JP5566834B2 - Automatic transaction apparatus and automatic transaction system - Google Patents

Description

  The present invention relates to an automatic transaction apparatus and an automatic transaction system that perform transaction by performing identity verification using a personal identification number.

  Generally, in an automatic transaction apparatus that performs deposit / withdrawal transactions of cash such as banknotes, a personal identification number is entered to authenticate a person, and when the person authentication is completed, a withdrawal transaction or a transfer transaction can be started. In recent years, when entering a personal identification number, there is an increasing tendency for the next customer or the like to look into the personal identification number input operation, steal the personal identification number, and withdraw money by impersonation.

  In order to prevent such theft of the personal identification number, an input screen storage unit that stores a plurality of types of regular numeric key layout input screens as numeric input screens such as personal identification numbers displayed on the operation screen; and There has been a technique in which one of a plurality of types of numerical key layout input screens stored in the input screen storage unit is randomly selected for each transaction and displayed on the operation screen, and a PIN number is input (for example, , See Patent Document 1).

Japanese Patent Laid-Open No. 10-105781

  However, in the above-described conventional automatic transaction apparatus, even if the numeric key arrangement is changed and displayed, if the next customer sees the number of the button entered by the customer, the password can still be stolen. As a result, it was not possible to reliably prevent damage such as withdrawal by impersonation.

The present invention adopts the following configuration in order to solve the above-described problems. That is, in an automatic transaction apparatus that includes an operation unit, inputs a personal identification number by operating the operation unit, confirms the identity of the transaction, and performs transaction, an internal button array generation unit that randomly generates an internal button array for display , and generation The internal button array storage unit that stores the internal button array, and the internal button array acquired from the internal button array storage unit is rearranged to an array different from the internal button array to generate a dummy button array, and the operation unit Dummy button generation means for displaying as a dummy button to be pressed, and button association means for replacing the pressed dummy button with an internal button array.

  According to the automatic transaction apparatus of the present invention, since it is configured as described above, even if the next customer peeks at the password, the true password is not stolen, and the withdrawal is made by impersonation. Damage can be reliably prevented.

1 is an overview perspective view of an automatic transaction apparatus according to a first embodiment. It is a control system block diagram of the automatic transaction apparatus of Example 1. FIG. It is an operation | movement flowchart figure of the automatic transaction apparatus of Example 1. FIG. It is an operation | movement flowchart figure of the automatic transaction apparatus of Example 1. FIG. It is an example of the operation screen of the automatic transaction apparatus of Example 1. It is operation | movement explanatory drawing of the automatic transaction apparatus of Example 1. FIG. It is a block diagram of the automatic transaction system of the modification of Example 1. FIG. It is a control system block diagram of the automatic transaction apparatus of Example 2. It is an operation | movement flowchart figure of the automatic transaction apparatus of Example 2. FIG. It is operation | movement explanatory drawing of the automatic transaction apparatus of Example 2. FIG. It is operation | movement explanatory drawing of the automatic transaction apparatus of Example 2. FIG. It is operation | movement explanatory drawing of the automatic transaction apparatus of Example 2. FIG. It is operation | movement explanatory drawing of the automatic transaction apparatus of Example 2. FIG.

  Embodiments of the present invention will be described below with reference to the drawings. Elements common to the drawings are given the same reference numerals.

(Constitution)
FIG. 1 is an overview perspective view showing the configuration of the automatic transaction apparatus according to the first embodiment. As shown in the figure, the automatic transaction apparatus according to the first embodiment displays a coin deposit / withdrawal port 12 for depositing / withdrawing coins, a bill deposit / withdrawal port 11 for depositing / withdrawing bills, and an operation screen. An operation unit 14 in which a touch panel for inputting data is stacked on the LCD, a passbook insertion / extraction port 15 for inserting and discharging a passbook when performing transactions using a passbook, and a card insertion / extraction port 16 for inserting and discharging a cash card are provided. .

