JP2005259089A - Payment management method and system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a payment management method and a payment management system capable of accomplishing both of safety and convenience in use of a cash card when the safety of a payment terminal device such as an ATM is reinforced by means of an IC card and biometrics authentication. <P>SOLUTION: In a host computer, a payment limit which is applied when authentication is carried out according to read information from a magnetic stripe is registered previously. When a payment request is made from an IC card-ready ATM, no payment limit is put because the information is read from the IC chip. When the payment request is made from a non-IC card-ready ATM, an amount of payment is limited within the payment limit because the information is read from the magnetic stripe. When biometrics authentication using the IC card is carried out at the ATM, information recognizing the completion/incompletion of biometrics authentication is transmitted to the host computer from the ATM, and it is determined whether the payment limit is applied or not. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a withdrawal management method and withdrawal management that achieves both safety and convenience in using a cash card when enhancing the safety of a withdrawal terminal device such as an ATM using an IC card or biometric authentication. It is about the system.

  When using a bank ATM or other ATM (cash dispenser) to withdraw or transfer cash from a deposit account, the person was identified using the cash card issued for each account and entered into the ATM. In general, a method for authenticating a person by making an inquiry between a personal identification number and a personal identification number corresponding to the account registered in advance in a host is used. Cash cards currently issued by banks and the like are mainly so-called magnetic cards in which a magnetic tape storing identification information such as an account number for identifying the person is attached to a plastic card.

  However, since the magnetic card can perform skimming to read data from the magnetic stripe portion of the cash card relatively easily, there are problems in terms of safety such as an unauthorized withdrawal accident due to skimming. In response to such safety problems, some financial institutions have recently provided so-called IC cards equipped with IC chips as storage media on cash cards instead of magnetic tape ( For example, http://www.ufjbank.co.jp/kouza/allone/iccard.html).

  Since the IC card uses a nonvolatile memory such as an EEPROM, reading of information from the memory is not physically easy. In addition, as shown in the comparison table of the IC card and the magnetic card in FIG. Compared to the above, the capacity of the storage medium is large, and it becomes possible to enhance the personal authentication function by means of encryption or the like, thereby improving safety. As a highly secure authentication method using the storage area of the IC card, biometric information such as a fingerprint is stored in the IC card in advance, and the biometric information read from the terminal is compared with the biometric information stored in the IC card. Thus, an invention for performing personal authentication is disclosed (for example, see Patent Document 1).

  In addition, as a method to further enhance the security of authentication, a secure chip separated from the cash card is used, and when stronger authentication is required, customer-specific information issued separately from the cash card is stored. An invention for performing personal authentication using a secure chip is also disclosed (see, for example, Patent Document 2).

JP 2000-215172 A JP 2002-318903 A

  Thus, although it is possible to increase the security of personal authentication by using an IC card, there is a problem in terms of facility update in order to spread the IC card as a cash card. In order to enable withdrawal by IC card, a function for reading information from the IC is required in the withdrawal terminal device such as ATM, but in the present situation where most of the cash cards used are magnetic cards. Also, most of the withdrawal terminal devices such as ATM do not have an IC card reading function.

  If the storage medium used for the cash card is limited to only the IC chip, the IC card user will be able to withdraw cash only with an ATM or the like that supports the IC card. However, so that it can be used, many IC cards are dual-purpose cards with magnetic stripes. With such a cash card, ATMs that do not support IC cards will eventually be no different from using a magnetic card, so the advantages of IC cards in terms of safety can be demonstrated. It will disappear.

  In the case of authentication using the biometric information described in Patent Document 1, the ATM is not only compatible with an IC card but also needs to have a biometric information reading function and a collation function. Opportunities to exhibit sex will be further reduced. Even in the case of authentication using the secure chip described in Patent Document 2, the ATM must have a secure chip reading function, and in addition, the user must carry not only the card but also the secure chip. Will occur.

  Thus, in the case of newly providing a highly secure authentication method, there is a problem that sufficiently high security cannot be utilized until all ATMs have a function corresponding to the authentication method. In order to achieve both safety and user convenience, not only providing a highly secure authentication means, but also a countermeasure when a highly secure authentication means cannot be used is required.

  The present invention has been made in response to such a problem, and corresponds to an IC card or the like when enhancing the safety of a withdrawal terminal device such as an ATM using an IC card or biometric authentication. To provide a withdrawal management method and a withdrawal management system that can balance the safety and convenience of using a cash card by setting an upper limit on the amount that can be withdrawn from an unpaid ATM. It is intended.

  According to a first invention for solving such a problem, a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal. A method for managing money, wherein the host computer receives, from the withdrawal terminal device, withdrawal request information including at least an account number of a deposit account of the client and a withdrawal request amount; and the host computer Determining, from the withdrawal request information, determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account, and the host computer is configured to store the deposit account corresponding to the account number. Referring to the master file, the step of determining whether or not the upper limit amount of withdrawal is set corresponding to the determination information, and if the upper limit amount is not set, DOO computer, a dispensing management method characterized by comprising the steps of: transmitting an indication signal indicating that may be dispensing the withdrawal request amount to the dispensing terminal device.

  A second invention is a withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal. The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of the deposit account of the requester and a withdrawal request amount; and the host computer, the withdrawal request information. From the step of specifying determination information for determining whether or not the upper limit amount of withdrawal is set in the deposit account, the host computer refers to the master file of the deposit account corresponding to the account number, A step of determining whether or not an upper limit amount of withdrawal is set corresponding to the determination information; and if the upper limit amount is set, the host computer A dispensing management method characterized by comprising the steps of: transmitting an instruction signal indicating that it can not withdraw exceed the amount in the dispensing terminal apparatus.

  As described above, the present invention specifies the authentication method at the time of the withdrawal request operation as the determination information from the withdrawal request information transmitted from the withdrawal terminal device such as ATM, and the authentication method is simple. If the authentication method is set to the upper limit amount from the judgment information by registering the upper limit amount corresponding to the above in the account file of the deposit account, the withdrawal possible amount is set to the upper limit amount. By limiting to the above, even if the cash card is illegally used, the damage can be suppressed to the upper limit amount. The determination information can be specified by using, for example, an IC card, including identifiers indicating that biometric authentication has been performed, or not including these identifiers. Withdrawal in these inventions mainly corresponds to the case of withdrawing cash from the terminal device for withdrawal, but other than the transfer or transfer, cash is not withdrawn but the balance is reduced from the deposit account. It includes all transactions that you want to make.

