to the monitoring device 5 via the monitoring communication network 4 (step S6004; No), the main body control unit 101 receives from the monitoring device 5 an instruction to end the offline transaction. When it determines with not having (step S6005; No), the main body control part 101 determines whether the input to the effect that the display part 104 with a touch panel complete | finishes online transaction was received from the attendant (step S6009).

  If the main body control unit 101 determines that the display unit 104 with the touch panel has received an input from the attendant to end the online transaction (step S6009; Yes), the process proceeds to step S6006.

  On the other hand, if the main body control unit 101 determines that the display unit 104 with a touch panel has not received an input from the attendant to end the online transaction (step S6009; No), the process returns to step S6002, and steps S6002 to S6006 are performed. Repeat each process.

  After that, the main body control unit 101 determines whether or not the accounting communication network 2 has been restored (step S6007). If it is determined that the accounting communication network 2 has been restored (step S6007; Yes), the main control unit 101 shifts to online transaction. (Step S6008). On the other hand, when the main body control unit 101 determines that the accounting communication network 2 has not been restored (step S6007; No), the main body control unit 101 returns to step S6006 and waits as it is.

  Next, transaction processing performed in step S5003 shown in FIG. 5 or step S6003 shown in FIG. 6 will be described. FIG. 7 is a flowchart showing a processing procedure of the transaction processing shown in FIG. 5 or FIG. In the following, a withdrawal process for withdrawing a deposit or the like is described as a transaction process, but the present invention can also be applied to various transactions such as depositing and currency exchange.

  As shown in FIG. 7, first, when the display unit 104 with the touch panel accepts the designation of the withdrawal transaction (Step S7001), the main body control unit 101 thereafter causes the IC card handling mechanism 102 to perform a transaction from the user. Is inserted (step S7002).

  The finger vein reading unit 103 reads the finger vein of the user's finger placed on a finger placement unit (not shown) (step S7003), and embeds the read finger vein data and the inserted IC card chip or the like. The personal authentication is performed by determining whether or not the finger vein information matches the information (step S7004).

  Then, when the finger vein reading unit 103 determines that the read finger vein data matches the finger vein information embedded in the inserted IC card chip or the like (authentication is successful) (step) S7004; Yes), the main body control unit 101 displays a screen for inputting the withdrawal amount on the display unit 104 with a touch panel, and the display unit with touch panel 104 receives the input (step S7005).

  On the other hand, when the finger vein reading unit 103 determines that the read finger vein data does not match the finger vein information embedded in the inserted IC card chip or the like (personal authentication has failed) ( In step S7004; No), the process proceeds to step S7010, and the main body control unit 101 ends the process.

  In step S7004, when the display unit 104 with the touch panel receives an input of the withdrawal amount, the main body control unit 101 determines whether or not the accepted withdrawal amount is within a preset amount ( Step S7006).

  Note that in this step S7006, the reason for determining whether or not it is within the preset amount is offline transaction in the event of a failure in ATM1, so the transaction amount is more limited than normal transaction processing. Because it is.

  When determining that the accepted withdrawal amount is within a preset amount (step S7006; Yes), the main body control unit 101 causes the banknote handling mechanism 105 to withdraw the banknote (step S7007), and records the transaction. Is stored in the HDD 1011 (step S7008), and the journal printing mechanism 106 is caused to print the transaction record on the journal (step S7009), and the process is terminated (step S7010).

  On the other hand, if the main body control unit 101 determines in step S7006 that the accepted withdrawal amount is not within the preset amount (step S7006; No), the drawer 104 with touch panel accepts input. It is determined whether the amount of money is within a predetermined number (step S7011).

  In step S7011, the reason for determining whether or not the number of withdrawals is within a predetermined number is the same as in the case of step S7006, because it is an offline transaction in the case where a failure occurs in ATM1. This is because the input error is limited rather than the transaction processing of

  When the main body control unit 101 determines that the number of withdrawal amounts received by the display unit 104 with a touch panel is within a predetermined number of times (step S7011; Yes), the display unit 104 with a touch panel displays the amount that can be withdrawn. (Step S7013), the process returns to Step S7005, accepts the input of the withdrawal amount again, and executes each process after Step S7005.