  Moreover, the control system of the automatic transaction apparatus 1 of Example 1 becomes a structure as shown in FIG. That is, the control system of the automatic transaction apparatus 1 includes the above-described operation unit 14, a main control unit 20 that generates buttons for controlling each unit in the apparatus and inputting a personal identification number, which will be described in detail later, and displaying the buttons on the operation unit 14; A card processing unit 21 that reads / writes information recorded on the card, a speaker unit 22 that outputs operation guidance, alarm sound, etc. as voice or buzzer sound, and read / write of the magnetic stripe of the passbook and print control to the passbook A bankbook processing unit 23 to perform, a banknote processing unit 24 to perform banknote deposit / withdrawal control, and a coin processing unit 25 to perform coin deposit / withdrawal control.

  The main control unit 20 generates a dummy button array by rearranging the internal button array acquired from the internal button array storage unit 27a stored in the storage unit 27 described later, and generates a dummy button to be displayed on the operation unit 14 as a dummy button. Means 20a and button correspondence means 20b for associating dummy buttons with internal buttons are provided.

  Furthermore, the control system of the automatic transaction apparatus 1 according to the first embodiment is a storage unit of the main control unit 20, and a storage unit 27 that stores an internal button array storage unit 27a that stores a control program, control parameters, and internal button arrays. A power supply unit 28 that supplies power to each unit in the apparatus, and an interface unit 29 that is connected to a host device 31 that is a host device via a line 30 and controls the interface. The host device 31 includes a customer data storage unit 31a that stores customer data such as a customer account number and a password.

(Operation)
With the above configuration, the automatic transaction apparatus 1 according to the first embodiment operates as follows. This operation will be described in detail below using the operation flowcharts of FIGS. 3 and 4 and the operation screen example of FIG. In this example, the following description will be made assuming that the personal identification number is “1234”.

  First, when the automatic transaction apparatus 1 is powered on, the automatic transaction apparatus 1 clears the number of input errors N as a transaction start preparation, notifies the host apparatus 31 of a transaction start notification via the line 30, and The host device 31 that has received the notification responds with a start notification response to the reception.

  Upon receiving the start notification response, the automatic transaction apparatus 1 displays a screen prompting the customer to insert a cash card on the operation unit 14, and when the customer inserts the cash card into the card insertion outlet 16, the card processing unit 21 determines the account number. Etc. is read (step S10).

  Next, the automatic transaction apparatus 1 displays a transaction selection screen on the operation unit 14 (step S11). When the transaction desired by the customer is selected (step S12), the selected transaction information is hosted via the line 30. Notify the device 31.

  Next, the automatic transaction apparatus 1 confirms the identity, that is, whether or not the transaction requires the input of a personal identification number (step S13). The host apparatus 31 that has received the transaction information needs to input the personal identification number. It may be determined whether or not the transaction is necessary, and the automatic transaction apparatus 1 is notified of whether it is necessary, and a password input screen may be displayed when necessary.

  If it is determined in step S13 that a transaction that does not require input of a password, such as a deposit transaction, is selected, the process proceeds to step S19, and the selected transaction is continued.

  On the other hand, if it is determined in step S13 that a transaction requiring the input of a personal identification number, such as a withdrawal transaction, has been selected, first, whether or not the number of input errors N of the personal identification number has become three. Confirmation is made (step S14), and if the number N of input errors is 3, a screen for prompting an inquiry to the counter is displayed without displaying an operation screen for inputting a personal identification number, and this processing is terminated.

  On the other hand, when the number N of input errors of the personal identification number is smaller than 3, an operation screen for inputting the personal identification number shown in FIG. 5 described later is displayed (step S15), and whether or not the “confirm” button 101 is pressed. If the “confirm” button 101 is pressed, the 4-digit password entered in the dummy button array 41 is read as a true number with reference to the button association means 20b. Then, it is transmitted to the host device 31 via the line 30 together with the account number and the like to determine whether or not the data matches the data in the customer data storage unit 31a (step S17). The transaction is continued by displaying an amount input screen or the like (step S19).

  On the other hand, if the code numbers do not match in step S17, the error count N is incremented by 1 (step S18), the process returns to step S14, and so on.

  Next, the generation operation of the personal identification number input screen in step S15 will be described below using the operation flowchart of FIG. 4 and the operation screen example of FIG.

  First, based on the internal button array information acquired from the internal button array storage unit 27a of the storage unit 27, the automatic transaction apparatus 1 displays the internal button array 40 for display (step S21).