  In the first invention, for example, in the case of a withdrawal operation using an IC card, since the safety of personal authentication is strengthened and the upper limit is not set, the IC card can be installed using an ATM corresponding to the IC card. This corresponds to the case of using and withdrawing money, and even if an upper limit is set, the money designated by the client can be withdrawn as it is. In the second invention, for example, when the withdrawal operation performed by the owner of the IC card is accepted by the information read from the magnetic stripe instead of from the IC chip, the withdrawal can be made only within the upper limit amount. , Corresponding to the case where withdrawal is made using an IC card at an ATM that is not compatible with the IC card, and data read from the magnetic stripe is transmitted, and the withdrawal amount is within the preset upper limit amount range Can be limited to.

  In the second invention, the master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount, and the host computer cannot withdraw from the withdrawal terminal device. As the upper limit amount, an amount obtained by subtracting the cumulative amount from the upper limit amount may be transmitted to the withdrawal terminal device.

  If the maximum amount is set as one time, there is a risk that small withdrawals may be repeated many times as a means of unauthorized use. Therefore, by using the above method, for example, by setting a withdrawal limit for one day and checking the cumulative amount, it is possible to suppress damage to the maximum amount even if small withdrawals are repeated. Become.

  A third invention is a withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal. The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of the deposit account of the requester and a withdrawal request amount; and the host computer, the withdrawal request information. From the step of specifying determination information for determining whether or not the upper limit amount of withdrawal is set in the deposit account, the host computer refers to the master file of the deposit account corresponding to the account number, A step of determining whether or not an upper limit amount of withdrawal is set corresponding to the determination information; and if the upper limit amount is set, the host computer A request amount is compared with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount, and when the withdrawal request amount does not exceed the upper limit amount, the host computer, And a step of transmitting to the withdrawal terminal device an instruction signal indicating that the withdrawal request amount may be withdrawn.

  A fourth invention is a withdrawal management method in which a host computer that receives a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal. The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of the deposit account of the requester and a withdrawal request amount; and the host computer, the withdrawal request information. From the step of specifying determination information for determining whether or not the upper limit amount of withdrawal is set in the deposit account, the host computer refers to the master file of the deposit account corresponding to the account number, A step of determining whether or not an upper limit amount of withdrawal is set corresponding to the determination information; and if the upper limit amount is set, the host computer A step of comparing the request amount with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount, and when the withdrawal request amount exceeds the upper limit amount, the host computer, And a step of transmitting to the withdrawal terminal device an instruction signal indicating either that the upper limit amount may be withdrawn or that a withdrawal request cannot be accepted. It is a management method.

  In the third invention and the fourth invention, when the withdrawal request corresponds to the case where the upper limit amount is set, for example, the withdrawal operation is performed using the IC card in an ATM which does not support the IC card. When the data read from the magnetic stripe is received, the withdrawal request amount input to the withdrawal terminal device is compared with the upper limit amount to determine whether or not withdrawal is possible. Even when the upper limit amount is set, if the withdrawal request amount does not exceed the upper limit amount, the amount designated by the requester can be withdrawn as it is. On the other hand, if the upper limit is exceeded, withdrawal is refused or withdrawal within a range not exceeding the upper limit is permitted.

  According to a third aspect and a fourth aspect of the invention, the master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount, and the host computer stores the withdrawal request amount. And the upper limit amount, the cumulative amount may be added to the withdrawal request amount to determine whether or not the upper limit amount is exceeded.

  Using the above method, for example, by setting a withdrawal limit for one day and checking the cumulative amount, it is possible to reduce damage to the maximum amount even if small withdrawals are repeated. This is the same as in the case of the second invention.

  Furthermore, in the first to fourth inventions, in the step of specifying the determination information, the host computer reads out the account number in the withdrawal terminal device from the withdrawal request information. In the step of detecting identification information indicating the type of the storage medium, specifying the type of the storage medium as the determination information, and determining whether the upper limit amount of the withdrawal is set, the host computer corresponds to the account number It is also possible to refer to the master file of the deposit account to be checked and determine whether the upper limit amount of withdrawal is set according to the type of the storage medium.

  In the above method, by registering the upper limit amount corresponding to the type of the storage medium mounted on the cash card in the account file of the deposit account, a highly secure storage medium such as an IC chip provided in the IC card can be obtained. If it is not used for authentication, the amount of money that can be withdrawn is limited to the above-mentioned maximum amount, so that even if the cash card is illegally used, the damage can be suppressed to the above-mentioned maximum amount. .

  Furthermore, the first to fourth inventions include a step of identifying a type of a storage medium in which the withdrawal terminal device stores an account number of a deposit account held by the client from a cash card inserted by the client. The withdrawal terminal device selects identification information indicating the type of the storage medium corresponding to the type of the storage medium; and the withdrawal terminal device is stored in the storage medium. A step of reading an account number; a step of the withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester; and a withdrawal terminal device that sends the account number and the withdrawal to the host computer. Transmitting withdrawal request information including at least the money request amount and the identification information.

  In the above method, in order to specify the type of storage medium in the host computer, for example, in the ATM corresponding to the IC card, the type of the storage medium is identified from the inserted cash card, and the identification information is used as the withdrawal request information. The procedure for inclusion is specified. In this method, for example, when an ATM reads a storage medium from which an account number is read, an identifier indicating the type of the medium is attached to a header or the like and transmitted to the host computer.

  Further, according to the first to fourth aspects of the invention, the withdrawal terminal device stores the account number of the deposit account of the client stored in the storage medium of the cash card inserted by the client, and the account number. A step of reading identification information indicating the type of the stored storage medium; a step of receiving a withdrawal request amount by an input operation of the requester; and a step of receiving the withdrawal request by the requester. A step of transmitting withdrawal request information including at least the account number, the withdrawal request amount, and the identification information.

  The above method also specifies the procedure for including the identification information of the type of storage medium in the withdrawal request information. In this method, identification information for specifying the type of the storage medium is stored in advance in the storage medium of the cash card, and the identification information is read together with the account number and transmitted to the host computer.

  Furthermore, in the first to fourth inventions, there are at least two types of the storage medium, that is, an IC chip and a magnetic tape. In the master file of the deposit account, the storage medium is a magnetic tape. In some cases, an upper limit amount of withdrawal is set.

  The type of storage medium in the present invention includes an IC chip excellent in safety and a magnetic tape that is most popular and excellent in convenience. By setting an upper limit for magnetic tapes that are inferior in terms of safety, when trying to withdraw money from an ATM that does not support IC chips, the magnetic stripe part with the magnetic tape attached to the card is identified. Since the information is used, even if the data of the magnetic stripe is skimmed, it is possible to suppress damage within the set upper limit amount.

