JP5231320B2 - Transaction system and management method thereof - Google Patents

Description

  The present invention relates to a transaction system that performs personal authentication using a card and a password, and more particularly to a transaction system that prevents damage caused by unauthorized use of a card.

  2. Description of the Related Art In recent years, transaction systems that use a card to identify a transaction partner such as an automatic deposit / payment machine of a financial institution or a consumer finance automatic contract machine have been used. In such a transaction system, in order to prevent a stolen or illegally copied card from being illegally used, a user is authenticated when the card is used. There are various authentication methods, but password authentication is the most common. This method is a method of authenticating that the card user is an authorized user by collating a password input by the user when the card is used with a password registered in advance.

  Compared with other authentication methods such as fingerprint authentication and vein authentication, this method can be realized with a very simple configuration of the authentication apparatus, and many transaction systems existing in the market adopt this method. However, since the password is composed of a combination of letters, numbers, symbols, etc., there is a disadvantage that the registered password can be found by changing the combination and repeating the trial.

  In particular, the registered password must be memorized by the authorized user himself, so personal information such as a birthday and a telephone number that is easy to remember is inevitably selected in many cases. Cards are often stored in a wallet or bag together with personal information such as a driver's license or health insurance card. For this reason, if the card is stolen or lost along with your wallet or bag, the person who obtained the card can easily guess the password from the personal information stored together. In many cases, the registered password could be found without trying the combination.

  As a countermeasure, there is a countermeasure for stopping the use of the card when an incorrect password is input continuously for a predetermined number of times. Although this measure has a certain effect on reducing damage caused by unauthorized use of the card, it would be disadvantageous for an unauthorized user if he / she escaped when the card was stopped after a predetermined number of failed attempts. No attempt is made to illegally use the card.

  As a countermeasure against this, in addition to the regular registration password as in the inventions described in Patent Documents 1 to 3, a birthday or a telephone number that an unauthorized user is likely to guess is registered as a contraindication password. In the case of input, a method has been devised that stops using the card and reports to the police even if the predetermined number of inputs has not been reached.

JP-A-61-20192 JP 2006-59306 A JP 2008-198168 A

  Since the contraindicated password is personal information familiar to the authorized user, the authorized user may input it by mistake. In such a case, if the police rushes, the card user can no longer use the card with peace of mind. On the other hand, the method of simply stopping the use of the card and checking the situation by a person in charge such as a bank clerk or a security guard will check whether the card has been stopped before the person in charge responds. If the user escapes when it is confirmed that the use has been stopped, there is a problem that it is difficult to criminalize the unauthorized user and the crime prevention effect is lacking.

  Therefore, even if a contraindicated password is set, a legitimate user can use the transaction system with peace of mind, and if an unauthorized user uses a contraindicated password, the occurrence of actual damage is prevented as much as possible. There has been a demand for a transaction system and a management method thereof that can prevent unauthorized users for a long time.

  The above-mentioned problem is a management method of a transaction system that performs personal authentication using a card and a password, the step of acquiring ID information recorded on the card, the step of acquiring the transaction type and password input by the user, A step of collating the acquired password with first and second passwords registered in advance corresponding to the ID information, and a step of performing a predetermined notification when the acquired password is the second password; Determining whether or not the acquired transaction type includes payment; and if the acquired transaction type is a transaction including payment and the acquired password is the first password, A step of executing a transaction process, and the acquired transaction type is a transaction including settlement, and the acquired password is the second password. The second transaction process different from the first transaction process, and if the acquired transaction type is a transaction that does not include a settlement, the acquired password is the first and second passwords. Any of the two passwords can be solved by a management method including the step of executing the same transaction process.

  In other words, when the user enters a contraindicated password (second password), the transaction type desired by the user is a transaction that does not involve a settlement such as a deposit balance inquiry. Transactions that are executed when a regular password is entered in order to prevent actual damage if transactions with settlement such as withdrawals or transfers are selected in the same transaction process as when the password is entered Different from the process (first transaction process), a special transaction process (second transaction process) that does not include a settlement process is performed. As a result, it takes a longer time for an unauthorized user to realize that an unauthorized use has been detected, and to stop the unauthorized user without distrust for a longer time than before. Is possible.