  For example, a numeric string from “0” to “9” in this example is “4”, “6”, “3”, “0”, “8”, “1”, “5”, “2”, “ "9", "*", "7" are acquired as internal button arrangement information, and are arranged in three columns in the order from the upper left to the right in the lower left of the screen as shown in the example of the operation screen in FIG. "Button and then the last number" 7 ".

  Instead of acquiring a numeric string as described above, the internal button array information is defined as a number, and when the number is acquired, the button array registered in advance according to the number is displayed in FIG. You may make it arrange | position as the internal button arrangement | sequence 40 as it is in the lower left.

  Next, the internal button array 40 is rearranged into an array different from the internal button array 40 by a predetermined algorithm (step S22), and is displayed as a dummy button array 41 that can be pressed substantially in the center as in the operation screen example of FIG. (Step S23). At this time, the number of the internal button array 40 corresponding to each button number displayed as the dummy button array 41 is stored in the button association means 20 b of the main control unit 20. For example, when “7” of the dummy button array 41 is pressed, the internal button 40 is associated with “1”, and when “3” of the dummy button array 41 is pressed, “2” of the internal button 40 is displayed. Are stored in association with each other.

  Next, an operation for inputting a personal identification number in the personal identification number input process will be described below with reference to an operation explanatory diagram of FIG. First, as shown in FIG. 5, when the internal button array 40 and the dummy button array 41 are displayed, “1” of the first digit of the customer's personal identification number “1234” is input.

  At this time, the customer refers to the position “1” in the internal button array 40 and presses the same position in the dummy button array 41, that is, the button “7” (operation 1).

  Next, when inputting “2” of the second digit, the position of “2” in the internal button array 40 is referred to, and the same position in the dummy button array 41, that is, the button of “3” is pressed (operation). 2).

  Next, when inputting “3” of the third digit, the position of “3” in the internal button array 40 is referred to, and the same position in the dummy button array 41, that is, the button of “0” is pressed (operation). 3).

  Next, when the last digit “4” is input, the position “4” in the internal button array 40 is referred to, and the same position in the dummy button array 41, that is, the button “5” is pressed (operation 4). ).

  When the dummy button array 41 is pressed by the above operation, the button correspondence means 20b of the main control unit 20 is referred to and read as the internal button array 40 to obtain a true password. Then, identity verification is performed in step S17 of FIG.

  As described above, since the internal button array 40 is referred to and a dummy button array 41 different from this is pressed, the internal button array 40 is hidden by the customer even if the next customer sees the password. Since it seems that the password has been input as if it was “7305”, it is possible to reliably prevent the security code from being stolen and to prevent damages caused by fraudulent withdrawal transactions. .

  In the above description of the first embodiment, an example in which the “confirm” button 101 is pressed in step S16 of FIG. 3 has been described. However, when a four-digit input is performed, the process proceeds to step S17 to confirm the identity. Even in this case, the present invention can be similarly applied.

  In the above description of the first embodiment, the internal button array 40 has been described so as to display the same internal button array until all the passwords are input. However, the internal button array is changed and displayed for each digit input. It may be.

  In the above description of the first embodiment, the internal button array storage unit 27a is provided in the storage unit 27 and the internal button array is acquired. However, as shown in the modification of FIG. In the configuration in which the automatic transaction apparatuses 1a to 1x are connected to the host apparatus 31 via the line 30, the internal button array is stored together with the customer data storage unit 31a for storing customer data such as the account number and password of the customer of the host apparatus 31. The unit 31b may be provided, and the internal button array may be acquired from the internal button array storage unit 31b via the line 30.

  Alternatively, the automatic transaction apparatus 1 or the host device 31 does not include the internal button array storage unit 27a or the internal button array storage unit 31b. The random number generator may generate a random number to generate a sequence of numbers “0” to “9”.

