JP2002358418A - Transaction system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a self-protection means for an emergency case for a transaction contractor. SOLUTION: A storage means 11 is stored with combinations of both related normal password information and emergency-case password information by transaction contractor ID's, and a normal transaction procedure related to the normal password information and an emergency-case transaction procedure related to the emergency-case password information are stored. Then a transaction contractor ID and password information are received from a transaction terminal device 21 through a communication means, and a transaction contractor ID and relation to the normal password information or emergency-case password information which match the relation between the transaction contractor ID and password information is retrieved from the storage means 11 when the password information representing the retrieved relation is emergency-case password information, the emergency-case procedure is read out of the storage means 11 and followed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a transaction system, and more particularly, to a transaction system for authenticating a transaction contractor using personal identification information.

[0002]

2. Description of the Related Art In a transaction system using a magnetic card or the like, personal authentication using a personal identification number is performed to ensure that a transaction is performed with a legitimate contractor. For example, banks use ATMs (Automated
You need to enter your PIN to withdraw cash from Teller Machine or CD (Cash Dispenser). The personal authentication method using the personal identification number is also used for cashing with a credit card.

[0003] Heretofore, conventionally, an account number and a password for identifying a transaction contractor were stored in a magnetic card such as a cash card or a credit card. But,
A third party who illegally obtained a cash card, etc. read out the personal identification number using a card reader that reads magnetic codes, etc. There is adopted a zero password system in which a password is managed on the host computer side without storing a password for personal authentication.

Further, instead of a magnetic card, an IC (Integr
ated Circuit) cards for cash cards, etc.
Attention has also been focused on a method of preventing personal identification password information from being easily found even if a third party illegally obtains a card.

For example, Japanese Patent Laying-Open No. 2001-67322 discloses a configuration in which an IC card stores a plurality of personal identification numbers or data such as fingerprints and irises of a business contractor instead.

[0006]

However, in the above-mentioned conventional example, it is merely determined whether or not the transaction contractor is using the cash card or the like. For example, even in the system including a plurality of personal authentication information disclosed in the above-mentioned Japanese Patent Application Laid-Open No. 2001-67322, the system which does not depart from the technical idea of judging whether or not the transaction contractor is the only one. Absent.

[0007] For this reason, when a third party compels the transaction contractor to withdraw cash using a gunshot threat or assault, and causes the transaction contractor to use a cash card or the like in a manner contrary to his or her own will. Since the transaction contractor conducts transactions from the viewpoint of the actor, the transaction system cannot distinguish that the transaction is an unusual and serious transaction. Therefore, the transaction system has a disadvantage that it cannot provide the transaction contractor with any means capable of coping with the above-mentioned emergency.

[0008] In particular, as part of the improvement of bank services,
A card service corner with ATMs is available 24 hours a day, so you can use it late at night, or at a convenience store or other place where you do not feel uncomfortable even if you form a group
In the current situation where TMs are being deployed,
Simply treating the crime case described above as a matter for the business partner is too severe.

[0009] Also, today, when the information infrastructure such as the Internet has developed, so-called Internet banking, which allows users to receive banking services while staying at home using a network, is also becoming popular. Even virtual banks (cyberbanks) that exist only on the Internet perform personal authentication using passwords, etc., but cannot protect against the crimes mentioned above, and the transaction contractor is an illegal third party. The fact is that you have to obey.

[0010]

An object of the present invention is to improve the disadvantages of the prior art, and to provide a means for self-defense in the event of an emergency, such as when a contractor is involved in a crime such as robbery.
An object of the present invention is to provide a trading system that can be provided to a trading contractor.

[0011]

In order to achieve the above object, according to the first aspect of the present invention, a transaction system includes:
An information storage means, a communication means for communicating with the transaction terminal device, and a processing means for controlling the operation of each of these means are provided. Also,
The storage means stores a plurality of combinations in which both the normal password information and the emergency password information are associated with one transaction contractor ID for each of the transaction contractor IDs, and also stores the normal transaction associated with the normal password information. A procedure and an emergency transaction procedure associated with the emergency password information are stored. Then, the processing means receives the trade contractor ID and the password information recognized by the transaction terminal device via the communication means, and a trade contractor ID matching the association between the trade contractor ID and the password information. A step of retrieving the association with normal password information or emergency password information from the storage means, and when the password information making the retrieved association is the emergency password information, the emergency transaction procedure is performed from the storage means. And reading and executing.

