JP2002207883A - Payment approval system and credit utilization approval system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a payment approval system and a credit utilization approval system in which propriety determination is made for a payment request and a credit utilization request based on the control information of payment or credit utilization set by a formal user and illegal utilization is prevented. SOLUTION: Utilization control information for limiting the payment from a prescribed account and the credit utilization as needed is set, and in the case that the utilization control information is set to the contents of denying the payment and the credit utilization, the approval processing of the payment from the account and a credit utilization approval processing are not performed unless authentication as the formal user is performed by user authentication information. Thus, the utilization control information is set to the contents of denying the payment and the credit utilization, illegal payment and credit utilization by others during the period from accident occurrence through the recognition of the fact to reporting to a financial institution and a credit company and utilization stoppage are surely prevented and safety in the payment and the credit utilization is substantially improved.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method in which a legitimate user sets predetermined information for a financial institution or a credit company to suppress the improper addition of a withdrawal amount and a credit use amount, and withdraws or credits from an account. The present invention relates to a withdrawal or credit use approval system that performs processing based on setting information when use is instructed.

[0002]

2. Description of the Related Art Conventionally, in a financial institution, a user's withdrawal instruction from a savings / savings account, such as refund to a user or transfer to another account, is processed at a window using a savings bankbook and a seal. The system is operated by using an automatic teller machine (hereinafter referred to as ATM) or a dedicated transfer machine by itself, and the withdrawal approval system of the financial institution seals the user according to such a withdrawal instruction. The process of withdrawing the withdrawal instruction amount from the user's account while authenticating with the existence and the password is performed.

In such a conventional withdrawal approval system, an authorized user of each account encounters an accident such as theft or loss of a bank account, a seal, a cash card, etc., and fraudulently commits another person to the bank account, a seal, or a cash card. If the password and the password are obtained, there is a risk that the savings in the account may be illegally withdrawn by others. For this reason, financial institutions accept reports of accidents by authorized users, prohibit withdrawals from user accounts based on the reports, and prevent unauthorized withdrawals.

On the other hand, in the case of using a credit card, if a legitimate credit contract user encounters an accident such as theft or loss of the credit card and the credit card is illegally obtained by another person, the credit card is illegally used by another person. There is a risk. For this reason, the credit company accepts the report of the accident by the authorized user, suspends the approval of the credit card use of this user based on the report, and if the unauthorized use is already recognized, the amount of the unauthorized use Provides services to compensate users. Credit companies generally have insurance to cover this amount of fraudulent use.

[0005]

The above-described processing of withdrawal prohibition and credit use prohibition is performed as described above, and the fact that a legitimate user encounters an accident such as theft, loss, etc. However, there is a problem in that it is impossible to prevent unauthorized payment or credit use of others until the financial institution or the credit company reports the accident.

[0006] Furthermore, credit companies pay insurance premiums they have subscribed for in order to compensate for the amount of fraudulent use of a credit card, but in general, credit companies pay a share of this insurance premium. Was collected from credit contract users in such a way as to be included in the credit annual membership fee, etc., so that users who strictly manage credit cards are forced to bear more burden than necessary to maintain credit contracts Had.

[0007] The present invention has been made to solve the above-mentioned problems, and determines whether or not a withdrawal request or a credit use request is possible based on withdrawal or credit use control information set by an authorized user. An object of the present invention is to provide a withdrawal approval system and a credit use approval system that can prevent unauthorized use.

[0008]

A credit use approval system according to the present invention authenticates a user with a calculation control unit in response to a withdrawal instruction from a user account of a financial institution such as refund or transfer. In a withdrawal approval system of a financial institution that performs a process of withdrawing a withdrawal instruction amount from a user's account while receiving the withdrawal instruction from the user, the arithmetic control unit is set and registered in advance for each account. Then, the contents of the usage control information stored in the predetermined storage means are referred to. In the case of refusal, at least a predetermined user authentication information that is set separately from the predetermined digit password set at the time of opening the account is newly obtained from the user and authentication as to whether or not the user is authorized is made. Done, regular use If successfully authenticated only performs the dispensing process as, if it does not recognize the authorized user is not conducted the dispensing process.

As described above, in the present invention, the use control information for restricting the withdrawal from this account as necessary is set for a predetermined account, and the use control information is set to the content that refuses the withdrawal. In this case, unless the user is authenticated as an authorized user of the account using the user authentication information, the withdrawal processing of the account will not be performed regardless of whether or not the financial institution has been notified of the accident, and the usage control information will be withdrawn. By setting the content of the refusal, it is possible to reliably prevent unauthorized withdrawal by others from the time of the accident until the fact is notified to the financial institution, the account is closed, and the account withdrawal is safe. If the usage control information is set to the content that allows withdrawal, the withdrawal processing will be the same as in the past, and the withdrawal can be done smoothly without bothering the authorized user .

