JP2001076068A - Terminal and id card - Google Patents

Abstract

PROBLEM TO BE SOLVED: To lighten the load of operation for a transaction on a user, while securing safety of the transaction. SOLUTION: Each automatic cash depositor dispenser 100 is equipped with a card reader 109, a CPU 101, etc. When an ID card, where history information on transactions that a user has done, is inserted into the card reader 109, the CPU 10 makes a risk decision according to the history information and carries out one of (1) a quitting process for the procedure, (2) a reproducing process for past procedures, based upon the history information after authentication using a password code, and (3) a reproducing process for the past procedures, based upon the history information.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to an ID card system.

[0002]

2. Description of the Related Art As an ID card system for effectively utilizing an ID card and streamlining a user's procedure, a terminal (automatic teller machine) installed at a bank branch office is used for depositing / paying and / or transferring a deposit. Known banking systems, ticketing systems for selling vehicle tickets, commuter passes, and the like are known.
With the increasing needs for services provided by these systems, the functions of user operation terminals in these systems are becoming more sophisticated. For example, JP-A-10-2
The automatic transaction device described in Japanese Patent No. 55105 realizes diversification of services that can be provided by switching and displaying an input reception screen corresponding to a type of a user procedure on a touch panel.

[0003] Further, the functions of ID cards have also been enhanced, and it is becoming possible to support a plurality of services with one ID card. For example, "EMV'96 Integrated Circu
"It Card Specification for Payment Systems" describes card specifications that can support multiple financial services. According to this card specification, a list of processing programs in the card is presented, and the user can select one of the lists.

[0004]

However, as the operation terminal becomes more sophisticated, the number of operation steps of the user using the terminal tends to increase. For example, in the above-mentioned conventional banking system, in order to withdraw cash using an automatic teller machine with multiple functions, selecting a transaction type, entering a personal identification number, specifying an amount, selecting whether or not currency exchange is required. Various terminal operations are required, such as selection of whether or not to print a statement slip. Such an operation is troublesome for the user.

[0005] By the way, although the needs for the services provided by these systems have diversified, the services required by individual users tend to be limited to specific ones. For example, the purpose of use of one user of an automatic teller machine in a bank system is often to withdraw a certain amount of cash, transfer money to a specific account, or the like. For this reason, some banking systems issue a transfer card storing operation procedures for complicated transfer processing, and allow the user to use it in subsequent transfer processing. No consideration has been given to this transaction.

Further, according to the above conventional card specifications, 1
As a result of being able to receive various services with one ID card, the user must search for a processing program of the service he or she wants from the list of processing programs. If the processing program of the frequently used service is at the back of the list, the operation to display the back of the list must be performed.
It is troublesome.

[0007] It is desirable that the operability of this type of operation terminal used in daily life be further simplified in consideration of the case where a user with a handicap, a user who is not good at operating the terminal, and the like use it. .

[0008] On the other hand, the security of transactions must be sufficiently ensured.

[0009] Therefore, an object of the present invention is to provide a terminal and an ID card which can reduce the operation burden on individual users while ensuring the security of transactions.

[0010]

In order to solve the above-mentioned problems, the present invention is a terminal for accepting a transaction procedure and executing a transaction process in accordance with the procedure, the history information of the past transaction procedure. Acquisition from the recording medium, and history information input / output means for executing storage of the history information of the procedure in the executed transaction on the recording medium, and the risk information based on the history information acquired by the history information input / output means. A risk determining unit that determines the degree and determines whether the procedure represented by the history information is reproducible based on the determination result, and the risk determining unit determines that the procedure represented by the history information is reproducible. Executing the procedure indicated by the history information input / output means, while reproducing the procedure represented by the history information, Providing a terminal, characterized in that it comprises a stage.

According to the terminal of the present invention, it is possible to automatically reproduce the procedures of past transactions, so that various services are provided as in the past, while individual users are provided with their own services. It is possible to save the trouble of repeatedly performing complicated procedures for frequently used services. In addition, prior to the reproduction of the procedures in the past transaction, risk determination is performed, and the authentication process is appropriately performed according to the determination result, so that the security of the transaction is ensured.

According to the present invention, there is provided an ID card in which user ID information is stored as a recording medium for use in the terminal, wherein one or more pieces of operation history information of the ID card with respect to a higher-level device are stored. An ID card having an area is provided.

When a magnetic card is used as the ID card, for example, a magnetic stripe on which user identification information is recorded may be used as the storage area. When an IC card is used, a built-in memory in which user identification information is recorded may be used as the storage area.

[0014]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described below with reference to an example of application to a bank system.

FIG. 1 shows a schematic configuration of a bank system according to the present embodiment.

One or more (in this embodiment, a plurality of) automatic teller terminals 100 installed in a bank office
And a host computer 130 that manages various information such as customer deposit information are connected by a communication line such as a dedicated line. Here, the host computer 130
, But there may be a plurality of host computers.

The host computer 130 includes a CPU 131 for executing a control process for the entire host, a storage device 133 for storing user transaction information (user name, contract account number, deposit / withdrawal information, etc.), and each automatic teller terminal. 100
And a communication control device 135 for controlling data transfer between the communication control device and the communication device. Further, the host computer 130 includes a real-time clock (not shown), a power supply device (not shown),
(Not shown).

On the other hand, each automatic teller terminal 100
A CPU 101, a memory 103, a touch panel / display device 105 on which an operation screen described below is displayed, a card reader 109 into which an ID card described later is inserted,
A bill input / output device 111 that performs delivery, a receipt printing device 113 that prints a statement slip, a passbook printing device 114 that performs bookkeeping, a communication control device 115 that controls data transfer to and from the host computer 130. A connecting bus 117 is provided. Among them, those directly related to the user's operation (the display device 105 also serving as a touch panel, the card reader 109, the bill input / output device 111, the receipt printing device 113, and the passbook printing device 114) are shown in FIG.
As shown in the figure, it is provided on the front part of the automatic teller machine 100.

The card reader 109 has an ID card loading / unloading function and a data reading / writing function for various ID cards. As a data reading / writing function for various ID cards, for example, for an IC card, data reading from a card built-in memory,
Also, it has a communication function according to a predetermined protocol with a microcomputer with a built-in card for writing data to a memory with a built-in card. The magnetic card is provided with a read / write magnetic head for reading data from the magnetic stripe and writing data to the magnetic stripe. With such a data read / write function, at the start of a transaction procedure, history information and user identification information described later are read from the ID card, and after the transaction procedure,
New history information on the procedure is written to the ID card.

The bill receiving / receiving device 111 performs a bill receiving process and a bill passing process, specifically, counting of bills, discharging of bills, taking in of bills, and the like.

The receipt printing device 113 prints the transaction result on the statement slip and discharges the printed statement slip, and the passbook printing device 114 reads the passbook, records on the passbook, the passbook whose transaction procedure is stopped, and the bookkeeping. Drain the completed passbook.

