JP2012185734A - Disbursement approval system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system that allows a transferer to directly contact an approver when transferring or withdrawing money.SOLUTION: An ATM server 20 has disbursement approval information 100 containing a contact destination of the approver who approves disbursement and an approval necessity notice conditions in which conditions for requesting approval of the approver are defined when an account nominal disburses from his or her account. An ATM 10 includes conversation means 11 of allowing the account nominal and approver to make direct telephone contact when receiving a disbursement request from the account nominal, and sends a telephone number of the approver in response to the disbursement request from the account nominal to make the approver directly converse with the account nominal. The ATM server 20 requests approver's approval at the end of the conversation between the account nominal and approver and carries out the disbursement based upon the approval.

Description

  The present invention relates to a withdrawal permission system having a permission function for withdrawal by an account holder himself from a deposit account in a financial institution.

  Recently, in order to prevent frequent wire fraud, etc., several systems have been proposed that require permission or approval from a third party even when making a transfer or cash withdrawal from a self-named deposit account. For example, in Patent Document 1, when an account holder (account holder) transfers money from his / her own account, it is a high transfer exceeding the upper limit threshold of the transfer amount set in the account A transfer method for notifying a transfer approval request to a third party registered in advance in the account is described.

  Also, in Patent Document 2, a licensee registered in advance in an account registers permission conditions such as a maximum amount of withdrawal and a possible period of withdrawal, and the withdrawal that the account owner intends to carry out the procedure includes A method is described in which the withdrawal procedure is allowed only when the conditions for permission are met.

  Also, in Patent Document 3, in order to prevent unauthorized withdrawal, the account holder reserves and inputs the desired withdrawal details and withdrawal amount, and accepts withdrawal from the account holder. Describes a system for automatically sending a notification as to whether or not to approve a withdrawal to an approver having the authority to approve the withdrawal.

JP 2007-316959 A JP 2007-219885 A JP 2010-140456 A

  However, in the method described in Patent Document 1, since a third party is notified only when the transfer amount exceeds the upper limit set in the account, a relatively small amount less than the upper limit is set. It is not possible to deal with fraud such as fictitious claims. In addition, since the notification method to the third party is only one-way, such as voice guidance guidance by e-mail or telephone, in order to know the situation in detail for the transfer that the third party has doubts, Must be contacted separately.

  In the method described in Patent Document 2, the account holder must contact the licensor in advance for each withdrawal, and the licensor must enter a permit record to permit each withdrawal. It must be troublesome for both the account owner and the licensee. In addition, in order to prevent wire fraud, if the account holder is an elderly person, the licensor is likely to be set as a son, etc. In that case, the criminals will ask for permission. Therefore, the criminal group knows the existence of the permission system, and instead of making a transfer, it takes another payment method, such as taking a bank card or a police officer to take a cash card as a bank, and later multiple times so as not to exceed the required amount of permission. It would be possible to take workarounds such as withdrawing money.

  In addition, the system described in Patent Document 3 is a mechanism for preventing representatives and accountants in charge of deposit account holders from illegally withdrawing cash (incl. It is not intended to prevent wire fraud. In addition, there is a problem similar to that in Patent Document 2 in that the account holder needs to make a reservation in advance for each withdrawal.

  In the present invention, in view of the problems as described above, in order to prevent wire fraud, it is not always necessary to make an advance reservation to the licensor, and the licensor is requested to make an actual withdrawal (transfer or withdrawal of cash). The purpose is to provide a system that allows direct telephone contact.

  In order to solve the above problems, the withdrawal permission system of the present invention has the following features.

  An ATM server connected to an ATM via a network, a withdrawal permission system that requires permission when an account holder of a financial institution makes a transfer or withdrawal from his / her own account, wherein the ATM server The contact information of the licensor who permits the withdrawal of the license, and the license requirement notification condition that stipulates whether or not the licensor is requested to grant a license when the account holder makes a withdrawal request from the account. A withdrawal permission information storage means, wherein the ATM comprises a conversation means for allowing the account holder to communicate with the licensee by telephone when the withdrawal request is received from the account holder; Refers to the permission requirement notification condition when receiving the withdrawal request from the ATM, and when the permission of the licensee is required, the account holder and the permit are To perform the conversation's after the conversation is finished, it obtains permission to the licensor, wherein to execute the dispensing based on the license, and wherein the.

  According to the above system, an ATM server connected to an ATM (Automatic Teller Machine, or an automatic transaction device) (a server that controls the ATM and performs preprocessing for the host computer to execute account transactions) However, in the case of a withdrawal request that requires permission of the licensee registered in advance in the account, the account holder carries out the withdrawal operation and the phone of the licensee, and the conversation means provided for the ATM Is used to provide a means of allowing the account holder and the licensee to talk directly over the phone. Then, after the conversation ends, the licensee is asked for permission, and the withdrawal is executed (by the host computer and the ATM) based on the permission.

  According to such a configuration, even if the account holder is withdrawing money from his / her account (transfer or withdrawal), the license holder's permission is required if the predetermined conditions are met. It can be set. And when making withdrawals from an ATM, if the withdrawal requires permission, the ATM will automatically call the licensor directly from the ATM. You can talk directly to the person. The licensor can determine from the conversation with the person whether the withdrawal is due to fraud or the like from the contents of the call.

  In fact, in bank transfer scams, it is often unwilling to consult with a third party in situations where the account holder is unable to make a calm decision, so actually make a withdrawal. The ATM, which is the site in question, automatically contacts the licensee by telephone. This is because ATM has an opportunity to make a call automatically before transfer. In this way, even if the account holder is not even convinced to consult with a third party, it can provide a means to contact the third party, so transfer fraud and fictitious Helps control crime, such as billing. In addition, even if the criminal deceives the account holder by means of “the mobile phone number has changed” or the like, the phone number of the contact registered in this system cannot be changed, so a call is made to ask the criminal for permission. There is nothing. In addition, there is an opportunity to speak directly with the licensor (in many cases, a family member) when calling for a withdrawal permit, so if the account holder is a single elderly person, the opportunity for family communication is expanded. There is also an effect.