[0010] The withdrawal approval system according to the present invention may be arranged so that a predetermined user issues an instruction for setting the contents of the usage control information corresponding to the user's account to the arithmetic control unit, if necessary. A predetermined setting unit that can be operated by the user himself / herself, and the arithmetic control unit newly receives the user authentication information from the user through the setting unit, and receives the user control information content setting instruction. The authentication is performed to determine whether or not the user is an authorized user. If the user is authenticated as an authorized user, the content of the usage control information corresponding to the user stored in the storage unit is determined based on the user's instruction. On the other hand, if the user cannot be authenticated with the authorized user, the update setting of the content of the usage control information is not performed.

As described above, in the present invention, the predetermined setting means capable of instructing the user to set the contents of the use control information corresponding to the account is provided, and the user is authenticated as the authorized user of the account by the user authentication information. The content of the usage control information can be updated and set only when it is done, and the authorized user of the account can appropriately update and set the content of the usage control information at any time using the setting means, so that the authorized user can By changing the content of the usage control information, the authorized user can freely switch between the state where importance is placed on the safety of withdrawal and the state where smooth withdrawal can be performed, and while managing the security of the account himself,
Convenience is greatly improved.

Further, in the withdrawal approval system according to the present invention, if necessary, the setting means can also issue an instruction to update the user authentication information corresponding to a predetermined user's account by a user's own operation. The operation control unit is configured to:
Upon receiving an instruction to update user authentication information from the user through the setting means, newly obtain the user authentication information from the user, and store the user authentication information stored in the storage means in advance. Authentication is performed to determine whether or not the user is a valid user. If the user is successfully authenticated, the user authentication information stored in the storage unit is updated based on the user's instruction. If the user cannot be authenticated, the user authentication information is not updated.

As described above, in the present invention, the setting means capable of instructing the user to update the user authentication information corresponding to the account is provided, and the user is authenticated as the authorized user of the account by the user authentication information. Only when the user authentication information can be updated, the authorized user of the account can update and set the user authentication information appropriately at any time using the setting means, so that the authorized user can authenticate the user as necessary Update the information for
The security related to user authentication can be improved, and the legitimate user can properly manage the security of the account.

Further, the credit use approval system according to the present invention receives a credit use request from the user, such as cash borrowing or credit payment, and performs a process of approving the use by the arithmetic and control unit based on the user's credit information. In the credit use approval system, when the calculation control unit receives a credit use request, the calculation control unit refers to the contents of the use control information set and registered in advance for each credit contract user and stored in a predetermined storage means, and If the content of the control information is use permission, the credit use approval process is performed as it is, while if the use control information content is use rejection, the use approval process is not performed.

As described above, according to the present invention, use control information for restricting credit use as necessary for a predetermined credit contract is set, and when the use control information is set to a content that rejects credit use, Regardless of whether or not an accident has been reported to the credit company, the credit use approval process is not performed, and the use control information is set to the content of refusal to use. Unauthorized use of credit by anyone other than the legitimate credit contract user can be reliably prevented until notification and use approval is suspended, greatly improving the safety of credit use, and using credit control information If the content is set to permit, the use approval process will be the same as in the past and bother regular users No, it can be carried out smoothly in credit use. In addition, since authorized users themselves can manage the safety of credit use, credit companies reduce insurance premium expenditures by suppressing compensation for unauthorized use and maintain credit contract costs such as annual membership fees for card users. Can be selected by the user, and the burden on both the credit company and the user can be reduced.

Further, the credit use approval system according to the present invention may be arranged such that, when necessary, a predetermined user issues an instruction to set the content of the use control information corresponding to the user to the arithmetic control unit. The arithmetic and control unit receives an instruction from the user through the setting means to set the content of use control information, and at least a predetermined digit password set at the time of the credit use contract. A predetermined user authentication information set separately from the user is newly obtained from the user to authenticate whether or not the user is an authorized user, and if the user is successfully authenticated, the information is stored in the storage unit. While the content of the use control information corresponding to the user is updated and set based on the user's instruction, the update of the content of the use control information is not performed if the user cannot be authenticated. That.

As described above, in the present invention, the predetermined setting means capable of instructing the user to set the content of the usage control information corresponding to the credit contract is provided, and the user is authenticated by the user authentication information. The content of the use control information can be updated and set only when the user is authenticated, and the authorized credit contract user can appropriately update and set the content of the use control information at any time using the setting means, so that the use of the regular credit contract is possible. The user can change the content of the usage control information as necessary, and the authorized user can freely switch between the state of emphasizing the safety of credit use and the state of smooth credit use by himself, and the credit use safety And the convenience is greatly improved.

[0018]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS (First Embodiment of the Present Invention) Hereinafter, a first embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a schematic configuration diagram of a withdrawal approval system according to the present embodiment, FIG. 2 is a flowchart for updating user authentication information in the withdrawal approval system according to the present embodiment, and FIG. FIG. 4 is a flowchart of a withdrawal request corresponding process in the withdrawal approval system according to the present embodiment.