  At this time, the second transaction process is preferably a transaction process that requests input of the same transaction information as the first transaction process, and the second transaction process includes a settlement suspension and a system error. It is desirable that the process includes at least one of the occurrences.

  That is, even if a contraindicated password (second password) is entered, it is required to enter transaction information similar to the regular password (first password). Cannot be recognized. In addition, when a contraindicated password is entered, a payment process that is not recognized by the user, such as a transfer suspension, is suspended, or a state that is indistinguishable from a normal system error such as a paper jam is reproduced. This prevents unauthorized users from recognizing that unauthorized use has been detected. As a result, it is possible to stop unauthorized users without giving distrust for a longer time than before, while preventing actual damage due to unauthorized use.

  Similarly, the above-described problems are the input means for acquiring the transaction type and password desired by the user, the reading means for reading the ID information recorded on the card, the acquired password, and the registration in advance corresponding to the ID information. A verification unit for verifying the two types of passwords, a transaction processing unit for executing a predetermined transaction process when the acquired password matches one of the two types of passwords, and the two types of passwords. A notification means for notifying when a password of one of the predetermined types is input, wherein the transaction processing means is a transaction that includes a settlement. If the acquired transaction type is a transaction that includes settlement, a different transaction process is executed for each acquired password type, and the acquired transaction type There if a transaction which does not include the settlement, regardless of the type of the obtained password, transaction system and executes the same transaction processing, can be solved by.

  Further, the above-described problem is a terminal of a transaction system that performs personal authentication using a card and a password, and an input unit that acquires a transaction type and a password desired by a user, and reading ID information recorded on the card. Means, a means for obtaining a collation result between the obtained password and two types of pre-registered passwords corresponding to the ID information, and when the obtained password matches one of the two types of passwords Transaction processing means for executing predetermined transaction processing, and means for transmitting a predetermined signal indicating that a predetermined one of the two types of passwords has been input. The means determines whether or not the acquired transaction type is a transaction including payment, and if the acquired transaction type is a transaction including payment, the acquired Terminals that execute different transaction processes for each type of Seward, and execute the same transaction process regardless of the type of acquired password when the acquired transaction type is a transaction that does not include payment. It can also be solved by the machine.

  According to the present invention, it is possible to hold an unauthorized user for a longer time without giving distrust while preventing actual damage due to unauthorized use. This can be expected to improve the clearance rate of unauthorized users and to prevent unauthorized use. In addition, the present invention can be realized simply by changing the software that mainly manages and controls transactions without greatly changing the existing system using password authentication, so that the existing system can be effectively used. .

It is a schematic block diagram of the automatic deposit payment system which is one embodiment in this invention. It is an operation | movement flowchart of the automatic deposit payment system which is one embodiment in this invention.

  FIG. 1 shows a schematic configuration diagram of an automatic deposit payment system 1 using a management method according to the present invention as an embodiment of the present invention. The automatic deposit / payment system 1 includes a terminal 4 that executes transaction processing while interacting with a card user, and a password that is entered by the user into the terminal 4 as a regular password registered in advance (first Password) or the contraindication password (second password), the system server administrator, security guards, etc. confirm that the contraindication password is entered in the authentication server 2 and the terminal 4 Alarm device 3 for notifying a predetermined person in charge. The terminal 4 is connected to the authentication server 2 via a network and communicates information with the alarm device 3 through wireless communication. However, in FIG.

  The terminal 4 includes a card reader 12 for reading ID information recorded on the card, a display 11 for interacting with the user, and a user for inputting transaction information such as a transaction type and a password. It comprises an input means 13, a memory 14 in which a database of transaction procedures and transaction types is recorded, and a processor 10 connected to each of these components and controlling the operation of each component to perform transaction processing. Yes.