The withdrawal permission system of the present invention can further include the following features.
The conversation means is an interphone installed in the ATM.

  According to the above system, it is possible to effectively use the ATM or the interphone installed beside the ATM in order to cope with the case where the failure or operation of the ATM is not known. In addition, user confusion caused by installing another handset other than the interphone can be avoided.

The withdrawal permission system of the present invention can further include the following features.
The permission requirement notification condition is defined by a logical expression obtained by combining a plurality of permission conditions, and the permission condition includes an ATM installation location where the withdrawal can be performed and an ATM identifier.

  According to the above system, in addition to the amount of money to be withdrawn and the period during which money can be withdrawn, the ATM installation location (store, etc.) and the ATM itself are also included in the conditions for requesting permission. In this way, the ATM having the conversation function is encouraged to be used as an ATM that is normally used by the account holder, particularly when the account holder is an elderly person who is not familiar with machine operations. In some cases, it is possible to use ATMs with a sense of security by using ATMs that have a conversation function that makes it easy to call the licensee from the spot at any time. Also, in the unlikely event that a cash card and PIN are deceived and handed over to a fraudulent criminal group, permission conditions are set so that payment can only be made at a specific store or a specific ATM regardless of the withdrawal amount. If this is done, it can also be used for criminal clearance.

The withdrawal permission system of the present invention can further include the following features.
The withdrawal permission information storage means stores a plurality of contacts for each of a plurality of licensees, and gives the plurality of contacts a priority order for contacting the licensers for each predetermined time period. It is characterized by that.

  According to the above system, there should be multiple licensors so that the licensor can be contacted as much as possible, and each licensor must register multiple contacts (home phone, mobile phone, commuting / commuting phone, etc.). Priority is given to each contact in the order in which the phone can be easily connected for each predetermined time zone according to the life pattern of the licensee. By doing so, it is possible to minimize the situation in which no telephone contact is made with any licensee.

The withdrawal permission system of the present invention can further include the following features.
The ATM server shifts to the non-conversation mode when the conversation means cannot make a telephone contact with any of the licensors. In the non-conversation mode, the ATM server is based on the presence or absence of prior permission from a plurality of licensors. And determining whether the withdrawal is possible.

  According to the above system, in the unlikely event that neither of the licensors can be contacted by telephone, the system switches to the non-conversation mode. If there is no prior permission, withdrawal will be refused. By doing in this way, when it is assumed that a telephone contact cannot be made, the account holder can ask the licensor in advance for permission. Conversely, in the case of a long-term absence from the licensee, advance registration may be encouraged. In this case, the reason why there are a plurality of licensees is that there is a possibility that the transfer fraud is pretending to be one of the licensees.

The system of the present invention can also be configured as follows.
An ATM server connected to an ATM via a network, a withdrawal permission system that requires permission when an account holder of a financial institution makes a transfer or withdrawal from his / her own account, wherein the ATM server The contact information of the licensor who permits the withdrawal of the license, and the license requirement notification condition that stipulates whether or not the licensor is requested to grant a license when the account holder makes a withdrawal request from the account. With a withdrawal permission information storage means, the ATM comprises an interphone that allows the account holder to have a conversation with the licensor by telephone contact when receiving the withdrawal request from the account holder, When the withdrawal request is received from the ATM, the permission requirement notice condition is referred to, and if the permission of the licensor is required, the conversation means and the account holder are referred to. To perform the conversation of the serial licensors, characterized in that.

  In such a configuration, the main purpose is to provide a means for allowing the licensee to directly connect to an external telephone from the ATM interphone and to have a conversation with the licenser registered in advance on the spot. By doing so, the account holder is more likely to be able to talk to a third party when making a withdrawal, and this alone will prevent wire fraud. Further, in this configuration, the conversation itself with the licensee is regarded as a license, and the license itself may not be performed separately.

  The withdrawal permission system of the present invention can also be regarded as an invention of an ATM server that is the core of the present system, and can provide the same operational effects as the withdrawal permission system.

  An ATM server that is connected to an ATM via a network and grants permission when an account holder of a financial institution makes a transfer or withdrawal, and the contact person of the licensee who grants withdrawal from the account, and the account holder A withdrawal permission information storage means for storing a permission requirement notification condition that specifies whether or not to request permission from the licensee when making a withdrawal from the account; and a withdrawal request from the account holder by the ATM A connection means for connecting the licensor's telephone and the ATM conversation means when the account holder makes a withdrawal from the account from the ATM. When the permission of the licensee is required, the account holder and the licensee are allowed to have a conversation using the conversation means, and after the conversation ends, the permission of the licensee is sought. Based on permission It is executed, characterized in that.

  The withdrawal permission system of the present invention can also be regarded as an invention of a withdrawal permission method in the following financial institution system, and can provide the same operational effects as the withdrawal permission system.

  A withdrawal permission method in a financial institution system, wherein the computer of the system stores the contact information of the licensor to permit withdrawal from the account of the financial institution for each account; Storing a permission requirement notification condition that stipulates a condition for requesting permission from the licensor when making a withdrawal from a bank account, and when the account holder withdraws from the account from the ATM, Via the telephone contact between the account holder and the licensor, after the conversation, after obtaining the licensor's permission, and executing the withdrawal based on the permission And a withdrawal permission method characterized in that

  According to the present invention, even if it is a transfer or withdrawal from one's own account, it is possible to automatically contact the registered licensor by telephone from the ATM, and to directly determine the licensor's judgment. A system can be provided.