Here, the "transaction contractor ID" is an ID capable of specifying a transaction contractor who makes a transaction in the transaction system.
Say. The ID is not limited to the ID that directly specifies the trading contractor, and may be an ID that indirectly specifies the trading contractor, such as identification information unique to the trading contract, such as an account number.
"Password information" refers to information for identifying a business contractor, and is not limited to information composed of numbers, symbols or English characters, but is composed of physical characteristics such as fingerprints and palm prints. Is also good.

According to the present invention, when emergency password information is received, an emergency transaction procedure is executed instead of a normal transaction procedure. Therefore, an emergency situation, for example, a business contractor is involved in a crime such as robbery, etc. The self-defense means in the event of encountering the above situation can be provided to the business contractor.

According to a second aspect of the present invention, in the transaction system according to the first aspect, the storage means stores a plurality of different emergency password information for one transaction contractor ID, and For each security code,
Each stores a different emergency transaction procedure. Then, when the password information forming the retrieved association is the emergency password information, the processing means selectively reads out the emergency transaction procedure corresponding to the emergency password information from the storage means.

According to the present invention, since a plurality of emergency transaction procedures are set as options of the transaction contractor, a transaction environment in which a transaction contractor encountered in an emergency can take measures according to his / her own judgment according to the situation. Can be provided.

According to a third aspect of the present invention, in the transaction system according to the first aspect, the storage means further associates a preset emergency transaction restriction frame with each of the transaction contractor IDs. Remember. Then, the processing means reads the emergency transaction restriction frame corresponding to the received transaction contractor ID from the storage means as the emergency transaction procedure, and reads the read emergency transaction restriction frame as a normal transaction. Transmitting to the transaction terminal device via the communication means in a manner that looks like a possible frame.

According to the present invention, since the emergency transaction restriction frame is set for each business contractor, the damage suffered by the business contractor can be suppressed to a small amount.

According to a fourth aspect of the present invention, in the transaction system according to the first aspect, the processing means includes the received transaction contractor ID as the emergency transaction procedure.
The notification information indicating that the emergency transaction procedure has been requested based on the information is output to an external device other than the transaction terminal device that has requested the emergency transaction procedure via the communication means.

According to the present invention, the notification information indicating that the emergency transaction procedure has been requested is output, so that the transaction contractor can be secretly notified that the emergency situation is facing, and as a result, the transaction contract is concluded. Early relief for the elderly.

With these, the above-mentioned object is to be achieved.

[0021]

DESCRIPTION OF THE PREFERRED EMBODIMENTS [First Embodiment]

Hereinafter, an embodiment of the present invention will be described with reference to FIGS.
It will be described based on.

FIG. 1 is a block diagram of the entire system showing a first embodiment of the present invention.

A plurality of transaction terminal devices 21 to 23, a transaction management server device 10, a transaction monitoring terminal device 30, and a police information center 40 and a security company 50 are connected to the network 60 so as to be able to perform data communication. I have.

Here, each of the police information center 40 and the security company 50 is a computer system, and is not limited to a stand-alone system, but assumes a general information management system including a LAN. The police information center 40 and the security company 50 are shown in FIG. 1 as examples of external devices managed by a company other than the provider of the transaction system connected to the network 60.

The network 60 may be a network using a dedicated line including a LAN or the like, or a network using a public line such as the Internet. It should be noted that a data line for connecting to the network 60 and an Internet service provider (ISP) are not shown.

Each of the plurality of transaction terminals 21 to 23, the transaction management server 10, the transaction monitoring terminal 30, the police information center 40, and the security company 50 is connected to the network 60 by wired data communication. Or wireless data communication.

