JP2003196710A - Device, method and program for processing information, transacting method by atm machine and atm machine - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processor effective in reducing crimes about the abuse of a card by maintaining individual identification information such as fingerprints of an operator as physical evidence and meanwhile, adding an artifice for minimizing the resistance of a user to the collection of the individual identification information in the information processor that performs requested processing on the basis of a direct input by the operator, such as an ATM. <P>SOLUTION: Information classifying whether the original user (account holder's name, etc.), of information (account information, etc.), of a processing object agrees to the reading of the individual identification information (fingerprint, voiceprint, etc.), in processing is set in a card or the information of the processing object, and the individual identification information is read only when setting for agreement has been made. Otherwise, only when failure is made in authenticating the individual identification information, the individual identification information is stored, and the requested processing itself is performed. In the latter configuration, an entrusted person is also allowed to use the card or the information with his/her evidence stored, because a person other than the original user is allowed to use the card or the information. Either effect of preservation of evidence or use suppression is expectable with respect to an illegal user. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing device based on a processing request from an operator.

[0002]

2. Description of the Related Art At present, it is widely practiced to install an information processing device in a store or the like for processing by an unspecified number of operators.

A typical example thereof is an ATM device installed in a bank or its unmanned store. AT like this
In the M device, as a method of operation in consideration of prevention of unauthorized use of a card, a method of giving a card and a personal identification number for each account is widely adopted.

In recent years, personal identification and authentication have been put into practical use, and research into practical use has been advanced from the earliest of them, and fingerprint authentication is the one that is expected to be widely used. There is already an invention that applies fingerprint authentication to transaction processing by an ATM device.

[0005] Among them, a card issued by a financial institution is applied by applying a personal identification technique called fingerprint authentication to make it more difficult for a person other than the principal to break the authentication as compared with the conventional card and the method of using a personal identification number, and not establishing a transaction. There is a purpose for the purpose of directly preventing the illegal use of the waterfront. For example, Japanese Patent Application No. 04-130071 (filed on Apr. 22, 1992) is such.

In addition, by flexibly combining the authentication methods of possessing a card, collating a personal identification number, and fingerprint authentication,
Some of them are intended to relieve the legitimate owner's failure to carry his or her card or forget the PIN. For example, Jindai 03-570
39 (1991.07.23 application) is such.

[0007]

However, when the fingerprint authentication is actually applied to the ATM device, the following problems will be faced, and even if it is evaluated from both sides of the user or the financial institution, it is practical. I can't stand it. 1.
Since the state of fingerprints changes due to injury (eg cuts, burns) or illness (eg cracks, cracks, etc.), despite being a valid card holder (cardholder)
Transactions may not be established because the person is not recognized.
2. The family of the holder of a valid card (cardholder),
Even in the case of a person who is legally authorized to carry out a transaction, such as a person who has been legally delegated by the owner, the transaction will not be established because the fingerprints never match.

The above problem is a problem that cannot be solved by improving the accuracy of the fingerprint authentication device, and has been a major obstacle to the practical application of fingerprint authentication to ATM.

On the other hand, personal identification and authentication such as a fingerprint is
It can be counted as one of the authentication technology methods that follow possession authentication (card possession, etc.) and knowledge authentication (password input, etc.). By adding this to the conventional security measures for card transactions, further strengthening of unauthorized use prevention is possible. Since it can be expected, its practical application and widespread use are strongly desired.

Although electronic authentication (certificate authority, etc.) can be considered as another authentication technique, an ATM that occupies a large part of the banking transaction amount and has a high demand for a response response socially.
For the time being, it is unlikely to adopt electronic authentication, which requires communication costs and time costs for processing small-lot transactions.

From the above facts as well, the practical application of personal identification and authentication is an important issue for ensuring the security of ATM transactions.

By the way, the illegal use of a card is not limited to the theft of a card or a metal item, but fraud, theft,
It may be done in connection with other crimes such as robbery, murder, and arson, and criminal investigative agencies such as the police may examine the criminal's behavior records at financial institutions.

The strongest physical evidence of crime is personal identification information represented by fingerprints and the like, but the main physical evidence obtained from the current ATM is limited to transaction history and surveillance recorded images.

A technical mechanism for collecting personal identification information such as a user's fingerprint for each transaction is a range that can be sufficiently realized nowadays when the fingerprint authentication technology has reached the stage of practical application.

However, at present, it has not been put into practical use or spread because the collection of fingerprints of ATM users has not been socially approved before the technical problem. Regarding fingerprint imprinting and fingerprint collection, there is a strong resistance from the standpoint of Japan's historical background, personal information protection, and human rights protection.

The present invention has been made in view of the above problems, and in order to contribute to further realization of social justice,
By realizing the preservation of personal identification information such as the fingerprint of the operator as physical evidence in an information processing device such as ATM, while adding a device for minimizing the resistance of the user to the collection of personal identification information. Another object of the present invention is to realize an information processing device that is effective in reducing crimes related to illegal use of cards.