The display device 105 also has a touch sensor on its display screen, and also functions as a touch panel for receiving a touch input by a user's finger or the like. Operation screens (a) to (g) as shown in FIG. 2 are displayed on the display screen of the display device 105. On an initial screen (a) for selecting a transaction type, a plurality of selection buttons 200a to 200f with transaction names are provided.
Is arranged. A card reader 10 is displayed on the first guidance screen (b) first displayed in the withdrawal processing or the like.
A message prompting insertion of a card into the banknote 9 and insertion of a passbook into the bankbook printing device 114 is displayed. In addition, on a password input screen (c) displayed prior to a specific procedure in a transaction, a character set 2 for receiving input of characters from 0 to 9 is displayed.
01, a display field 202 for displaying the number of input characters of the personal identification number, a correction button 203 for receiving an instruction to correct the immediately preceding input character, and a cancel button 204 for receiving an instruction to cancel all input characters. In the amount input screen (d) displayed in the withdrawal process, etc., a character set (numbers from 0 to 9, digits of the amount (10,000), units of the amount (yen) )) 205, a correction button 206 for receiving an input character correction instruction, a cancel button 207 for receiving an instruction for canceling all input characters, a confirmation button 208 for receiving an input amount confirmation instruction, a display field 209 for displaying the input amount, A storage button 210 for receiving an instruction to save a series of procedures performed up to the display screen, and a message 21 indicating that the selection of the storage button 210 saves the previous procedure as history information.
1 is arranged. On the second and third guidance screens (e) and (f) displayed after the transaction procedure is completed,
A message for prompting reception of a D card, a registered passbook, a printed statement, and the like, and a message for prompting reception of a discharged bill are displayed. On a history confirmation screen (g) displayed before the start of the second and subsequent transactions, a display field 21 for displaying the history information of the procedure in the transaction is displayed.
2. The same transaction re-execution button 213 for receiving a re-execution instruction of a transaction procedure stored as history information, and another transaction execution button 214 for receiving an instruction to execute a transaction different from the transaction stored as history information are arranged. Is done. In addition to these operation screens (a) to (g), a transaction NG display screen for displaying a message indicating that the procedure cannot be continued due to erroneous input of a personal identification number or the like is also displayed.

The CPU 101 executes control processing for the entire automatic teller machine and also executes user operation support processing described later. The memory 103 includes the CPU 10
A program in which various processes to be executed by the computer 1 are defined, and various data necessary for executing the processes are stored in advance. In addition, in the memory 103, a processing execution result of the CPU 101 is temporarily stored. These CPU 101
FIG. 4 shows functional components realized by a program stored in the memory 103 and the like.

The bill receiving / dispensing control unit 467 controls the operation of the bill receiving / dispensing device 111. This banknote deposit / withdrawal control unit 4
In accordance with the control of 67, the bill input / output device 111 executes the above-described bill receiving process and bill passing process (counting of bills, discharging of bills, taking in of bills, and the like). Then, the deposit / withdrawal management unit 419 manages the stock amount of the bills in the automatic teller machine 100, determines whether or not the amount of bills requested by the user can be paid, and the like, and according to the determination result. Then, a bill discharge command or the like is given to the bill deposit / withdrawal control unit 467.

The communication control unit 473 includes the communication control device 115
Is performed. According to the control of the communication control unit 473, the communication control device 115 executes data transfer via a communication line.

The print control unit 471 includes the receipt printing device 1
13 and the operation control of the passbook printing device 114. According to the control of the print control unit 471, the receipt printing device 113 prints the contents of the immediately preceding transaction on the statement slip, and the passbook printing device 114 records the unrecorded transaction contents in the passbook.

The card control unit 465 includes the card reader 10
9 is executed. Thereby, the card reader 1
09 executes processing for accepting / discharging the ID card, processing for reading data from the ID card, processing for writing data to the ID card, and the like.

The display control unit 461 executes an image display process on the touch panel display device 105, and the touch panel input control unit 463 performs processing based on the output of the touch sensor.
The coordinate information of the user-designated point on the screen is calculated. Then, the input management unit 431 includes the touch panel input control unit 4
The input information of the user is calculated from the output information of 63, the display control unit 461 is controlled in accordance with the calculation result, and the operation screen is switched and displayed on the touch panel display device 105. , Etc., is passed to the overall control unit 401 described later. As specific functional components for this purpose, a plurality of processing units, specifically, a main menu display instruction unit 433 for giving an instruction to display the initial screen (a), a display instruction for the first guidance screen (b), and the like are provided. Card input / display instruction section 435 to perform, password input instruction section 43 for giving a display instruction of the password input screen (c), and the like.
7. A history check instruction section 439 for displaying a history check screen (g), an amount input instruction section 441 for displaying a money input screen (d), a display instruction for the second guidance screen (e), and the like. A card ejection instructing unit 443, a dispensing display instructing unit 445 for instructing a display of the third guidance screen (f), and the like.
It has a transaction NG display instructing section 447 for instructing display of a transaction NG display screen.

The risk determination process 417 determines whether or not to stop the execution of the transaction and determines whether or not the authentication process of the user is necessary, based on the transaction contents and the history information. Execute the processing according to.

The transaction processing unit 403 includes an input management unit 43
The communication control unit 473, the risk determination processing unit 417, and the deposit / withdrawal processing unit 419 are appropriately controlled according to the output information of
The transaction processing according to the procedure of the user on the operation screen is executed. As specific functional components for performing the transaction processing, a plurality of processing units, specifically, a deposit processing unit 405 that executes a deposit deposit process, a withdrawal processing unit 407 that executes a deposit payout process, A balance inquiry processing unit 409 for executing an inquiry process of a deposit balance, a transfer processing unit 411 for executing a transfer process to a designated account, a passbook entry processing unit 413 for executing a process for recording an unregistered transaction content; An electronic money loading unit 4 for executing a transfer process (electronic money loading process) for storing a designated amount of the account balance in the IC card as electronic money.
15.

The initial processing unit 475 executes an initial setting process of the automatic teller terminal 100 when the power is turned on.
Thereby, the built-in devices 101 to 115 of the automatic teller machine 100 are activated, and the execution of the overall control process by the overall control unit 401 described below is started. At startup, the overall control unit 401 controls the main menu display instruction unit 433 of the input management unit 431 to display the above-described initial screen (a) on the touch panel display device 105, and thereafter, the input management unit 431 Based on the input information passed from, each processing unit of the transaction processing 403 is controlled.

Next, I used in this bank system
The D card will be described using the two types of cards (magnetic card and IC card) as examples.

A magnetic stripe 503 as shown in FIG. 5A is formed on the surface of a plastic magnetic card used as an ID card for an automatic teller machine terminal of this bank system.

The magnetic stripe 503 has the following 3
There are two trucks. The first track is a read-only area in which name information 505 of the card owner is recorded as shown in FIG.
The second track is a read-only area, where:
As shown in FIG. 5B, identification information 507 of the financial institution, account identification information 509 of the cardholder, and expiration date information 5 indicating the expiration date of the transaction history data recorded on the third track.
11 is recorded. The third track is a readable / writable area, in which plural types (here, two types) of transaction history data 513a, 51, as shown in FIG.
3b, transaction history total information 515, magnetic stripe 503
A checksum 516 created from the information of the entire data recording area is stored.

Then, each transaction history data 513a, 51
As shown in FIG. 7A, transaction date and time 751, transaction location information 753 indicating the location of the automatic teller machine where the transaction was performed, transaction type name (in the present embodiment, , Withdrawal, transfer, or electronic money load), and transaction content information 757 indicating the details of the transaction (withdrawal, transfer, exchange with electronic money, etc.).

Here, the information included in the transaction content information 757 differs depending on the type of transaction. For example, if the transaction is a withdrawal, the transaction content information 757 includes transaction amount information 771 as shown in FIG. 7C, and if the transaction is a transfer, the transaction content information 757 includes As shown in FIG. 7D, transaction amount information 781, identification information 783 such as a transfer account number, and transfer destination information 785 such as a transfer destination name.
It is included. If the transaction is a load of electronic money, the transaction content information 757 includes transaction amount information 791 as shown in FIG.