Each of the transaction terminal devices 21 to 23 is a terminal device used by a transaction contractor, and includes information input means 21a, 2b.
In addition to 2a, 23a, 21b, 22b, and 23b, although not shown, information display means, information storage means, communication means with an external device, and processing means for controlling each means are provided. However, detailed specifications differ depending on the business form of the transaction system. For example, when a bank or a credit service company operates a transaction system, an automatic teller machine such as an ATM provided at a head office or a branch office becomes a transaction terminal device, and a card-only unmanned card service corner specializes in withdrawals. A CD or the like is the transaction terminal device.

The input means 21a, 22a, 23a,
The interfaces 21b, 22b, and 23b are provided with interfaces of a type corresponding to a mode of providing information to the transaction terminal devices 21 to 23. For example, in an ATM or a CD, a first input unit 21 such as a card reader for reading a magnetic card is used.
a, 22a and 23a and second input means 21b, 22b and 23b such as a touch panel for receiving a personal identification number. Although the number of input means is two in FIG. 1, the present invention is not particularly limited, and may be provided with an input means such as an IC interface for exchanging information with an IC card as necessary. However, a configuration may also be used. For convenience of explanation, FIG. 1 shows three transaction terminal devices 21 to 23, but the number of transaction terminal devices connected to the network is not particularly limited to this number.

The transaction management server device 10 is a server device for managing transactions using the transaction terminal devices 21 to 23, and includes information storage means 11 and transaction terminal devices 21 to 23.
And a processing unit 13 for controlling the operation of each of these units. It should be noted that the transaction management server device 10 shown in FIG. 1 shows a minimum configuration, and that other known configurations and functions required as a server are also provided as they are in this embodiment.

The transaction monitoring terminal 30 is connected to the network 6
0 is a terminal device for monitoring a transaction by the transaction terminal devices 21 to 23 via the Internet. It is mainly assumed that the provider of the transaction system according to the present invention monitors the operation status of the transaction terminal devices 21 to 23.

Here, the transaction management server device 10 and the transaction monitoring terminal device 30 are each one in FIG.
The number of transaction management server devices 10 and transaction monitoring terminal devices 30 is not particularly limited. For example, the transaction management may be performed by a plurality of transaction management server devices 10, or a bank may have a system configuration in which a transaction monitoring terminal device 30 is provided in each of a head office, a branch, or a maintenance department.

Each of the devices described above will be described in more detail.

First, the transaction management server device 10 will be described. The storage unit 11 of the transaction management server device 10 includes a storage medium that can store data, such as a RAM, a ROM, and an HDD. However, the configuration is not limited to one specific storage medium, and may be a configuration in which a plurality of storage media are combined.

The storage means 11 stores a plurality of combinations in which both the normal password information and the emergency password information are associated with one trading partner ID for each trading partner ID, and is associated with the normal password information. The normal transaction procedure and the emergency transaction procedure associated with the emergency password information are stored. Here, "Password information" refers to information for identifying a business contractor, and is not limited to information consisting of numbers, symbols, or English characters, but also information consisting of physical characteristics such as fingerprints and palm prints. It may be.

Specifically, as shown in FIG. 1, the storage means 11 includes a normal transaction procedure storage area 11a, an emergency transaction procedure storage area 11b, and a password information database 11c.
Is provided.

Here, the normal transaction procedure storage area 11a is
Stores a program (normal transaction procedure) for executing a genuine contract business performed with a business contractor. For example, there are a balance inquiry processing procedure and a deposit withdrawal procedure.

Further, the emergency transaction procedure storage area 11b
In contrast to the normal transaction procedure described above, in order to deal with the case where the contractor has been forced to act by a third party and has performed transactions contrary to the intention of the contractor, an unusual emergency program (emergency program) Time transaction procedure). For example, according to the emergency transaction limit set by the trading contractor in advance, the emergency transaction limit is displayed as a normal transaction limit in the case of an emergency, instead of the original trade limit. It stores an emergency transaction procedure and an emergency transaction procedure that outputs notification information indicating that the emergency transaction procedure has been requested based on the transaction contractor ID to an external device such as the police authority 40 or the security company 50.