(Effect of Example 1)
As described above, according to the automatic transaction apparatus of the first embodiment, an internal button for display is provided in an automatic transaction apparatus that includes an operation unit, operates the operation unit to input a personal identification number, and confirms the identity of the transaction. An internal button array storage unit for storing an array; and a dummy button generating unit for rearranging the internal button array acquired from the internal button array storage unit to generate a dummy button array and displaying the dummy button array as a dummy button to be pressed on the operation unit; The button correspondence means for replacing the pressed dummy button with the internal button arrangement is provided, so even if the next customer peeks at the password, the true password is not stolen, and by impersonation Damages such as withdrawals can be reliably prevented.

(Constitution)
In the automatic transaction apparatus according to the second embodiment, as shown in FIG. 8, an error input display unit 20 c that changes the color of the dummy button when a wrong password is entered for each digit is newly added to the main control unit 20. Provided. Since other configurations are the same as those of the first embodiment, detailed description thereof is omitted for the sake of brevity.

(Operation)
With the above configuration, the automatic transaction apparatus 1 according to the second embodiment operates as follows. This operation will be described below with reference to the operation flowchart of FIG. In this example as well as in the first embodiment, the true password is “1234” and will be described below.

  First, when the power of the automatic transaction apparatus 1 is turned on, the automatic transaction apparatus 1 clears the number N of input errors and the number M of digits as preparation for transaction start, and sends a transaction start notification to the host device 31 via the line 30. The host device 31 receiving the notification responds with a start notification response.

  Upon receiving the start notification response, the automatic transaction apparatus 1 first displays a screen prompting the customer to insert a cash card on the operation unit 14, and when the customer inserts the card into the card insertion / exit 16, the card processing unit 21 Customer information such as a number is read (step S40).

  Next, the automatic transaction apparatus 1 displays a transaction selection screen on the operation unit 14 (step S41). When the transaction desired by the customer is selected (step S42), the selected transaction information is hosted via the line 30. Notify the device 31. At this time, the automatic transaction apparatus 1 similarly notifies the customer's account number to the host apparatus 31, and acquires the customer's password.

  Next, the automatic transaction apparatus 1 confirms the identity, that is, confirms whether or not the transaction requires the input of a personal identification number (step S43). The host apparatus 31 that has received the transaction information needs to input the personal identification number. It is the same as in the first embodiment that it is possible to determine whether or not the transaction is necessary, notify the automatic transaction apparatus 1 of the necessity, and display the personal identification number input screen when necessary.

  If it is determined in step S43 that a transaction that does not require input of a password, such as a deposit transaction, is selected, the process proceeds to step S54 and the selected transaction is continued.

  On the other hand, when it is determined in step S43 that a transaction requiring the input of a personal identification number, such as a withdrawal transaction, has been selected, first, whether or not the number of input errors N of the personal identification number has become three. Confirmation is made (step S44), and if the number N of input errors is three, a screen prompting an inquiry to the counter is displayed without displaying the operation screen for inputting the personal identification number, and the present processing is terminated.

  On the other hand, when the number N of input errors of the personal identification number is less than 3, the operation screen for inputting the personal identification number shown in FIG. 5 is displayed (step S45).

When a one-digit password is pressed in the dummy button array 41 (step S46), the button correspondence means 20b is referred to and read as the internal button array 40.
The error input display unit 20c determines whether or not the input digit number matches the corresponding digit of the password acquired from the host device 31 (step S47). Is displayed in, for example, blue (step S48), 1 is added to the number of digits M (step S49), and it is determined whether or not the 4-digit input has been completed (step S53), and the 4-digit input is completed. When all four digits are entered normally, it is determined that the identity verification is OK, and the selected transaction is continued (step S54). If it is 3 digits or less in step S53, it returns to step S46 and repeats similarly.

  On the other hand, if the passwords do not match in step S47, the color of the dummy button is displayed, for example, in red (step S50), the error count N is incremented by 1 (step S51), and the error is detected three times. It is determined whether or not the process has been repeated (step S52). When the number is less than three, the process returns to step S46, and when the number is three, a screen for prompting an inquiry to the window is displayed and the process is terminated.

  Next, the password input operation will be described in more detail with reference to the operation explanatory diagrams of FIGS. Note that when the dummy button array 41 is pressed, the button correspondence means 20b of the main control unit 20 is referred to and read as the internal button array 40, as in the first embodiment.

  First. As shown in FIG. 10, when the internal button array 40 and the dummy button array 41 are displayed, the customer inputs “1” of the first digit of the password (operation 11).

  At this time, the customer refers to the position of “1” in the internal button array 40 and presses the same position in the dummy button array 41 in FIG. (Step S51).

  In this case, since the input is correct, the button “7” in the dummy button array 41 is made to emit light in blue. On the other hand, when “1” of the dummy button array 41 is accidentally pressed as shown in FIG. 5C, the button “1” of the dummy button array 41 is made to emit red light.

  Next, when “2” is set as the second digit password, the position of “2” in the internal button array 40 is referred to as shown in FIG. 11A, and the dummy button array 41 shown in FIG. At the same position, that is, the button “3” is pressed (operation 12).

  In this case, since the input is correct, the button “3” in the dummy button array 41 is caused to emit light in blue. On the other hand, when “2” of the dummy button array 41 is accidentally pressed as shown in FIG. 5C, the button “2” of the dummy button array 41 is caused to emit red light.

  Next, when “3” is set as the third digit password, the position of “3” in the internal button array 40 is referred to as shown in FIG. 12A, and the dummy button array 41 in FIG. Are pressed, that is, a button of “0” is pressed (operation 13).

  In this case, since the input is correct, the “0” button in the dummy button array 41 emits light in blue. On the other hand, when “3” of the dummy button array 41 is accidentally pressed as shown in FIG. 5C, the button “3” of the dummy button array 41 is caused to emit red light.

  Finally, when “4” is set as the fourth digit password, the position of “3” in the internal button array 40 is referred to as shown in FIG. 13A, and the dummy button array 41 in FIG. At the same position, that is, the button “5” is pressed (operation 14).

  In this case, since the input is correct, the button “5” in the dummy button array 41 is made to emit light in blue. On the other hand, when “4” of the dummy button array 41 is accidentally pressed as shown in FIG. 5C, the button “4” of the dummy button array 41 is caused to emit red light.

  As described above, when the password is entered by mistake, the color of the button is changed for each digit, so that it is possible to prevent the password from being entered by mistake, and as in the first embodiment, Even if the next customer peeks at the security code, the true security code “1234” cannot be known, and it appears as if it was entered as “7305”. Nor.

  In the above description of the second embodiment, it is described that the color of the button is changed when an incorrect input is made. However, the speaker unit 22 uses a buzzer or a voice together with or instead of the color display. You may make it notify a customer.

(Effect of Example 2)
As described above, according to the automatic transaction apparatus of the second embodiment, in addition to the configuration of the first embodiment, there is provided an error input display means for changing the color of the dummy button when a wrong password is entered for each digit. Therefore, in addition to the effects of the first embodiment, it is possible to prevent the wrong password from being entered.

  As described above, the present invention includes an automatic transaction apparatus that performs transactions for verifying the identity of a personal identification number, a portable terminal that inputs a personal identification number, and an auto-lock type apartment that allows entry into the personal identification number. It can be widely used in gate systems.

1, 1a to 1x Automatic transaction device 14 Operation unit 20 Main control unit 20a Dummy button array generation unit 20b Button association unit 20c Error input display unit 27 Storage unit 27a, 31b Internal button array storage unit 30 Line 31 Host device 31a Customer data Storage unit 40 Internal button array 41 Dummy button array 101 Confirm button

Claims (3)

In an automatic transaction apparatus comprising an operation unit, operating the operation unit to enter a personal identification number and verifying the identity of the transaction,
An internal button array generating means for randomly generating an internal button array for display ;
An internal button array storage unit for storing the generated internal button array;
Dummy button generation means for generating a dummy button array by rearranging the internal button array acquired from the internal button array storage unit to an array different from the internal button array, and displaying it as a dummy button to be pressed on the operation unit;
An automatic transaction apparatus comprising: a button correspondence means for replacing a pressed dummy button with an internal button arrangement.   2. The automatic transaction apparatus according to claim 1, further comprising an error input display means for changing the color of the dummy button when an incorrect input of a password is made for each digit. An automatic transaction system in which the automatic transaction apparatus according to claim 1 or 2 is connected to a host apparatus via a line,
An automatic transaction system comprising the internal button array generation means and the internal button array storage unit in the host device.

Images