  Furthermore, in the first to fourth inventions, in the step of specifying the determination information, the host computer authenticates the client in the withdrawal terminal device from the withdrawal request information. A step of detecting whether or not the user authentication has been performed in the withdrawal terminal device, and determining whether or not an upper limit amount of the withdrawal is set. In the case, the host computer refers to the master file of the deposit account corresponding to the account number, and whether or not the upper limit amount of withdrawal is set depending on whether or not personal authentication is performed in the withdrawal terminal device. It can also be characterized by determining.

  In the above method, when the user authentication can be performed by a method such as biometric authentication in a withdrawal terminal device such as an ATM, the upper limit amount corresponding to whether or not the user authentication is completed in the withdrawal terminal device is set. By registering in the account file of the deposit account, if the user authentication is not performed in the terminal device for withdrawal, the cash card should be removed by limiting the possible withdrawal amount to the above upper limit amount. Even in the case of unauthorized use, the damage can be reduced to the above upper limit.

  Furthermore, the first to fourth inventions include a step of identifying a type of a storage medium in which the withdrawal terminal device stores an account number of a deposit account held by the client from a cash card inserted by the client. When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information; and the withdrawal terminal device Reading the first biological information from the client's body, the withdrawal terminal device reading the second biological information stored in the storage medium, and the withdrawal terminal device Reading the account number stored in the storage medium, the withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester, and the withdrawal terminal device 1's When it is determined that the first biometric information and the second biometric information match by comparing the body information and the second biometric information, the account number, the withdrawal request amount, Transmitting withdrawal request information including at least the personally authenticated information. The withdrawal terminal device identifying a type of a storage medium storing an account number of a deposit account held by the requester from a cash card inserted by the requester; and the withdrawal terminal device includes the storage If the medium type is identified as an IC chip, the step of requesting the requester to obtain biometric information, and the withdrawal terminal device receive a first request from the requester's body. A step of reading biometric information; a step in which the withdrawal terminal device delivers the first biometric information to the cash card; and a computing device provided in the cash card comprising: A step of comparing the second biological information stored in the storage medium and outputting a determination result for determining whether or not the first biological information and the second biological information match with each other to the withdrawal terminal device. When The withdrawal terminal device reading the account number stored in the storage medium; the withdrawal terminal device accepting a withdrawal request amount by the requester's input operation; and the withdrawal If the determination result is determined that the first biometric information and the second biometric information match, the terminal device sends the account number, the withdrawal request amount, and the host computer to the host computer. Transmitting withdrawal request information including at least personal authentication information.

  In the above-described method, in order to identify whether or not the user authentication is completed at the withdrawal terminal device in the host computer, for example, in the ATM corresponding to the IC card, the biometric information stored in the IC chip provided in the IC card Procedures for reading the client's biometric information and comparing them to authenticate each other, and including identity-authenticated information indicating that the person has been authenticated in the withdrawal request information when the identity is confirmed Is specified. Or collation of biometric information is good also as performing arithmetic processing by CPU provided in the IC card. In these methods, for example, when the personal authentication is performed on the ATM side, a header including an identifier indicating that the personal authentication has been performed is attached and transmitted to the host computer.

  Furthermore, in the first to fourth inventions, in the step of specifying the determination information, the host computer authenticates the client in the withdrawal terminal device from the withdrawal request information. In the step of detecting authentication means information indicating a means, identifying an authentication means that has been authenticated in the withdrawal terminal device as the judgment information, and determining whether an upper limit amount of withdrawal is set The host computer refers to the master file of the deposit account corresponding to the account number and determines whether or not the upper limit amount of withdrawal is set by the authentication means that has been authenticated in the withdrawal terminal device. It can also be characterized by determining.

  The above method corresponds to the authentication means for authenticating the person with the withdrawal terminal device when the authentication can be performed by a plurality of authentication means such as biometric authentication in the withdrawal terminal apparatus such as ATM. By registering the maximum amount in the account file of the deposit account, authentication with relatively low safety is possible by restricting the amount that can be withdrawn to the above maximum amount by the authentication means performed in the terminal device for withdrawal. Even if the means is stolen and the cash card is illegally used, the damage can be suppressed to the above upper limit.

  Furthermore, the first to fourth inventions include a step of identifying a type of a storage medium in which the withdrawal terminal device stores an account number of a deposit account held by the client from a cash card inserted by the client. When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information; and the withdrawal terminal device Reading the first biological information from the client's body, the withdrawal terminal device reading the second biological information stored in the storage medium, and the withdrawal terminal device Reading the account number stored in the storage medium, the withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester, and the withdrawal terminal device 1's When it is determined that the first biometric information and the second biometric information match by comparing the body information and the second biometric information, the account number, the withdrawal request amount, Transmitting withdrawal request information including at least the personally authenticated information. The withdrawal terminal device identifying a type of a storage medium storing an account number of a deposit account held by the requester from a cash card inserted by the requester; and the withdrawal terminal device includes the storage If the medium type is identified as an IC chip, the step of requesting the requester to obtain biometric information, and the withdrawal terminal device receive a first request from the requester's body. A step of reading biometric information; a step in which the withdrawal terminal device delivers the first biometric information to the cash card; and a computing device provided in the cash card comprising: A step of comparing the second biological information stored in the storage medium and outputting a determination result for determining whether or not the first biological information and the second biological information match with each other to the withdrawal terminal device. When The withdrawal terminal device reading the account number stored in the storage medium; the withdrawal terminal device accepting a withdrawal request amount by the requester's input operation; and the withdrawal If the determination result is determined that the first biometric information and the second biometric information match, the terminal device sends the account number, the withdrawal request amount, and the host computer to the host computer. Transmitting withdrawal request information including at least personal authentication information.

  In the above method, in order to specify the means for authenticating the person performed by the withdrawal terminal device in the host computer, for example, in the ATM corresponding to the IC card, the biometric information stored in the IC chip provided in the IC card and In order to include authentication means information indicating that authentication has been performed by biometric authentication in the withdrawal request information when the individual authentication is performed by reading the client's biometric information and comparing it. This procedure is specified. Or collation of biometric information is good also as performing arithmetic processing by CPU provided in the IC card. In these methods, for example, when personal authentication is performed on the ATM side, a header including an identifier indicating biometric authentication is attached and transmitted to the host computer.

  Furthermore, the withdrawal management methods according to the first to fourth aspects of the invention can be configured as a withdrawal management system including a withdrawal terminal device and a host computer for executing these withdrawal management methods. .