Here, the "transaction contractor ID" is an ID capable of specifying a transaction contractor who makes a transaction in the transaction system.
Say. The ID is not limited to the ID that directly specifies the trading contractor, and may be an ID that indirectly specifies the trading contractor, such as identification information unique to the trading contract, such as an account number. The “transactional allowance” refers to an upper limit that can be dealt with in a normal transaction by a business contractor, such as an account balance or an upper limit of a credit-based caching service. The "transaction limit frame" refers to a limit frame (critical condition) in an emergency transaction set in advance by the business contractor, for example, a fixed amount lower than the actual deposit balance or a fixed amount such as 5% of the deposit balance. Conditions such as the ratio and the upper limit of the cashing amount may be set to a fixed amount or a fixed ratio. Note that the limit frame is not limited to the amount of money, but may be a limit for the transaction form such as limiting the transaction to a counter (inability to use an ATM or the like) or a head office.

Then, the password information database 11c
As shown in FIG. 2A, a combination in which both the normal password information and the emergency password information are associated with the transaction contractor ID is collectively managed. In addition, a plurality of different emergency passwords are stored for one transaction contractor ID, and each emergency password is associated with each emergency transaction procedure as shown in FIG. 2B. Thereby, in combination with the emergency transaction procedure storage area 11b described above,
A configuration for storing different emergency transaction procedures is realized.

For example, when numerical information is used in a magnetic card or the like, as shown in FIG. 2A, the password information database 11 stores the account number 010001 assigned based on the contract with the transaction contractor. Used as the transaction contractor ID. Further, in the contract, the trade contractor previously sets the security code 1234 as the normal security information, the security code 4321 as the emergency security information 1 corresponding to the above-described emergency transaction procedure for performing the trade restriction, and the 50,000 yen as the trade restriction frame. Is set, and when the password 5432 is set as the emergency password information 2 corresponding to the emergency transaction procedure to be notified to the police, the account number 010001 and these passwords are stored in association with each other. In this way, the password information database 11 stores the contractor ID, the ordinary password information, and the emergency password information as one combination for each contractor ID.

When the amount of stored information is large, such as an IC card, for example, a fingerprint pattern of the thumb of the right hand as the normal password, a fingerprint pattern of the thumb of the left hand as the emergency password 1, A fingerprint pattern of the index finger of the left hand may be stored as the password information 2.

In the case where a plurality of transaction management server devices 10 are provided, the storage means 11 of each transaction management server device 10 has a configuration in which a password information database 11c and the like are dispersed, and the normal transaction procedure storage area 11a is stored. The transaction management server device 10 that stores and manages the transaction management server device 10 that stores and manages the emergency transaction procedure storage area 11b and the transaction management server device 10 that stores and manages the password information database 11c are interconnected. Select according to the installation type of the system.

The communication means 12 has an interface for exchanging data, such as a network interface card (LAN board or the like) or a serial port.

The processing means 13 includes, for example, an arithmetic processing unit such as a CPU, and stores (stores) and reads (acquires) data in the storage means 11, and outputs and acquires data in the communication means 12. And various other processes. At the time of processing, it follows a processing procedure stored in a predetermined area of the storage unit 11. The processing procedure is provided to the processing means 13 in the form of a program or the like. These processes may be executed by, for example, a single CPU, or may be performed by a plurality of CPUs in a distributed manner.

Specifically, the processing means 13 receives the transaction contractor ID and the password information recognized by the transaction terminal devices 21 to 23 through the communication means 12, and associates the transaction contractor ID with the password information. Searching for the association between the transaction contractor ID and the normal password information or emergency password information that matches the password from the password information database 11c of the storage unit 11, and the password information forming the retrieved link is emergency password information. In this case, the step of reading and executing the emergency transaction procedure from the emergency transaction procedure storage area 11b of the storage means 11 is executed.

Information input means 21a, 21b, 22a, 22b, 23a, 2 provided in transaction terminal devices 21-23.
3b, information display means (not shown), information storage means (not shown), communication means with external devices (not shown), and information processing means (not shown) for controlling the operation of each means In addition to performing processing for fulfilling the contract business concluded with the contractor, personal authentication processing for determining whether or not the person operating the transaction terminal devices 21 to 23 is a genuine transaction contractor is performed.

The transaction terminal devices 21 to 23 of the present embodiment
As an individual authentication method, an interface for reading password information from a magnetic card or IC card that stores password information serving as identification information for personal authentication is provided, while a user who conducts transactions via input means is required to verify the password. And the transaction terminal devices 21 to 23 match the password information in response to the provision of the password information to determine whether or not the transaction contractor is genuine. For this reason, the card issued to the business contractor in this embodiment stores both the business contractor ID, the normal password information, and the emergency password information.

However, the card stores the normal password information and the emergency password information so as to be indistinguishable. For example, they are stored in the card by using the same code system or by making the pointer storing the password information random and encrypting it. This is so that when the card is stolen, it cannot be determined whether the decrypted password information is normal password information or emergency password information. In addition, as the variation of the emergency password information increases, even if a third party arbitrarily selects the password information, the probability of assigning the password information that can perform a normal transaction becomes low. When a system for storing personal identification information in the card itself is employed, it is effective to store a plurality of pieces of emergency personal identification information.

The overall operation of the transaction system described above will be described with reference to FIG. Hereinafter, a case where a transaction contractor makes a transaction using the transaction terminal device 21 will be described as an example.
FIG. 3 is a flowchart showing the program processing of the transaction terminal device 21 and the transaction management server device 10. Also, for ease of explanation, the account number of the trading contractor is assigned to the trading contractor ID
It will be described as being used as

First, the transaction terminal device 21 performs a personal authentication process. Specifically, the transaction terminal device 21 receives an account number and authentic password information from the transaction contractor (S
1). Specifically, the transaction terminal device 21 reads the account number and the password information from the provided card via the first input means 21a (a dedicated interface such as a card reader for reading information from the card). Here, there are a plurality of password information stored in the card, but all of them are read.

Further, the transaction terminal device 2 is connected via the second input means 21b (such as a touch panel or an optical scanner).
The user receives password information for verification from the first user (S
2). Then, the authentic password information received by the first input means is compared with the password information received by the second input means,
If they match, it is determined that the user is a genuine transaction contractor, and the process proceeds to the next process (S4) described below (S3). However, if the password for verification does not correspond to any of the passwords read from the card,
The procedure returns to the procedure for accepting the password information for collation, and if the password does not match a predetermined number of times, the card becomes unusable as in the known system.

At this stage, from the viewpoint of anti-theft measures, which password information is the normal password information and which password information is the emergency password information among the password information stored in the card at this stage, as described above. Cannot be distinguished. However, since both the password information and the emergency password information are usually positioned as information that can be known only by the transaction contractor, it is sufficient for personal authentication.

After the personal authentication process in the transaction terminal device 21 described above is completed, the subject of the processing is the transaction terminal device 21
To the transaction management server device 10. Then, the transaction management server device 10 performs a process of determining whether the password information received by the transaction terminal device 21 is normal password information or emergency password information.

More specifically, first, the processing means of the transaction terminal device 21 sends the transaction management server device 10 to the transaction management server device 10 via the communication means and the network 60 of the transaction terminal device 21.
The account number as the transaction contractor ID and the collated password information are transmitted (S4).

On the other hand, the processing means 13 of the transaction management server device 10 receives the transaction contractor ID and the password information recognized by the transaction terminal device 21 via the communication means 12 and stores the information in a predetermined area of the storage means 11. It is stored (S5). Subsequently, the processing unit 13 reads out the contractor ID and the password information from the predetermined area of the storage unit 11, and matches the association between the read contractor ID and the password information.
D and the normal or emergency password information,
A search is made from the password information database 11c of the storage means 11 (S6).

Then, the processing means 13 stores the transaction contractor ID
(S7), and when the password information forming the retrieved association is emergency password information, the emergency transaction procedure is read out from the emergency transaction procedure storage area 11b of the storage means 11 and executed. (S8 to S14).

Here, the processing means 1 reads out the emergency transaction procedure from the emergency transaction procedure storage area 11b.
3 selectively reads the emergency transaction procedure corresponding to the emergency password information from the emergency transaction procedure storage area 11b of the storage means 11 (S8, S12).

Specifically, for example, as shown in FIG. 2, when the security information classified into emergency security information 1 is combined with the transaction contractor ID extracted by the search, the processing is performed. The means 13 reads the emergency transaction procedure 1 corresponding to the emergency password information 1 from the emergency transaction procedure storage area 11b (S8), and executes the emergency transaction processing according to the read emergency transaction procedure 1 (S9). ~ S1
1).

More specifically, the processing according to the emergency transaction procedure 1 is as follows. The processing unit 13 reads out the emergency transaction restriction frame corresponding to the received business contractor ID from the password information database 11c of the storage unit 11, and stores the read emergency transaction restriction frame in a predetermined area of the storage unit 11 ( S9). Then, the stored emergency transaction restriction frame is disguised as a normal transaction possible frame and transmitted to the transaction terminal device 21 via the communication means 12 (S10). Here, by transmitting the read emergency transaction restriction frame as a normal transaction possible frame, the transaction terminal device 21 that has received the emergency transaction restriction frame does not need to perform any special procedure. The transaction according to the time transaction restriction frame can be performed (S11).

On the other hand, as shown in FIG. 2, when the security information classified into emergency security information 2 is combined with the transaction contractor ID extracted by the search, the processing means 13 The emergency transaction procedure 2 corresponding to the security code information 2 is read from the emergency transaction procedure storage area 11b (S1).
2) Execute the emergency transaction processing according to the read emergency transaction procedure 2 (S13, S14).

More specifically, the processing according to the emergency transaction procedure 2 is as follows. The processing unit 13 creates notification information indicating that the emergency transaction procedure has been requested based on the received trading contractor ID (S13), and generates the notification information.
The information is output to an external device other than the transaction terminal device 21 that has requested the emergency transaction procedure via the communication means 12 (S14). Here, the side set as the external device includes the transaction monitoring terminal device 30, the police information center 40, the security company 50, and the like. Either may be determined by the operator or the provider of the transaction system, or the system configuration may be selected by the transaction contractor as a variation of the self-defense means.

The processing means 13 executes the emergency transaction procedure 2 and outputs notification information indicating that the emergency transaction procedure has been requested based on the transaction contractor ID. You can promptly notify the stakeholders that you have encountered and need help. Therefore,
Police, etc., who receive the notification information with information related to the business contractor, can start the initial action while the business contractor is performing an emergency transaction, and can help the business contractor early Becomes

On the other hand, as a result of the search, when the association between the read contractor ID and the password information matches the association between the contractor ID and the ordinary password information, the processing means 13 returns to the normal state. The normal transaction procedure is read from the transaction procedure storage area 11a and executed (S15).

As described above, by employing the configuration of the present embodiment, it is possible to provide the contract contractor with self-defense means when the contract contractor encounters an emergency. In addition, since it is possible to set password information according to a plurality of emergency transaction procedures, the business contractor can actively select the emergency transaction procedure according to the situation where the business contractor is placed,
A trading system that can provide excellent self-defense measures to business contractors can be realized.

Note that the present embodiment is not limited to the above-described configuration, and the emergency password information and the emergency transaction procedure need not be completely one-to-one correspondence. For example, both the emergency transaction procedure 1 and the emergency transaction procedure 2 described above may be read and third emergency password information to be executed may be set.

Also, the emergency transaction procedure is not limited to the above-described process. For example, if a bank account is originally burglary and there is no remaining balance in the account, there is a possibility that the situation will be driven into an extra dangerous situation. There is, so the predetermined balance is displayed as described above, but depending on the other party, display "Please use another terminal during line maintenance" or "Line is crowded Please call the person in charge over the provided telephone. "

[Second Embodiment]

Next, a second embodiment according to the present invention will be described. Also in this embodiment, the basic configuration of the transaction system is the same as the system shown in FIG. Also,
The data structure of the password information database 11c is the same as the data structure shown in FIG.

In the present embodiment, however, the transaction terminal devices 21 to 2 are used, such as a transaction system employing the zero authentication method and a transaction system such as Internet banking.
3 itself does not perform personal authentication, receives the provision of the business contractor ID and personal identification information, performs processing of transmitting the received business contractor ID and personal identification information to the server device, and performs personal authentication on the transaction management server device 10 side. They differ in what they do.