Further, the transaction history total information 315 includes FIG.
As shown in (b), the number of transactions without authentication 361 indicating the number of transactions re-executed based on the transaction history data without performing the authentication process of the cardholder, and the total amount of transactions without authentication. Authentication-free transaction total information 363 is included.

On the other hand, a plastic IC card used as an ID card for an automatic teller machine terminal of this bank system has a built-in IC chip. This I
As shown in FIG. 6B, the C chip has a card interface 603 for controlling data input / output with the outside, a memory 620, and a CPU 610 for controlling these. The memory 630 stores the personal identification number 51 of the card.
7, information similar to that of the magnetic strap 503 of the magnetic card (excluding the checksum), specifically, the name information 505 of the card holder, the identification information 50 of the financial institution.
7. Card holder account identification information 509, transaction history data expiration date information 511, two types of transaction history data 51
3. Transaction history total information 515 is stored.

The contact of the card interface 403 for communication with the card reader 109 of the automatic teller machine 100 is provided on the surface of the card as shown in FIG.

Next, the flow of the user operation support processing executed by the automatic teller terminal 100 of the bank system will be described with reference to FIG. The details of the processing in each step will be described later.

When the automatic teller terminal 100 is powered on, the initial processing unit 475 first executes an initialization process, and then the overall control unit 401 executes the other processing units shown in FIG. By controlling, the following user support processing is started.

First, the main menu display processing section 433 controls the display control section 461 in accordance with an instruction from the overall control section 401 to display the initial screen shown in FIG. (S801).

When any one of the selection buttons on the initial screen is touched, the main menu display processing 4
33 executes a transaction type acquisition process (see FIG. 9) and returns the name of the transaction (deposit, withdrawal, balance inquiry, transfer, passbook entry, electronic money load) corresponding to the selection button as a return value, and Pass it to 401. On the other hand, without touching any of the selection buttons, the card reader 1
When an ID card is inserted in the main unit 09, the main menu display processing 433 passes “insert card” as a return value to the overall control unit 401.

Upon receiving the return value from the main menu display processing 433, the overall control unit 401 determines whether or not the return value is "insert card" (S703).

Only when the return value is "card insertion", the overall control unit 401 executes the card data acquisition processing.
By executing (see FIG. 10), transaction history data 513 is obtained from the ID card (S803), and a default transaction determination process based on the transaction history data (see FIG. 11) is executed (S804). Thereby, the type of the re-executable transaction is determined, or it is determined that there is no re-executable transaction.

At this time, when it is determined that there is no re-executable transaction type, the main menu display process 433 executes a transaction type acquisition process. As a result, the name of the transaction (one of deposit, withdrawal, balance inquiry, transfer, passbook entry, and electronic money load) corresponding to the selection button touch-selected on the initial screen is returned as a return value to the overall control unit 40.
Passed to 1.

On the other hand, when the type of the re-executable transaction has been determined, the history confirmation display
01 by controlling the display control unit 461 according to the instruction of FIG.
(g) is displayed on the patch panel / display device 105, and a display field 212 on the history confirmation screen displays predetermined information (transaction date and time, transaction Type, transaction details). On the history confirmation screen, when another transaction execution button 214 is touch-selected, main menu display processing 433 executes transaction type acquisition processing, and when the same transaction execution button 213 is touch-selected, the following processing is performed. Move to the processing of.

In the above, if the same transaction execution button 213 on the history confirmation screen is touch-selected, or if the return value from the main menu display processing 433 is not "insert card", the default transaction is executed. Judgment processing result (when the same transaction execution button 213 on the history confirmation screen is touch selected) or main menu display processing 4
33 (when the return value from the main menu display process 433 is not “insert card”), “deposit”, “withdrawal”, “balance inquiry”, “transfer”, “passbook entry”, “ Until it can be determined which of the “electronic money loads”, the determination process for each transaction type name is performed sequentially (S805, S807, S809,
S811, S813, S815). The transaction processing unit 403 executes a transaction process according to the determination result. Specifically, if the determination result is “deposit”, the deposit processing unit 4
05 executes a depositing process (S806), and if the determination result is "withdrawal", the withdrawal processing unit 407 executes the withdrawal process (S808); if the determination result is "balance inquiry", the balance inquiry processing unit 409 executes a balance inquiry process (S80).
9) If the determination result is “transfer”, the transfer processing unit 41
1 executes a transfer process (S812), and if the discrimination result is "passbook entry", the passbook entry processing unit 413 executes a passbook entry process (S814); if the discrimination result is "electronic money load", The electronic money load processing unit 415 executes the electronic money load processing (S816).

When the specific transaction processing is completed, the transaction processing section 403 returns the processing to the overall control section 401,
The overall control unit 401 that has returned the processing repeatedly executes the processing of S801 and subsequent steps.

Next, the transaction type acquisition processing executed by the main menu display processing section 433 will be described with reference to FIG.

As described above, the main menu display process 433 controls the display control unit 461 upon receiving an instruction from the overall control unit 401, and
An initial screen is displayed above (S901). However, when it is determined in the default transaction determination process that there is no re-executable transaction, the initial screen is not displayed because the initial screen has already been displayed on the touch panel display device 105.

Then, the card control unit 465 is set to a state of waiting for ID card reception, and the touch panel input control unit 463 is set to a state of waiting for touch panel input (S90).
2). Then, the presence / absence of a card inserted into the card reader 109 and the presence / absence of a touch operation on the initial screen are monitored. When an event indicating that a card is inserted into the card reader 109 occurs (S903), the return value of “card” is returned accordingly. Is passed to the overall control unit 401, and the
Is returned (S904). On the other hand, if only an event with a touch operation on the initial screen occurs (S90
5), the name of the transaction corresponding to the touched selection button (one of deposit, withdrawal, balance inquiry, transfer, passbook entry, electronic money load) is passed to the overall control unit 401 as a return value, and the overall control unit Return processing 401
(S906).

Next, referring to FIG.
Will be described.

If the return value from the main menu display process 433 is “insert card”, the overall control unit 401 instructs the card control unit 465 to acquire the card type, and based on the response to this instruction, the ID card It is determined whether the card is an IC card or a magnetic card (S1002).

If it is determined that the ID card is an IC card, the card control unit 465 is controlled to use the card reader 109 to record data (transaction history data 513a, 513b, transaction history totaling) from the internal memory 620 of the IC card. Information 515, expiration date information 511, etc.), and temporarily store them in the memory 103 as transaction re-execution history information (S1003).

On the other hand, if it is determined that the ID card is a magnetic card, the card controller 465 is controlled, and the card reader 109 reads the magnetic recording data (transaction history data 513a, 513b,
The transaction history total information 515, the expiration date information 511, etc.) are acquired, and they are temporarily stored in the memory 103 as transaction re-execution history information (S1004). Then, the checksum included in the magnetic recording data acquired at this time is checked (S1005), and if an error is detected, the transaction history data 513 is read from the magnetic stripe 503 of the magnetic card.
a, 513b, and the transaction history data 513a, 513b from the memory 103 as well.

Next, referring to FIG.
Will be described.

The overall control unit 401 reads out transaction history data 513a, 513b and the like from the memory 103.

At this time, if the transaction history data 513a, 513b cannot be taken out from the memory 103,
It is determined that there is no new transaction history (S1101), and it is determined that there is no re-executable transaction (S1105). Such a case occurs, for example, when no transaction history data is recorded on the ID card.