  In other words, the invention related to the withdrawal management system is a withdrawal management system comprising a plurality of withdrawal terminal devices and a host computer connected to the withdrawal terminal device through a network, and at least a part of the withdrawals. The terminal device for the account accepts the account number reading means for reading the account number of the deposit account held by the requester from the cash card storage medium inserted by the requester for withdrawal, and the withdrawal request amount by the input operation of the requester Withdrawal request amount receiving means, and withdrawing request information transmitting means for sending withdrawal request information including at least the account number and the withdrawal request amount to the host computer, the host computer, A withdrawal request information receiving means for receiving the withdrawal request information from the withdrawal terminal device, and an upper limit of withdrawal to the deposit account from the withdrawal request information Determination information specifying means for specifying determination information for determining whether or not the information is set, and the host computer refers to a master file of a deposit account corresponding to the account number and outputs the information corresponding to the determination information. An upper limit setting judging means for judging whether or not an upper limit amount of money is set, and an instruction signal indicating that the withdrawal request amount may be withdrawn when the upper limit amount is not set. And a withdrawal instruction transmitting means for transmitting to the terminal device for use.

  In the invention relating to the above-mentioned withdrawal management system, the withdrawal instruction transmitting means sends an instruction signal indicating that the withdrawal amount cannot exceed the upper limit amount when the upper limit amount is set. It can also be characterized by transmitting to a terminal device. In the master file, a cumulative amount that has been withdrawn in the past corresponding to the upper limit amount is stored, and the withdrawal instruction transmission means, as the upper limit amount that cannot be withdrawn from the withdrawal terminal device, An amount obtained by subtracting the accumulated amount from an upper limit amount may be transmitted to the withdrawal terminal device.

  In the invention relating to the withdrawal management system, the host computer compares the withdrawal request amount and the upper limit amount when the upper limit setting determination unit determines that the upper limit amount is set. Then, provided with an upper limit excess determining means for determining whether the withdrawal request amount exceeds the upper limit amount, and if the withdrawal request amount does not exceed the upper limit amount, the withdrawal instruction transmission means, An instruction signal indicating that the withdrawal request amount may be withdrawn may be transmitted to the withdrawal terminal device. Further, the host computer compares the withdrawal request amount with the upper limit amount when the upper limit setting determination unit determines that the upper limit amount is set, and the withdrawal request amount is determined to be the upper limit amount. If there is an upper limit excess determining means for determining whether the amount exceeds the amount, and the withdrawal request amount does not exceed the upper limit amount, the withdrawal instruction transmission means may withdraw the maximum amount. Or an instruction signal indicating that the withdrawal request cannot be accepted may be transmitted to the withdrawal terminal device. In these inventions, the master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount, and the upper limit excess determining means compares the withdrawal request amount with the upper limit amount. In the above, the cumulative amount may be added to the withdrawal request amount to determine whether or not the upper limit amount is exceeded.

  Further, the invention relating to the withdrawal management system is characterized in that the withdrawal terminal device includes a storage medium identification unit for identifying a type of the storage medium of the cash card, and a storage medium corresponding to the type of the storage medium. Identification information selecting means for selecting identification information indicating the type of medium, wherein the withdrawal request information transmitting means transmits withdrawal request information including the identification information to the host computer, and the host computer The determination information specifying means detects the identification information from the withdrawal request information, specifies the type of storage medium specified from the identification information as determination information, and the upper limit setting determination means includes the account number It is also possible to determine whether or not the upper limit amount of withdrawal is set according to the type of the storage medium with reference to the master file of the deposit account corresponding to Kill. The withdrawal terminal device further comprises identification information reading means for reading identification information indicating a type of the storage medium stored in a storage medium of a cash card inserted by the requester, and the withdrawal request information The transmission means transmits the withdrawal request information including the identification information to the host computer. In the host computer, the determination information specifying means detects the identification information from the withdrawal request information, and from the identification information The specified storage medium type is specified as determination information, and the upper limit setting determining means refers to a deposit account master file corresponding to the account number, and sets the upper limit amount of withdrawal according to the storage medium type. It can also be characterized by determining whether it has been done. In these inventions, there are at least two types of the storage medium, that is, an IC chip and a magnetic stripe, and the master file of the deposit account has an upper limit of withdrawal when the storage medium is a magnetic stripe. It may be characterized in that an amount is set.

  Furthermore, the invention according to the withdrawal management system is characterized in that the withdrawal terminal device includes a storage medium identifying means for identifying a type of a storage medium storing an account number of a deposit account held by the requester from the cash card. When the type of the storage medium is identified as an IC card, biometric authentication request means for requesting the requester to read biometric information, and first biometric information from the requester's body The biometric information reading means for reading the biometric information, the biometric information reading means for reading the second biometric information stored in the storage medium, the first biometric information and the second biometric information, Biometric authentication means for determining whether the biometric information and the second biometric information match, and when the biometric authentication means determines that the first biometric information and the second biometric information match, Withdrawal The request information transmitting means transmits withdrawal request information including authentication information indicating that biometric authentication has been performed to the host computer. In the host computer, the determination information specifying means is configured to extract the withdrawal request information from the withdrawal request information. The authentication information is detected, and it is specified as determination information that biometric authentication has been performed from the authentication information, and the upper limit setting determination unit refers to the master file of the deposit account corresponding to the account number, It may be characterized in that it is determined whether or not an upper limit amount of withdrawal is set based on unpaid. The withdrawal terminal device has a storage medium identifying means for identifying a type of a storage medium storing an account number of a deposit account held by the client from the cash card, and a type of the storage medium is identified as an IC card. In this case, biometric authentication requesting means for requesting the requester to read biometric information, biometric information reading means for reading first biometric information from the client's body, and the first biometric information A first biometric information delivery means for delivering information to the cash card and an arithmetic device provided in the cash card compare the first biometric information with the second biometric information stored in the storage medium. And a determination result receiving means for receiving a determination result for determining whether or not the first biological information and the second biological information match, wherein the determination result is the first biological information and the first biological information. If it is determined that the two pieces of biometric information match, the withdrawal request information transmitting means transmits withdrawal request information including authentication information indicating that biometric authentication has been performed to the host computer, and In the host computer, the determination information specifying means detects the authentication information from the withdrawal request information, specifies as biometric authentication from the authentication information as determination information, and the upper limit setting determination means includes the account It may be characterized by referring to the master file of the deposit account corresponding to the number to determine whether the upper limit amount of withdrawal is set by biometric authentication or not.