In each of the drawings, the withdrawal approval system 10 according to the present embodiment performs a process of withdrawing the withdrawal instruction amount from the user's account while authenticating the user in accordance with the withdrawal instruction by the user. First, a host computer 11 as an arithmetic control unit that performs arithmetic for controlling the entire system,
A storage unit 12 for storing account information and various programs used by the host computer 11 and for writing and reading input data from the user and results of arithmetic processing; various operation instructions and numerical values from the user; And a well-known ATM 13 as the setting means having an input means 13a for accepting the input of the above and a display means 13b for displaying a processing result of the host computer 11 on a screen as an image. The input means 13 in the ATM 13
a is a well-known touch screen type and is integrally provided on the display screen of the display means 13b, and the user can use a GUI (Graphical User Interface) such as a numeric keypad displayed on the screen.
e) It is a mechanism to input by directly pressing the image and giving instructions.

The storage means 12 is used to separately set usage control information in which the contents of permitting or rejecting withdrawal of a predetermined account are set and registered in advance, and a predetermined digit password set when the account was opened. And user authentication information in the form of a password, which is stored as part of the account information for each account. Next, processing in the payment approval system based on the above configuration will be described with reference to flowcharts shown in FIGS. First, the process of updating the user authentication information will be described with reference to the flowchart shown in FIG. It is assumed that the setting means A
In the TM 13, a menu screen as an initial screen of the display unit 13b is displayed so that a user authentication information update process can be selected in addition to each process such as transfer and deposit,
After the user's operation of the input unit 13a is selected to update the user authentication information from among the displayed processes, the user inserts a cash card or a bank account into the ATM 13 and inputs the data. It is assumed that the correct password number corresponding to the account is input by the operation of 13a, and the account information corresponding to the cash card or the bank account has already been acquired by the host computer 11.

First, the host computer 11 causes the display means 13b of the ATM 13 to display a GUI image asking the user to input the current user authentication information (step 1).
01), receiving the user's input operation to acquire the user authentication information, and inquiring the user authentication information corresponding to this account stored in the storage means 12 in advance (step 102).

The host computer 11 determines whether the input user authentication information matches the user authentication information registered for each account (step 103), and the user authentication information matches. In this case, the input of user authentication information to be newly set is displayed twice on the display means 13b together with re-input for confirmation on the display means 13b (step 104). Two pieces of user authentication information are acquired, and it is determined whether or not the two pieces of user authentication information match (step 105). If the pieces of user authentication information match, the user authentication information is set as new user authentication information. The user authentication information is updated by storing it in the storage unit 12 (step 106), and thereafter, a series of processing is ended.

If the user authentication information entered by the user in step 103 does not match the user authentication information registered in advance, the process returns to step 101 and the subsequent processing is repeated. If the two pieces of user authentication information input by the user do not match in step 105, the process returns to step 104 to repeat the subsequent processing. Subsequently, the update setting processing of the usage control information will be described with reference to the flowchart shown in FIG. As a premise, in the ATM 13 which is a setting means, a setting screen of use control information is displayed in a menu screen as an initial screen of the display means 13b in addition to each processing such as transfer and deposit, so that these processings can be selected. After the use control information setting process is selected by the user operating the input unit 13a from among the processes performed, the user inserts a cash card or a bankbook into the ATM 13 and operates the input unit 13a. It is assumed that the correct personal identification number corresponding to the account is input, and the host computer 11 has already acquired the account information corresponding to the cash card or the bankbook.

First, the host computer 11 displays a GUI image for asking the user to input user authentication information on the display means 13b (step 111), and receives the user's input operation to acquire the user authentication information. At the same time, an inquiry is made for user authentication information corresponding to this account stored in the storage means 12 in advance (step 11).
2). The host computer 11 determines whether or not the input user authentication information matches the user authentication information registered for each account (step 113). The display means 13b displays a GUI image requesting an input to set the contents (withdrawal permission or withdrawal rejection) of the usage control information (step 11).
4) In response to the input operation by the user, the setting value of the usage control information is acquired, and stored as new content of the usage control information in the storage unit 12 to update the usage control information (step 11).
5) Then, a series of processing ends.

If the user authentication information entered by the user in step 113 does not match the user authentication information registered in advance, the process returns to step 111 and repeats the subsequent processing. Further, a process performed when a withdrawal request is issued from a user will be described with reference to a flowchart shown in FIG. As a premise, in the ATM 13, from among various selectable processes such as transfer and deposit displayed on a menu screen as an initial screen of the display means 13b, withdrawal such as transfer and refund by operation of the input means 13a by the user. After the processing is selected, the user inserts the cash card or the bank account into the ATM 13, and inputs the correct password corresponding to the account by operating the input means 13a. It is assumed that account information corresponding to has been acquired.