It is a figure showing the outline of the financial institution system concerning a first embodiment of the present invention. It is a figure showing the outline appearance of ATM concerning a first embodiment of the present invention. It is a figure which shows the functional block of ATM which concerns on 1st embodiment of this invention. It is a figure which shows the preservation | save data of withdrawal permission information which concerns on 1st embodiment of this invention. It is a figure which shows the transfer process flow of ATM which concerns on 1st embodiment of this invention. It is a figure which shows the processing flow at the time of the conversation mode of ATM which concerns on 1st embodiment of this invention. It is a figure which shows the processing flow at the time of the non-conversation mode of ATM which concerns on 1st embodiment of this invention. It is a figure which shows the outline of the financial institution system which concerns on embodiment of this invention which concerns on 2nd embodiment of this invention. It is a figure which shows the outline of the financial institution system which concerns on 2nd embodiment of this invention. It is a figure which shows an example of the transfer confirmation screen of ATM which concerns on 1st and 2nd embodiment of this invention. It is a figure which shows an example of the notification message to the licensee which concerns on 1st and 2nd embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention (hereinafter referred to as embodiments) will be described in detail with reference to the accompanying drawings. In addition, the same number (code | symbol) is attached | subjected to the same element through the whole description of embodiment.

  FIG. 1 is a diagram showing an outline of a financial institution system according to the first embodiment of the present invention. The ATM 10 of this embodiment can be installed in a station, an airport, a department store, a supermarket, a convenience store, etc., in addition to a store of a financial institution such as a bank, in the same manner as a normal ATM. What is different from a normal ATM is that an interphone unit 11 is provided as a means of conversation between an account holder (an ATM user and a withdrawal person) and a licensee. Normally, an interphone is installed for a user to talk to a person who is involved when an ATM malfunction or operation method is not known. It can be connected to a general telephone. However, unlike a normal telephone, it is not possible to simply make a call. A license that is registered in advance in the cash card account only when the user inserts the cash card into the ATM 10, the authentication is normally completed with a PIN or biometric authentication, and the transfer or withdrawal operation is performed. It is possible to connect only to the telephone number of the subscriber.

  The ATM server 20 is connected to the ATM 10 via the financial institution online network 40, and the host computer 22 of the financial institution serves to process a previous stage for executing an account transaction in response to a request from the ATM 10. The account withdrawal permission DB 21 is a withdrawal permission information storage unit configured to be connectable to the ATM server 20 and stores withdrawal permission information 100 including the licensor and the licensor's telephone number. The withdrawal permission information 100, which will be described in detail later, includes contact information (phone numbers) of one or a plurality of licensors determined in advance by the account holder and further defines conditions for requesting permission from the licensor. "Conditions requiring permission". The ATM server 20 is connected to the host computer 22 of the financial institution, but is also connected to the Internet 41 with high security and can communicate with external devices.

  The withdrawal permission information 100 can be registered in the account withdrawal permission DB 21 from the personal computer 30 or the mobile phone 31 by the licensor using the predetermined user ID and password via the Internet 41. At this time, it goes without saying that the user ID is issued after the identity of the licensor is confirmed based on the request of the account holder. Of course, if the account holder himself can handle PCs and mobile phones, he / she can register withdrawing permission information 100 after consulting with the licensor, or he can request registration at the bank window. . Part or all of the withdrawal permission information 100 may be stored not only in the account withdrawal permission DB 21 but also in the IC card when the cash card is an IC card.

  The host computer 22 and the account DB 23 may be used in an online system of a normal financial institution. That is, the host computer 22 processes the daily transaction transactions of all accounts in the financial institution, and the contents of all processed account transactions are recorded in the account DB 23. In the figure, the ATM server 20 is intentionally shown as a computer separate from the host computer in order to show the features of the present invention, but the ATM server 20 may be considered as a part of the host computer system.

  FIG. 2 is a diagram showing an outline appearance of the ATM according to the first embodiment of the present invention. Since the ATM 10 of the present embodiment functions as a normal ATM, a display input unit 13 (touch panel) for performing input and display from a user, a voice guide output unit 14 (not shown), and a banknote deposit / withdrawal unit 17A. , A coin deposit / withdrawal unit 17B, a passbook printing unit 17C, a statement slip printing unit 17D (not shown), a card reading unit 17E, and optionally a biometric authentication unit 17F such as fingerprint / palm authentication.

  Further, the ATM 10 includes an interphone display screen 11A and an interphone handset 11B as an interphone function, and may further include an interphone camera 11C for imaging an ATM user. The interphone display screen 11A can also be used as the display input unit 13 (touch panel). However, since the display is different from the normal ATM operation, it is desirable to display only the operation related to telephone communication. If possible, it is more desirable to be able to display the person being called, such as a videophone. The interphone handset 11B functions only as a normal intercom by simply picking up this, and does not connect to the outside, but when a cash card is inserted into the ATM and an attempt is made to make a withdrawal requiring permission. Connected to licensee's phone for the first time.

  FIG. 3 is a diagram showing functional blocks of ATM according to the first embodiment of the present invention. The function blocks of the ATM 10 correspond to those in FIG. 2, and communicate with the display input unit 13 for displaying the user's input operation and operation guide, the voice guide output unit 14 for voice guidance to the user, and the host computer. It comprises a financial institution online communication unit 15, ATM processing units 17 (17 </ b> A to 17 </ b> F), an interphone unit 11, a telephone line communication unit 12 that connects the interphone unit 11 to the public telephone network, and a control unit 16. The telephone line communication unit 12 functions as a connection unit between the interphone unit 11 (conversation unit) and the licensee's telephone.

  Each processing unit 17 of ATM corresponds to each function of a banknote depositing / withdrawing unit 17A, a coin depositing / withdrawing unit 17B, a passbook printing unit 17C, a statement slip printing unit 17D, a card reading unit 17E, and a biometric authentication unit 17F. Divided into parts. The interphone unit 11 includes an interphone display screen 11A, an interphone receiver 11B, and an interphone camera 11C. The control unit 16 can be functionally divided into an ATM control unit 16A that controls the original functions of the ATM and an interphone control unit 16B that controls the interphone unit 11.