  By this invention, for example, in the case where the owner of the IC card withdraws cash using a withdrawal terminal device such as an ATM that does not support the IC card, by setting an upper limit on the possible withdrawal amount, The amount of damage caused by unauthorized use can be suppressed. Until the withdrawal terminal devices compatible with IC cards become widespread, it is possible to combine the safety of IC cards and the convenience of magnetic cards by using existing withdrawal terminal devices compatible with magnetic cards. it can.

  In addition, when using a biometric authentication using an IC card in a withdrawal terminal device such as an ATM, the IC card owner uses a withdrawal terminal device that does not support the IC card. In the case of withdrawing cash or making a withdrawal request without biometric authentication using a withdrawal terminal device compatible with an IC card, unauthorized use can be prevented by setting an upper limit on the amount that can be withdrawn. It is possible to reduce the amount of damage when done. Until the withdrawal terminal devices that support biometric authentication using IC cards become widespread, together with existing withdrawal terminal devices that support magnetic cards and IC card-compatible withdrawal terminal devices that do not have a biometric authentication function Thus, both the safety of the IC card and the convenience of the magnetic card can be achieved.

  The best mode for carrying out the present invention will be described below in detail with reference to the drawings. The following description is an example of the embodiment of the withdrawal management system according to the present invention, and the storage medium used for the cash card is not limited to the following embodiment. An example in which biometric authentication is used as a method of personal authentication will be described. However, the authentication method is not limited to biometric authentication, and another authentication method with high safety may be used. Moreover, although the example demonstrated in the flow demonstrated below demonstrates the example of operation which withdraws cash from the terminal device for withdrawal, the form of withdrawal is not limited to the withdrawal of cash from the terminal device for withdrawal. Other forms such as transfer are also included.

  FIG. 1 is a block diagram showing a configuration of a withdrawal management system according to the present invention. FIG. 2 is a diagram showing an outline of the first embodiment of the withdrawal management system according to the present invention. FIG. 3 is a diagram showing an example of an account file used in the first embodiment of the withdrawal management system according to the present invention. FIG. 4 is a flowchart showing a flow of transmitting data for personal authentication from the ATM to the host computer in the first embodiment of the withdrawal management method according to the present invention. FIG. 5 is a flowchart showing a flow for performing identity authentication from data transmitted from the ATM by the host computer in the first embodiment of the withdrawal management method according to the present invention. FIG. 6 is a flowchart showing a flow in which the ATM accepts a withdrawal request after the personal authentication in the first embodiment of the withdrawal management method according to the present invention. FIG. 7 is a flowchart showing a flow in which the host computer that accepts a withdrawal request from the ATM determines whether or not withdrawal is possible in the first embodiment of the withdrawal management method according to the present invention. FIG. 9 is a diagram showing an outline of the second embodiment of the withdrawal management system according to the present invention. FIG. 10 is a diagram showing an example of an account file used in the second embodiment of the withdrawal management system according to the present invention. FIG. 11 is a flowchart showing a flow of transmitting data for personal authentication from the ATM to the host computer (when biometric authentication is performed by ATM) in the second embodiment of the withdrawal management method according to the present invention. FIG. 12 is a flowchart showing a flow for performing identity authentication from data transmitted from the ATM by the host computer in the second embodiment of the withdrawal management method according to the present invention. FIG. 13 is a flowchart showing a flow in which the ATM accepts a withdrawal request after the personal authentication in the second embodiment of the withdrawal management method according to the present invention. FIG. 14 is a flowchart showing a flow in which the host computer that has received a withdrawal request from an ATM determines whether or not withdrawal is possible in the second embodiment of the withdrawal management method according to the present invention. FIG. 15 is a flowchart showing a flow (when biometric authentication is performed with an IC card) for transmitting data for personal authentication from the ATM to the host computer in the second embodiment of the withdrawal management method according to the present invention. .

  First, the outline of the first embodiment of the withdrawal management system according to the present invention will be described with reference to FIG. At present, cash cards issued by financial institutions are mainly magnetic cards that use magnetic tape as a medium for storing identification information such as customer account numbers. When withdrawing cash with ATM, the identification information is read from the magnetic stripe portion to which the magnetic tape is affixed and used for personal authentication. However, the magnetic tape affixed to the magnetic stripe portion can be read easily using a skimming device, so it is easy to forge, and the storage capacity is limited, so that encryption is difficult. I have it.

  On the other hand, recently, an IC card having an IC chip mounted on a cash card has appeared. When using an IC chip, it is difficult to physically read data, and the capacity of the storage medium is larger than that of a magnetic card and encryption is possible. It is possible. However, it is not easy to physically change all ATMs that exist in various parts of the country to be compatible with IC cards, so it is currently provided so that ATMs that do not support IC cards can also be used. The IC card is a dual-purpose card with a magnetic stripe. In such a dual-purpose card, it is possible to read magnetic information from the magnetic stripe portion in the end, so that the risk of fraudulent withdrawal from an ATM that does not support IC cards due to forged magnetic cards cannot be avoided. turn into.

  Therefore, in the first embodiment of the withdrawal management system according to the present invention, for a user of a dual-purpose card equipped with an IC chip, the withdrawal information for the read information from the magnetic stripe is stored in the deposit account file of the user of the host computer. With regard to a withdrawal request in which an upper limit amount of gold is registered and authentication is performed based on reading information from the magnetic stripe, withdrawal is permitted up to the registered amount. With this configuration, even if the magnetic card is counterfeited and illegally withdrawn from an ATM that does not support the IC card, it is possible to limit the amount of damage up to the registered upper limit.

  That is, as shown in FIG. 2, when a dual-purpose card equipped with an IC chip is used in an ATM corresponding to the IC card, the identification information read from the IC chip includes an identifier indicating that the information is from the IC chip. The header is added and transmitted to the host computer as data for account inquiry. When the host computer makes an account inquiry by referring to the master table of the corresponding account file, it returns data indicating that the withdrawal is permitted without adding a withdrawal restriction to the ATM.

  On the other hand, when a dual-purpose card equipped with an IC chip is used in an ATM that does not support the IC card, the identification information read from the magnetic stripe is transmitted to the host computer as data for account inquiry. The host computer refers to the corresponding account file, makes an account inquiry, and if the upper limit of withdrawal is specified for magnetic data, data indicating that the withdrawal is permitted within the upper limit is ATM. Reply to As a method for specifying that the information is read from the magnetic stripe by the host computer, an identifier indicating that the information is information from the magnetic stripe may be added to the identification information, or the information is from the IC chip. If no identifier is attached, the information may be determined to be information from the magnetic stripe. When the upper limit amount of withdrawal is not set, data indicating permission of withdrawal is returned to the ATM without adding a withdrawal restriction.