First, the host computer 11 refers to the contents of the use control information corresponding to the account stored in the storage means 12 based on the account information of the user, and the use control information indicates that the withdrawal is permitted. It is determined whether or not the payment is permitted (step 121). If the usage control information indicates that the withdrawal is permitted, the host computer 11 directly performs the withdrawal processing (step 1).
22) is carried out, and after the payment processing, a series of processing ends.
The dispensing process is a known process similar to the conventional one, and the description is omitted.

On the other hand, if the use control information indicates that the withdrawal is rejected at the step 121, the host computer 11 causes the display means 13b to display a GUI image asking the user to input the user authentication information (step 123). In response to the input operation by the user, the user authentication information is acquired, and the user authentication information corresponding to the account stored in the storage means 12 in advance is queried (step 124).

The host computer 11 determines whether the input user authentication information matches the user authentication information registered for each account (step 125), and the user authentication information matches. In this case, the process proceeds to step 122. If the user authentication information entered by the user in step 125 does not match the user authentication information registered in advance, one time is added to the number of times of unauthorized input stored in the storage unit 12. It is updated (step 126), and by further referring to the number information, it is determined whether or not the number of unauthorized inputs is equal to or greater than a predetermined number set in advance (step 127). If so, the host computer 11
Determines that the request is not a withdrawal request from the authorized user, displays a message rejecting the withdrawal request on the display means 13b (step 128), and ends a series of processing.

If the number of unauthorized inputs is less than the predetermined number in step 127, the process returns to step 123 and the subsequent processing is repeated. As described above, in the withdrawal approval system according to the present embodiment, use control information for restricting withdrawal from this account as necessary for a predetermined account is set, and the use control information rejects withdrawal. If the content is set, the host computer 11 performs the withdrawal processing from the account regardless of whether or not the financial institution has been notified of the accident, unless the account is authenticated as the authorized user with the correct user authentication information. Since it is not performed, set the usage control information to the content of withdrawal refusal, and ensure that unauthorized withdrawals by others from the time of the accident until the fact is notified to the financial institution through the fact that the account is closed are closed. Can greatly improve the security of withdrawal from the account. Also,
The authorized user of the account can use the ATM 13 to instruct the update setting of the usage control information and the user authentication information corresponding to the account, so that the authorized user can at any time determine the contents of the usage control information and the user authentication information Can be set as appropriate, so that the authorized user can change the contents of the usage control information as needed, and the authorized user can freely change the state of placing importance on safety regarding withdrawal and the state where smooth withdrawal can be performed In addition, the user authentication information can be appropriately updated to increase the security of the user authentication, and the authorized user can properly manage the account security.

In the withdrawal approval system according to the above-described embodiment, the setting means is an ATM 13,
In M13, the authorized user is instructed to update and set the use control information of the account and the information for user authentication. However, the present invention is not limited to this. It is also possible to use a personal computer, a portable information terminal, or the like, which is always or as needed connected to the host computer 11 via the host computer 11, and instructs the user to update the above information. Also,
Instead of using the setting means directly operated by the user, it is also possible to adopt a configuration in which the use control information and the user authentication information are updated and set by the application by the authorized user at the financial institution window. Further, in the withdrawal approval system according to the above-described embodiment, it is configured to determine whether or not withdrawal is possible in response to a withdrawal request by operating the ATM 13, but the present invention is not limited to this. Alternatively, it is possible to cope with a withdrawal request by operating a dedicated terminal other than the ATM.

(Second Embodiment of the Present Invention) The second embodiment of the present invention
Will be described with reference to FIGS. 5 and 6. FIG. FIG. 5 is a schematic configuration explanatory diagram of the credit use approval system according to the present embodiment, and FIG. 6 is a flowchart of a credit use request handling process in the credit use approval system according to the present embodiment.

In each of the drawings, the credit use approval system 20 according to the present embodiment includes a process of approving a credit use based on credit information of a user in response to a credit use request from the user, and the entire system. A host computer 21 serving as an arithmetic control unit for performing arithmetic operations to be controlled; storing credit contract information and various programs used in the host computer 21; and writing and reading input data from a user and results of arithmetic processing And a client 23 as the setting unit which is connected to a predetermined network at all times or as needed and exchanges information with the host computer 21 through the network based on a user's instruction operation. Connect to computer 21 and the network Is, to the client 23 through a network to provide services for receiving an update instruction to set a predetermined information of each credit card contract, a configuration and a network server 24 to transmit the instruction information received to the host computer 21.

The storage means 22 separately stores usage control information in which the content of permitting or denying credit use for a predetermined credit contract is set and registered in advance, and a predetermined digit password set at the start of the credit contract. The set password-based user authentication information and
Each credit contract is stored in a form included in a part of the credit contract information.