  Although not particularly illustrated, it is desirable to include a voiceprint authentication unit in order to identify whether the licensor is the principal. Alternatively, when the interphone is not a videophone, the place where the licensor is present may be displayed on the ATM screen. This can be done, for example, by the account holder confirming that the licensor is coming from Japan when he is overseas, or that the licensor is coming from Tokyo without going to Tokyo, Helps detect spoofing.

The system configuration in FIG. 1 and the functional blocks in FIG. 3 are merely examples, and one functional unit may be divided or a plurality of functional units may be configured as one functional unit. Each functional unit has a CPU (Central Processing Unit) built in the device and a ROM (Read Only
A computer program stored in a storage device such as a memory or a hard disk is read, and the computer program executed by the CPU is stored in a database (DB; Data Base) stored in the storage device or a storage area on the memory. This is realized by reading / writing necessary data and controlling related hardware (for example, input / output device, display device, communication interface device) in some cases. In addition, the database (DB) in the embodiment of the present invention may be a commercial database, but it simply means a collection of tables and files, and the internal structure of the database itself does not matter.

  FIG. 4 is a diagram showing data stored in the withdrawal permission information 100 according to the first embodiment of the present invention. As shown in the drawing, the withdrawal permission information 100 includes account registration information 101 for storing the account number, the account holder, the number of withdrawal licensors, and the number of permitted contact numbers, the withdrawal licensor, and their contact information (telephone). Number) and the priority order of contact information, a permission condition list 103 for storing permission conditions, a permission requirement notification condition 103A for defining a combination of permission conditions by a logical expression R, and an actual transaction It includes a withdrawal permission transaction history 104 that records the permission status, and pre-license information 105, although not essential.

  The account registration information 101 associates an account number with an account holder (which may include not only the name but also a reading, birth date, address, telephone number, e-mail address, etc.). The number of licensors who give permission when transferring or withdrawing and the total number of contacts (phone numbers) of all licensors (number of authorized contacts) are registered. The licensor is usually set to a family or the like, but may be a relative, a close friend, an adult guardian, or the like.

  The licensor list 102 includes the names of the licensors registered above (which may include not only the name but also reading, date of birth, address, mail address, etc.), contact information, and priority. In this example, the account holder, the eldest son Taro (licenseer 1), the eldest son's wife Hanako (licenseer 2), and the second son Jiro (licenser 3) are registered as licensors. It should be noted that the number of authorized contacts is 6 because there are two contacts registered for each licensee, but in reality 102B and 102C are the same phone number (the home where the eldest son and the eldest wife live) The number of authorized contacts is 5.

  The priority order defines the order in which the ATM 10 contacts when making an automatic call. That is, when a call is made to a contact with priority 1 and there is no response within a predetermined time, a call is made to the contact with priority 2 next. The same applies hereinafter. Note that it is desirable to set a plurality of contact information for each licensee. For example, for each “time zone”, a telephone number (home, work, mobile number, etc.) that can be easily contacted is set. However, the “time zone” here is not only a time zone within a day but also a time zone including a day of the week and a holiday. That is, for example, even in the same 9:00 to 18:00, different “time zones” can be used on weekdays and on weekends and holidays. The “time zone” can be arbitrarily defined according to the life pattern of the licensee.

  Strictly speaking, the priority order designates the order of contacts that can be easily contacted for each of the above “time periods”. In the example of FIG. 4, the priority of time zone 1 (for example, 9:00 to 18:00 on weekdays) is in the order of licensors 3, 1 and 2, but time zone 2 (Saturdays, Sundays, and holidays 9:00 to 00). 18:00), the priority order is set like licensers 2, 1, and 3. It should be noted here that priority is set not for the licensee but for individual contacts. For example, in a certain time zone, priority 1 is contact 1 of licensor 1 (102A), and priority 2 is contact 2 of licensor 1 (102B) and contact 1 of licensor 2 (102C). (Both are the same telephone number), the priority 3 is set like the contact 2 (102D) of the licensor 2. In this example, since there are five different contacts, the priority can be set from 1 to a maximum of 5.

  In addition, there is a system in which withdrawal can be made only when all the licensors approve, but in this system, it is sufficient for one licensor to authorize it for efficient communication processing. Priority should be given to contacting the licensor as soon as possible. This is to avoid unnecessary calls as much as possible in order to contact the telephone from the ATM.

  The permission condition list 103 is a set of conditions when the account holder makes withdrawals on a daily basis. The “license required notification condition” is a combination of these license conditions, and defines the conditions for requesting permission from the licensee (sending a license required notification, that is, ATM calling the licensee). is there. For example, as shown in the figure, the amount to be withdrawn in the license condition 1 (less than 50,000 yen in this example), the period in which the withdrawal can be made in the license condition 2 (in this example, the 27th to 31st of the month in the morning), the license condition 3 In addition, the branch name of the bank that can withdraw money (in this example, XX Bank Shinjuku Branch), the permission condition 4, the ATM identifier that can withdraw money (in this example, ATM # 004 # 005), the permission condition 5 In addition, if “not to be the first transfer destination” is set, it is possible to prevent the permission notification from being transmitted when all of the permission conditions 1 to 5 are satisfied. Normally, when an account holder withdraws his / her living expenses regularly, a certain amount of money (for example, about 50,000 to 100,000 yen) must be collected in a certain place (for example, at home or near work or school). Etc.), often during a certain period (for example, in the vicinity of the salary date or the day after the pension payment date). Moreover, in the case of transfer, it is usually performed for a specific transfer destination. That is, when all of the permission conditions 1 to 5 as in the above example are satisfied, it is clearly determined that the withdrawal is performed on a daily basis, and it is not necessary to request permission one by one. By doing this, it is clear that the convenience of both the account holder and the licensee will increase.