[0017]

A first information processing apparatus invented to solve such a problem is an information processing apparatus that executes a process based on a process request input from an operator, The personal identification information reading means for reading the personal identification information of the operator and the discrimination means for discriminating whether or not the personal identification information needs to be stored are provided, and the discrimination means determines that the personal identification information needs to be stored. In the case, the processing based on the processing request is executed, the personal identification information of the operator is read and stored by the reading means, and when the personal identification information is not read, the processing based on the processing request Is characterized by rejecting.

In such an information processing apparatus, the discriminating means is further provided with a reading means for the exchangeable recording medium, and the discriminating means reads out the personal identification information storage necessity discriminating information set in the exchangeable recording medium. Therefore, the necessity of storing the personal identification information may be determined, or the determination means may read the personal identification information storage necessity determination information stored in association with the processing target information based on the processing request. May be configured to determine whether or not to save the personal identification information.

In this first information processing apparatus, the owner of an exchangeable recording medium such as a magnetic card or a legitimate user of information to be processed (for example, information regarding a deposit account or a credit account) processes in advance. In this case, it is possible to set whether or not the personal identification information needs to be saved, and if it is set as necessary, that is, only if the legitimate user has consented to the storage of the personal identification information. It is characterized in that the processing is executed after saving the information.

A second information processing apparatus invented to solve the above problems is an information processing apparatus that executes processing based on a processing request input from the operator, and the personal identification of the operator. Personal identification information reading means for reading information,
An authentication means for executing authentication based on the read personal identification information is provided, and when the authentication based on the personal identification information is successful, the processing based on the processing request input is executed, and the authentication based on the personal identification information fails. In this case, the processing based on the processing request input is executed and the input personal identification information is stored.

Such an information processing apparatus further has a reading means for the exchangeable recording medium, and the authentication processing is configured to perform the authentication based on the personal identification information collation information read from the information exchangeable recording medium. Alternatively, the authentication processing may be configured to read personal identification information collation information stored in association with information to be processed based on the processing request and perform authentication based on the personal identification information collation information. May be.

In this second information processing apparatus, the personal identification information is read for information processing,
The feature is that the personal identification information is not stored when the authentication is successful, and the personal identification information is stored only when the authentication is unsuccessful.

This is based on a new idea that the personal identification information is not used as a verification target as an authentication material, but rather is used for preservation and storage as evidence of transaction operation.

According to such a configuration, if the user is himself, the authentication results are basically the same, and
Even if the authentication result becomes inconsistent due to a physical condition (for example, finger damage) at the time of processing request, the transaction is a legitimate transaction with respect to the person's card and account, so there is no resistance caused by the guilt of the transaction operation.

If the user is a person other than the person himself / herself, the fingerprints do not match, so the authentication results are always mismatched. A person who has been legally delegated by his / her family or the person himself / herself does not feel resistance due to the guilt of the transaction operation even if fingerprints are collected in the information device as a result of the authentication mismatch.

If the user is an unauthorized user, the fingerprints will not match and the authentication results will of course be inconsistent. Therefore, due to the resistance and caution caused by the fingerprint collection, the transaction at this point will occur. There is a high possibility that you will give up (abandon) yourself.

Further, the information processing apparatus further comprises a reading means for a removable recording medium so that an original user can set whether or not to execute such processing. The necessity determination information for the process based on the personal identification information set in the above is read, and if the process is required, the above individual identification information reading process is executed, and if the process is unnecessary, the personal identification information is processed. The reading process may be configured to execute the process based on the process request without executing the following processes, and the personal identification information stored in association with the information to be processed based on the process request is stored. Based on the read necessity determination information of the processing, if the processing is necessary, execute the individual processing below the personal identification information reading processing, and if the processing is unnecessary, execute the individual processing below the personal identification information reading processing. Without the above It may be configured to execute the process based on the management requests.

The information processing apparatus of the present invention is not limited to the one that operates alone by this information processing apparatus, and can communicate with a center (server) apparatus by some communication means such as an ATM apparatus. It is possible, and the information such as the account stored in the center may be accessed and processed based on the information input by the operator. In this case, the "information to be processed based on the processing request" is the information stored in the center such as these account information, and the authentication information of the personal identification information may also be stored in the center. It suffices if the processing device can be referenced.

Further, the information processing apparatus of the present invention executes the
The “processing” based on the processing request does not necessarily refer to only information processing, but also includes performing machine control based on information processing, such as payment of cash at an ATM terminal or ticket issuing processing at a ticket issuing device. .

The present invention was devised in consideration of the practical use of personal information authentication, the preservation of physical evidence in criminal investigations, and the mitigation of resistance to collecting personal identification information. It is based on the idea that there is no such thing as an authentication material, which is not a target for verification and is rather preserved and stored as evidence of a transaction operation.

[0031]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below.

In this embodiment, the present invention is an ATM of a financial institution.
An example when applied to an apparatus will be described.

The ATM device is an ATM device that performs a transaction operation by at least reading a card issued by a financial institution, inputting a personal identification number, and inputting a transaction amount, and includes at least a display section, a card reading section, and a personal identification information reading section. According to the present invention, a personal identification and authentication unit is provided.