The network server 24 provides the user of the client 23 as content on the predetermined network, such as accepting an update setting instruction such as user authentication information and usage control information of the credit contractor, as content.
While an information management site for exchanging various information is constructed, information sent from the user is collected and transmitted to the host computer 21, and the host computer 21
Client 2 as a part of the content
3 is a computer having a function of transmitting data to the third computer. The network server 24 includes a storage unit 24a that stores and manages various information exchanged with the client 23.

The client 23 issues a content browsing request to the network server 24 based on a user's instruction operation, receives a file transferred from the network server 24 in response to the request, and provides the user with the file as content. And a computer as a client that transmits information to the network server 24 based on a user's input operation corresponding to the content. The input unit 23a receives various operation instructions and numerical values from the user. As a screen display to the user. The client 23 is connected to the network server 24 via an external network such as the Internet, but may be directly connected to the network server 24 as needed.

Next, processing in the credit use approval system based on the above configuration will be described with reference to the flowcharts shown in FIGS. 2, 3 and 6. First, a process of updating the user authentication information will be described. Although the process of updating the user authentication information according to the present embodiment is different from the process of updating the user authentication information according to the first embodiment, the processing procedure is substantially the same. Therefore, description will be made using the same flowchart (FIG. 2).

In the updating process of the user authentication information, it is premised that the user accesses the information management site of the credit company provided by the network server 24 via the Internet by using the client 23 which is the setting means. In 23 display means 23b,
After the user's operation of the input unit 23a selects update processing of the user authentication information from the selectable processes displayed on the first content screen of the site, the user operates the input unit 23a. It is assumed that a credit contract number (credit card number) and a correct personal identification number corresponding to the credit contract number have been input, and that the host computer 21 has already obtained the credit contract information corresponding to the credit contract number.

First, the host computer 21 causes the display means 23b of the client 23 to display a content screen for asking the user to input the current user authentication information (step 201). In addition to receiving / acquiring the user authentication information transmitted from the storage device 22, the user authentication information corresponding to the credit contract stored in advance in the storage unit 22 is queried (step 202).

The host computer 21 determines whether the input user authentication information matches the user authentication information registered for each credit contract (step 20).
3) If the user authentication information matches, the client 23 displays a content screen for requesting the user authentication information to be newly set twice together with re-input for confirmation.
(Step 204), and receives and acquires two pieces of user authentication information transmitted from the client 23 in response to an input operation by the user, and the two pieces of user authentication information match. It is determined whether the user authentication information matches (step 205). If the user authentication information matches, the user authentication information is stored in the storage unit 22 as new user authentication information, and the user authentication information is updated (step 206). Is completed.

If the user authentication information entered by the user in step 203 does not match the user authentication information registered in advance, the process returns to step 201 and the subsequent processing is repeated. If the two pieces of user authentication information input by the user do not match in step 205, the process returns to step 204 to repeat the subsequent processing. Next, the update setting processing of the usage control information will be described. The update setting process of the use control information according to the present embodiment is different from the update control process of the use control information in the first embodiment, though the contents thereof are different, but the procedure of the process is almost the same. Description will be made using the same flowchart (FIG. 3).

In the update setting processing of the usage control information, it is premised that the user accesses the information management site of the credit company via the Internet using the client 23 as the setting means, and the display means 23 of the client 23.
In b, after the setting process of the usage control information is selected by the operation of the input unit 23a by the user from the selectable processes displayed on the first content screen as the site, the input unit 23a by the user is selected. The user enters the credit contract number (credit card number) and the correct password corresponding to the credit
It is assumed that the credit contract information corresponding to the credit contract number has already been acquired.

First, the host computer 21 causes the display means 23b of the client 23 to display a content screen requesting the user to input the current user authentication information (step 211). Receives and acquires the user authentication information transmitted from the storage device 22 and inquires with the user authentication information corresponding to the credit contract stored in the storage means 22 in advance (step 212).

The host computer 21 determines whether or not the input user authentication information matches the user authentication information registered for each credit contract (step 21).
3) If the user authentication information matches, a content screen requesting an input to newly set the content (use permission or use refusal) of the use control information is displayed on the display means 23b of the client 23 (step 214). The setting value of the usage control information transmitted from the client 23 in response to the input operation by the user is acquired (step 215), and stored as new content of the usage control information in the storage unit 22 to update the usage control information. (Step 216), a series of processing ends.

If the user authentication information entered by the user does not match the user authentication information registered in advance in step 213, the process returns to step 211 and the subsequent processing is repeated. Further, a process performed when a credit use request is issued from a user at a predetermined credit member store will be described with reference to a flowchart shown in FIG.
As a premise, a credit settlement terminal 50 connected to the host computer 21 is provided at the credit member store, and the credit settlement terminal 50 is recorded on a credit card possessed by the user who has made a credit use request. Information to be read and transmitted to the host computer 21.