On the other hand, the transaction history data 5
If 13a and 513b can be taken out, it is determined that there is a new transaction history (S1101). And these 2
The transaction date and time of the two transaction history data 513a and 513b are compared, and the transaction history data with the latest transaction date and time is selected from them (S1102). The transaction date and time of the latest transaction history data selected here is within the period indicated by the expiration date information
(Eg, up to 90 days before the current date) (S1103). Specifically, the current date is acquired from the real-time clock, and it is determined whether or not the difference between the current date and the transaction date and time of the latest transaction history data is within the period represented by the expiration date information. If it is determined that the transaction date and time of the latest transaction history data is within that period,
The transaction type of the transaction history data is determined as the type of re-executable transaction (S1104), and if it is determined that the transaction date and time of the latest transaction history data is not within the period, it is determined that there is no re-executable transaction. (S1105).

Next, among the specific transaction processes executed by the transaction processing unit 403 under the control of the overall control unit 401, a transaction process that can be re-executed using transaction history data
(Withdrawal processing, electronic money loading processing, and transfer processing) will be described.

The withdrawal processing, the electronic money loading processing, and the transfer processing are as follows: (1) When the corresponding selection button 200a, 200c, 200f is touch-selected on the initial screen,
(2) An ID card is inserted into the card reader 109 without touching any of the selection buttons on the initial screen, and the same transaction re-execution button 213 is touch-selected on the history confirmation screen and re-executed. Is executed in the following two cases. Below, in each case (1) (2)
However, the flow of these three types of transaction processing is common, so that the withdrawal processing will be described here as an example.

(1) Withdraw button 200a on initial screen
Is selected (see FIG. 12). The withdrawal processing unit 407 first sends the card reader 109
It is checked whether the D card has been inserted (S1201).
In the following processing, if a situation occurs where the procedure cannot be continued, the transaction NG display processing unit 447 receiving the instruction from the withdrawal processing unit 407 controls the display control unit 461 to change the patch panel. Transaction N on dual-purpose display device 105
G screen (displays a message that the procedure cannot be continued)
Is displayed, the process is returned to the overall control unit 401.

When an ID card has not been inserted into the card reader 109, the card insertion display instruction unit 435, which has received an instruction from the withdrawal processing unit 407, controls the display control unit 461 to switch to the state shown in FIG. The displayed first guidance screen is displayed on the patch panel / display device 105. Then, when the ID card is inserted into the card reader 109, the extraction processing unit 407 requests the overall control unit 401 to execute a card data acquisition process (see FIG. 10), and records data (name information 505) in the ID card. , Financial institution identification information 507, account identification information 509, two types of transaction history data 513a,
513b) (S1203).

When the recording data is obtained from the ID card by the above processing, or when the card reader 10
9 when the ID card is inserted, the transaction type information 755 of any of the transaction history data 513a, 513b
Is "withdrawal", and the transaction type information 75
If 5 is “withdrawal”, it is determined whether or not the transaction date and time indicated by the corresponding transaction date and time information 751 is within the predetermined period indicated by the expiration date information 511 (S1204).

Then, any transaction history data 513
If the transaction type information 755 of a, 513b is also not “withdrawal” or the transaction date and time is not within the predetermined period, the password input instruction unit 437 receiving the instruction of the withdrawal processing unit 407 displays By controlling the control unit 461, FIG.
The password input screen shown in (c) is displayed on the patch panel / display device 105 (S1205).

When the input of a password having a predetermined number of digits on the password input screen is accepted, the extraction processing unit 407
The authentication process based on the personal identification number is executed (S1206). For example, when the ID card is a magnetic card, the communication control unit 473 executes a communication process with the host computer 130 according to an instruction of the withdrawal processing unit 407, and based on the communication result, the withdrawal processing unit 407 Then, an authentication process based on the password is executed to confirm the validity of the user.

If the authenticity of the user is not confirmed by this authentication processing, the password input instructing section 437 receiving the instruction of the withdrawal processing section 407 controls the display control section 461 and issues a message prompting the re-input of the password. Display it on the password input screen. The withdrawal processing unit 407 performs an authentication process based on the re-entered password, and confirms the validity of the user again. However, the input of the personal identification number is accepted up to three times, and if the validity of the user cannot be confirmed even by the re-entered personal identification number, the card control unit 465 sends the card While discharging the ID card from the reader 109, the transaction NG display instruction unit 447 controls the display control unit 461 to display the transaction NG screen on the patch panel / display device 105.
(A message indicating that the procedure cannot be continued due to an incorrect input of the personal identification number) is displayed (S1207). Then, thereafter, the withdrawal processing unit 407 executes the overall control unit 401
Return processing to

On the other hand, if the legitimacy of the user is confirmed, the amount input instructing unit 441 receiving the instruction from the withdrawal processing unit 407
Controls the display control unit 461 to display the amount input screen shown in FIG. 2D on the patch panel / display device 105 (S1208). When the withdrawal amount is input on this amount input screen, the recording button 210 is touched as necessary, and then the confirmation button 208 is touched,
The communication control unit 473 receiving the instruction of the withdrawal processing unit 407
Is the user-specified withdrawal amount, financial institution identification information 50
7. The result of the authentication process using the account identification information 509 and the password is transmitted to the host computer 130 (S120).
9). As a result, the host computer 130 executes a process of updating the user's account information.

When the update process on the host computer 130 ends and the communication control unit 473 receives the update result, the print control unit 471 receiving the instruction from the pull-out processing unit 407 details the update result on the host computer 130 side. It is printed on a vote or passbook (S1210).

If the record button 210 is touched on the amount input screen, or if the transaction currently being executed is a re-execution of a past transaction, the withdrawal processing unit 407 executes Execute the save process, and
Transaction history data and transaction history total information 5 in the D card
15 is updated (S1211).

Thereafter, the card control unit 465 causes the card reader 109 to eject the ID card according to the instruction of the withdrawal processing unit 407, while the print control unit 471
A receipt or passbook is discharged from the receipt printing device 113 or the passbook printing device 114. Further, the card ejection instruction unit 443 that has received the instruction of the withdrawal processing unit 407,
The display control unit 461 is controlled to display the second guidance screen shown in FIG. 2E on the patch panel / display device 105 (S1212).

Then, the bill receiving / dispensing controller 467 receiving the instruction from the withdrawing processor 407 causes the bill receiving / dispensing device 111 to discharge the designated amount of bills (S1213). Further, the withdrawal display instruction unit 445 receiving the instruction of the withdrawal processing unit 407 controls the display control unit 461 to display the third guidance screen shown in FIG. It is displayed (S1214). After that, the withdrawal processing unit 407 waits for the ID card, statement slip or passbook, and bills to be taken out, and returns them to the overall control unit 401 when they are taken out.

In S1204, the transaction type information 755 is “withdrawal” and the transaction date / time information 7 is included in the two types of transaction history data 513a and 513b.
If there is transaction history data in which the transaction date and time represented by 51 is within a predetermined period, the withdrawal processing unit 407
And the transaction history aggregation information associated with it,
The following processing is executed as transaction re-execution history information. However, two transaction history data 513a, 51
3b, the withdrawal processing unit 4
07, the transaction history data of the latest transaction date and time is selected from the two transaction history data 513a and 513b, and the transaction history total information associated therewith is selected as transaction re-execution history information. Then, the following processing is executed.

First, the risk judgment unit 417 receiving the instruction from the withdrawal processing unit 407 executes a risk judgment process described later based on the transaction re-execution history information (S1215). Accordingly, it is determined whether the past transaction procedure may be re-executed. Specifically, it is determined to which of a high-risk “history transaction impossible”, an extremely low-risk “history transaction possible”, and a low-risk “history transaction authentication possible” level. The following processes are separated according to the result of the risk determination process (S1215).