  In addition, by using a combination of multiple license conditions, the account holder's various lives can be compared to the case where only the withdrawal amount is set as a licensing requirement (that is, a license is requested only when a certain withdrawal amount is exceeded). Can handle patterns. However, even in this case, notification of permission is not sent, but only notification that the account holder has withdrawn (this will be referred to as permission not required notification) is sent to the licensor. May be. This is because it is useful for reviewing the conditions requiring notification of permission.

  Specifically, the permission requirement notification condition is defined by a logical expression combining a plurality of permission conditions. For example, in order to make permission unnecessary when all the above five conditions are satisfied, the logical expression of the permission notification condition is expressed as R = NOT (license condition 1 AND license condition 2 AND license condition 3 AND license condition 4 AND license Condition 5). Further, a logical expression that requires permission when the permission condition 1 (withdrawal amount) is not satisfied and one or more other conditions are not satisfied is R = NOT (permission condition 1) AND (NOT (permission condition 2) OR NOT (permission condition 3) OR NOT (permission condition 4) OR NOT (permission condition 5)). In addition, in the case where the withdrawal is a transfer and the transfer is the first time, the logical expression that requires permission regardless of other conditions is R = NOT (permit condition 5).

  One of the characteristics is that the permission condition 4 includes the identifier of the ATM itself. When making a withdrawal from an ATM that is not an ATM with an interphone function according to the present invention (in this example, ATM # 004, ATM # 005), a call cannot be made between the licensee and the ATM, but the license condition 4 is permitted. If it is included in the notification required condition, the withdrawal request from the ATM is automatically rejected. This is because it is safer to refuse withdrawals from ATMs where there are some reasons and calls cannot be made when they are not withdrawn from ATMs such as stores that are normally used. However, in the event of an emergency, the account holder should make a separate telephone contact with the licensor (unless otherwise contacted, withdrawals from other than ATM # 004 and # 005 will continue to be refused in any case). In this case, an e-mail may be automatically transmitted to the licensee.

  Another usage form is also conceivable by including the identifier of the ATM itself in the permission requirement notification condition. That is, when withdrawing money from an ATM having the interphone function of the present invention, it is possible to make a call to the licensor without fail regardless of other permission conditions (that is, R = permission condition 4). . When making a withdrawal from an ATM, it is possible to make a phone call to the licensor with a high probability, especially when the account holder is an elderly person who usually has trouble contacting, It is also useful as a means of family communication.

  The withdrawal permission transaction history 104 is a database that stores a withdrawal record when any notification is transmitted to the licensor. Withdrawals such as automatic account transfers that are not the account holder's own withdrawal are not recorded, but withdrawals that do not meet the conditions requiring notification of permission may also be recorded as “automatic permission”. By leaving a record in this way, information that is not normally entered in the passbook can be recorded, which can be used for daily withdrawal management and review of permission conditions. Needless to say, all information in the withdrawal permission information 100 can be referred to at any time by the account holder and the licensor by entering a predetermined ID and password. However, the addition / deletion of the licensee and the change of the license notification requirement require the license of both the account holder and the licensee. The prior permission information 105 will be described later.

  FIG. 5 is a diagram showing an ATM transfer process flow according to the first embodiment of the present invention. In this figure, an outline of processing exchange between the ATM 10, the ATM server 20, and the host computer 22 is shown.

  Referring to the figure, first, in step S10, the ATM 10 detects that the account holder (ATM user) has pressed the transfer button from the display input unit 13 and accepts the transfer start. A transfer destination input is obtained (step S11). When these inputs are successfully received, the ATM 10 transmits a transfer processing request to the ATM server 20 (step S12), and the ATM server 20 that has received this request once sends the account information to the host computer 22. An inquiry is transmitted (step S13). If the account information can be received normally and the user authentication is OK (step S14; Yes), the process proceeds to step S16, and the withdrawal permission information 100 is read from the account withdrawal permission DB 21. If the personal authentication is NG (step S14; No), in step S15, an error notification is sent to the ATM 10, and the ATM 10 that has received the error notification displays the fact to the user and inputs the input again to the user. For example, the process ends (not shown).

  After reading the withdrawal permission information 100, the ATM server 20 checks the number of authorized persons included in the account registration information 101. If the number of licensors is zero, it is determined that permission is not required (step S17; No), and a normal transfer processing request is transmitted to the host computer 22 (step S24). If the number of licensors is not zero and the contents of withdrawal satisfy the conditions requiring notification of permission, it is determined that permission is required (step S17; Yes), and the current time zone, day of the week, etc. are referred to, and the licensor list The optimum (highest priority) licensed contact is selected from the list (step S18).

  When it is confirmed that the telephone number is entered in the license contact address (step S19; Yes), the process proceeds to step S21, and the process proceeds to a conversation mode process described later. The conversation mode is a mode in which the ATM 10 or the ATM server 20 automatically makes a telephone contact with the licensor's telephone contact and waits until the conversation between the user and the licensor is completed when the telephone connection is established. . However, the conversation mode of the ATM server 20 is only in relation to the ATM 10 and remains in the normal mode in relation to other ATMs. When the ATM server 20 enters the conversation mode, the ATM 10 also enters the conversation mode (step S22), and enters a mode in which the user can make a telephone call directly with the licensor from the interphone unit 11 of the ATM 10. When the conversation between the user and the licensee is completed, the conversation mode of the ATM 10 and the ATM server 20 is ended when the user sets the handset of the interphone unit 11 or presses a predetermined button.

  If no telephone number is entered in any of the licensed contacts (step S19; No), the process proceeds to step S20, and a non-conversation mode process described later is performed. The non-conversation mode is a mode in which emergency measures are taken when no telephone contact can be made with any licensee. Also, once it is determined that no telephone connection is established with any of the licensees once the conversation mode is entered, the non-conversation mode is entered.