First, the host computer 21 receives and obtains credit card credit contract information (card number) transmitted from the credit card reading terminal 50 (step 221). Based on the acquired card number, the contents of the use control information corresponding to the card number in the storage means 22 are referred to, and it is determined whether or not the use control information is permitted to be used (step 222). If the use control information indicates that the use is permitted, the host computer 21 directly executes the credit use process (step 223), and ends the series of processes after the completion of the credit use process. The credit use process is a known process similar to the conventional one, and the description is omitted.

On the other hand, if the use control information indicates that the use request is rejected in step 223, the host computer 21 determines that the request is not a use request from an authorized user, and returns to the credit settlement terminal 50 that the use request is rejected. Then (step 224), a series of processing ends. As described above, in the credit use approval system according to the present embodiment, the use control information for restricting the credit use as necessary for a predetermined credit contract is set, and the use control information is set to the content that denies the credit use. If the accident has been reported, the host computer 21 does not perform the credit approval process regardless of whether or not the accident has been reported to the credit company. From the facts to the credit company through the recognition of the facts and the suspension of use approval, it is possible to reliably prevent unauthorized use of credits by anyone other than the regular credit contract user, greatly improving the safety of credit use Let me do. Also, the contents of the usage control information and the user authentication information corresponding to the credit contract can be set and instructed by the legitimate credit contract user from the client 23, and the contents of the use control information or the user Since the authentication information can be updated and set as appropriate, a legitimate credit contract user can change the content of the usage control information as necessary, and can place a state where importance is placed on safety regarding credit use and a state where smooth credit use can be performed. The legitimate user can switch freely, and the user authentication information can be updated as appropriate to increase the security of user authentication, and the legitimate user can properly manage the safety of credit use.

Further, in the credit use approval system according to the present embodiment, since the security of the use of credits can be managed by the authorized user himself / herself, in the contract between the credit company and the credit user, the credit is used at his / her own responsibility. The user is allowed to select whether or not to control the use of the card, and depending on whether or not to control the use of the card by himself / herself, it is possible to change the scope of accident compensation and the contents of the expenses paid by the user such as annual membership fees, For example, credit companies reduce the amount of insurance premiums by limiting the amount of compensation for fraudulent use, and replace credit contracts for card users who discount credit contract maintenance costs such as annual membership fees with regular contracts. This allows the user to make a selection, thereby reducing the burden on both the credit company and the user.

In the credit use approval system according to the above-described embodiment, the client 23 serving as the setting means is a computer, and the authorized user accesses the information management site on the network by the network server 24. Although the configuration for instructing the update setting of the usage control information and the user authentication information is performed, a configuration in which a mobile information terminal such as a mobile phone is used as the client 23 may be used. In addition, as a setting unit that does not go through the network server 24, a configuration may be used in which a terminal such as an ATM or a cash dispenser of a financial institution affiliated with a credit company is used.

Further, in the credit use approval system according to the above embodiment, the host computer 21 as the arithmetic control unit and the network server 24 which develops an instruction acceptance service for each information update setting on the network are provided separately and independently. However, the present invention is not limited to this, and it is also possible to adopt a configuration in which one computer has both the function as the arithmetic control unit and the function as the network server.

In the credit use approval system according to each of the first and second embodiments, the user authentication information is in the form of a password, and is input to the user from the input means of the ATM 13 or the client 23. However, not limited to this, personally identifiable information such as fingerprints, voiceprints, irises, retinas, etc. of authorized users are registered in advance as user authentication information, and input terminals such as fingerprint readers are used when dispensing or using credits. In this case, it is possible to obtain a configuration from the user, and more strict user authentication can be performed.

(1) In accordance with a withdrawal instruction from a user account of a financial institution, such as a refund or a transfer, the arithmetic and control unit authenticates the user and withdraws the withdrawal instruction amount from the user's account. In a withdrawal approval system of a financial institution that performs processing, upon receipt of a withdrawal instruction from a user, the arithmetic control unit sets and registers in advance for each account and uses use control information stored in a predetermined storage unit. When the content of the usage control information is a withdrawal permission, the withdrawal process is performed from the account as it is, while when the content of the usage control information is a withdrawal rejection, at least the setting is made at the time of opening the account. Predetermined user authentication information that is set separately from the predetermined digit PIN is newly obtained from the user to authenticate whether or not the user is an authorized user. Gold processing and regular interest A dispensing approval system, wherein the dispensing process is not performed if the user cannot be recognized as a user.

(2) In the withdrawal approval system according to (1), a predetermined user instructs the arithmetic control unit to set the content of the usage control information corresponding to the user's account. A predetermined setting means which can be operated by the user himself / herself, wherein the arithmetic control unit newly receives the user authentication information from the user in response to a user control information content setting instruction from the user through the setting means. The authentication is performed to determine whether or not the user is an authorized user. If the user is authenticated as an authorized user, the content of the usage control information corresponding to the user stored in the storage unit is determined based on the user's instruction. A withdrawal approval system characterized in that the update setting of the content of the usage control information is not performed when the authentication is not possible with the authorized user while the update setting is being made.