  On the other hand, if the main body control unit 101 determines that the number of withdrawal amounts received by the display unit with touch panel 104 is not within a predetermined number (step S7011; No), the withdrawal amount exceeds the preset amount. Is displayed on the display unit 104 with touch panel (step S7012), the process proceeds to step S7008, the transaction record is stored in the HDD 1011, and the process proceeds to steps S7009 to S7010.

  In this way, a predetermined transaction is performed with the user, the transaction management network 2 is connected to the host 3 that manages the transaction, and the monitoring device 5 that monitors the transaction is connected via the monitoring communication network 4. In the connected ATM 1, the display unit 104 with a touch panel accepts an operation for performing a transaction from the user, the finger vein reading unit 103 authenticates based on the biometric information of the user, and the main body control unit 101 operates the operation. Is received, it is determined whether or not communication with the host 3 via the accounting communication network 2 is possible, and communication with the host 3 via the accounting communication network 2 is not possible. When the determination is made, the finger vein reading unit 103 is authenticated in a state where the ATM 1 is switched from online to offline, and the transaction history of the processing related to the transaction for which the operation is accepted is monitored via the monitoring communication network 4. In Since the signal, even if a failure occurs, it is possible that the history of the transaction is to proceed with the transaction without leaking.

  That is, the user authentication and transaction are executed offline, and the history of the executed transaction is transmitted to the monitoring center 4 through the monitoring communication network 4 (in the case of restoration, the accounting communication network 2). In the case where a failure has occurred, it is recorded on a medium and sent to the host 2 or the monitoring center 4, and the system center holds the transaction history. Therefore, even when a failure occurs, the user accesses the host 2 or the monitoring center 4 even if the transaction is performed by operating another ATM 1 different from the ATM 1 used at that time. The transaction can be continued, and the transaction history of the user is not leaked. Further, until the account communication network 2 is restored, the user is not confused by performing all the operations normally performed by the ATM at the branch office of the financial institution.

  In the above-described processing, the journal printing mechanism 106 prints the transaction history on a predetermined sheet, but may be stored in the HDD 1011 as an electronic journal, for example. In this case, the transaction history stored in the HDD 1011 includes information such as the account number read by the IC card handling mechanism 102 from the biometric authentication card inserted by the user.

  The present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above embodiments. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

DESCRIPTION OF SYMBOLS 1 ... ATM, 2 ... Account communication network, 3 ... Host, 4 ... Monitoring communication network, 5 ... Monitoring apparatus, 101 ... Main body control part, 102 ... IC card handling mechanism, 103 ... Finger vein reading part, 104 ... Touch panel Attached display part, 105 ... bill handling mechanism, 106 ... journal printing mechanism, 1011 ... HDD, 1012 ... DVD drive.

Claims (5)

An automatic transaction apparatus that performs a predetermined transaction with a user, is connected to a host that manages the transaction via a first network, and is connected to a center that monitors the transaction via a second network. There,
An operation unit for receiving an operation for performing the transaction from the user;
An authentication unit for performing authentication based on the user's biometric information;
When the operation is accepted, it is determined whether communication with the host via the first network is possible, and communication with the host via the first network is possible. If it is determined that the automatic transaction apparatus is switched from online to offline, the authentication unit is made to authenticate the user, and the transaction history of the process related to the transaction for which the operation has been accepted is stored in the second network. A control unit for transmitting to the center via
An automatic transaction apparatus comprising: The control unit further determines whether or not communication with the host has been restored, and if it is determined that communication with the host has been restored, the transaction history is transmitted to the host via the first network. Send,
The automatic transaction apparatus according to claim 1. The operation unit further receives an instruction to execute the transaction offline,
The control unit switches the automatic transaction apparatus from online to offline when the operation unit receives the instruction.
The automatic transaction apparatus according to claim 1 or 2. The control unit switches the automatic transaction apparatus from online to offline when the instruction is received from the center via the second network.
The automatic transaction apparatus according to claim 3. The control unit switches the automatic transaction apparatus from online to offline when a predetermined time elapses when communication with the host via the first network is not possible.
The automatic transaction apparatus of any one of Claims 1-4 characterized by the above-mentioned.

Images