AU598812B2

AU598812B2 - Transaction processing apparatus

Info

Publication number: AU598812B2
Application number: AU72649/87A
Authority: AU
Inventors: Masazumi Ichihashi
Original assignee: Omron Tateisi Electronics Co
Current assignee: Omron Corp
Priority date: 1986-05-08
Filing date: 1987-05-08
Publication date: 1990-07-05
Anticipated expiration: 2007-05-08
Also published as: AU7264987A; JPS62262175A

Description

I

6012q/1 i;i_ il liii. i ;_-lii PX-

AUSTRALIA

Patents Act Z) 88"12 COMPLETE SPECIFICATION

(ORIGINAL)

Class Int. Class Application Number: Lodged: 72 /4q? 7 Complete Specification Lodged: Accepted: Published: Priority Related Art: This document contains the mrer'dnients made under ,n 49) au1i is correct for printing. j 0, 0 0h 0t APPLICANT'S REFERENCE: Case FP-3848(MO/km) Name(s) of Applicant(s): Omron Tateisi Electronics Co.

Address(es) of Applicant(s): Tsuchido-cho, Hanazono, Ukyo-ku, Kyoto -shi, Kyoto-fu, Japan.

Address for Service is: PHILLIPS ORMONDE FITZPATRICK Patent and Trade Mark Attorneys 367 Collins Street Melbourne 3000 AUSTRALIA Complete Specification for the invention entitled: TRANSACTION PROCESSING APPARATUS Our Ref 54429 POF Code: 1208/1351 The following statement is a full description of this invention, including the best method of performing it known to applicant(s): 6003q/l 1- L P18/7/78 PHILLIPS ORMONDE FITZPATRICK Patent and Trade Mark Attorneys 367 Collins Street Melbourne, Australia t11- S3LEOrT.E I Sait.- s.a- o n r- i-n; p -a-r-a a-9s piiol-c1f t h. ILnvI r The present invention relates to a transaction processing apparatus and more particularly, to a transaction processing apparatus in which alteration and updating of data having different degree of secrecy are limited depending on a degree of authorization of an operator.

Doori-ption of tho Prior Art Recently, various transaction processing apparatuses for automated transaction processing have been put into practice. As an example of such a transaction processing apparatus, a CAT (Credit Authorization Terminal) has been I known. In the CAT, data required for operating the CAT is stored in an internal memory so that the CAT is operated in response to the data. Such data includes data for indicating the order of operation, data for indicating the contents of guidance to a manager, and data concerning a card company, that is, data for indicating, for example, a code number of a card company, a telephone number of a central apparatus and a possible manner of payment, which are set to enable a customer to utilize a credit card issued by a plurality of card companies. Data required IT RA.., lk 0 c for the above described operation are generally referred to as terminal parameters.

Such terminal parameters were entered from a keyboard of the CAT for setting. Recently, the terminal parameters have been transmitted from the central apparatus to the CAT and set in the memory so that the central apparatus may manage and control the CAT. A process for transmitting data from the central apparatus in a host to a terminal and setting the data is referred to as down line loading (DLL). In the CAT setting data by DLL, setting of data from the keyboard is prohibited.

In the above described CAT, an identification number o data for identifying an individual and a telegraphic message communicating between the CAT and the central apparatus have higher degree of secrecy, as compared with data concerning the above described card company, so that *ciphering thereof is required to keep a secret. Data comprising character series or bit series set for ciphering is referred to as ciphering key data. The high degree of secrecy of the ciphering key data must be maintained so that the ciphered identification number data may not be decoded or deciphered even if it is tapped utilizing the ciphered key data. Therefore, it is very important that in the CAT, the ciphering key data can be 2

I

-3stored in the memory and the stored ciphering key data can be altered while the secrecy is maintained.

Although in the conventional CAT, the above described data can be correctively set by the above described DLL at the time of shipping or installation, the above described terminal parameters and the ciphering key data can not be altered or updated while the secrecy required after installation is maint:ined.