Therefore, transaction terminal devices 21 to 23
Specifically, in the case of an ATM or a CD adopting the zero authentication method, as in the first embodiment, a first input such as an interface with a card storing a transaction contractor ID such as an account number is performed. And a second input means such as a touch panel for receiving password information.
On the other hand, in a transaction system such as Internet banking, a personal information terminal such as a personal computer or a PDA provided in each household or a mobile phone is a transaction terminal device, and input means such as a keyboard for receiving account numbers and password information is at least required. One is enough.

Hereinafter, the operation of the transaction system according to the present embodiment will be described with reference to FIG. Here, FIG.
The description will be made on the assumption that a transaction is performed between the transaction terminal device 22 and the transaction management server device 10 in the above.

First, the processing means of the transaction terminal device 22 receives the transaction contractor ID and the password information from the transaction contractor via predetermined input means of the transaction terminal device 22, and Transaction information and password
2 is stored in a predetermined area of the storage means (S2
1). In the present embodiment, as the transaction contractor ID,
In the case of an account number or a net bank, an ID code or the like assigned to each transaction contractor who is an account contractor to be input when transferring cash is applicable.

At this time, since personal authentication is not performed in the transaction terminal device 22, the accepted transaction contractor ID and password information are transmitted to the transaction management server device 10 via the communication means provided in the transaction terminal device 22 and the network 60. (S22).

Processing means 13 of transaction management server device 10
Receives the transaction contractor ID and the password information transmitted from the transaction terminal device 22 via the communication means 12,
1 is stored in a predetermined area (S23).

Subsequently, the processing unit 13 reads out the contracted party ID and the password information received from the predetermined area of the storage unit 11 and matches the contracted party ID with the association between the read contracted party ID and the password information. An association between the password and the normal password information or emergency password information is retrieved from the password information database 11c of the storage unit 11 (S24).

The processing means 13 makes a determination based on the result of the search (S25). Specifically, when there is a combination of the contractor ID and the password information, the processing unit 13 recognizes that the transaction is performed by the contractor, completes the personal authentication, and sets the next normal password information. The process proceeds to a process of determining whether the password is emergency password information. On the other hand, if there is no combination of the transaction contractor ID and the password information, the transaction terminal 2
2 requires at least re-input of the password information (S
21).

Then, the processing means 13 stores the transaction contractor ID
If there is a combination of password information and password information, it is checked whether the password information forming the retrieved association is the normal password information or any emergency password information (S2).
6). If the password information forming the retrieved association is emergency password information, the corresponding emergency transaction procedure is read out from the emergency transaction procedure storage area 11b of the storage unit 11 and executed (S27, S28).

The subsequent processing according to the emergency transaction procedure is as follows:
The description is omitted because it is similar to the first embodiment.

If the result of the search indicates that the association between the read contractor ID and the personal identification information corresponds to the association between the business contractor ID and the ordinary secret information, the processing means 13 returns to the normal state. The normal transaction procedure is read out from the transaction procedure storage area 11a and executed (S29) as in the first embodiment.

As in the present embodiment, the present invention can be suitably implemented in a transaction system in which the transaction management server device 10 performs personal authentication processing, and the self-defense means when the transaction contractor encounters an emergency situation is Can be provided to business contractors. Also,
Excellent self-defense, as the security information can be set according to multiple emergency transaction procedures, so that the contractor can actively select the emergency transaction procedure according to the situation where the contractor is located. A transaction system that can provide means to the transaction contractor can be realized.

Further, even in a situation where cash withdrawal can be compelled in a confined state such as net banking, a means by which a transaction contractor can appeal for self-rescue without being noticed by a third party is provided by a transaction system provider side. Can be provided from Therefore, the trading system provider can also gain the advantage in business development as a new service.

The transaction system according to the present embodiment is not limited to the above-described system configuration. For example, in a credit service in net banking, an intermediary is provided between the transaction terminal device 23 and the transaction management server device 10. A dealer may intervene. Specifically, when the transaction contractor ID and the password information transmitted from the transaction terminal device 23 are transmitted to the transaction management server device 10 operated by the credit service company while being encrypted,
If the security information is emergency transaction security information and is in accordance with the emergency transaction procedure using the set emergency transaction restriction frame, the net shopping available amount related to the credit returned to the intermediary dealer is originally calculated. By transmitting a low-value emergency transaction restriction frame instead of the tradable amount, a process according to the emergency transaction procedure can be realized without even the intermediary dealer noticing.