  When the conversation mode is finished or the non-conversation mode is finished, the ATM server 20 waits for a predetermined time for permission from the licensor, and if there is permission (step S23; Yes), the step In S24, a transfer processing request (execution of transfer) is transmitted to the host computer 22. In step S26, after confirming the transfer completion notification from the host computer 22, the transfer process completion is transmitted to the ATM 10. The ATM server 20 determines that there is no permission if there is no permission from the licensee, that is, when a notice of non-license is received, or when there is no response from the licensee for a predetermined time (step S23; No). Then, the transfer processing rejection is transmitted to the ATM 10 (step S25).

  In the ATM 10, even when a transfer process completion notice or a transfer process refusal notice is received, a transfer process status message is displayed (step S27), and the next instruction from the user is awaited. The above processing flow shows a typical processing procedure. However, as long as the basic flow is followed, there may be some procedures before and after each step. In addition, although the above flow gave an example of transfer, the same applies to the case of withdrawal by cash.

  FIG. 6 is a diagram showing a processing flow in the ATM conversation mode according to the first embodiment of the present invention. As described above, when the ATM server 20 confirms that the telephone number is described in the license contact address, it instructs the ATM 10 to enter the conversation mode (step S41).

  When the ATM 10 receives the conversation mode instruction, the ATM 10 makes a call to the telephone number of the optimum licensed contact selected first (step S30). When telephone connection is established for this call (step S31; Yes), the fact that the conversation has started is transmitted to the ATM server 20 (step S32), and the process waits for the conversation to end. If the telephone connection is not established (step S31; No), the license contact with the next priority is selected and a call is made (step S33). If the telephone connection is not established even after this step is performed for all licensed contacts, the mode shifts to the non-conversation mode. The non-conversation mode will be described later.

  When the ATM 10 finishes the conversation between the user and the licensee, specifically, when the user places the handset of the interphone unit 11 or presses a predetermined button from the user side (step S34; Yes), the licensee A permission request is transmitted to (step S35). Next, after transmitting a voice message indicating the end of the conversation to the licensor's telephone, a voice message indicating whether or not to permit is transmitted (step S35). Specifically, when the licensee grants this withdrawal, the licensee is prompted to press a predetermined button of the licensee's telephone, and when the withdrawal is not permitted, the licensee is prompted to press another predetermined button. . When the ATM 10 receives a permission or non-permission (rejection) notification signal from the licensee's telephone, the ATM 10 transmits a permission result to the ATM server 20 (step S36). If there is no response from the licensor for a predetermined time, it is treated as a rejection. Then, the ATM 10 transmits a conversation mode end notification to the ATM server 20 (step S39), and ends the conversation mode (step S40). When the ATM server 20 receives the licenser result from the ATM 10, the result is stored in step S43. Thereafter, the ATM server 20 also ends the conversation mode in relation to the ATM 10.

  In step S34, if the conversation is not finished within a predetermined time, the ATM 10 processes it as a timeout (step S37; Yes), displays a warning (step S38), and then forcibly ends the conversation mode. . In this case, the withdrawal request may be treated as a refusal, or the user may determine whether to try the telephone connection again.

  FIG. 7 is a diagram showing a processing flow in the ATM non-conversation mode according to the first embodiment of the present invention. As described above, the non-conversation mode is a mode in which a telephone call is not made with any of the licensors for outgoing calls from the ATM 10. Non-conversational mode treatment methods include a method of unconditionally rejecting a withdrawal request, a method of requesting permission by e-mail, and a method of permitting withdrawal if there is prior permission from the licensor. In the method of unconditionally refusing withdrawal, the ATM server 10 notifies the ATM 10 of withdrawal refusal when contact cannot be made with any licensee within a predetermined time. In the method of requesting permission by e-mail, the e-mail reaches a pre-registered mobile phone or PC, and when the link destination is opened, a predetermined screen is displayed and permission is granted. The prior permission method will be described with reference to FIG.

  In step S50 of FIG. 7, the ATM server 20 searches the prior permission information 105 of the withdrawal permission information 100 of the corresponding account. In step S51, it is checked whether there is a prior permission for the withdrawal request. If there is prior permission (step S51; Yes), it is determined that conversation is not necessary, and the permission result is stored. If there is no prior permission (step S51; No), non-permission (rejection) is transmitted to the ATM 10 (step S52). In either case, the result is saved as a permission result (step S53), and then the non-conversation mode is terminated (step S54).

  In advance registration, an account holder contacts a plurality of licensees in advance (by telephone or e-mail if possible), and tells the amount to be withdrawn, the place to withdraw, and the scheduled withdrawal time. Each licensor who received the notification preferably registers that the withdrawal is permitted in the pre-authorization information 105 if there is no doubt about the contents of the withdrawal, in the case where the conditions for the withdrawal are met. If the registered licensee approves in advance, it is desirable to have multiple licenses. It is better to have permission from multiple licensors, because a transfer fraud may impersonate one of the licensors.

  When registering multiple licensors, it is troublesome for the account holder to ask each licensor for permission, so one representative is selected from the licensors, and the account holder contacts the representative. The registration contents preliminarily authorized by the representative may be communicated to other licensors for permission. By doing in this way, even if a fraudster pretends to be a representative, the possibility that other licensees will notice increases. In addition, the account holder forgets the withdrawal conditions that he / she told the withdrawal conditions (withdrawal amount, place of withdrawal, scheduled withdrawal time, etc.) to the licensor by telephone because there is no record. It is possible. For this reason, the account holder registers the withdrawal conditions in advance on the ATM or on the Web, and the license holder confirms the contents and performs license registration. Alternatively, the account holder may communicate the withdrawal conditions to the licensor by telephone, and the licensor may register the withdrawal conditions after registering the withdrawal conditions. By doing in this way, withdrawal conditions can be surely shared between the account holder and the licensee. Note that when the pre-authorized withdrawal is completed, the pre-authorization information 105 is deleted.