  When a normal magnetic card not equipped with an IC chip is used in an ATM corresponding to the IC card, the ATM identifies the storage medium from which the identification information is read as a magnetic card because the card is not an IC card. The identification information read from the stripe is transmitted to the host computer as data for account inquiry without attaching an identifier indicating that the information is from the IC chip. Since the host computer does not have an identifier indicating that it is an IC chip, it is determined that the data is read from the magnetic stripe, the account is referenced with reference to the corresponding account file, and the magnetic data is withdrawn. If the upper limit amount is determined, data indicating that the withdrawal is permitted within the range of the upper limit amount is returned to the ATM. When the upper limit amount of withdrawal is not set, data indicating permission of withdrawal is returned to the ATM without adding a withdrawal restriction.

  Further, when a dual-purpose card equipped with an IC chip is used in an ATM corresponding to the IC card, in principle, it is preferable to set so that information is preferentially read from a highly safe IC chip. However, if the IC chip portion is damaged or cannot be read for some reason, information may be read from the magnetic stripe. In such a case, as in the above case, the identification information from the magnetic stripe is used. When the upper limit amount of withdrawal is determined for the magnetic data, the host computer returns data indicating that the withdrawal is permitted within the range of the upper limit amount to the ATM. When the upper limit amount of withdrawal is not set, data indicating permission of withdrawal is returned to the ATM without adding a withdrawal restriction.

  The operation of the withdrawal management system according to the present invention in the first embodiment will be described with reference to FIG. An IC card 10 used as a cash card capable of withdrawing money from an ATM includes an identification information storage unit 11 using an IC chip or a magnetic tape as a storage medium. When the IC card 10 is inserted into a predetermined position of the ATM 20, the identification information reading unit 21 reads identification information such as the account number of the deposit account stored in the identification information storage unit 11, and performs arithmetic processing in the control unit 22, Identification information is transmitted to the bank host 30 for account inquiry. In the first embodiment, the ATM 20 may not include the biological information reading unit 23.

  At this time, the identification information reading unit 21 detects the type of the storage medium from which the data has been read. If the medium is an IC chip, a header including an identifier for specifying the type of the storage medium is attached to the bank. It is transmitted to the host 30. When information indicating that the storage medium is an IC chip is stored in advance in the IC chip, the information may be read and transmitted. As described above, as long as the means for specifying the type of the storage medium in the bank host 30 can specify the type of the storage medium in the bank host 30, the data format or the method of giving data in the ATM 20 is used. Etc. are not limited.

  In the bank host 30, the control unit 31 performs identification information reception processing, specifies account data corresponding to the account number included in the identification information from the account file 32, and the upper limit amount of withdrawal is limited depending on the type of storage medium. Check whether it is done. If there are no withdrawal restrictions, withdrawals are restricted, but if the type of storage medium determined from the identifier included in the identification information does not meet the restrictions, withdrawal is permitted without any withdrawal restrictions. Data indicating this is returned to the ATM 20. When the upper limit amount of withdrawal is set and the type of the storage medium determined from the identifier falls under the restriction, data indicating that the withdrawal is permitted within the range of the upper limit amount is returned to the ATM 20.

  The setting of the upper limit amount of withdrawal is recorded in the account file 32 as in the example of FIG. In this example, master data of each account is registered in a record provided in units of account numbers, and “1” indicates an IC card and “0” indicates a magnetic card as a card type. In other words, the first record has an upper limit of 100,000 yen for magnetic data, and the cumulative amount of money for the current sunrise is 50,000 yen. It will be possible to withdraw up to. In the second record, the card type is a magnetic card in the first place, and since no IC card is issued, no such upper limit is provided. The third record has an upper limit of 100,000 yen for magnetic data, and the cumulative amount for the current sunrise is 100,000 yen. Money is impossible. In the fourth record, although the IC card is issued, the withdrawal restriction when authenticating by magnetic data is not registered, and the withdrawal can be made from any ATM without limitation.

  When a withdrawal request is made from an ATM that does not support an IC card, since the ATM does not have a configuration unique to the present invention, an identifier for identifying the type of the storage medium is as described above. Only identification information such as an account number is transmitted to the bank host 30 without being attached. The bank host 30 refers to the card type of the account file corresponding to the account number included in the identification information, and if an IC card is issued for the account, it can be withdrawn by applying the restrictions in the case of magnetic data Limit the amount. If an IC card has not been issued, as with the example of the second record in FIG. 3, there is no withdrawal restriction. Withdraw as it is.

  Next, a first embodiment of the withdrawal management method according to the present invention will be described with reference to the flowcharts of FIGS.

  The flowchart of FIG. 4 shows a flow of transmitting data for personal authentication from the ATM to the host computer. When the ATM accepts the insertion of a cash card (S01), the ATM identifies the card structure, whether it is an IC card or a magnetic card (S02), and checks whether an IC chip is mounted on the card. (S03). If no IC chip is mounted, the account number of the customer's deposit account is read from the magnetic stripe (S04). Next, the password entered by the user into the ATM is accepted (S07), and the account number and the password are transmitted to the host computer (S08).

  On the other hand, when the IC chip is mounted, the account number of the customer is read from the IC chip (S05). Further, a header including an identifier indicating that the account number is information read from the IC chip is assigned to the account number (S06), and identification information to be transmitted to the host computer is created. Note that the header attached here may add new data by ATM to the data read from the IC chip, but the data indicating that the data has been read from the IC chip in advance to the IC chip is stored in the account. It may be given as a number header, and the header may be automatically attached by reading this. Next, the personal identification number entered by the customer into the ATM is received (S07), and the account number with the header including the identifier and the personal identification number are transmitted to the host computer (S08).

  The flowchart of FIG. 5 shows a flow of performing personal authentication from data transmitted from the ATM by the host computer. When the host computer receives the account number and personal identification number from the ATM via a dedicated line or the like (S09), it refers to the master data of the record of the account file corresponding to the account number (S10), and the received personal identification number is registered. It is confirmed whether or not it matches the entered password (S11). If they do not match, an instruction signal for displaying an error indicating that the withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S12). If they match, an instruction signal for displaying the withdrawal request operation screen on the ATM screen is transmitted to the ATM (S13).

  The flowchart of FIG. 6 shows a flow in which the ATM accepts a withdrawal request after the personal authentication. When the ATM receives an instruction signal for displaying the withdrawal request operation screen on the screen from the host computer via a dedicated line or the like (S14), an operation screen showing the withdrawal procedure is displayed (S15). The input of the withdrawal amount for requesting withdrawal is accepted (S16), and the withdrawal amount is transmitted to the host computer (S17).