In addition, if the transaction system as shown in the above-described first and second embodiments becomes widespread and becomes well known, if a third party is forced to use the card illegally due to intimidation, etc. It can be prevented before it happens. This is because if a criminal intimidates the cardholder, the crime is immediately revealed and the security authorities are expected to be notified beforehand. With the establishment of the system, it can be said that the present invention contributes to improving security.

[0085]

Since the present invention is constructed and functions as described above, according to the first aspect of the present invention, when emergency password information is received, it is not a normal transaction procedure but an emergency transaction. Since the procedure is executed, the contractor can be provided with a means of self-defense when the contractor encounters an emergency such as being involved in a crime such as robbery.

Further, according to the second aspect of the present invention, since a plurality of emergency transaction procedures are set as the choices of the transaction contractor, the transaction contractor who has encountered an emergency can respond to the situation at his own discretion. Provide a trading environment in which measures can be taken.

According to the third aspect of the present invention, the emergency transaction limit is set for each transaction contractor.
The damage suffered by the business contractor can be minimized.

According to the fourth aspect of the present invention, since the notification information indicating that the emergency transaction procedure has been requested is output, it is possible to keep the fact that the transaction contractor is facing an emergency situation secret. The information can be transmitted behind the scenes, and as a result, the contractor can be relieved early.

As described above, according to the present invention, it is possible to provide an unprecedented excellent transaction system.

[Brief description of the drawings]

FIG. 1 is a block diagram of an entire transaction system showing a configuration of an embodiment according to the present invention.

FIG. 2A is a structural diagram showing an example of a data structure of a password information database shown in FIG. 1;
(B) is a structural diagram showing an example of a data structure that defines the association between emergency password information and emergency transaction procedures.

FIG. 3 is a flowchart showing an operation of the transaction system shown in FIG. 1;

FIG. 4 is a flowchart showing an operation in a transaction system according to another embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Transaction management server apparatus 11 Storage means 11a Normal transaction procedure storage area 11b Emergency transaction procedure storage area 11c Password information database 12 Communication means 13 Processing means 21, 22, 23 Transaction terminal device 21a, 22a, 23a First input means 21b , 22b, 23b Second input means 30 Transaction monitoring terminal device 40 Police side information center 50 Security company 60 Network

Claims (4)

[Claims] 1. An information storage means, a communication means for communicating with a transaction terminal device, and a processing means for controlling the operation of each of these means, wherein said storage means has one transaction contractor ID and usually password information. A plurality of combinations in which both the emergency password and the emergency password are associated are stored for each of the transaction contractor IDs, and a normal transaction procedure associated with the normal password and an emergency transaction procedure associated with the emergency password A transaction system storing the transaction contractor ID and the password information recognized by the transaction terminal device via the communication means.
Retrieving from the storage means an association between the transaction contractor ID that matches the association with the personal identification information and the ordinary security information or emergency security information. Reading out the emergency transaction procedure from the storage means and executing the emergency transaction procedure. 2. The transaction system according to claim 1, wherein the storage unit stores a plurality of different pieces of emergency password information for one transaction contractor ID, and stores different pieces of emergency password information. When the security information forming the retrieved association is the emergency security information, the processing means selects an emergency security procedure corresponding to the emergency security information from the storage means. Trading system characterized by readout. 3. The transaction system according to claim 1, wherein the storage unit further stores a preset emergency transaction restriction frame in association with each of the transaction contractor IDs, and the processing unit includes: As the emergency transaction procedure, a step of reading an emergency transaction restriction frame corresponding to the received transaction contractor ID from the storage means, and disguising the read emergency transaction restriction frame as a normal tradeable frame, Transmitting to the transaction terminal device via the communication means. 4. The transaction system according to claim 1, wherein the processing unit is configured to provide, as the emergency transaction procedure, notification information indicating that an emergency transaction procedure has been requested based on the received transaction contractor ID. Through the communication means to an external device other than the transaction terminal device requesting the emergency transaction procedure.