  FIG. 8 is a diagram showing an outline of the financial institution system according to the embodiment of the present invention according to the second embodiment of the present invention. In the first embodiment described with reference to FIG. 1, when it is found that the withdrawal requires permission, the ATM server 20 notifies the ATM 10 and makes a call from the ATM 10 to the licensor's telephone. In this embodiment, the ATM server 20 makes a call to the licensee's telephone. Only the parts different from FIG. 1 will be described below.

  Here, a description will be given assuming that the licensee's telephone is an IP telephone. When the licensee's telephone is the fixed IP telephone 31A, the PC 30 and the fixed IP telephone 31A are connected to the modem 32 with the IP telephone function. In the case of a mobile phone, the model needs to be compatible with an IP phone. As shown in the figure, since the IP phone of the licensee is connected to the Internet 41, transmission / reception from the ATM server 20 similarly connected to the Internet to the phone is facilitated. In addition, information other than voice (text, conversational person image, etc.) can also be transmitted and received. The merit of the IP phone is that the ATM server 20 can select a connection destination ATM. This is because the ATM server 20 holds the IP address and telephone number of the ATM 10 to be managed. The second merit is that a videophone can be used, and the third merit is that the telephone fee is reduced regardless of the distance. However, it doesn't matter who pays for the phone bill.

  FIG. 9 is a diagram showing an outline of a financial institution system according to the second embodiment of the present invention. In this figure, processing in the conversation mode when using an IP phone will be described.

  When the ATM server 20 detects that the withdrawal request requires permission and selects the optimum license contact address, the ATM server 20 enters the conversation mode. When the conversation mode is entered, first, in step S60, a call is made to the licensor's telephone number. When the connection is established (step S61; Yes), the connection destination is switched to the ATM 10 that has transmitted the withdrawal request (step S62). The ATM 10 that has received the signal starts the conversation mode (step S64). If the connection is not established (step S61; No), the next permitted contact address is selected according to the priority order, and step S60 is repeated until there is no next selected address (step S63). If a connection cannot be established with any contact, the mode shifts to the non-conversation mode.

  Note that the processing in the non-conversation mode is the same as in the first embodiment. Further, the appearance of the ATM in FIG. 2, the functional block of the ATM in FIG. 3, the withdrawal permission information in FIG. 4, and the main flow in FIG. 5 are not changed in the second embodiment.

  When the ATM 10 enters the conversation mode, the ATM 10 waits until the conversation between the user and the licensee ends. When the conversation ends (step S65; Yes), a conversation end notification is transmitted to the ATM server 20 (step S66). If the conversation does not end even after a predetermined time has elapsed (step S67; Yes), a warning is displayed as a timeout (step S68), and the process proceeds to step S66 to forcibly end the conversation.

  When the ATM server 20 receives the notification of the conversation end from the ATM 10, the ATM server 20 sends an approval request to the licensor (step S69). The approval request may be an automatic voice message. Thereafter, if the licensor obtains a response, the result is saved. If the response is not obtained even after a predetermined time, the result of permission refusal is stored as a license result (step S70). Then, the ATM server 20 ends the conversation mode (step S71), and then the ATM 10 also ends the conversation mode (step S72).

  FIG. 10 is a diagram showing an example of an ATM transfer confirmation screen according to the first and second embodiments of the present invention. When an account holder (transferr) operates an ATM to make a transfer from his / her own account, the following operations are usually performed. That is, on the ATM10 touch panel, press the transfer button → press the no transfer card button → press the transfer button from the account → insert the cash card → enter the PIN number → input the name of the bank to be transferred → enter the branch name → enter the account type → enter the account number When the transfer amount input proceeds, a transfer confirmation screen 200 is displayed as shown in the figure. When the user presses a confirmation button on the transfer confirmation screen 200, a screen 201 is displayed in the case of a transfer requiring permission. Subsequent screens may be displayed on the interphone display screen 11A instead of the ATM 10 touch panel (display input unit 13).

  When the transfer person presses the confirmation button on the screen 201, the ATM 10 tries to make a telephone connection to the registered licensee. When the connection with the licensor is established, the display is switched to the screen 202 to inform the transfer person that the telephone with the licensor is connected. The transfer person can talk with the licensee by taking the interphone handset 11B. When the conversation ends, the transfer person ends the call with the licensor by placing the handset in the original location. After that, the ATM 10 and the licensee's telephone are still connected to each other, and a notification message requesting the license is transmitted to the licensee during that time. This notification message will be described in the next figure.

  While the notification message is sent to the licensee and waiting for a response, the ATM 10 displays the screen 203. Thereafter, when receiving a permission from the licensee, a screen 204 displays that permission has been obtained and the transfer has been completed normally. If a non-license is received from the licensor, or if there is no response within the specified time, it is determined that the licence has not been obtained from the licensor, and a message indicating that the transfer could not be made is displayed as shown on the screen 205. The

  FIG. 11 is a diagram showing an example of a notification message to the licensee according to the first and second embodiments of the present invention. When the transfer person presses the confirmation button on the screen 201 in FIG. 10, a call is made to the licensor's telephone, and a message 300 for requesting a conversation with the transfer person flows as shown in FIG. Here, when the licensor presses the 1 button on the telephone, it is connected to the ATM 10 and a call with the transfer person is started. When the licensee for the message 300 presses the button 2, the conversation may be rejected. In this case, the message 302 is played, and it is requested to confirm whether to permit or not permit without talking. In response to the message 300, the licensor and the transfer person start a call, and when the call ends, a message 301 is played, and it is requested to confirm whether or not to permit the transfer that has just been transferred to the transfer person over the telephone. . Here, the licensor presses 1 to permit or 2 to disallow. If the license is granted, a message 303 flows to inform that the transfer requested for the license has been completed normally. If the permission is not granted, a message 304 is played to inform that the transfer requested for permission has been rejected. The above notification message is played by voice guidance, but may be displayed as text on the screen of the licensee's PC 30 or the display screen of the telephone 31.