  The flowchart of FIG. 7 shows a flow in which the host computer that has received a withdrawal request from the ATM determines whether or not withdrawal is possible. When the host computer receives data indicating the withdrawal amount from the ATM via a dedicated line or the like (S18), the master data of the account file record corresponding to the previously accepted account number is referred to, as in the case of the personal authentication. (S19). In the record, it is confirmed whether or not the type of the cash card possessed by the customer is an IC card (S20). If it is not an IC card, the deposit balance in the account file corresponding to the account number is subsequently referred to (S25). ), It is confirmed whether the withdrawal amount does not exceed the deposit balance (S26). In the case where an overdraft frame is set in the deposit account, the overdraft limit that is the upper limit of the withdrawal amount is applied instead of the deposit balance. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S27). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount can be withdrawn is sent to the ATM (S28).

  On the other hand, if the user is a user of the IC card, it is confirmed whether or not an identifier indicating that the account number received earlier is information read from the IC chip is included in the header (S21). If an IC chip identifier is included, it is determined that the authentication is highly secure using the IC chip. The deposit balance in the corresponding account file is referred to (S25), and it is confirmed whether the withdrawal amount exceeds the deposit balance (S26). In the case where a bank allowance is set in the deposit account, the limit of overdraft which is the upper limit of the withdrawal amount is applied instead of the deposit balance as in the previous case. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S27). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount can be withdrawn is sent to the ATM (S28).

  On the other hand, when the identifier indicating that the chip is an IC chip is not included, it is determined that the identification information is information read from the magnetic stripe. In order to do so, the cumulative amount of withdrawals so far and the amount of withdrawal for which the request has been received are added (S22), and it is determined whether the total amount does not exceed the upper limit amount recorded in the record (S23). ). If the upper limit is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S24). Instead of displaying an error, an amount that can be withdrawn within a range that does not exceed the upper limit amount may be calculated, and the calculated amount may be transmitted as a possible withdrawal amount.

  On the other hand, if the upper limit is not exceeded, the deposit balance in the account file corresponding to the account number is subsequently referenced (S25), and it is confirmed whether the withdrawal amount does not exceed the deposit balance (S26). In the case where a bank allowance is set in the deposit account, the limit of overdraft which is the upper limit of the withdrawal amount is applied instead of the deposit balance as in the previous case. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S27). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount can be withdrawn is sent to the ATM (S28).

  In the above flow, the host computer calculates the amount of money that can be withdrawn and compared with the upper limit amount. However, when the identification information is first received and authenticated, the withdrawal amount is set. Check whether there is a limit, whether or not there is a withdrawal limit, and if there is a withdrawal limit, obtain data from the account file and send it to the ATM. It is also possible to perform processing relating to comparison and calculation.

  Then, the outline | summary of 2nd Embodiment of the payment management system concerning this invention is demonstrated using FIG. As described above, an IC card having an IC chip mounted on a cash card has appeared. However, when an IC card is used, information for personal authentication is stored in the IC chip, so that an ATM card can be stored. In addition to the physical safety of the IC card, the security can be strengthened by authenticating the person by collating with the information stored in the IC chip and enabling the withdrawal operation after performing such authentication. Can be applied.

  Various methods can be used for personal authentication using an IC card, such as registering a second password on the IC card and collating it with an ATM, or registering a logic for issuing a one-time password on the IC card. However, it is possible to perform authentication using biometric information as a strong authentication method. In this case, for example, if the user's fingerprint information is registered in the IC card and the operator's fingerprint is read by ATM at the time of withdrawal, the withdrawal is permitted only when they match. Can significantly increase the performance.

  However, since the biometric authentication cannot completely prevent the occurrence of an error at present, if it is determined that the person is not the person by the biometric authentication, the user's convenience is impaired if it is immediately determined to be an unauthorized use. It is also possible. Also, how to respond to withdrawal requests from ordinary ATMs becomes a problem until all ATMs are switched to those that can be biometrically authenticated. Furthermore, if it is not possible to withdraw money unless it is the person himself, for example, it becomes impossible for the person to request and allow the family to withdraw, and convenience may be impaired.

  Therefore, in the second embodiment of the withdrawal management system according to the present invention, the upper limit of withdrawal corresponding to the authentication method in the deposit account file possessed by the user of the host computer for the user of the dual-purpose card equipped with the IC chip. The amount is registered, and for example, withdrawals with biometric authentication are permitted without limitation, but withdrawal requests without biometric authentication are allowed to be withdrawn up to the registered amount. . It should be noted that the withdrawal limitation may be distinguished by the presence or absence of authentication in this way, or may be distinguished by the authentication means, such as providing a restriction on a simple authentication means among a plurality of authentication methods. With this configuration, even if a third party illegally obtains an IC card and withdraws it illegally, it is possible to limit the amount of damage up to the registered upper limit as long as a simple authentication method is used. .

  That is, as shown in FIG. 9, when a dual-purpose card equipped with an IC chip is used in an ATM capable of biometric authentication corresponding to the IC card, the biometric information stored in the IC chip and the biometric information read by the ATM are used. If the two match, a header including an identifier indicating that biometric authentication has been performed is added and transmitted to the host computer as data for account inquiry. When the host computer makes an account inquiry by referring to the master table of the corresponding account file, it returns data indicating that the withdrawal is permitted without adding a withdrawal restriction to the ATM.

  On the other hand, when a dual-purpose card equipped with an IC chip is used in an ATM that is not compatible with an IC card and cannot be used for biometric authentication, identification information read from a magnetic stripe attached to the IC card is stored as data for account inquiry in a host computer. Sent. The host computer recognizes that it is a withdrawal request without biometric authentication, refers to the corresponding account file, makes an account inquiry, and if the biometric authentication is not performed, the upper limit of withdrawal is set If yes, data indicating permission of withdrawal within the range of the upper limit amount is returned to the ATM. As a method for specifying that biometric authentication is not performed by the host computer, an identifier indicating that biometric authentication is not performed may be added to the identification information, or an identifier indicating biometric authentication is added. If not, it may be set to determine that biometric authentication has not been performed. When the upper limit amount of withdrawal is not set, data indicating permission of withdrawal is returned to the ATM without adding a withdrawal restriction.

  In the case where a dual-purpose card equipped with an IC chip is used in an ATM corresponding to the IC card, it is preferable in principle to set so that biometric authentication with high safety is performed in the ATM. However, if biometric authentication is not possible for some reason, such as the IC chip part is damaged, or the biometric information does not match even though the person is an error due to an apparatus error, the account number or the like is displayed without biometric authentication. In such a case, an account number or the like is transmitted to the host computer without an identifier that has been biometrically authenticated, and an upper limit for withdrawal is determined for cases where biometric authentication is not performed. If so, data indicating that the withdrawal is permitted within the range of the upper limit amount is returned to the ATM. On the other hand, when the upper limit amount of withdrawal is not set, data indicating permission of withdrawal is returned to the ATM without adding a withdrawal restriction.