The display unit is generally provided in the ATM device, displays various messages to the user, and has a function of receiving a processing request input from the user. The card reading unit is generally included in an ATM device and reads a card issued by a financial institution.

The financial institution issued card has a storage area on the card surface, and the recording area holds the personal identification information of the cardholder. The ATM device can read the data stored in the recording area of the card surface.

The ATM device (not shown) is
Is connected by a line to a center device that holds account information, and accesses the center device based on the processing request input from the user or the information read from the card and executes the requested processing.

FIG. 2 is a processing flow chart of the personal identification and authentication section.

The personal identification / authentication unit includes reading intention confirmation means, reading means, transaction processing, interruption means, collation determination means, and read information storage means.

(Reading Intention Confirming Means) The reading intention confirming means is used until the transaction processing for the user is completed at the earliest after the user starts the ATM transaction operation (for example, cash withdrawal and cash deposit). , Until the transaction processing such as the completion of remittance and the completion of transfer is completed).

The reading intention confirming means displays on the display unit a request for a response as to whether to accept or reject the personal identification information reading operation. When the user responds to the response, the processing sequence is handed over to the reading means, and when the user responds to the refusal, the transaction interruption means is called. Predetermined time without any response (eg 3
The transaction interruption means is also called when 0 seconds has passed.

(Reading Means) The reading means, which has been handed over the processing sequence from the reading intention confirming means, reads the personal identification information by the user's personal identification information reading operation. If it is read normally, the processing sequence is handed over to the collation judging means, and if a reading error is detected, a message prompting to select either the re-operation or the transaction processing interruption instruction is displayed. When the user makes a re-operation for this, the reading means is reprocessed again, and when the user gives a transaction processing interruption instruction to this, the transaction processing interruption means is called. The transaction interruption means is also called when a predetermined time (for example, 20 seconds) elapses without any response.

The determination here is a determination as to whether the finger is an ordinary human finger, not a gloved or enameled finger in the case of a fingerprint, and a reading error occurs in a gloved or enameled finger. If it is a normal human finger, it is determined to be normal.

(Transaction Processing Interruption Means) The transaction processing interruption means responds to a transaction processing interruption instruction input from the user or a response from the user to the effect that the personal identification information reading operation is rejected, or when a certain period of time elapses. Transfer of the processing sequence from the reading intention confirmation means, or of the processing sequence from the reading means in response to a response indicating that the user refuses the reread operation when the reading means detects a reading error of the personal identification information Performing transaction interruptions based on any of the deliveries.

(Collation Judging Means) The collation judging means compares the personal identification information of the cardholder held in the card issued by the financial institution with the original copy and compares it with the personal identification information acquired by the reading means. It is determined whether or not to match.

When a match is determined, the process sequence is not passed to the read information storage means, but the process sequence is passed from the personal identification and authentication section to the process following the continuous ATM transaction process. When a mismatch is determined, the read sequence is read. The processing sequence is delivered to the information storage means.

(Read Information Storage Means) The read information storage means stores the personal identification information acquired by the reading means in the storage area based on the determination of the mismatch in the collation determination means, and continues from the personal identification and authentication section. Hand over the processing sequence to the ATM transaction processing.

The above-mentioned means are used until the transaction processing for the user is completed at the earliest after the user starts the ATM transaction operation (eg cash withdrawal, cash deposit,
Before the transaction processing such as the completion of remittance and the completion of transfer is completed), the processing is executed.

FIG. 3 is a process flow diagram of the cardholder-specific collection record extraction means.

Account identification information for identifying the cardholder or the account is attached to the card issued by the financial institution.

The cardholder-specific collection record extraction means extracts personal identification information related to the cardholder or the account from the personal identification information stored in the storage area by the read information storage means based on the account identification information. It is extracted and the extracted information is displayed on a display or output as a form.

FIG. 4 is a process flow chart of the personal identification / authentication process classification judging means.

For the card issued by the financial institution, it is possible to determine whether or not to execute the processing including the reading intention confirming means, the reading means, the transaction processing interrupting means, the collation judging means and the read information storing means of claim 3. Information is given.

The personal identification / authentication process classification judging means is provided in the personal identification / authentication unit, judges the processing classification information, and when it judges that the processing is to be executed, the processing sequence is handed over to the reading intention confirming means and the processing is not executed When it is determined that the processing sequence is not handed over to the reading intention confirmation means, the processing of the personal identification authentication unit is bypassed.

An embodiment of the present invention in which the personal identification information is a fingerprint will be described below.

The ATM device has a mechanism for reading a card issued by a financial institution (including a card issued by a partner bank),
In accordance with the instructions displayed on the display, at least enter the PIN and the transaction amount to perform the transaction operation. If you transfer or transfer money to another person's account, enter the account number of the transfer destination. It may be an ATM device compatible with a transfer card. It may be an automatic transaction machine that provides a cashing service using a credit loan card. The display screen for displaying the results of the processing of the personal identification and authentication unit may be already installed in the ATM device or may be newly installed separately.