If the result of the risk determination process is “history transaction impossible”, that is, if the past transaction procedure cannot be re-executed, the withdrawal processing unit 407
The above-described processes S1205 to S1214 are executed.

If the result of the risk judgment processing is “history transaction possible”
In other words, if the past transaction procedure is re-executable, the history confirmation display instruction unit 439 receiving the instruction of the withdrawal processing unit 407 controls the display control unit 461 to 2G, the history confirmation screen shown in FIG. 2G is displayed on the patch panel
The predetermined information (transaction date and time information, transaction type information, transaction content information (here, withdrawal amount)) included in the transaction re-execution history information is displayed in the display field 212 on the history confirmation screen (S1218). .

On the history confirmation screen, another transaction execution button 2
14 is touched, the drawer processing unit 407
Executes the above-described processes S1205 to S1214, and thereafter returns the process to the overall control unit 401.

On the other hand, when the same transaction execution button 213 is touched on the history confirmation screen, the withdrawal processing unit 407 returns to the overall control unit 401 after executing the above-described processes S1209 to S1214. However, in this case, unlike the above-described case, the host computer 130 does not store the transaction amount information contained in the transaction re-execution history information (the withdrawal amount in the previous withdrawal process) instead of the user-specified withdrawal amount. ) 757 is transmitted together with the financial institution identification information and the like (S1209).

If the result of the risk judgment processing is “OK after history transaction authentication, that is, if the past transaction procedure has been First, authentication processing using a password is performed up to three times in the same manner as described above, and the validity of the user is confirmed (S1220, S1221).

If the validity of the user cannot be confirmed even by the re-entered password, the card control unit 465 causes the card reader 109 to eject the ID card from the card reader 109 in accordance with an instruction from the withdrawal processing unit 407. The transaction NG display instruction unit 447 controls the display control unit 461 to display a transaction NG screen on the patch panel / display device 105.
(A message indicating that the procedure cannot be continued due to an incorrect input of the personal identification number) is displayed (S1202). Thereafter, the process is returned to the overall control unit 401.

On the other hand, when the legitimacy of the user is confirmed, the withdrawal processing unit 407 controls the card control unit 465 to store the transaction history total information 7 recorded on the ID card.
After initializing the 15 unauthenticated transaction continuation count information 761 and the authenticated non-transaction total amount 763 to 0 (S1217), the same processing (S1218-) as when the risk determination processing result is "historical transaction permitted". Execute. After that, the entire processing unit 40
Return processing to 1.

(2) The ID card is inserted into the card reader 109 without touching any of the selection buttons on the initial screen, and the same transaction re-execution button 2 on the history confirmation screen is displayed.
13. When the re-execution of the past withdrawal process is instructed at 13 When the ID card is inserted into the card reader 109 without touching any of the selection buttons on the initial screen, the card data acquisition process is performed as described above. (See FIG. 10) and the default transaction determination process (see FIG. 11) are executed,
The history confirmation screen shown in FIG. 2G is displayed on the patch panel / display device 105.

Display field 21 on this history confirmation screen
When the transaction type “withdrawal” is displayed in 2 and the same transaction re-execution button 213 is touch-selected on this history confirmation screen, the withdrawal processing unit 407 causes the withdrawal button 200a to be touch-selected on the initial screen. In the case (1), the same processing as that after the risk determination processing (S1215 in FIG. 12) is executed, and then the processing is returned to the overall control unit 401. However, in this case, since the touch selection of the same transaction re-execute button 213 has already been received on the history screen, the display processing of the history confirmation screen (S1218) and the reception processing of the touch operation on the history confirmation screen (S1219) )
Is not executed.

As described above, transaction processing (withdrawal processing, electronic money loading processing, and transfer processing) that can be re-executed using transaction history data has been described by taking the withdrawal processing as an example. Loading process,
Regarding the transfer processing, the flow of the processing does not change, and only appropriate changes are made to the processing contents from S1209 to S1214.

Next, referring to FIG.
7 will be described.

The risk judgment of the present embodiment is based on the aforementioned 3
It is performed at two levels: (1) history transaction not possible, (2) history transaction possible, and (3) history transaction authentication possible. Where (1)
Historical transaction impossibility is the level at which it is determined that past transactions cannot be re-executed because of high risk. (2) Historical transaction impossibility is extremely low risk, and re-execution of procedures in past transactions At the time of execution, it is a level at which it is determined that authentication processing using a password is unnecessary. If possible, it is the level at which it is determined that the procedure in the past transaction is executable.

Upon receiving an instruction from the transaction processing unit 403, the risk determination processing unit 417 determines that the location represented by the transaction location information included in the transaction re-execution history information is the store where the automatic teller terminal 100 is installed. Determine if there is
(S1301). The information indicating the store where the automatic teller machine 100 is installed is stored in the memory 103 in advance.

If the location indicated by the transaction location information included in the transaction re-execution history information is different from the location where the automated teller terminal 100 is installed, the risk determination processing unit 417 sets the high risk , That is, "historical transaction impossible"
The transaction processing unit 40
3 is returned (S1309).

On the other hand, the location represented by the transaction location information contained in the transaction re-execution history information is
If the number matches the store number of 00, the risk determination processing unit 417 generates a random number r (0 <r <1) and determines whether or not the random number is 0.1 or more (S1302). ).

If the random number r is smaller than the predetermined reference value (0.1 in the present embodiment), the risk judgment processing unit 417 determines that the risk is low, that is, “post-authentication history transaction possible”.
The transaction processing unit 40
3 (S1308). The reason for randomly generating a case requiring a password by adding an evaluation using a random number is as follows.
03 to S1305) to further reduce the risk of unauthorized use of a stolen card by a person who knows the conditions to be verified.

On the other hand, if the random number r is equal to or greater than the reference value, the risk determination processing unit 417 determines that the authenticated non-transaction total amount 763 of the transaction history total information 715 included in the transaction re-execution history information is a predetermined value. Standard total amount (100,000 yen in this embodiment)
It is further determined whether or not the first condition of less than is satisfied (S1303).

If the first condition is not satisfied, the risk determination processing unit 417 determines that the risk is low, that is, “historical transaction is possible after authentication” (S1308), and the result of the determination is used as a return value in the transaction processing unit 403. To return.

On the other hand, if the first condition is satisfied, the risk determination processing unit 417 determines that the transaction amount represented by the transaction content 757 of the transaction history data 713 included in the transaction re-execution history information is
It is further determined whether or not a second condition of less than a predetermined reference transaction amount (in this embodiment, 30,000 yen) is satisfied (S1).
304).

If the second condition is not satisfied, the risk determination processing unit 417 determines that the risk is low, that is, “historical transaction after authentication is possible” (S1308), and the result of the determination is used as a return value in the transaction processing unit 403. To return.

On the other hand, if the second condition is satisfied, the risk determination processing unit 417 determines that the number of authentication-free transaction continuations 761 of the transaction history total information 715 included in the transaction re-execution history information is
It is further determined whether or not a third condition that the number of transactions is less than a predetermined reference number of transactions (four in this embodiment) is satisfied (S1).
305).

If the third condition is not satisfied, the risk determination processing unit 417 determines that the risk is low, that is, “post-authentication history transaction is possible” (S1308), and uses the determination result as a return value as the return value. To return.