Therefore, a primary object of the present invention is to solve the above described problem and to provide a transaction processing apparatus in which data having different degree of secrecy can be altered or updated while the secrecy is maintained.

The remote transaction processing apparatus for Sconnection to a central apparatus according to the present invention comprises data storage means for storing data having different degrees of secrecy identification code storage means for storage identification codes authorized to use the data stored in the data storage means corresponding to t'Je degrees of secrecy, identification code entry mean.; for entering an identification code, determining means for determining whether or not the identification code entered from the identification code entry means coincides with any of the identification codes stored in the *000

RB

36lr T'AT CY LI~R ii._ -4identification code storage means, and control means in response to coincidence determination of the determining means for controlling the apparatus to permit reading from and alteration of the data storage means the data having a degree of secrecy corresponding to the entered identification code, which coincides with the stored identification code independantly from the central apparatus.

According to the present invention, since a plurality of identification codes corresponding to the degree of secrecy are previously registered and data corresponding to the identification code is permitted to be used or updated only when the indentification code is entered, the data can be used or updated only by a person knowing the identification code, so that data can be used or updated while maintaining the secrecy.

The following description refers in more detail to the various features of the transaction processing S apparatus of the present invention. To facilitate an understanding of the invention, reference is made in the description to the accompanying drawings where the transaction processing apparatus is illustrated in a preferred embodiment. It is to be understood that the transaction processing apparatus of the present invention is not limited to the preferred embodiment as illustrated in the drawings.

Fig. 1 is a schematic block diagram showing an electrical structure of a CAT according to an embodiment of the present invention.

Fig. 2 is a diagram showing diagrammatically a storage area of a memory shown in Fig. 1; and

RB

5j3 V~~lr XjF L, Air cu

I

i ~-Y~-Ol"ll Figs. 3 to 5 are flow charts for explaining operation according to an embodiment of the present invention.

Description is made on a CAT in the following.

However, it should be noted that the present invention is not limited to the CAT. For example, the present invention can be applied to an ATM (Automatic Teller Machine), a CD (Cash Dispensor) and an ECR (Electronic Cash Register) Fig. 1 is a schematic block diagram showing an electrical structure of a CAT according to an embodiment of the present invention. In Fig. i, a CAT 1 is provided with a CPU 2. A keyboard 3, a display 4, a PIN pad 5, a printer 6, a memory 7, a communication module 8 and a card reader 9 are connected to the CAT 1.

The keyboard 3 includes a ten-key for entering a commodity code and a price of commodities and various keys for designating a manner for setting data concerning the card company and ciphering key data. The display 4 indicates a guidance message for operation, data entered from the keyboard 3 or the like. The PIN pad 5 enters identification codes. Generally, there are two kinds of identification codes. One is used for identifying a customer and the other is used for identifying an operator. The identification code for identifying an

C(

L1'.

operator comprises a plurality of, (for example, three) identification codes, corresponding to the degree of authorization the operator has. One is an identification code used for updating data having high degree of secrecy, which is assigned to, for example, a person authorized to maintain the system. Another is an identification code used for updating data having intermediate degree of secrecy, which is assigned to, for example, a manager.

The other is an identification code used for updating data having low degree of secrecy, which is assigned to, for example, a clerk.

It is possible to update data by DLL from a central apparatus. In this case, an identification code for DLL must be entered.

The printer 6 prints the result of the transaction or the like. The memory 7 comprises a RAM including a o astorage area as shown in Fig. 2 and a ROM storing an operation program of the CPU 2 based on a flow chart as shown in Figs. 3 to 5. The communication module 8 performs data communication between the central apparatus in a bank or an information processing entity and the CPU 2. The card reader 9 reads card data from a credit card.

Fig. 2 is a diagram showing diagramatically a storage area of a part of the memory 7 shown in Fig. 1. In Fig.