When the user starts the transaction operation and causes the reading mechanism to read the card issued by the financial institution, the personal identification / authentication process classification determination means determines the processing classification information held on the face of the financial institution issued card. When it is determined that the process is not executed, the process of the personal identification and authentication unit is not executed and the conventional ATM is used.
The processing is continued as the device, and when it is determined that the processing is to be executed, the reading intention confirmation means is executed, and thereafter, a series of processing of the personal identification and authentication unit is started. The personal identification / authentication process classification determining unit enables each user to select whether or not to receive the service of the present invention. In addition, it is a function necessary for transitional measures to transfer the current card to the object of the service of the present invention.

From the execution of the personal identification / authentication process classification judging means in one transaction operation and the minimum required card reading as the transaction operation of the conventional ATM device, the input of the personal identification number, the input of the transaction amount, etc. The temporal relationship with such operations may be either before or after.

When the reading intention confirmation means is executed, the following message text is displayed on the display screen.

1. 2. Understanding the transaction conditions (2 and 3) below and requesting a response whether to accept or reject the fingerprint information reading operation. Even if the fingerprint collation produces a result of inconsistency, it does not directly cause the failure of the transaction. In other words, when the fingerprint information reading operation is performed, the transaction does not become unsuccessful even if the authentication fails, and the transaction is successful if other authentication conditions (such as input of a personal identification number) are satisfied. However, if the authentication fails, regardless of whether the user is the user himself or not, a response that the user responds by saving the read fingerprint information in the ATM device and continuing the transaction (for example, When a button is pressed, a response option on the screen is clicked, etc.), the reading means is called, and the user replies that the request is rejected (for example, pressing the corresponding button or clicking the refusal option on the screen). Sometimes the transaction interruption means is called to interrupt the transaction processing. The transaction processing is also interrupted when a certain period of time elapses without any response operation.

As described in the section of means for solving the problem, if the user himself is the authentication result, basically the authentication results are the same, and the authentication result is not the same depending on the state of the finger. Since it is a legitimate transaction for the person's card and account, there is no resistance from the guilt feeling of the transaction operation.

If the user is a person other than the person himself / herself, the fingerprints do not match, and therefore the authentication results are always mismatched. A person who has been legally delegated by his / her family or the person himself / herself does not feel resistance due to the guilt of the transaction operation even if fingerprints are collected in the ATM device as a result of the authentication mismatch.

If the user is an unauthorized user, it is possible to predict that the authentication results will not match because the fingerprints do not match, and the transaction at this point in time due to the resistance and caution caused by fingerprint collection. There is a high possibility that you will give up (abandon) yourself.

The reading means, which is executed in response to the response to the user's fingerprint reading, reads the fingerprint information by the user's fingerprint information reading operation. The reading means performs a format check such as whether it is a normal human finger, not a gloved or enameled finger, and determines whether a reading error or normal.

When the reading means normally reads, the collation judging means is called, and when a reading error is detected, a message prompting the user to select which one of the re-operation and the transaction processing interruption instruction should be executed is displayed.

The user may perform a re-operation on this,
Performs an instruction to suspend transaction processing.

The transaction processing is also interrupted when a certain time has elapsed without any response operation.

The transaction processing interruption means is called from the reading intention confirmation means in response to a transaction processing interruption instruction input by the user, a response to the user's refusal of the fingerprint reading operation, or a certain period of time. Alternatively, the transaction processing is interrupted in response to a response from the user that the read operation is rejected when the reading means detects a fingerprint reading error or by a call from the reading means after a certain period of time has elapsed. . Post-processing such as card return processing after transaction suspension is executed as a conventional function of the ATM device.

The fingerprint information normally read by the reading means is compared with the fingerprint information of the cardholder held in the card issued by the financial institution by the collation judging means. When the collation judging means judges that they match each other, the processing of the personal identification and authentication section is completed without storing the fingerprint information by the read information storing means. When it is determined that the two do not match, the fingerprint information is stored in the storage area in the AIM device.

When the user is the cardholder himself and the authentication results are the same, the read fingerprint information is not saved. Even if the cardholder himself or herself may have the same authentication result due to a change in the finger condition such as injury or illness, the transaction does not become unsuccessful, so there is no inconvenience to the cardholder.

When the user is a person other than the person himself, the fingerprints do not match, so the authentication result is always mismatched, and the fingerprint information is stored in the storage area, but the transaction is not unsuccessful. Therefore, the transaction operation can be completed on behalf of the person.

A person who has been legally delegated by his / her family or himself will have fingerprint information collected in the ATM device as a result of authentication disagreement. There is no.

If the user is an unauthorized user, the fingerprints do not match and the authentication result does not match, and the fingerprint information is saved in the save area. Even in this case, the transaction is not unsuccessful, but the fingerprint information, which is a strong physical evidence, is stored in the ATM device.

With the above, the processing of the personal identification and authentication section is completed.

The cardholder or criminal investigation agency may
The fingerprint information stored in the M device can be extracted, displayed and confirmed based on the account identification information.