  Among them, the memory 14 includes a transaction type database 15 in which data indicating whether or not the transaction type is a transaction with settlement for each transaction type such as deposit, payment, transfer, balance inquiry, and the like. The transaction processing program 16 in which the transaction procedure is described by a method that can be executed by the processor 10 is stored. The transaction processing program 16 includes a settlement processing program 17 describing a transaction procedure including a settlement process and a settlement hold process describing a transaction procedure not including a settlement process for a transaction type accompanied by a settlement such as payment and transfer. A non-settlement processing program 17 in which a transaction procedure of the transaction is described is stored for each transaction type that does not involve settlement such as deposit and balance inquiry. Here, “settlement” in the present application refers to a transaction for physically or electronically delivering cash or a cash voucher that is treated in accordance with cash, such as cash out or transfer.

  The authentication server 2 receives a memory 21 in which a regular password database 22 and a contraindicated password database 23 registered in advance by the true cardholder, a card ID information, and a password are received. The processor 20 is configured to collate the legitimate / incompatible code number stored in the memory 21 with the received code number and transmit the collation result to the terminal 4.

  Here, the regular password and the contraindicated password do not have to be one each, and a plurality of passwords may exist. In particular, the contraindicated PIN is a PIN that an unauthorized user is expected to try, so multiple PINs obtained from a combination of the numbers included in the true cardholder's birthday or phone number It is desirable to register. Further, all combinations other than the regular password may be registered as contraindicated passwords.

  The alarm device 3 includes a receiving device that receives a signal indicating that a contraindicated password transmitted from the terminal 4 has been input, and a lamp that blinks when the signal is received. The lamp is installed so that the system administrator can easily recognize the blinking and the user of the terminal 4 cannot see the blinking.

  Next, the operation of the automatic deposit payment system 1 will be described with reference to the flowchart of FIG. First, a display requesting input of a card and a transaction type is performed on the display 11 (step 30). The user inserts the card into the card reader 12 according to the instruction, and inputs the desired transaction type and 4-digit password from the input means 13. Then, the card reader 12 reads the ID information recorded on the card (step 31). The processor 10 transmits the acquired ID information and password to the authentication server 2.

  When the processor 20 of the authentication server 2 receives the ID information and the password, the processor 20 of the authentication server 2 retrieves the regular / incompatible password corresponding to the ID information from the database of the regular password 22 and the contraindicated password 23 recorded in the memory 21. Is read and collated with the received password. If the passwords match, a signal is sent to the terminal 4 indicating which type of password is matched between the regular password and the contraindicated password. If the passwords do not match, a signal indicating that is transmitted to the terminal 4 (step 32).

  The processor 10 of the terminal 4 receives the verification result obtained by the authentication server 2 and performs processing according to the verification result. First, when an authentication result indicating that the passwords do not match is received, a password error process is performed (step 34). More specifically, a message indicating that the password has not been matched is displayed on the display 34, the password is requested to be re-input, and the re-entered password and ID information are transmitted to the authentication server 2 again for authentication. Do. However, if the password does not match three times in succession, the card is invalidated because there is a strong suspicion of unauthorized use. The display 11 displays that the card has been invalidated and a request to perform an activation procedure at the bank window, and ends the transaction processing.

  On the other hand, if the passwords match, the processor 10 determines whether or not the transaction desired by the user is a transaction including settlement (step 35). More specifically, a transaction process corresponding to the transaction type input to the input means 13 is searched from the transaction type database 15 stored in the memory 14, and whether or not the transaction process includes a transaction process. Read data indicating.

  If the transaction desired by the user is a transaction type that does not involve payment such as deposit and balance inquiry, the processor 10 reads the non-payment processing program 19 corresponding to the transaction type from the memory 14 (step 46). The program is executed to complete the transaction (step 47). That is, when the transaction type acquired from the input unit 13 is a transaction type that does not involve settlement, the same transaction process is performed regardless of whether the PIN number acquired from the input unit 13 is a regular PIN or a contraindicated PIN. (Step 47) is executed.

