JP2004038915A - Personal confirmation system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable processing without wasting the inputted password information even when the password information is incorrectly inputted. <P>SOLUTION: A personal confirmation system is constituted by arranging a card processing section 11 for reading user identification information at least from a card 2a of A bank and a card 2b of B bank in which the user identification information related to information to be processed is stored, an ATM 1 by which password information for confirmation can be inputted and storage devices 4, 8 for storing registered password information associated with the information to be processed. The registered password information stored in the storage device 8 is read based on the user identification information read from the card 2b of B bank, collated with the inputted password information for confirmation, when both pieces of password information do not coincide, the user identification information from the other card 2a of A bank is accepted, the registered password information stored in the storage device 4 is read based on the information read from the card 2a of A bank and collated with the inputted password information. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an identity verification system for inputting personal identification information at the time of a financial transaction in a bank or the like and unlocking a confidential room to confirm that the user is the identity of the user.
[0002]
[Prior art]
When using an automatic teller machine (ATM) at a bank or the like, the user is confirmed from a so-called cash card. In order to verify this identity, read the account information from the cash card and let the user enter the password (password) that is stored only by the user. If the password matches the password registered in advance, the identity is determined. The use is allowed. In other words, it cannot be used unless the passwords match.
There are two possible reasons for the password mismatch. First, the first reason is that the user has incorrectly entered the personal identification number. The second is a problem on the device side for inputting a password, which is when the device detects an incorrect input even if the user performs an input operation for a correct password.
[0003]
If the password is incorrectly entered a plurality of times, the transaction is invalidated from the viewpoint of the security of the system. Depending on the system, the cash card may be invalidated, or the cash card may be taken back into the device and handled by a clerk. In such a case, the following countermeasures have been proposed in consideration of, for example, inputting a password registered for another account information by mistake.
[0004]
In Japanese Patent Application Laid-Open Nos. Hei 4-372580 and Hei 5-303585, when it is determined that the input passwords do not match, the password is stored, and when the re-input password is the same, , Which do not add as the number of erroneous inputs is disclosed. JP-A-5-290075 discloses a password input from a keyboard before the number of password comparisons reaches a predetermined threshold and invalidates a medium (cash card or credit card). There is disclosed a device that issues a notification that a confirmation of a coincidence of personal identification numbers cannot be obtained in order to proceed. With this notification, the user is made aware of an erroneous input and is required to input a correct password again.
[0005]
Further, Japanese Patent Application Laid-Open No. 8-263722 discloses a device that recognizes an input error of a personal identification number and can re-input the personal identification number without any confusion. More specifically, when the passwords do not match, a password input error numerical value and the top one blinking display are performed. Furthermore, it is also possible to reverse the displayed value, change the color, move, rotate, change the scale of the enlargement / reduction, etc., and make a mistake in entering the password without noticing that it is different from the card that is usually dealing Can be quickly noticed.
[0006]
[Problems to be solved by the invention]
According to the above-described prior art, when a password registered for another account information is repeatedly input by mistake, the number of incorrect input is not added or the numerical value of the password input error (one at the top) is not added. By flashing the display, the user can be made aware of the erroneous input early, and can input a correct password again. However, at present, transactions with cash cards and credit cards are becoming commonplace and the frequency of use is rapidly increasing, and the above services are built independently for each transaction, and the incorrectly entered password (information) is stored in the account. It is only considered for trading purposes.
[0007]
In addition, with the daily use of card transactions and the increase in network transactions, a large number of PINs (passwords) are used properly, and even if an incorrect PIN is notified, the correct PIN may not be immediately recalled. . In such a case, you will try to enter several PINs in order, but in order to avoid invalidating the cash card and taking it into the device, cancel the transaction and eject the card, There was a trouble that the same operation had to be repeated again. Further, there is also a psychological burden on the user that, since the password is pre-registered, a memorable device is required.
[0008]
[Means for Solving the Problems]
In order to solve the above-mentioned problems, the present invention provides an information reading unit that reads user identification information and the like from at least first and second storage media that store user identification information relating to information to be processed, A personal identification device having an operation unit capable of inputting, and a storage device for storing registered personal identification information associated with the information to be processed, wherein user identification information read from the first storage medium is provided. The registered password information stored in the storage device is read out based on the password information, and is compared with the input verification password information. If the password information does not match, the user identification information from the second storage medium is read. Upon receipt, the registered password information stored in the storage device is read out based on the information read from the second storage medium, and collated with the already-confirmed password information for confirmation.
[0009]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described. FIG. 1 is a conceptual diagram of the personal identification system of the present invention, and FIG. 2 is a control block diagram of the personal identification device of the present invention. In the figure, reference numeral 1 denotes an identification device for reading user identification information stored in a storage medium (hereinafter, referred to as a user card) 2 owned by the user to identify the user. Reference numeral 3 denotes a host computer connected to the personal identification device 1 and has a storage device 4 for storing and managing user information and service information in association with the previous user identification information.
[0010]
The host computer 3 is connected to other host computers 6 and 7 via the communication network 5. The host computers 6 and 7 have storage devices 8 and 9 for storing and managing user information and service information, respectively, and constitute an identity verification system. The personal identification device 1 has a card processing unit 11 as an information reading unit from which information stored in the user card 2 can be read. Reference numeral 12 denotes an operation unit (hereinafter referred to as an operation guidance screen for inputting confirmation password information (hereinafter referred to as a confirmation password including a password, etc.) for the user to access the system and for performing an input operation. , An operation display unit).
[0011]
A storage unit 13 is a ROM (Read Only Memory) in which programs for performing various controls are stored, user identification information read from the user card 2 by the card processing unit 11, and host computers 3, 6, and 7. 7 is configured by a RAM (Random Access Memory) or a hard disk memory for storing information received from the PC 7. A control unit 14 controls each unit, and has an interface unit for connecting to the host computer 3 via a line.
[0012]
Next, description will be made with reference to the flowchart of the personal identification system of the present invention shown in FIG. In the present embodiment, a case will be described in which the personal identification device is an automated teller machine (hereinafter referred to as ATM) in a bank or the like, and personal identification is performed using a user card by using a personal identification number. In order to make the explanation easier to understand, ATM 1 and host computer 3 are maintained by Bank A, host computer 6 is maintained by Bank B, and host computer 7 is maintained by Bank C, and each has a business alliance. And
[0013]
The user card 2 (hereinafter, the card issued by Bank A as the first storage medium is referred to as Bank A card 2a, and the card issued by Bank 8 as the second storage medium is referred to as Bank B card 2b) has at least Stores tie-up codes, bank codes, and account numbers. The storage device 4 stores at least an account ledger file 4a. The contents of the account ledger file 4a include the address, name, age, occupation, account number, registered password information (hereinafter referred to as registered password number) of the user who has opened an account, and deposit / saving balance information. is there. For example, every time a deposit / withdrawal transaction is performed, the host computer 3 instructs updating of the deposit / saving balance information and the like, and the latest information is stored and stored in the storage device 4. Note that the storage devices 8 and 9 also have account ledger files 8a and 9a similar to those of the storage device 4, and are controlled by host computers 6 and 7.
[0014]
The operation display unit 12 in the ATM 1 is configured by a transaction guide screen display for a user to input a transaction and a touch panel for an operation input. This touch panel displays a transaction selection screen at the start of the transaction, for example, transaction items such as "payment" and "deposit", and the transaction is selected by lightly touching the displayed location. . Although not shown, operation guidance by voice is also possible.
[0015]
It is assumed that the user uses the bank B card 2b at the ATM 1 of the bank A and performs a withdrawal transaction with the bank B (host computer 6). Further, “1234” is registered in advance as a registered password of the account number corresponding to the A bank card 2a, and the registered password corresponding to the B bank card 2b is “5678”. First, when “payment” is selected on a transaction selection screen (not shown), a display as shown in FIG.
S1: When the B bank card 2b is inserted, it is detected, and the card processing unit 11 reads stored information.
S2: The card processing unit 11 reads out the tie-up code, the bank code and the account number information from the B bank card 2b.
[0016]
When the control unit 14 identifies that it has joined the communication network 5 from the affiliate code, the control unit 14 validates the input from the operation display unit 12.
S3: The user inputs a confirmation password (N = 1234 at the first time) for confirming the user from the numeric keys 121 shown in FIG. 4A.
(Here, since the B bank card 2b is used, the password is erroneously input except for "5678".) When the cancel key 122 is pressed, the B bank card 2b is returned.
S4: The control unit 14 stores the bank code, the account number, and the password for confirmation (“1234”) input as the first time in the storage unit 13.
S5: The control unit 14 transmits the stored bank code, account number, and password for confirmation (first time) to the host computer 3. The host computer a recognizes from the bank code that the transaction is a card transaction with Bank B, and transfers it to the host computer 6 of Bank B.
[0017]
The host computer 6 reads information such as the user's name, the deposit balance, and the registered password ("5678") stored in the storage device 8 from the received account number.
S6: The personal identification number received for the first time and the registered personal identification number are compared. If they match, that is, if the input confirmation password is “5678”, it means “match”.
S7: When both passwords match, it is determined that the user is a legitimate user, and subsequent transaction operations are permitted. Specifically, the process proceeds to the input operation of the withdrawal amount. When the passwords match, the information stored in the storage unit 13 in step S4 may be deleted.
[0018]
If the two passwords do not match in step S6, the host computer 6 notifies the host computer 3 that the operation cannot be continued due to a difference in the confirmation password.
S8: When the host computer 3 notifies the ATM 1 of the confirmation password difference, the ATM 1 displays on the operation display unit 12 a request for re-input. When the cancel key 122 is pressed, the bank B card 2b is returned, and the information stored in the storage unit 12 in step S4 is deleted.
S9: The user inputs a password for confirmation for the second time (N = “1234” for the second time).
S10: As shown in FIG. 4 (b), a display example when the second confirmation password is input includes a screen for the first display “****” and a screen for the second display “****”. Will be displayed.
[0019]
Here, the control unit 14 compares the first confirmation password stored in the storage unit 13 with the first digit of the second confirmation password input, and if the numbers are different, the corresponding digit is used. Display by changing the color of the eyes. For example, when the password for the first confirmation is “1234”, the display is “****” in blue characters, and when the password is “1234” for the second time, the display is “****”. Is displayed in blue in all characters. If the second time is “1324”, the display is “****”, but since the second and third digits are different numerical values, they are displayed in red characters. Note that this display is not limited to this, since the function is satisfied if it is recognized that a different number has been entered. The first display is "○○○○", the second is "○ XX" ○ "etc.
[0020]
If the user misunderstands that the first identification password “1234” of the A bank card 2a is input and the second identification password is also “1234”, the process proceeds to step S11.
S11: The control unit 14 searches for the "bank name" from the bank code read in step S2, and displays the "bank name" on the operation display unit 12. FIG. 4C shows an example of the operation guidance screen display. Although not described in the flowchart, when the card exchange key 126 is pressed, the B bank card 2b is returned (details will be described later).
S12: When the password re-input key 125 is pressed on the operation guide screen as shown in FIG. 4C, a password input screen as shown in FIG. 5A is displayed. However, since this is the third (final) input, a password display frame 127 as shown is added below the password display frames 123 and 124.
[0021]
S13: When the third identification password is input, the password is again compared with the identification password stored in the storage unit 13. At the time of inputting the password for confirmation for the third time, it is notified that the inserted bank card has been issued by Bank B, and the input is recognized by recognizing the notification information.
If the password for confirmation is different from the previous input value in step S13, the process returns to step S5, and the host computer 6 receives again the confirmation of the password for confirmation.
[0022]
S14: In step S13, if the third confirmation password is the same as the previous password, "transaction not possible" due to a password mismatch is displayed on the operation display unit 12. As described above, it is possible to disable the bank card 2b or take it into the ATM 1 depending on the configuration of the system program. As described above, the first confirmation PIN entered in the ATM 1 is stored in the ATM 1, and the second confirmation PIN entered again after receiving the password mismatch information from the host computer 6. Are compared in the ATM 1, so that the communication access load on the host computer 6 is reduced.
[0023]
Next, the case where the card exchange key 126 is pressed in step S11 will be described with reference to the flowchart shown in FIG. This case is a case where the user mistakenly inserts the B bank card 2b, and it is premised that the user can insert the A bank card 2a corresponding to the already input confirmation password.
[0024]
S21: When the card exchange key 126 is depressed, the control unit 14 ejects the B bank card 2b that has been kept on standby by the card processing unit 11. When the user removes the B bank card 2b, the connection of the communication network 5 with the host computer 6 is disconnected.
S22: When the A bank card 2a is inserted, it is taken into the card processing unit 11, and the associated code, bank code and account number are read out as the stored information.
S23: The control unit 14 reads the first confirmation password (N = 1st “1234”) from the storage unit 13.
S24: Transmit to the host computer 3 together with the information read in step S22.
[0025]
The host computer 3 can detect that the card is issued by itself (Bank A) based on the received bank code, and does not transfer the card to another host computer. If the bank code is Bank C, it goes without saying that the bank code is transferred to the host computer 7.
S25: The host computer 3 reads information such as the user's name, the deposit and savings balance, and the registered password stored in the storage device 4 from the received account number. Then, the personal identification number received for the first time is compared with the registered personal identification number.
S26: If the confirmation PIN matches the registered PIN, that is, if the confirmation PIN is "1234", it means "match", and it is determined that the user is a legitimate user. Is allowed, and all the confirmation passwords stored in the storage unit 13 are deleted.
[0026]
When the passwords do not match in step S25, the host computer 3 notifies the ATM 1 of the difference in the password, and the ATM 1 displays "Now communicating with the computer" on the operation display unit 12.
S27: The control unit 14 reads the second re-entered confirmation password stored in the storage unit 13 and transmits it to the host computer 3.
S28: If the second identification password matches the registered identification number, the process proceeds to step S26. If the identification numbers do not match, the host computer 3 notifies the ATM 1 again of the difference in the identification number.
[0027]
S29: The passwords for confirmation up to the third time stored in the storage unit 13 are sequentially collated by the host computer 3, and when they do not match, the A bank card 2a is taken into the ATM 1.
As described above, after the card exchange, the user does not enter the confirmation password again, and the confirmation password entered before the exchange is automatically transferred from the ATM 1 to the host computer 3 for collation. It is possible to reduce the trouble of the user. If the information such as the address and name is received from the host computer 6 and collated together with the password collation, the security is improved.
[0028]
In the above description, the description has been made assuming that the password for confirmation input as an erroneous input is temporarily stored in the ATM 1. However, for access to a relatively small network or the like, the storage device may store and manage the data. Further, the allowable number of erroneous inputs is limited to three, but is not limited to this. The number of erroneous inputs may be determined as appropriate according to the security level, and the number of times of inputting the confirmation password temporarily stored in the storage unit may be determined as appropriate. Just fine.
[0029]
In step S11 in FIG. 3, the "bank name" is displayed. However, the confirmation password is transmitted to the storage device 8 of the host computer 6, and when the confirmation password is determined to be incorrectly input, the host computer 6 returns "hint information (<< red feather >> in the figure)" together with "password mismatch". The hint information display 128 is set in advance when a user opens an account, and it is known from Japanese Patent Publication No. 6-56610 that the hint information display 128 is registered in the host computer in advance. The hint information is, in principle, recognized as long as it is characters or numbers other than the confirmation password itself. For example, an electronic melody sound or a figure other than character information may be used.
[0030]
The present invention is not limited to the above embodiment. For example, the present invention can be applied to a case where payment is made by card at a gas station, a convenience store, a supermarket, or the like. Further, the present invention can also be applied to network banking in which a user can receive a transfer procedure and various services from home without going to an ATM installation location.
[0031]
A technical concept other than the above-described claim 1 will be described.
(1) In the personal identification system according to claim 1,
When the registered password stored in the storage device does not match the input verification password, re-input of the verification password is permitted a predetermined number of times, and the input verification password is different from the previous password. Identify and notify whether they are the same. As a result, the user can determine whether the input is an erroneous operation or has input the password information registered for another system.
[0032]
(2) In the personal identification system according to claim 1,
When the registered personal identification information stored in the storage device does not match the inputted identification personal identification information, the issuer who issued the first storage medium according to the user identification information read from the first storage medium. Notify information. Thereby, the user can confirm the correlation between the input verification password information and the first storage medium (bank card). Further, even in a situation where it is taken into the ATM and cannot be visually checked, the bank name of the inserted bank card is displayed, so that it is possible to easily determine when a bank card other than the expected one is inserted.
[0033]
(3) In the personal identification system according to claim 1,
The entered identification password is stored in the personal identification device, and when the registered identification information stored in the storage device does not match the identification password, the user is prompted to re-enter the identification password. Then, the re-entered confirmation password information is compared with the previously stored confirmation password information, and only when the passwords are different from each other, are re-collated with the registered password information. Therefore, the frequency of communication with a host device such as a host computer can be reduced.
[0034]
【The invention's effect】
The present invention described above has the following effects. The registered password information is read out based on the user identification information read from the first storage medium, and the read password information is compared with the input verification password information. If the two password information do not match, the second storage medium is accepted. Since the registered password information for the second storage medium is read out and compared with the already-confirmed password for confirmation, the number of times of inputting the password information (number) can be reduced, and the The annoyance can be reduced. In addition, the chance of seeing the password information by a third party is reduced, so that a security effect is also achieved.
[Brief description of the drawings]
FIG. 1 is a conceptual diagram of an identity verification system of the present invention.
FIG. 2 is a control block diagram of the personal identification device of the present invention.
FIG. 3 is a flowchart of the identity verification system of the present invention.
FIG. 4 is an explanatory diagram showing a display example of an operation guide screen of the present invention.
FIG. 5 is an explanatory diagram showing a display example of an operation guide screen according to the present invention.
FIG. 6 is a flowchart of the identity verification system of the present invention.
[Explanation of symbols]
1 Identity verification device (ATM)
2 User card 2a Bank A card 2b Bank B card 3,6,7 Host computer 4,8,9 Storage device 11 Card processing unit

Claims (1)

An identity verification device having an information reading unit for reading user identification information and the like from at least first and second storage media storing user identification information relating to information to be processed, and an operation unit capable of inputting identification password information for confirmation When,
A storage device for storing registered password information associated with the information to be processed,
In the personal identification system in which the input personal identification information matches the registered personal identification information stored in the storage device, the personal identification system determines that the user is the user.
The registered password information stored in the storage device is read based on the user identification information read from the first storage medium, and the read password information is compared with the input verification password information. When
Receiving the user identification information from the second storage medium, reading the registered password information stored in the storage device based on the information read from the second storage medium, An identity verification system characterized by collating with personal identification information.

Images