(Explanation of Other Embodiments) The present invention is not limited to the above-mentioned embodiments, and the personal identification information is stored with the consent of the person or only when the authentication fails. Various embodiments can be adopted as long as they are based on the technical idea of storing identification information. The present invention is not limited to an ATM device, but may be a device that performs information processing (or mechanical processing that is controlled based on the result of information processing) by the user directly operating the device. If any, this device can be all applied by providing a personal identification information reading means of the user.・ Personal identification information is not limited to fingerprints, but also voiceprints, retinas, facial features,
It may be any of gene information (DNA base sequence information), and the reading means may prepare a device corresponding to the selected personal identification information. In the above-described embodiment (as described with reference to FIG. 4), the information for discriminating whether or not to carry out the personal identification information is set on the exchangeable recording medium such as a card issued by a financial institution. As shown in FIG. 5, the processing section information is configured to be stored in a recording device of an information processing apparatus (or a center apparatus that can be accessed by the information processing apparatus) in association with processing target information such as account information. Is also good.

The processing flow diagram of FIG. 5 is also an embodiment of the ATM device, and the account number and the account number are stored in the deposit information file held by the center system connected to the ATM device by the line.
Various kinds of information relating to the deposit of the account of the account number and the processing classification information are set in association with each other. This processing classification information is set in advance according to the request of the original user of the account.

At the time of use, the account number is read out from the card, the corresponding deposit information file is accessed, the processing division information set in advance by the original account user is read out, and based on this processing division information, FIG. It is determined whether or not to execute the processing of the reading intention confirmation means. In the above embodiment, the personal identification information is stored only when the authentication regarding the personal identification information does not match,
Instead of this, an individual who has been set in advance by the original user (for example, a configuration set in a replaceable recording medium such as a card issued by a financial institution, or a configuration recorded in association with processing target information such as account information) If the information read setting is set in the identification information read necessity determination information (since it indicates that the original user agrees to the reading).
The personal identification information may be always read.

FIG. 6 shows an embodiment of the present invention. If the personal identification information read necessity determination information (processing classification information) set in the card is “execute”, the personal identification information is always read, If "do not execute", the personal identification information is not read.

As a modification, the personal identification information may be read after confirming the intention of the operator (by executing only the reading intention confirmation means in FIG. 2). Further, as in the embodiment of FIG. 5, the processing classification information may be provided not for the card but for each of the deposit account information so as to be checked at the time of transaction. . Program for executing processing in the information processing apparatus of the present invention (in the above embodiment, each unit of the personal identification and authentication unit shown in FIG. 1 and the program for executing the processing flow shown in FIGS. 2 to 4) May be recorded on an exchangeable recording medium and then read by an information processing apparatus to be installed, or may be configured to be downloaded using a communication line connected to the information processing apparatus.