On the other hand, if the third condition is satisfied, the risk determination processing unit 417 further determines whether or not the fourth condition that the ID card is an IC card is satisfied (S1306).

If the fourth condition is not satisfied, the risk determination processing unit 417 determines that the risk is low, that is, “post-authentication history transaction is possible” (S1308), and uses the determination result as a return value as a return value. To return.

On the other hand, if the fourth condition is satisfied, the risk judgment processing section 417 judges that the risk judgment processing section 417 is extremely low risk, that is, “history transaction is possible” (S1307),
The determination result is returned to the transaction processing unit 403 as a return value.

As a result of the above risk determination processing, "history transaction is not possible" only when the past transaction to be re-executed is not performed at the same store, and in other cases, in principle, the first condition to the fourth condition If all the conditions up to the conditions are satisfied, "historical transaction is possible", and if any of the first to fourth conditions is not satisfied, "historical transaction is possible after authentication". Even if all of the conditions up to the four conditions can be satisfied, exceptionally, "post-authentication history transaction possible" may be used to further reduce the risk.

In this embodiment, it is assumed that past transactions to be re-executed are performed at the same store.
Although it is a precondition that "historical transaction is possible after authentication" or "historical transaction is possible", other prerequisites, for example, distance information between a plurality of stores are prepared in place of this precondition, A condition may be used in which the distance to the store where the past transaction to be re-executed was made is within a predetermined range.

Since the conditions from the first condition to the fourth condition are merely examples, it is possible to make appropriate changes to these conditions, for example, by adding another condition.

Next, with reference to FIG. 14, the above-described history saving processing executed by the transaction processing unit 403 in S1211 will be described.

The transaction processing unit 403 determines whether the current transaction is a re-execution of a past transaction (S1400).

If the current transaction is not a re-execution of a past transaction, the transaction processing unit 403 further determines whether or not the storage button 210 has been touched on the amount input screen (S14).
01) If there is no touch on the storage button 210, nothing is performed and the process proceeds to S1212.

When the current transaction is a re-execution of a past transaction, or when the storage button 210 is touched on the amount input screen, the type of the ID card is either a magnetic card or an IC card. It is determined whether there is (S1
402).

If the ID card is an IC card,
Of the two types of transaction history data 513a and 513b stored in the built-in memory 620, the transaction history data including the transaction information representing the same transaction type as the current transaction is replaced with the transaction date / time information representing the current date / time. , Location information indicating the store where the current transaction is being performed, transaction content indicating the content of the current transaction, and transaction information indicating the type of the current transaction (S
1403). However, two types of transaction history data 513a,
Both of the transaction history data 513b and 513b include transaction information representing the same transaction type as the current transaction.
a and 513b also do not include the transaction information representing the same transaction type as the current transaction, and the two types of transaction history data 51
Of the 3a and 513b,
It is updated with transaction date and time information indicating the current date and time, location information indicating the store where the current transaction is being performed, transaction content indicating the content of the current transaction, and transaction information indicating the type of the current transaction. If no transaction history data is recorded, new transaction history data (transaction date and time information indicating the current date and time, location information indicating the store where the current transaction is being performed, and transaction Content, transaction information indicating the type of the current transaction).

Further, the risk determination unit 417 determines that “history transaction is possible”.
In other words, if the transaction in the past transaction is re-executed without performing the authentication process using the password, the authentication of the transaction history total information 715 stored in the internal memory 620 of the IC card is not performed. Number of transactions continued 761
And the authenticated non-transaction total amount 763 is updated. And S1
The process proceeds to 212.

On the other hand, if the ID card is a magnetic card,
After the checksum calculation process (S1405), of the two types of transaction history data 513a and 513b recorded in the magnetic stripe 503, the transaction history data including transaction information representing the same transaction type as the current transaction is used. The content is updated with transaction date and time information indicating the current date and time, location information indicating the store where the current transaction is being performed, transaction content indicating the content of the current transaction, and transaction information indicating the type of the current transaction (S140).
6). However, two types of transaction history data 513a, 513
b includes transaction information representing the same transaction type as the current transaction, or any of the transaction history data 513a, 513a
13b does not include transaction information representing the same transaction type as the current transaction, the two types of transaction history data 513a,
Out of 513b, the contents of the earlier transaction date and time represent transaction date and time information indicating the current date and time, location information indicating the store where the current transaction is performed, transaction content indicating the content of the current transaction, and type of the current transaction. Update with transaction information. If no transaction history data is recorded, new transaction history data (transaction date and time information indicating the current date and time, location information indicating the store where the current transaction is being performed, and transaction Content, transaction information indicating the type of the current transaction).

Further, the risk judgment unit 417 determines that “history transaction is possible”.
In other words, if the transaction in the past transaction is re-executed without performing the authentication process using the password, the transaction history total information 715 recorded on the magnetic stripe 503 of the magnetic card is not authenticated. Number of transactions continued 7
61 and the authenticated no transaction total 763 are updated. And
The process proceeds to S1212.

As described above, according to the system according to the present embodiment, since the procedure of the past transaction can be automatically re-executed, various services can be provided as in the related art while individual services are provided. For the user, it is possible to save the trouble of repeating complicated procedures in services frequently used by the user. This is useful for reducing the operation burden on a user who is not good at operating the terminal, a user with a handicap, and the like. The above-described transaction history data and transaction history aggregation information are stored in the host computer or the automatic teller machine side, and biometric identification information (fingerprint etc.) is used as information for confirming the validity of the user. If it is possible to detect with a cash-on-delivery device, there is no need to use an ID card and there is no need to input a password,
The operation burden on the user can be reduced.

On the other hand, when re-executing a procedure in a past transaction, a risk judgment is performed and an authentication process is appropriately executed according to the judgment result, so that the security of the transaction is sufficiently ensured. .

In the above, the case where the present invention is applied to a bank system has been described as an example. However, the present invention is not limited to a bank system, but may be another system that provides a plurality of services to a user, for example, a settlement system. It can also be applied to systems. Hereinafter, the payment system will be described.

FIG. 15 shows a schematic configuration of a settlement system according to the present embodiment.

The present system includes one or more (here, a plurality of) payment terminals 1500 for providing a service to a user.
And a host computer 130 that manages various information such as customer deposit information are connected by a communication line such as a dedicated line.

The host computer 130 has the same configuration as the above-described host computer. Here, one host computer 130 is used, but a plurality of host computers may be used as in the above-described case.

On the other hand, each settlement terminal 1500 has a CPU 15
01, a memory 1503, a display device 1505 on which an operation screen described later is displayed, a card reader 1509 into which an IC card described later is inserted, a key input device 1507, a communication control device 1510 for controlling data transfer with the host computer 130, Bus 1511 connecting these to each other
It has. Among these, those directly related to the user's operation (display device 1505, card reader 1509,
The key input device 1507) is provided on the front part of the payment terminal 1500 as shown in FIG. Note that the key input device 1507 of the present embodiment is provided with input keys 0 to 9, an execution instruction key, and a cancel key.

The card reader 1509 is, like the card reader 109 of the aforementioned automatic teller machine 100, an IC reader.
It has a card loading / unloading function and a data reading / writing function for an IC card.

The input device 1507 receives input information from the user, and the display device 1505 displays a result of execution of processing by the CPU 1501 and the like.

The CPU 1501 executes a control process for the entire payment terminal and also executes a user operation support process described later. The memory 1503 stores in advance a program in which various processes to be executed by the CPU 1501 are defined, and various data necessary for executing those processes. Further, in the memory 1503, a processing execution result of the CPU 1501 is temporarily stored. These CPU 150
FIG. 17 shows the functional components realized by the storage program 1 and the storage program of the memory 1503.