(3) In the withdrawal approval system according to (2), the setting means can also issue an instruction to update the user authentication information corresponding to a predetermined user's account by a user's own operation. Wherein the arithmetic control unit is:
Upon receiving an instruction to update user authentication information from the user through the setting means, newly obtain the user authentication information from the user, and store the user authentication information stored in the storage means in advance. Authentication is performed to determine whether or not the user is a valid user. If the user is successfully authenticated, the user authentication information stored in the storage unit is updated based on the user's instruction. A withdrawal approval system characterized in that the user authentication information is not updated when the user cannot be authenticated.

(4) In a credit use approval system in which a credit use request such as cash borrowing or credit payment is received from a user, and a use control unit performs a process of approving the use based on the credit information of the user. Department
When a credit use request is received, the contents of the use control information set and registered in advance for each credit contract user and stored in a predetermined storage unit are referred to. A credit use approval system, wherein the use approval process is not performed when the content of the use control information indicates that use is rejected while the use approval process is performed.

(5) In the credit use approval system according to (4), a predetermined user issues an instruction to set the contents of the use control information corresponding to the user to the arithmetic control unit. Provided with a predetermined setting means that can be operated, the arithmetic control unit receives a use control information content setting instruction from the user through the setting means, at least a predetermined digit password set at the time of the credit use contract and Is newly obtained from the user, and separately authenticates whether the user is an authorized user. If the authenticated user is authenticated, the information is stored in the storage unit. It is noted that while the content of the usage control information corresponding to the user is updated and set based on the instruction of the user, the update setting of the content of the usage control information is not performed if the user cannot be authenticated. Credit use approval system.

(6) The credit use approval system according to (5), wherein the setting means can also issue an instruction to update the user authentication information corresponding to a predetermined user by operating the user himself. The arithmetic control unit receives a user authentication information update instruction from the user through the setting unit, newly obtains the user authentication information from the user, and stores the user authentication information in advance in the storage unit. Authenticates whether the user is a valid user by comparing it with the user authentication information stored in the user authentication information. If the user can be authenticated as a valid user, the user authentication information stored in the storage means is verified. A credit use approval system characterized in that, while updating based on an instruction, if the user cannot be authenticated, the user authentication information is not updated.

[0057]

As described above, according to the present invention, the use control information for restricting the withdrawal from this account as necessary is set for a predetermined account, and the use control information is set so as to reject the withdrawal. If it is set, usage control will be performed by not performing withdrawal processing from the account irrespective of whether or not there is a report to the financial institution, unless the account is authenticated as a legitimate user in the user authentication information. By setting the information to the content of withdrawal refusal, it is possible to securely prevent unauthorized withdrawal by others from the time of the accident until the fact is notified to the financial institution through the fact that the account is closed, and The security related to withdrawal can be greatly improved, and if the usage control information is set to the content that allows withdrawal, the withdrawal processing will be the same as the conventional one and will not bother the regular user and smoothly Hope you can withdraw money An effect.

Further, according to the present invention, a predetermined setting means capable of instructing the user to set the contents of the use control information corresponding to the account is provided, and the user is authenticated as the authorized user of the account by the user authentication information. The content of the usage control information can be updated and set only when it is done, and the authorized user of the account can appropriately update and set the content of the usage control information at any time using the setting means, so that the authorized user can By changing the content of the usage control information, the authorized user can freely switch between the state of emphasizing the safety of withdrawal and the state of smooth withdrawal by himself, and he can manage the security of his own account and also has the convenience Is greatly improved.

According to the present invention, the user is provided with the setting means capable of instructing the updating of the user authentication information corresponding to the account, and the user is authenticated as the authorized user of the account by the user authentication information. Only when the user authentication information can be updated, the authorized user of the account can update and set the user authentication information appropriately at any time using the setting means, so that the authorized user can authenticate the user as necessary By updating the user information, it is possible to enhance the security related to user authentication, and the legitimate user can properly manage account security.

Further, according to the present invention, use control information for restricting credit use as required for a predetermined credit contract is set, and when the use control information is set to reject credit use, Regardless of whether or not an accident has been reported to the credit company, the credit use approval process is not performed, and the use control information is set to the content of refusal to use. Unauthorized use of credit by anyone other than the legitimate credit contract user can be reliably prevented until notification and use approval is suspended, greatly improving the safety of credit use, and using credit control information If the content is set to permit, the use approval process will be the same as before and the regular user will not bother Smoothly credit use has an effect that can be performed. In addition, since authorized users themselves can manage the safety of credit use, credit companies reduce insurance premium expenditures by suppressing compensation for unauthorized use and maintain credit contract costs such as annual membership fees for card users. The user can also select a credit contract in which is set low, which has the effect of reducing the burden on both the credit company and the user.