  On the other hand, when the transaction desired by the user is a transaction type involving payment such as payment or transfer, the processor 10 determines whether the password obtained from the input means 13 is a regular password or a contraindicated password. Perform different transaction processing. First, when the acquired personal identification number is a regular personal identification number, the settlement processing program 17 corresponding to the transaction type is read from the memory 14 (step 37) and the program is executed to complete the transaction (step 37). Step 40).

  Transaction processing program 17 makes a request to input transaction information such as payment amount, transfer destination, transfer holder, etc. in a predetermined order while interacting with the user using display 11 and input means 13. It comprises a procedure 38 for making an information input request, and a settlement processing execution procedure 39 for counting and delivering banknotes and for notifying the other bank of information on the transfer through the interbank network.

  If the acquired password is a contraindicated password, the processor 10 transmits a signal indicating that the contraindicated password is input to the alarm device 3 (step 41). Then, the settlement suspension processing program 18 corresponding to the transaction type is read from the memory 14 (step 42), and the program is executed (step 45).

  The settlement hold processing program 18 includes a procedure 38 for making a transaction information input request for requesting the same transaction information as the settlement processing program 17 in the same procedure, and a settlement suspension process for holding or terminating the transaction without executing the settlement. And an execution procedure 44.

  More specifically, the settlement hold processing execution procedure 44 is abnormally terminated by artificially generating an abnormal state (system error) in which it is difficult to continue the transaction processing such as banknote jam or out of transaction statement. (Step 48) is a procedure for holding a settlement such that the transfer completion display is performed on the display 11 but the transfer process through the inter-bank network is not executed.

  As described above, the settlement suspension process is desirably a process that makes it appear that the normal settlement process is proceeding smoothly or that an error due to a machine failure has occurred. This delays noticing that unauthorized use has been detected, stops unauthorized users for a longer period of time without distrust, and increases the time it takes for a person in charge, such as a security guard or system administrator, to call It becomes possible to earn.

  On the other hand, if a legitimate user accidentally enters a contraindicated PIN, the person in charge will check the identity of the user and then cancel the payment hold status (cancellation of system error, Execution of a deferred transfer process). In this case, it is not necessary for the authorized user to input the transaction information again, and the transaction can be completed quickly.

  The technical idea according to the present invention has been described in detail with reference to specific embodiments. However, various changes and modifications may be made by those skilled in the art to which the present invention pertains without departing from the spirit and scope of the claims. It is clear that can be added.

  As the “input means”, means for widely transmitting transaction information desired by the user to the transaction system can be used. That is, by using not only a typical input device such as a keyboard but also a touch panel display, the display 11 can be used as an “input unit”. In addition, when inputting transaction information from a terminal such as a mobile phone owned by the user, an interface such as a receiver, a connection terminal, or a light receiver becomes an “input means”.

  In addition, it is not necessary to perform verification between the password entered by the user and the pre-registered regular / incompatible code in the authentication server 2 installed independently of the terminal as in the above-described embodiment. It may be executed inside the terminal. For example, in the case of a terminal using an IC card in which a personal identification number is stored in the IC chip on the card, the card reader 12 and the ID information recorded on the IC chip together with the regular / incompatible personal identification code. The number is also read out, and the verification result can be obtained by comparing the personal identification number obtained from the input means with the processor 10 and the regular / incompatible personal identification number. The “means for obtaining the collation result” in the claims of the present application is a means for obtaining the collation result, and the collation processing itself may be performed inside or outside the terminal.

  Further, the “notification means” is not limited to the alarm device 3 of the above-described embodiment, but may be a contraindicated password by any method, such as a buzzer or a predetermined music, or a predetermined electrical signal transmitted to the centralized security system. Any means may be used as long as it is a means of transmitting that the is used. In this case, if the user recognizes that there is a notification, the unauthorized user may escape, so the notification means is installed in a place away from the terminal 4 or in a place where the user becomes a blind spot. It is desirable that

  In the flowchart of FIG. 2, notification is made only when a transaction including settlement processing is selected and a contraindicated PIN is acquired (step 41), but the input password is a contraindicated password. In such a case, notification may be performed regardless of whether or not the transaction processing includes settlement processing. In this case, the server 2 may directly notify the alarm device 3 when the authentication server 2 collates.