The initial processing unit 1603 operates when the power is turned on or the like.
The payment terminal device 1500 performs an initial setting process. Thereby, each built-in device 1501 of payment terminal device 1500
111 is activated and the payment control unit 1600 described below
Execution of the process is started.

The input control unit 1604 executes a conversion process or the like for converting the input information received by the input device 1507 into a character code string, and the payment control unit 1600 transmits the input information passed from the input control unit 1604. The settlement process is executed based on. Further, the display control unit 1609 executes a display process on the display device 1505, and
The result of execution of the payment process by 00 is displayed on the display device 1505.

The card control unit 1601 is a card reader 1
509 is executed. As a result, the card reader 1509 executes processing for accepting / discharging the ID card, processing for reading data from the ID card, processing for writing data to the ID card, and the like.

The host communication control section 1605 controls the operation of the communication control device 1510. Under the control of the communication control unit 1605, the communication control unit 1510
Executes data transfer via a communication line.

FIG. 18 shows a schematic configuration of an IC card as an example of the above-mentioned ID card used in this settlement system.

This IC card has a built-in IC chip. This IC chip includes a card interface 1800 for controlling data input / output with the outside, a memory 18
02, a CPU 1801 for controlling them is mounted.

The memory 1802 stores an application list 1803 and a predetermined payment method (credit,
An application program group 1804 in which payment processing by bank debit, electronic money, etc.) is defined, a program-related data group 1805 related to application program execution, and rewritable payment history information 1806 are stored.

The application list 1803 includes, for each payment method, correspondence information in which an application name 1803a is associated with a pointer 1803b indicating a storage address of an application program and program-related data. Note that the data structure of the application list 1803 shown in FIG. 18 is for the case where the IC card supports the multiple payment method.
When the C card supports only one payment method, the application list includes only one corresponding information.

[0130] The payment history information 1806 stores the application name used in the previous payment processing. FIG. 19 shows payment history information when the application “C electronic money” was used in the previous payment processing.

Here, as an example of the ID card, IC
Although the card is mentioned, another type of card storing the application list and the payment history information, for example, a magnetic card may be used as the ID card.

FIG. 20 shows the settlement terminal 15 of the settlement system.
9 shows a flowchart of a payment process executed by 00.

When the payment terminal 1500 is powered on,
First, the initial processing unit 1603 executes the initialization processing, and thereafter, the payment control unit 1600 controls the other processing units shown in FIG. 17 to start the following payment processing.

When a transaction amount is input from the key input device
(S2000), the card control unit 1601 waits for the IC card to be inserted into the card reader 1509 (S20).
01), when the IC card is inserted, its internal memory 1
The application list 1803 is extracted from the application list 802 (S2002).

The payment control unit 1600 extracts the application name 180 of the application executable on its own terminal from the application list 1803 extracted at this time.
Remove 3a. Then, a payment means list including one or a plurality of application names extracted at this time is created (S2003).

Further, the card control unit 1601 operates the internal memory 1 of the IC card in accordance with an instruction from the payment control unit 1600.
From 802, payment history information 1806 is read. At this time, if the payment history information 1806 can be read (S2004), the payment control unit 1600
Determines whether the application having the application name included in the payment history information 1806 can be executed on the terminal itself (S2005), and only when the application can be executed, the application name is set in the settlement means list. (S2006).

After the above processing steps, that is, when the payment history information 1806 cannot be read
(S2004), if it is determined that the application having the application name included in the payment history information 1806 is not possible on the own terminal (S2006), the payment history information 180
When the application name included in No. 6 is inserted at the top of the settlement means list, the payment control unit 1600
The display control unit 1602 is controlled to display the payment means list and the application selection method on the display device 1505. Accordingly, for example, when the payment history information 1806 cannot be read, or when the payment history information 18
If it is determined that the application having the application name included in the application 06 is not possible on its own terminal,
As shown in (a), a numbered application name 2100 and an application selection method 2101 are displayed on the display device 1505, and the application name included in the payment history information 1806 is inserted at the top of the settlement means list. In this case, as shown in FIG. 21 (b), first, the application name 2102 included in the payment history information 1806 is displayed with a selection key name, followed by another numbered application name 2103. And an application selection method 2101 are displayed.

When the key input device 1507 receives a key input for selecting one of the application names in the settlement means list 2100 on the display device 1505 (S
2007), the input control unit 1604 passes the selection result to the payment control unit 1600.

Then, payment controller 1600 determines the type of the user's input key based on the selection result passed from input controller 1604 (S2008).

If the input key of the user is the execution key, the payment control unit 1600 selects the application having the application name included in the payment history information 1806 as an execution target (S2009), and the input key of the user is a numeric key. If so, the application having the application name associated with the number in the settlement means list is selected as an execution target (S2010). In response to an instruction from the payment control unit 1600, the card control unit 1601 stores the application program 1804 and the program-related data 1805 associated with the application name selected as the execution target in the internal memory 18 of the IC card.
Read from 02.

Then, payment controller 1600 executes the application program using program-related data 1805 as necessary. That is, communication by the communication method defined in the application program is performed with the host computer 130. As a result, a user authentication process (S2011) and an input transaction amount transmission process (S2012) defined for the payment method corresponding to the selected application are performed.

When the above processing is completed, the payment control unit 16
The card control unit 1601 receiving the instruction of “00” updates the contents of the payment history information 1806 in the built-in memory 1802 of the IC card with the name of the application used for the current payment processing. Then, payment controller 1600 repeatedly executes the processing from S2000 onward in order to receive the next transaction amount payment.

According to such a payment process, the user:
Even if many application names are listed in the list, it is possible to immediately find the application name of the payment method used last time without performing operations such as scrolling the list. Usually, the user frequently uses the service of the same payment method repeatedly, and thus such payment processing can reduce the operation burden of the user.

In the present embodiment, when the application name of the payment method used last time is displayed on the display device, the application name is first displayed with the selection key name, and then the other names are displayed. Are displayed, but the display layout is not necessarily required to be the same. For example, as shown in FIG. 21 (c), only the application name included in the payment history information may be presented with an appropriate mark (here, the character string “previous”). However, in this case, it may be necessary to scroll the list. However, since the payment application name used last time is marked, it is possible to perform one scrolling operation without repeating the scrolling. Then, the user can find out the payment application name used last time.

[0145]

According to the present invention, since the contents of the procedures in the past transactions can be held and can be automatically reproduced from the next time onward, various services can be provided as in the past. In addition, for each user, it is possible to save the trouble of repeatedly performing a complicated procedure in a service frequently used by the user. This is particularly useful for reducing the operation burden on a user who is not good at operating the terminal, a user with a handicap, and the like.

Further, prior to the re-execution of the procedure in the past transaction, risk judgment is performed, and the authentication process is appropriately executed according to the judgment result, so that the security of the transaction is ensured. For this reason, the present invention is particularly suitable for application to financial transactions.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram according to an embodiment of the present invention.

FIG. 2 is a diagram showing an operation screen that is switched and displayed on a display device that also serves as a touch panel of the automatic teller machine according to the embodiment of the present invention.

FIG. 3 is an external view of an automatic teller terminal according to an embodiment of the present invention.

FIG. 4 is a functional configuration diagram of an automatic teller machine according to an embodiment of the present invention.

5A is a front view of a magnetic card used as an ID card, and FIG. 5B is a diagram conceptually showing a data structure of data recorded on a magnetic stripe of the magnetic card. .

FIG. 6A is a front view of an IC card used as an ID card, and FIG. 6B is a diagram conceptually showing a hardware configuration of the IC card and a data structure of recording data.

FIG. 7 is a diagram conceptually showing a data structure of each recording data on an ID card.

FIG. 8 is a flowchart illustrating a flow of a user operation support process executed by the automatic teller terminal of the system according to the embodiment of the present invention.

FIG. 9 is a flowchart illustrating a flow of a transaction type acquisition process executed by a main menu display processing unit.

FIG. 10 is a flowchart showing the flow of a card data acquisition process executed by the overall control unit.

FIG. 11 is a flowchart illustrating the flow of a default transaction determination process executed by the overall control unit.

FIG. 12 is a flowchart illustrating a flow of a withdrawal process performed by the withdrawal processing unit.

FIG. 13 is a flowchart illustrating a flow of a risk determination process performed by a risk determination unit.

FIG. 14 is a flowchart illustrating a flow of a history saving process executed by a transaction processing unit.

FIG. 15 is a system configuration diagram according to an embodiment of the present invention.

FIG. 16 is a front view of a payment terminal according to an embodiment of the present invention.

FIG. 17 is a functional configuration diagram of a payment terminal according to an embodiment of the present invention.

FIG. 18 is a diagram conceptually showing a hardware configuration of an IC card used as an ID card and a data structure of recording data.

FIG. 19 is a diagram for explaining data contents of payment history information.

FIG. 20 is a flowchart illustrating a flow of a payment process executed by the payment terminal of the system according to the embodiment of the present invention.

FIG. 21 is a diagram showing an example of a display screen on a display device of the payment terminal according to the embodiment of the present invention.

[Explanation of symbols]

 100: Automatic teller terminal 130: Host computer 401: Overall control unit 403: Transaction processing unit 417: Risk judgment processing 419: Deposit / withdrawal management unit 431: Input management unit 461 ... Display control unit 463: Touch panel input control unit 465 ... Card control unit 467 ... Bill deposit / withdrawal control unit 471 ... Print control unit 473 ... Communication control unit 475 ... Initial processing unit 503 ... Magnetic stripe of magnetic card 513a, 513b ... Transaction history data 515 ... Transaction history total information 610 ... IC card CPU 620: Internal memory of IC card 1500: Payment terminal 1501: CPU 1503: Memory 1505: Display device 1507: Key input device 1509: Card reader 1510: Communication control device 1600: Payment control unit 1601: Card control unit 1602: Display control Part 1603 Initial processing unit 1604 ... input controller 1605 ... host communication control unit

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Shigeyuki Ito 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside the multimedia system development headquarters of Hitachi, Ltd. (72) Inventor Jo Takashi Takami Yoshida, Totsuka-ku, Yokohama-shi, Kanagawa 292 Hitachi, Ltd. Multimedia System Development Division, Hitachi, Ltd. (72) Inventor Kenji Matsumoto 292, Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture, Japan Multimedia System Development Division, Hitachi, Ltd. (72) Tomomi Yamauchi, Inventor 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside the multimedia system development headquarters of Hitachi, Ltd. (72) Inventor Hiroshi Shimizu 292 Multimedia system development headquarters, Hitachi, Ltd. 72) Inventor Akira Naito, Kanagawa 292 Yoshida-cho, Totsuka-ku, Hama-shi, Ltd. Multimedia System Development Division, Hitachi, Ltd. (72) Inventor Masayuki Inoue 292, Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Pref. Hitachi Image Information Systems, Ltd. (72) Inventor Inami Tetsuji 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside Hitachi Image Information System Co., Ltd. (72) Inventor Koichi Yoneda 292 Yoshida-cho, Totsuka-ku, Yokohama City, Kanagawa Prefecture Inside Hitachi Image Information System Co., Ltd. (72) Inventor Nanami Hidenobu 292 Yoshida-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture F-term in Hitachi Image Information System Co., Ltd.

Claims (9)

[Claims] 1. A terminal for receiving a procedure in a transaction and executing a transaction process in accordance with the procedure, obtaining a history information of the procedure in the past transaction from a recording medium, and executing the procedure in the executed transaction. History information input / output means for executing storage of the history information on the recording medium, based on the history information obtained by the history information input / output means,
A risk determining means for determining the degree of risk and determining whether the procedure represented by the history information is reproducible based on the determination result; and the risk determining means determining that the procedure represented by the history information is reproducible. And a procedure execution means for instructing the history information input / output means to store the history information relating to the contents of the procedure when reproducing the procedure represented by the history information. 2. The terminal according to claim 1, further comprising an authentication processing executing means for executing a user authentication processing, wherein said risk determining means performs said authentication processing based on a determination result of said risk degree. Determining whether or not the execution of the authentication process by the execution unit is required; and determining that the risk determination unit determines that the authentication process is to be executed by the authentication process execution unit. A terminal that executes the authentication process prior to the reproduction of the procedure by the terminal. 3. The terminal according to claim 2, wherein the history information is transaction amount information representing a transaction amount in a past transaction, and information on the cumulative number of transactions by a procedure reproduced without executing the authentication processing. , Including at least one of total transaction amount information representing a total of transaction amounts transacted by a procedure reproduced without performing the authentication process, wherein the risk determination unit includes information included in the history process. A terminal that compares the information with a predetermined reference value, and determines that the authentication process needs to be executed based on the degree of risk determined according to the comparison result. 4. The terminal according to claim 2, wherein the risk determining means further determines whether or not to execute the authentication processing based on a magnitude of a random number before determining the degree of the risk. A terminal characterized by determining. 5. The terminal according to claim 1, further comprising: biometric identification information detecting means for detecting biometric identification information of the user; The biometric identification information is recorded in advance for each user, the authentication processing execution means, based on the biometric identification information detected by the biometric identification information detection means, biometric identification information recorded on the recording medium, A terminal that performs the authentication process. 6. The terminal according to claim 1, wherein the history information indicates, for one or more transactions, a place where the transaction was performed. The location information included in the history information is compared with the installation location of the terminal, and based on the degree of risk determined according to the comparison result, the risk information indicates A terminal that determines that the procedure cannot be reproduced. 7. The terminal according to claim 1, further comprising: selection accepting means for accepting selection of the type of the transaction, wherein the recording medium includes: A plurality of pieces of history information are included, and the risk determining unit, when the selection receiving unit receives the selection of the type of the transaction at a predetermined timing,
Of the history information obtained from the recording medium, the degree of risk is determined based on the latest history information about the transaction of the selected type, otherwise, the history information obtained from the recording medium Judge the degree of risk based on the latest history information among the above. If there is no history information serving as a basis for the judgment by the risk judgment means, the processing execution means performs the transaction processing according to the procedure received from the user. Terminal. 8. A list display means for displaying a list of a plurality of transaction names, a transaction selection receiving means for receiving a selection of one transaction name from the list of transaction names, and a transaction name for which the transaction selection receiving means has received a selection. A processing execution means for executing processing corresponding to the acquisition of the selection history information of the past transactions from the recording medium, and the selection history information of the latest transactions that have been executed by the processing execution means A selection history information input / output unit for executing storage in a recording medium, wherein the list display unit displays a transaction name of the transaction indicated by the selection history information extracted by the history information input / output unit, as one of the list of the transaction names. A terminal which is displayed from the top or is displayed in a list of the transaction names with identification information. 9. An ID card storing user ID information, wherein history information of operation of the ID card with respect to a higher-level device is one.
ID having a storage area for storing the above
card.