The following items (supplements) will be further disclosed regarding the present invention. (Supplementary Note 1) An information processing apparatus that executes a process based on a process request input from an operator, which requires a personal identification information reading unit for reading the personal identification information of the operator and a storage of the personal identification information. When it is determined that the personal identification information needs to be stored, the determination means determines whether or not the personal identification information needs to be stored, and the reading means reads the personal identification information of the operator. The information processing apparatus according to claim 1, wherein the processing is performed and stored, and when the personal identification information is not read, processing based on the processing request is rejected. (Supplementary Note 2) The information processing device further includes a reading unit for the exchangeable recording medium, and the determination unit reads out the individual identification information storage necessity determination information set in the exchangeable recording medium, and The information processing apparatus according to appendix 1, wherein it is determined whether or not to save the identification information. (Supplementary Note 3) The discriminating means discriminates the necessity of storing the personal identification information by reading the personal identification information storage necessity determination information stored in association with the processing target information based on the processing request. The information processing apparatus according to appendix 1, which is a feature. (Supplementary Note 4) An information processing apparatus for executing processing based on a processing request input from an operator, comprising personal identification information reading means for reading personal identification information of an operator, and authentication by the read personal identification information. And an authentication means to execute,
When the authentication based on the personal identification information is successful, the process based on the process request input is executed, and when the authentication based on the personal identification information is failed, the process based on the process request input is executed and the input individual is executed. An information processing apparatus, which stores identification information. (Supplementary Note 5) The information processing apparatus further includes a reading unit for the exchangeable recording medium, and the authentication processing is performed based on personal identification information collation information read from the information exchangeable recording medium. The information processing apparatus according to appendix 4. (Supplementary Note 6) In the authentication processing, the personal identification information collation information stored in association with the processing target information based on the processing request is read, and the authentication is performed based on the personal identification information collation information. The information processing apparatus according to appendix 4. (Supplementary Note 7) The information processing apparatus further includes a reading unit for the exchangeable recording medium, and reads out the necessity / unnecessity determination information of the process based on the personal identification information set in the exchangeable recording medium to determine whether the process is required. If the processing is not necessary, the processing below the personal identification information reading processing is executed. If the processing is not necessary, the processing based on the processing request is executed without performing the processing below the personal identification information reading processing. The information processing apparatus according to Additional Note 4, which is a feature. (Supplementary Note 8) The necessity determination information for the processing based on the personal identification information, which is stored in association with the processing target information based on the processing request, is read out, and if the processing is required, the following personal identification information reading processing is performed. 5. The information processing apparatus according to appendix 4, wherein each processing is executed, and when the processing is unnecessary, the processing based on the processing request is executed without executing the individual processing of the personal identification information reading processing and the following processing. (Supplementary Note 9) The information processing apparatus further comprises notifying means for notifying message information to an operator,
The notification means notifies the operator of a message prompting an input instructing whether or not to permit reading of the personal identification information by the personal identification information, and when the operator inputs the permission, the personal identification 10. The information processing apparatus according to any one of appendices 1 to 9, characterized in that the personal identification information is read by the information reading means and the processing based on the processing request input is interrupted when an input indicating that the license is not permitted is made. (Supplementary note 10) The information processing apparatus is an automatic cash dispenser, and the processing based on the processing request includes cash payment processing by the automatic cash dispenser. Processing equipment. (Supplementary Note 11) The information processing device is an automatic cash dispenser, the processing target information based on the processing summary is a deposit account or a credit account, and the read personal identification information is associated with information about the account. The information processing device according to supplementary note 3 or supplementary note 8, which is stored as (Supplementary Note 12) The personal identification information is based on the account identification information for specifying the deposit account or the credit account.
The information processing apparatus according to appendix 11, having a function of extracting and outputting personal identification information stored in association with an account. (Supplementary Note 13) The personal identification information includes a fingerprint, a voiceprint, a retina,
13. The information processing apparatus according to any one of appendices 1 to 12, which is one of a facial phase and gene information (DNA nucleotide sequence information). (Supplementary Note 14) An information processing method for executing a process based on a process request input from an operator by an information processing device having an input unit and a personal identification information reading unit, which is operated by the personal identification information reading unit. If the personal identification information reading process of reading the personal identification information of the person, the determination process of determining whether the personal identification information needs to be stored, and the determination unit determines that the personal identification information needs to be stored, The processing based on the processing request is performed, the personal identification information of the operator is read and stored by the reading unit, and based on the processing request when the personal identification information is not read. An information processing method comprising performing a process of rejecting a process. (Supplementary Note 15) An information processing method for executing a process based on a process request input from an operator by an information processing device having an input unit and a personal identification information reading unit, which is operated by the personal identification information reading unit. Personal identification information reading processing for reading the personal identification information of the person, authentication processing for executing the authentication based on the read personal identification information, and processing based on the processing request input when the authentication based on the personal identification information is successful. An information processing method comprising: executing a process based on the process request input and executing a process of saving the input personal identification information when the authentication based on the personal identification information fails. (Supplementary Note 16) A program which is executed by an information processing device having an input unit and a personal identification information reading unit, and which executes a process based on a process request input from an operator,
The personal identification information reading process of reading the personal identification information of the operator by the personal identification information reading unit, the determination process of determining whether or not the personal identification information needs to be stored, and the determination unit storing the personal identification information. Is determined to be necessary, the processing based on the processing request is performed, the personal identification information of the operator is read and stored by the reading unit, and the personal identification information is not read. A program that executes processing that rejects processing based on the processing request. (Supplementary Note 17) A program which is executed by an information processing device having an input unit and a personal identification information reading unit, and which executes a process based on a process request input from an operator,
In the case where the personal identification information reading process for reading the personal identification information of the operator by the personal identification information reading unit, the authentication process for executing the authentication based on the read personal identification information, and the authentication based on the personal identification information are successful. Performing a process based on the process request input, and executing a process based on the process request input and a process of saving the input personal identification information when the authentication based on the personal identification information fails. Characteristic program. (Supplementary Note 18) A computer-readable recording medium, which records a program executed by an information processing apparatus having an input unit and a personal identification information reading unit and executing a process based on a process request input from an operator, The personal identification information reading process of reading the personal identification information of the operator by the personal identification information reading unit, the determination process of determining whether or not the personal identification information needs to be stored, and the determination unit storing the personal identification information. When it is determined that is necessary, the processing based on the processing request is executed and the processing of reading and storing the personal identification information of the operator by the reading unit is executed,
A computer-readable recording medium, wherein a program for executing processing for rejecting processing based on the processing request is recorded when the personal identification information is not read. (Supplementary Note 19) A computer-readable recording medium that stores a program that is executed by an information processing apparatus having an input unit and a personal identification information reading unit and that executes a process based on a process request input from an operator, In the case where the personal identification information reading process for reading the personal identification information of the operator by the personal identification information reading unit, the authentication process for executing the authentication based on the read personal identification information, and the authentication based on the personal identification information are successful. Performing a process based on the process request input, and executing a process based on the process request input and a process of saving the input personal identification information when the authentication based on the personal identification information fails. Characteristic computer-readable recording medium. (Supplementary Note 20) An exchangeable recording medium read by an information processing device that executes a process based on a process request input from an operator, the operation being performed when the information processing device executes a process based on the process request. An exchangeable recording medium characterized in that discrimination information for discriminating whether or not it is necessary to read personal identification information of a person is set. (Supplementary Note 21) An exchangeable recording medium read by an information processing device that executes a process based on a process request input from an operator, which is operated when the information processing device executes a process based on the process request. It is characterized in that identification information is set by reading personal identification information of a person for authentication, and if the authentication fails, a process of storing the personal identification information is executed. Removable recording medium. (Supplementary Note 22) A financial institution issued card reading unit, a screen display unit, an input unit, and a personal identification information reading unit are provided, and transaction is executed by accessing account information corresponding to the financial institution issued card. A transaction method using an ATM device, wherein when a transaction instruction is input using the input means, processing classification information set in the financial institution issued card by the financial institution issued card reading means, or the financial institution When the processing classification is set to determine whether to read the personal identification information based on the processing classification information set in the account information corresponding to the issuing card, and not to read the personal identification information Executes the transaction processing based on the instruction input, and executes the reading of the personal identification information when the processing classification for reading the personal identification information is set. Is displayed on the screen display means, if the reading of the personal identification information is unsuccessful or if an input to refuse the reading of the personal identification information is made, the transaction processing based on the instruction input is interrupted, When the personal identification information is read, the read personal identification information is compared with the personal identification information set in the financial institution issued card or the personal identification information set in correspondence with the account information, When both match, the instructed transaction processing is executed, and when both do not match, the instructed transaction processing is executed and the read personal identification information is recorded in association with the account information. How to trade (Supplementary Note 23) The financial institution issued card reading means, the screen display means, the input means, and the personal identification information reading means are provided, and the transaction is executed by accessing the account information corresponding to the financial institution issued card. In an ATM device, when a transaction instruction is input using the input means, the processing category information set in the financial institution issued card by the financial institution issued card or the financial institution issued card Based on the processing classification information set in the corresponding account information, a means for deciding whether or not to read the personal identification information and a processing classification for not reading the personal identification information are set. When the means for executing the transaction processing based on the instruction input and the processing division for executing the reading of the personal identification information are set, the reading of the personal identification information is executed. A means for displaying a message to that effect on the screen display means, and if the reading of the personal identification information is unsuccessful or if an input indicating refusal to read the personal identification information is made, transaction processing based on the instruction input is performed. Means for interrupting, and the personal identification information read when the personal identification information is read, and the personal identification information set in the financial institution issued card or the personal identification information set corresponding to the account information When the two match, the instructed transaction processing is executed, and when the both do not match, the instructed transaction processing is executed and the read personal identification information is recorded in association with the account information. An ATM device comprising:

[0081]

As described above, if the card user possesses the card as in the conventional case and knows the personal identification number, he / she agrees to read the personal identification information such as a fingerprint, and informs the identification section. Transactions will always be established simply by reading the appropriate personal identification information such as applying a finger correctly. Successful authentication of personally identifiable information is not required for successful transactions.

Thus, for example, in the case of a fingerprint, the person who has a fingerprint change due to finger injury or illness, the person who has been entrusted by the person himself or herself, and the transaction itself is established even if the fingerprint collation fails.

Although a person who attempts to illegally use a card can perform a transaction operation at the same level of security, it can be expected that psychological deterrence will be required to complete a criminal act by collecting a fingerprint. .

Even if a criminal act (illegal use of a card) is completed in response to fingerprint collection beyond psychological deterrence,
Since useful physical evidence such as fingerprints is secured on the ATM side, it will contribute to criminal investigation.

As a facility for investigating crimes relating to illegal use of cards (eg, withdrawal of cash from an ATM device), a security surveillance video is generally used today, but in the present invention, personal identification such as fingerprints is used. Unless you agree to read the information and read the appropriate personal identification information such as putting your finger on the identification part correctly, the transaction will be suspended, so it is highly effective in giving up the criminal act,
Even if the criminal act is completed, a useful physical evidence of fingerprints is secured on the ATM side, and thus it has a contribution effect in crime prevention and crime investigation more than the crime prevention surveillance video.

As described above, the present invention is applicable to personal information authentication A
The practical application of TM, the preservation of physical evidence for crime investigation, and the mitigation of resistance to collecting personal identification information are taken into consideration comprehensively, and in order to realize the practical use of ATM equipped with a personal information authentication function. It is highly effective.

The present invention is characterized in that the personal identification information is not stored when the authentication is normally performed.
Considering that the person who most uses the card issued by a financial institution is the person who owns the card, it is possible to avoid storing a large amount of information that is relatively unlikely to be used as physical evidence for criminal investigation. As a result, the effect of rational use of the storage area can be recognized.

[Brief description of drawings]

FIG. 1 is a configuration diagram of an embodiment of the present invention.

FIG. 2 is a process flow chart of a personal identification and authentication unit.

FIG. 3 is a processing flow chart of a cardholder-specific collection record extraction means.

FIG. 4 is a processing flow chart of a personal identification authentication processing classification determining unit.

FIG. 5 is a processing flow chart of another embodiment (holding processing classification information in account information) of the present invention.

FIG. 6 is a processing flowchart of another embodiment of the present invention (execution of reading personal identification information with the original consent of the card user).