Further, according to the present invention, a predetermined setting means capable of instructing the user to set the contents of the usage control information corresponding to the credit contract is provided, and the user is authenticated by the user authentication information. The content of the use control information can be updated and set only when the user is authenticated, and the authorized credit contract user can appropriately update and set the content of the use control information at any time using the setting means, so that the use of the regular credit contract is possible. The user can change the content of the usage control information as needed, and the authorized user can freely switch between the state where importance is placed on the safety of credit use and the state where smooth credit use is possible, and the security of credit use by himself Can be managed, and the convenience is greatly improved.

[Brief description of the drawings]

FIG. 1 is a schematic configuration explanatory diagram of a dispensing approval system according to a first embodiment of the present invention.

FIG. 2 is a flowchart of a user authentication information updating process in the withdrawal approval system according to the first embodiment of the present invention.

FIG. 3 is a usage control information update setting process flowchart in the payment approval system according to the first embodiment of the present invention.

FIG. 4 is a flowchart of a withdrawal request corresponding process in the withdrawal approval system according to the first embodiment of the present invention.

FIG. 5 is a schematic configuration explanatory diagram of a credit use approval system according to a second embodiment of the present invention.

FIG. 6 is a flowchart of a credit use request handling process in the credit use approval system according to the second embodiment of the present invention.

[Explanation of symbols]

 Reference Signs List 10 Withdrawal approval system 20 Credit use approval system 11, 21 Host computer 12, 22 Storage means 13 ATM 13a Input means 13b Display means 23 Client 23a Input means 23b Display means 24 Network server 24a Storage means

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (Reference) G06F 17/60 416 G06F 17/60 416

Claims (5)

[Claims] Claims: 1. In accordance with a withdrawal instruction from a user account of a financial institution such as refund or transfer, a withdrawal instruction amount is withdrawn from the user's account while authenticating the user with an arithmetic control unit. In the withdrawal approval system of a financial institution that performs processing, when the arithmetic control unit receives a withdrawal instruction from a user,
While referring to the contents of the usage control information that is set and registered in advance for each account and stored in the predetermined storage means, if the content of the usage control information is a withdrawal permission, the withdrawal processing from the account is performed as it is, If the content of the usage control information is refusal of withdrawal, at least new user authentication information that is set separately from the predetermined digit password set at the time of opening the account is newly obtained from the user for regular use A withdrawal approval system, wherein the withdrawal processing is performed only when the user is authenticated as a valid user, and the withdrawal processing is not performed when the user is not recognized as a regular user. . 2. The withdrawal approval system according to claim 1, wherein a predetermined user issues a content setting instruction of the usage control information corresponding to the user's account to the arithmetic control unit. A predetermined setting unit that can be operated by the user himself / herself; the arithmetic control unit receives the instruction of setting the content of the use control information from the user through the setting unit, and newly outputs the user authentication information from the user. The authentication is performed to determine whether or not the user is an authorized user. If the user is authenticated as an authorized user, the content of the usage control information corresponding to the user stored in the storage unit is determined based on the user's instruction. A withdrawal approval system characterized in that the update setting of the content of the usage control information is not performed when the authentication is not possible with the authorized user while the update setting is being made. 3. The withdrawal approval system according to claim 2, wherein the setting means can also issue an instruction to update the user authentication information corresponding to a predetermined user's account by a user's own operation. The arithmetic control unit receives a user authentication information update instruction from the user through the setting unit, newly obtains the user authentication information from the user, and stores the user authentication information in advance. Verifies whether the user is an authorized user by comparing it with the user authentication information stored in the means. If the user is authenticated as an authorized user, the user authentication information stored in the storage means is used. A payment withdrawal approval system characterized in that the user authentication information is not updated when the user cannot be authenticated with an authorized user while updating based on the instruction of (1). 4. A credit use approval system for receiving a credit use request from a user, such as cash borrowing or credit payment, and performing a process of approving use by a calculation control unit based on the credit information of the user. However, when a credit use request is received, the contents of the use control information set and registered in advance for each credit contract user and stored in a predetermined storage unit are referred to, and if the use control information is A credit use approval system, wherein the credit use approval process is performed as it is, but the use approval process is not performed when the content of the use control information indicates that use is rejected. 5. The credit use approval system according to claim 4, wherein a predetermined user issues an instruction to set the contents of the use control information corresponding to the user to the arithmetic control unit. Provided with a predetermined setting means that can be operated, the arithmetic and control unit receives a use control information content setting instruction from a user through the setting means, and at least a predetermined digit password set at the time of a credit use contract and Is newly obtained from the user, and separately authenticates whether the user is an authorized user. If the authenticated user is authenticated, the information is stored in the storage unit. It is noted that while the content of the usage control information corresponding to the user is updated and set based on the instruction of the user, the update setting of the content of the usage control information is not performed if the user cannot be authenticated. Credit use approval system to be.