2, a storage area 70 includes a terminal parameter storage 6 area 71, transaction and accumulation data storage area 72, a ciphered key data storage area 73 and an identification code storage area 74.

The terminal parameter storage area 71 stores terminal parameters such as the contents of guidance I indicated on the display 4, the contents indicating the order of processings, a company code of the card company, i telephone number data of the central apparatus, data indicating a manner of payment, and a floor limit value.

The floor limit value is defined as data indicating a predetermined price. If proceeds are more than the floor limit value, the CAT inquires of the central apparatus o whether transaction is possible or not. If the proceeds are less than the value, the CAT does not inquire of the central apparatus and makes transaction processing in the

CAT.

The transaction and accumulation data storage area 72 is for storing transaction data generated at the time of transaction and accumulation data of transaction. The ciphering key data storage area 73 is for storing ciphering key data for ciphering an identification code of a customer entered from the PIN pad 5 and data communicated from the central apparatus through the communication module 8. The identification code storage area 74, which stores an identification code as described -7k.

IF-

in Fig. 1, comprises a storage area 741 for storing an identification code used for updating data having high degree of secrecy, a storage area 742 for storing an identification code used for updating data having intermediate degree of secrecy and a storage area 743 for storing an identification code used for updating data having low degree of secrecy. The identification code for updating data having high degree of secrecy is used when the ciphering key data stored in the area 73 is updated, the identification code for updating data having intermediate degree of secrecy is used when transaction and accumulation data stored in the area 72 is cleared, and the identification code for updating data having low degree of secrecy is used when terminal parameters stored in the area 71 are updated.

The ciphering key data storage area 73 and the dentification code storage area 74 may be provided in a RAM chip independently of the other storage areas to maintain high secrecy so that the RAM chip is molded by resin or the like.

Figs. 3 to 5 are flow charts for explaining operation according to an embodiment of the present invention, where Fig. 3 illustrates operation for setting a parameter from the keyboard 3, Fig. 4 illustrates operation for setting a parameter by DLL from the central apparatus and Fig. -8illustrates operation for setting the ciphering key data from the keyboard 3.

Description is now made on operation for setting parameters from the keyboard 3 shown in Fig. 3.

In the step SI, a clerk to which an identification code for updating data having low degree of secrecy is assigned turns on the power supply of the CAT 1.

Accordingly, in the step S2, the CPU 2 self-diagnoses whether or not abnormality is recognized with respect to the electrical structure shown in Fig. 1 and becomes a stand-by state. In the step S3, the clerk depresses a key. Accordingly, in the step S4, the display 4 indicates that an identification code should be entered. In the step S5, the clerk enters the identification code from the keyboard 3 and then, depresses an "entry key".

Accordingly, in the step S6, the CPU 2 determines whether or not the identification code entered from the keyboard coincides with the identification code for updating data having low degree of secrecy stored in the area 743. If the identification codes coincide with each other, in the step S7, the terminal parameter is updated in response to data entered from the keyboard 3 and in the step S8, the CPU 2 is in an idle state. If the identification codes cao r.

-(coincide with eachother, the step S7 is skipped to the step S8.

9 Li 1-- Although the terminal parameters can be updated by entering data from the keyboard 3, they can be also updated by DLL from the central apparatus.

Description is now made on operation for setting the parameters by DLL from the central apparatus. In the step SlI, the CPU 2 is in the idle state. In the step S12, a clerk depresses a key. Accordingly, in the step S13, the display 4 indicates that an identification code for DLL should be entered. In the stem S14, the clerk enters an identification code from the PIN pad 5 and then, depresses the "entry key". Accordingly, in the step the CPU 2 determines whether or not the identification code entered from the PIN pad coincides with the identification code for DLL stored in the memory 7. If the identification codes coincide with each other, in the step S16, data is transmitted from the central apparatus through the communication module 8 and the terminal parameters are updated in response to the transmitted data and in the step S17, the CPU 2 is in the idle state. If 6 ao Ot the identification codesicoincide with each other, the step S16 is skipped to the step S17.