Front page continuation (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04L 9/32 H04L 9/00 673D F term (reference) 3E040 AA03 BA07 DA02 DA10 5B058 CA27 KA02 KA04 KA38 YA02 YA03 5J104 AA07 KA01 KA17 NA38

Claims (10)

[Claims] 1. An information processing apparatus for executing processing based on a processing request input from an operator, which requires personal identification information reading means for reading personal identification information of the operator and saving of the personal identification information. When it is determined that the personal identification information needs to be stored, the reading unit executes the process based on the process request and the reading unit determines whether the personal identification information of the operator is stored. An information processing apparatus, which performs reading and saving, and rejects processing based on the processing request when the personal identification information is not read. 2. The information processing device further comprises a reading means for the exchangeable recording medium, wherein the discriminating means reads the personal identification information storage necessity discriminating information set in the exchangeable recording medium. The information processing apparatus according to claim 1, wherein whether or not to save the personal identification information is determined. 3. The discriminating means discriminates whether or not the personal identification information should be stored by reading the personal identification information storage necessity discriminating information stored in association with the processing target information based on the processing request. The information processing apparatus according to claim 1, wherein: 4. An information processing apparatus for executing processing based on a processing request input from an operator, comprising personal identification information reading means for reading personal identification information of the operator, and authentication based on the read personal identification information. And an authentication means for executing the process, which executes a process based on the process request input when the authentication based on the personal identification information succeeds, and a process based on the process request input when the authentication based on the personal identification information fails. An information processing apparatus, which stores the input personal identification information as well as executing. 5. The information processing apparatus further comprises a reading means for the exchangeable recording medium, wherein the necessity determination information for the processing based on the personal identification information set in the exchangeable recording medium is read out and processed. If it is necessary, execute the processes below the personal identification information reading process, and if not necessary, execute the processes based on the process request without executing the processes below the personal identification information reading process. The information processing apparatus according to claim 4, wherein: 6. The process of determining whether or not the process based on the personal identification information, which is stored in association with the information to be processed based on the process request, is read out, and when the process is required, the personal identification information reading process is performed. 5. The information processing according to claim 4, wherein the processing according to the processing request is executed without executing the individual processing of reading the personal identification information and the following processing when the processing is executed. apparatus. 7. An information processing method for executing processing based on a processing request input from an operator by an information processing apparatus having an input means and a personal identification information reading means, wherein the personal identification information reading means If the personal identification information reading process for reading the personal identification information of the operator, the determination process for determining whether or not the personal identification information needs to be stored, and the determination means determines that the personal identification information needs to be stored, , Performing a process based on the process request, performing a process of reading the personal identification information of the operator by the reading means and storing the personal identification information, and if the personal identification information is not read, An information processing method comprising performing a process of rejecting a process based on the information processing method. 8. A program which is executed by an information processing device having an input means and a personal identification information reading means, and which executes processing in accordance with a processing request input from an operator. If the personal identification information reading process for reading the personal identification information of the operator, the determination process for determining whether or not the personal identification information needs to be stored, and the determination means determines that the personal identification information needs to be stored, , Performing a process based on the process request, performing a process of reading the personal identification information of the operator by the reading means and storing the personal identification information, and if the personal identification information is not read, A program that executes a process that rejects a process based on the program. 9. A financial institution issued card reading means, a screen display means, an input means, and a personal identification information reading means are provided, and transaction is executed by accessing account information corresponding to the financial institution issued card. A transaction method using an ATM device, wherein when a transaction instruction is input using the input means, processing classification information set in the financial institution issued card by the reading means of the financial institution issued card, or the financial information Based on the processing classification information set in the account information corresponding to the institution-issued card, it is determined whether to read the personal identification information, and the processing classification is set to not read the personal identification information. In the case, the transaction processing based on the instruction input is executed, and when the processing classification for reading the personal identification information is set, the reading of the personal identification information is executed. A message to that effect is displayed on the screen display means, and if the reading of the personal identification information is unsuccessful or if there is an input to refuse the reading of the personal identification information, the transaction processing based on the instruction input is interrupted. When the personal identification information is read, the read personal identification information is collated with the personal identification information set in the card issued by the financial institution or the personal identification information set corresponding to the account information. When the two match, the designated transaction processing is executed, and when the two do not match, the designated transaction processing is executed and the read personal identification information is recorded in association with the account information. How to trade. 10. A financial institution issued card reading unit, a screen display unit, an input unit, and a personal identification information reading unit, and executes transaction by accessing account information corresponding to the financial institution issued card. An ATM device that performs processing instruction information set in the financial institution issued card by the financial institution issued card reading unit when the transaction instruction is input using the input unit, or the financial institution issued card. When the means for deciding whether to read the personal identification information based on the processing division information set in the account information corresponding to, and the processing division for not reading the personal identification information are set Means to execute the transaction processing based on the instruction input, and if the processing classification to read the personal identification information is set, the personal identification information is read. A means for displaying a message to that effect on the screen display means, and if the reading of the personal identification information is unsuccessful or if an input indicating refusal to read the personal identification information is made, transaction processing based on the instruction input is performed. Means for interrupting, and if the personal identification information is read, the read personal identification information, and the personal identification information set in the financial institution issued card or the personal identification information set corresponding to the account information When the two match, the instructed transaction processing is executed, and when the both do not match, the instructed transaction processing is executed and the read personal identification information is recorded in association with the account information. An ATM device comprising: