JP2005038220A - Method and system for finding out unauthorized use of card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To early find out the unauthorized use of an illegally copied card to thereby prevent the occurrence of damage due to the unauthorized use without performing troublesome procedure of notifying the use of the card to a settlement system before the use by using a magnetic stripe type card with small storage capacity. <P>SOLUTION: Code information collected for each card in a credit company settlement system is stored in both an in-settlement system storage means and an in-credit card storage means, and the coincidence of those code information is confirmed when a card is used. When those code information are coincident with each other, it is judged that the card is normal, and settlement processing is carried out, and the code information is changed every time, and the new code information is overwritten in the in-settlement system storage means and the in-credit storage means. Thus, when the normal card is used before the card is illegally copied and used, the code information of the in-settlement system storage means is rewritten, so that the unauthorized use of the card can be found out early when the unauthorized card is used. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a technique for early detection of unauthorized use of an illegally copied card and preventing damage caused by unauthorized use in a payment system using a card such as a credit card.

  Conventionally, as a technique for preventing unauthorized use by a card, for example, those described in Patent Document 1, Patent Document 2, or Patent Document 3 are known.

  Patent Document 1 describes a system that prevents unauthorized use using an IC card and an IC card terminal. This system holds a lot of information on the IC card, such as the remaining amount and the terminal number used last time. IC card terminals also have an algorithm for preventing unauthorized use to prevent unauthorized use.

Further, in the techniques described in Patent Document 2 and Patent Document 3, unauthorized use is prevented by a method of using a card after accessing the card settlement system before using the card.
JP-A-6-161354 JP 2001-243391 A Japanese Patent Laid-Open No. 2002-42028

  However, in the technique described in Patent Document 1, a card must be able to hold a large amount of information, and a complicated algorithm is also required for an IC card terminal. Therefore, it is not possible to deal with the magnetic stripe type card that is currently popular.

  The techniques described in Patent Document 2 and Patent Document 3 are bothersome because it is necessary to notify the payment system of the card usage before using the card.

  The object of the present invention is to use a fraudulently copied card using a card with a small storage capacity such as a magnetic stripe type and without a troublesome procedure such as notifying the settlement system of the use before using the card. Is to detect damage early and prevent damage caused by unauthorized use.

  In order to achieve the above object, according to the present invention, a storage means (for example, a magnetic stripe) of a card such as a credit card can have code information assigned by a payment system of a credit company, for example. The code information in the card is configured to rewrite the code numbered by the credit company payment system every time the card is used. When the card is issued (or including initialization when the magnetic information of the card is broken), the code information assigned in advance by the credit company payment system is written in the in-card storage means.

  When the card is used, the credit card member store terminal transmits the code information obtained from the payment system of the credit company to the payment system simultaneously with the card ID such as the user number stored in the in-card storage means. .

  On the other hand, in the payment system of the credit company, the code information stored in the card storage means at the time of card issuance or card initialization is stored in a predetermined storage means in association with the card ID. The settlement system retains this code information at least until the next card use. When accessing the payment system when using a credit card, the payment system compares the previously issued code information, which is part of the in-card information transmitted from the card, with the code information held in the payment system. If they are equal, the card is determined to be a legitimate card, the requested settlement process is performed, and another code information is newly assigned and transmitted to the card. If the code information of the card and the code information owned by the payment system do not match in the above determination, it is determined that the card has been illegally copied, and the use of the card is suppressed.

  According to the present invention, the numbering, holding, and checking functions of the center number are added to the existing payment system, and the processing method at the time of data transmission / reception is slightly changed in the credit card member store terminal. By keeping the center number in the stripe type card, it is possible to confirm at the time of use whether or not the card has been illegally copied, and unauthorized use can be found at an early stage. After unauthorized use is discovered, unauthorized use can be prevented at an early stage by prohibiting the use of all cards with the card ID. Such correspondence can be realized by making a simple change to the existing system. The card used may be a simple magnetic stripe type.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the drawings.

  FIG. 1 shows the overall configuration of a credit card company payment system, a credit card, and a credit card member store terminal. A payment system 1 of a credit card company is a computer system that processes various types of payment information sent from a credit card member store terminal 3 via a network, and includes a processing device, a storage device, a communication device, and the like. It is. In particular, the settlement system 1 has a “center numbering code” for each card numbered in the system.

  The credit card 2 is a magnetic stripe type card, and holds a “center numbering code” in addition to a card number or the like as information in the card.

  The credit card member store terminal 3 is a computer system that can communicate with the payment system 1 of a credit card company via a network, and includes a processing device, a storage device, a communication device, and the like. The credit card member store terminal 3 includes a reader / writer that reads and writes the magnetic stripe of the credit card 2. The credit card member store terminal 3 reads the “center numbering code” in the card 2 together with the card number when making a payment by the credit card 2 (step 11) and transmits it to the payment system 1 (step 12). . The settlement system 1 checks the center numbering code. If it is normal, the settlement system 1 performs settlement processing and transmits the processing result including the new numbering code to the terminal 3. The credit card member store terminal 3 receives the new “center numbering code” (step 13) and overwrites it in the card 2 (step 14).

  FIG. 2 shows a normal case where the authorized card user uses the credit card 2 in the system of FIG.

  When a new credit card is issued, the payment system 1 assigns a “center numbering code”, stores the card number and the center numbering code in the center numbering code holding DB, and stores them in the issued card. The numbered center numbering code is stored (step 21). When a regular card user uses the card, the credit card member store terminal transmits the payment information related to the card use to the payment system 1, and at that time, the “center numbering code” in the card 2 is used as the card number. At the same time, it is transmitted to the settlement system 1 (step 22).

  The settlement system 1 confirms the expiration date of the card in response to the card use request, and at the same time, obtains the center numbering code transmitted as a part of the card information and the center number corresponding to the card number held in the settlement system 1. Check if the number codes are equal. At this time, since the “center numbering code” of the transmitted card is equal to the “center numbering code” possessed by the settlement system 1, it is determined that there is no problem with confirmation regarding unauthorized copying. In addition, if there is no problem in checking the expiration date, the card is permitted to be used and the settlement process requested from the member store terminal is executed. In this case, the payment system 1 assigns a new “center numbering code” (step 23), and sends it to the credit card member store terminal and the new “center numbering code”. (Step 24). The newly assigned “center numbering code” is overwritten in the settlement system 1 as a center numbering code corresponding to the card number. The credit card member store terminal overwrites the card 2 with a new “center numbering code”.

  FIG. 3 shows an unauthorized case where an unauthorized card user uses a credit card in the system of FIG.

  The credit card unauthorized copy person copies the card information and duplicates the card without being noticed by the authorized card user (step 31). At this time, information on the “center numbering code” is also copied together with the card number and the like.

  When the authorized card user uses the card to pay for the purchase of goods or the provision of services, the credit card member store terminal sends the “center numbering code” in the authorized card 2 to the payment system 1. Transmit (step 32). At this point, the card has been illegally copied, but the payment system 1 cannot recognize the fact of illegal copying and permits use in the same manner as in the normal case (step 33). In this case, as in the normal case described in FIG. 2, the settlement system 1 assigns a new “center numbering code” and registers the center numbering code in the center numbering code holding DB. The card member store terminal overwrites the new “center numbering code” received from the settlement system 1 in the card 2.

  When the unauthorized card user uses the unauthorized copy card 4, the credit card member store terminal transmits the “center numbering code” in the unauthorized copy card 4 to the payment system 1 as in the normal case (step 34). ). The payment system 1 checks the illegally copied card usage request in the same manner as in the normal case. In this case, since the “center numbering code” in the transmitted unauthorized copy card 4 is different from the “center numbering code” held in the payment system 1, the payment system 1 is illegally copied. The use of the card 4 is restricted (step 35).

  According to the above embodiment, when a credit card or the like is illegally copied and used, it can be detected early. In some cases, a fraudulent card is created by illegal copying if the card is used at a certain store. In this case, the person who performed the illegal copying may not be aware of where the illegal copying was done. In some cases, the unauthorized card is used after a certain period of time after unauthorized copying. If a legitimate card user uses the legitimate card during that period, the center numbering code stored in the payment system is rewritten, so that the fraudulent card can no longer be used and it can be found that the fraudulent copy has been made. In addition, if a fraudulent card is used prior to the use of a legitimate card, it will be fraudulently copied to that card with the use of a legitimate card after that (although it is not known whether it was a legitimate card or a fraudulent card) Can be found. Therefore, by disallowing the use of the card with the card number, it is possible to prevent the subsequent use of an unauthorized card and to reduce the loss of the credit card company.

  If the credit card is affiliated with a bank or the like, the center numbering code may be rewritten when the user makes a balance inquiry or deposit withdrawal. Frequent rewriting makes it easier to find illegal copies. In the above embodiment, when the center numbering code is rewritten, the counted number is a counted up value, but a random number or the like may be used. Further, the card number is used as the card ID for specifying the card. However, the present invention is not limited to this, and any information that can specify the card can be used as the card ID.

The figure which shows schematic structure of a credit company payment system, a credit card member store terminal, and a credit card Illustration for explaining a case where a regular card user uses a credit card Illustration for explaining a case using a credit card copied by an unauthorized card user

Explanation of symbols

  1. Credit card payment system 2. Regular credit card 3. Credit card member store terminal 4. Credit card copied illegally.

Claims (4)

A card fraud detection method applied to a payment system that performs payment processing by receiving information stored in a card via a network,
Storing a card ID for identifying the card and predetermined code information in the in-card storage means when issuing a card to the user or when initializing the card;
Storing the card ID and code information in correspondence in the storage means of the payment system;
When using the card, reading the card ID and code information stored in the in-card storage means, and transmitting to the payment system via a network;
When the payment system receives the card ID and code information, and determines whether or not the code information corresponding to the card ID matches that stored in the storage means of the payment system. Determining whether the card has been used normally, and determining that an unauthorized copy has been made on the card if the card does not match. The method of detecting unauthorized use of a card according to claim 1,
When it is determined that the card is normally used, new code information is generated, and the code corresponding to the card ID stored in both the storage means in the card and the storage means of the payment system A card unauthorized use finding method, further comprising the step of rewriting information with the generated new code information. A card fraud detection system applied to a payment system that receives information stored in a card via a network and performs payment processing,
Storage means of a payment system that stores the same information as the card ID and code information stored in the storage means in the card at the time of card issuance or card initialization;
Means for receiving the information when the card ID and code information stored in the in-card storage means are transmitted via the network when the card is used;
It is determined whether or not the received card ID and code information match those stored in the storage means of the payment system. If they match, it is determined that the card is being used normally, and does not match. And a means for determining unauthorized copying of the card. In the unauthorized card usage detection system according to claim 3,
When it is determined that the card is normally used, new code information is generated, and the code corresponding to the card ID stored in both the storage means in the card and the storage means of the payment system A card unauthorized use detection system, further comprising means for rewriting information with the generated new code information.

Images