  In the embodiment of the present invention described above, a bank cash card has been described as a financial institution. However, even in a card that can be cashed or transferred by another financial institution such as a credit card company or a securities company. It is the same. Further, instead of using the ATM 10, the present invention can also be implemented by providing a terminal that processes account transactions at a counter, such as a bank, with a function equivalent to the conversation means of the ATM 10. In this case, the clerk at the window operates the bank terminal based on a request from the account holder, and the clerk at the window notifies the account holder when a telephone connection with the licensor is established.

  As mentioned above, although this invention was demonstrated using embodiment, it cannot be overemphasized that the technical scope of this invention is not limited to the range as described in the said embodiment. It will be apparent to those skilled in the art that various modifications or improvements can be added to the above-described embodiments. Further, it is apparent from the scope of the claims that the embodiments added with such changes or improvements can be included in the technical scope of the present invention.

10 ATM
11 Interphone part 11A Display part (Interphone display screen)
11B handset (interphone handset)
11C camera (interphone camera)
DESCRIPTION OF SYMBOLS 12 Telephone line communication part 13 Display input part 14 Voice guide output part 15 Financial institution online communication part 16 Control part 16A ATM processing control part 16B Interphone control part 17 ATM processing part 17A Banknote depositing / withdrawing part 17B Coin depositing / withdrawing part 17C Passbook printing money Part 17D statement slip printing part 17E card reading part 17F biometric authentication part 20 ATM server 21 account withdrawal permission DB
22 Host computer 23 Account DB
30 PC
31 Mobile Phone 31A Fixed IP Phone 31B IP Mobile Phone 32 Modem 40 Financial Institution Online Network 41 Internet 42 Public Telephone Network 100 Withdrawal Permission Information 101 Account Registration Information 102 Licenser List 103 Permission Conditions List 103A Permission Requirements Notification Condition 104 Withdrawal Permission Transaction history 105 Prior permission information 200, 201, 202, 203, 204, 205 Transfer confirmation screen 300, 301, 302, 303, 304 Notification message to licensee

Claims (8)

A withdrawal permission system, which is composed of an ATM server connected to an ATM via a network and requires a permission when an account holder of a financial institution makes a transfer or withdrawal from his / her own account,
The ATM server
A contact information of a licensee who permits the withdrawal from the account, and a license requirement notification condition that stipulates whether or not to request permission from the licensee when the account holder makes a withdrawal request from the account; Withdrawing permission information storage means for storing
The ATM is
When the withdrawal request is accepted from the account holder, the account holder is provided with a conversation means that allows the account holder to communicate with the licensee by telephone.
When the ATM server receives the withdrawal request from the ATM, the ATM server refers to the permission requirement notification condition, and when the permission of the licensee is required, the account holder and the licensee are used by the conversation means. And after the conversation is over, ask the licensor for permission, and execute the withdrawal based on the permission,
A withdrawal permission system characterized by that.   The system according to claim 1, wherein the conversation means is an interphone installed in the ATM.   The permission requirement notification condition is defined by a logical expression obtained by combining a plurality of permission conditions, and the permission condition includes an ATM installation location where the withdrawal can be performed and an ATM identifier. The system according to claim 1 or 2.   The withdrawal permission information storage means stores a plurality of contacts for each of a plurality of licensees, and gives the plurality of contacts a priority order for contacting the licensers for each predetermined time period. The system according to claim 1, wherein the system is characterized in that   The ATM server shifts to the non-conversation mode when the conversation means cannot make a telephone contact with any of the licensors. The withdrawal permission system according to claim 1, wherein whether or not the withdrawal is possible is determined. A withdrawal permission system, which is composed of an ATM server connected to an ATM via a network and requires a permission when an account holder of a financial institution makes a transfer or withdrawal from his / her own account,
The ATM server
A contact information of a licensee who permits the withdrawal from the account, and a license requirement notification condition that stipulates whether or not to request permission from the licensee when the account holder makes a withdrawal request from the account; Withdrawing permission information storage means for storing
The ATM is
When the withdrawal request is accepted from the account holder, an interphone is provided that allows the account holder to have a conversation with the licensor by telephone contact,
When the ATM server receives the withdrawal request from the ATM, the ATM server refers to the permission requirement notification condition, and when the permission of the licensee is required, the account holder and the licensee are used by the conversation means. To have a conversation
A withdrawal permission system characterized by that. An ATM server that is connected to an ATM via a network and grants a permission when an account holder of a financial institution makes a transfer or withdrawal,
The contact information of the licensee who permits the withdrawal from the account, and the license requirement notification condition that specifies whether or not the licensee requests permission when the account holder withdraws money from the account are stored. Withdrawal permission information storage means,
A connection means for connecting the licensor's telephone and the ATM conversation means when the ATM accepts a withdrawal request from the account holder;
When the account holder makes a withdrawal from the account from the ATM, the license holder is referred to and the license holder's permission is referred to. Allowing the licensor to conduct a conversation, and after the conversation ends, asks for the licensor's permission, and executes the withdrawal based on the permission;
An ATM server characterized by that. A withdrawal permission method in a financial institution system, wherein the computer of the system includes:
Storing for each account the contact information of the licensor authorized to withdraw money from the account of the financial institution;
Storing a license requirement notification condition that stipulates a condition for requesting permission from the licensee when the account holder withdraws from his / her account;
When the account holder makes a withdrawal from the account from the ATM, the account holder and the licensor are conversed by telephone communication via the ATM;
After the end of the conversation, seeking permission from the licensor;
Performing the withdrawal based on the permission,
A withdrawal permission method characterized in that it is executed.

Images