Description is now made on operation for setting ciphering key data from the keyboard 3 as shown in Fig. A manager to which the identification code for updating data having high degree of secrecy is assigned first turns 10 -k tuf~

NN(M

0 1~ ly_ on the power supply of the CAT i. Accordingly, in the step S22, the CPU 2 self-diagnoses whether or not abnormality is recognized with respect to elements shown in Fig. 1 and becomes a stand-by state. Thereafter, in the step S23, the operator depresses a key.

Accordingly, in the step S24, the display 4 indicates that an identification code having high degree of secrecy should be entered. In the step S25, the operator enters an identification code from the PIN pad 5 and then, depresses the "entry key". Accordingly, in the step S26, the CPU 2 determines whether or not the entered i identification code coincides with the identification code for updating data having high degree of secrecy stored in the area 741. If the identification codes coincide with each other, in the step S27, the ciphering key data in the area 73 is updated in response to data entered from the keyboard 3 and in the step S28, the CPU 2 is in the idle dco r~t state. If the identification codesAcoincide with each other, the step S27 is skipped to the step S28.

As described in the foregoing, according to the present embodiment, since identification codes depending ii on degree of secrecy are provided so that data can be updated when the corresponding identification code is entered, the ciphering key data having high degree of secrecy can be updated by an entry from the keyboard 11

L

N. K without using high techniques such as DLL from the host.

In addition, in a system in which the central apparatus manages or controls the CAT, when partial updating is made with respect to the above described floor limit value, the card company code, the telephone number data of the central apparatus or the like, updating can be made while constant secrecy is maintained by the identification code and the right of management of the central apparatus is held even if DLL from the central apparatus is not performed, so that the number of steps in operation for setting and communication cost for updating can be reduced.

As described in the foregoing, according to the present invention, since a plurality of identification codes depending on degree of secrecy are registered and updating of data corresponding to the identification code is permitted only when the identification code is entered, the data can be updated only by a person knowing the identification code, so that data can be updated while secrecy is maintained.

Although the present invention has been described and illustrated in detail, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of limitation, the spirit and scope of 12 the present invention being limited oly by the terms of the appended claims.

I

113

L

Claims

1. A remote transaction processing apparatus for connection to a central apparatus comprising: data storage means for storing data having different degrees of secrecy, identification code storage means for storing identification codes authorized to use the data stored in said data storage means corresponding to the degrees of said secrecy, identification code entry means for entering an identification code, determining means for determining whether the o identification code entered from said identification code entry means coincides with any of the identification codes stored in said identification code storage means, and o 0 control means in response to coincidence S determination of said determining means for controlling said apparatus to permit reading from and alteration of said data storage means the data having a degree of secrecy corresponding to the entered identification code which coincides with the stored identification code independantly 000* from the central apparatus.

2. A transaction processing apparatus in accordance with claim i, wherein said data storage means includes a first data storage area for storing a first data having lower degree of secrecy, a second data storage area for storing a second 0 00° data having intermediate degree of secrecy and a third data Sstorage area for storing a third data having higher degree of secrecy, and said identification code storage means includes a first identification code storage area for storing first identification codes corresponding to the lower degree of secrecy, a second identification code storage area for storing second identification codes corresponding to the 2 intermediate degree of secrecy, and a third identification code storage area for storing third identification codes corresponding to the higher degree of secrecy.

3. A transaction processing apparatus in accordance with claim 2, wherein said third data includes ciphering key data for ciphering data used for a transaction processing.

4. A transaction apparatus as set forth in claim 1 substantially as hereinbefore particularly described with reference to what is shown in the accompanying drawings. DATED

5 January, 1990 PHILLIPS ORMONDE FITZPATRICK Co Attorneys for: 1 OMRON TATEISI ELECTRONICS CO. t RB 5361r 1' :Ii I