  In addition, the “transaction system” in the present application is not limited to an automatic deposit payment system, and the management method according to the present invention is a system having a settlement function for transactions involving a wide range of transactions, such as a consumer finance automatic contract machine. It is possible to apply to. Accordingly, the “transaction type” refers to a type of transaction that can be executed by the transaction system, such as payment, transfer, balance inquiry, repayment, use of points, and issuance of vouchers. Further, the “password” is not limited to the four-digit password as in the above-described embodiment, but includes a password composed of a combination of letters, numbers, symbols, and the like of arbitrary length.

  Further, the “card” includes not only a cash card, a credit card, and a debit card, but also a card widely used for settlement such as a point card and a membership card of a department store. Further, the “card” is not limited to a magnetic card, and includes an IC card, a non-contact card, and the like.

  In addition, a bill and coin inspection device is installed in the “transaction system” in this application, and a function is added to generate a system error when there is a suspicion that a bill inserted during a deposit transaction or transfer transaction is counterfeit. can do. This additional function can be expected to improve the clearance rate not only for unauthorized users of cards but also for users of counterfeit bills and counterfeit coins.

1 Automatic deposit payment system (transaction system)
2 Authentication server (verification means)
3 Alarm device (notification means)
4 terminal 10 processor (transaction processing means)
11 Display 12 Card reader (reading means)
13 Input means 14 Memory 20 Processor 21 Memory

Claims (4)

A method of managing a transaction system that performs personal authentication using a card and a password,
Obtaining ID information recorded on the card;
Obtaining the transaction type and password entered by the user;
Collating the acquired password with pre-registered first and second passwords corresponding to the ID information;
If the acquired password is a second password, a step of performing a predetermined notification;
Determining whether the acquired transaction type includes settlement;
If the acquired transaction type is a transaction including settlement and the acquired password is the first password, executing the first transaction process;
When the acquired transaction type is a transaction including settlement and the acquired password is the second password, the transfer completion is displayed to the user, which is different from the first transaction process. On the other hand, executing the second transaction process including not actually executing the transfer process ;
If the acquired transaction type is a transaction that does not include a settlement, the same transaction process is executed regardless of whether the acquired password is the first or second password;
A method comprising the steps of:   The method according to claim 1, wherein the second transaction process is a transaction process that requests the user to input the same transaction information as the first transaction process. An input means for obtaining the transaction type and password desired by the user;
Reading means for reading the ID information recorded on the card;
Collation means for collating the acquired password with two types of passwords registered in advance corresponding to the ID information;
A transaction processing means for executing a predetermined transaction process when the acquired password matches one of the two types of passwords;
A notification means for notifying when a predetermined one of the two types of passwords is input;
A transaction system comprising:
The transaction processing means
Determine whether the acquired transaction type is a transaction including payment,
If the acquired transaction type is a transaction including payment, a different transaction process is executed for each type of acquired password. Display the transfer completion to the user without executing ,
When the acquired transaction type is a transaction that does not include settlement, a transaction system that executes the same transaction process regardless of the type of the acquired password. A transaction system terminal that performs personal authentication using a card and a password,
An input means for obtaining the transaction type and password desired by the user;
Reading means for reading the ID information recorded on the card;
Means for acquiring a verification result between the acquired password and two types of passwords registered in advance corresponding to the ID information;
A transaction processing means for executing a predetermined transaction process when the acquired password matches one of the two types of passwords;
Means for transmitting a predetermined signal indicating that a predetermined one of the two types of passwords has been input;
With
The transaction processing means
Determine whether the acquired transaction type is a transaction including payment,
If the acquired transaction type is a transaction including payment, a different transaction process is executed for each type of acquired password. Display the transfer completion to the user without executing ,
When the acquired transaction type is a transaction that does not include settlement, a terminal that executes the same transaction process regardless of the type of the acquired password.

Images