  Even when biometric authentication cannot be performed while using an IC card as described above, for example, if the collated biometric information is different, there is a possibility of unauthorized use by a third party. Therefore, when biometric information does not match in biometric authentication in ATM, the withdrawal operation may be stopped without sending a withdrawal request to the host computer.

  The operation of the withdrawal management system according to the present invention in the second embodiment will be described with reference to FIG. An IC card 10 used as a cash card capable of withdrawing money from an ATM includes an identification information storage unit 11 using an IC chip or a magnetic tape as a storage medium, and the IC chip includes biological information such as a fingerprint of a user. Is stored. When the IC card 10 is inserted into a predetermined position of the ATM 20, the identification information reading unit 21 reads that the biometric information is supported from the IC card 10, reads the biological information stored in the identification information storage unit 11, and the operator. The biometric information reading unit 23 provided with a camera or the like is used to read biometric information such as a fingerprint. The read biometric information is collated with the biometric information read from the identification information storage unit 11.

  The calculation for collating biometric information is normally performed using the CPU provided in the ATM 20, but when the CPU is provided in the IC card 10, the biometric information reading unit 23 reads the information. The biometric information may be transferred to the IC card 10 and performed using the CPU inside the IC card 10.

  The biometric information read by the biometric information reading unit 23 is collated with the biometric information stored in the identification information storage unit 11 of the IC chip 10, but the biometric information of the user is stored in the bank host 30 in advance. This does not prevent the biometric information of the user from being read from the bank host 30 and collated. In this case, if the biometric information of the IC card user is stored in association with the account number of the user on the bank host 30 side, the bank host 30 specifies the corresponding biometric information when the account number is received from the ATM 20. The ATM 20 may be configured to transmit.

  When the two pieces of biometric information collated in any of the above patterns match, biometric authentication is performed on the identification information such as the account number of the deposit account read by the identification information reading unit 21 from the identification information storage unit 11. A header including an identifier indicating this is attached and transmitted to the bank host 30 as identification information for account inquiry. If they do not match, the withdrawal operation may be stopped at the ATM 20, or a header including an identifier indicating that biometric authentication is not performed is attached to the bank host 30 as identification information for account inquiry. You may send it.

In the bank host 30, the control unit 31 performs an acceptance process of identification information, specifies account data corresponding to the account number included in the identification information from the account file 32, and the upper limit amount of withdrawal is limited depending on the presence or absence of biometric authentication. Check whether it is done. If there is no withdrawal restriction, there is a withdrawal restriction, but if it is determined that biometric authentication has been performed based on the identifier included in the identification information and does not fall under the withdrawal restriction, withdrawal will not be added. Data indicating permission of money is returned to the ATM 20. When the upper limit amount of withdrawal is set and it is not possible to determine from the identifier that biometric authentication has been completed, data indicating that withdrawal is permitted within the range of the upper limit amount is returned to the ATM 20.

  In any of the above patterns, authentication by collation of biometric information is performed not on the bank host 30 side but on the ATM 20 side. On the other hand, in the configuration in which the biometric information of the user is stored in the bank host 30, the biometric information read by the biometric information reading unit 23 and the biometric information stored in advance in the bank host 30 are collated. It may be performed on the side. In this case, when the bank host 30 receives the biometric information read by the biometric information reading unit 23, the biometric information stored in association with the account number is specified from the account number received together with the bank host 30. The calculated CPU executes a calculation process for collating the two.

  In this case, what is transmitted from the ATM 20 to the bank host 30 together with identification information such as an account number is not a header including an identifier indicating that biometric authentication has been performed, but data of biometric information read by the biometric information reader 23. It becomes itself. Whether the bank host 30 has been biometrically authenticated is determined by whether the bank host 30 has received biometric information data together with identification information such as an account number, and the biometric information stored in the bank host 30 in advance. This is performed depending on whether or not the biometric information associated with the account number matches.

  The setting of the upper limit amount of withdrawal is recorded in the account file 32 as in the example of FIG. In this example, the master data of each account is registered in a record provided in units of account numbers, and the authentication type “1” indicates that the cardholder's biometric information is registered in the IC card and biometric authentication is possible. “0” indicates an account that cannot be biometrically authenticated. In other words, the upper limit for the first record when biometric authentication is not performed is set at 100,000 yen, and the cumulative amount for the current sunrise is 50,000 yen. For example, if the withdrawal is permitted by relatively simple authentication only by collating the personal identification number without performing biometric authentication, it is possible to withdraw up to 50,000 yen. In the second record, for example, a magnetic card that cannot perform biometric authentication is issued, and there is no upper limit for a simple authentication method. In the third record, the upper limit when biometric authentication is not performed is set to 100,000 yen, and the cumulative amount of money for the sunrise is 100,000 yen. If a withdrawal request is received, the withdrawal will be refused. In the fourth record, biometric information is registered, but the withdrawal limit when not using biometric authentication is not registered, and any ATM can be withdrawn without limitation.

  When a withdrawal request is made from an ATM that does not support an IC card, since the ATM does not have a configuration unique to the present invention, an identifier for identifying the presence or absence of biometric authentication as described above is used. Only the identification information such as the account number is transmitted to the bank host 30 without the header included. The bank host 30 refers to the card type of the account file corresponding to the account number included in the identification information, and when biometric information is registered for the account and biometric authentication is possible, the biometric authentication is not completed. Apply limits to limit the amount that can be withdrawn. If biometric authentication is not possible because biometric information is not registered, as in the example of the second record in FIG. 10, there is no withdrawal restriction, so the match of the PIN is confirmed. Above, the withdrawal request amount is withdrawn as it is.

  In the above explanation, the withdrawal limit is set depending on the presence or absence of biometric authentication, but the authentication performed by ATM is not limited to biometric authentication, but other authentication that reinforces authentication by a normal password such as authentication by the second password. If the authentication method is used, the type of the authentication method is not limited. Further, the determination of the withdrawal restriction is not limited to the presence / absence of biometric authentication or the like, and when a plurality of authentication means are possible, the withdrawal restriction may be provided corresponding to the authentication method.

  Next, a second embodiment of the withdrawal management method according to the present invention will be described with reference to the flowcharts of FIGS.

  The flowchart of FIG. 11 shows a flow (when biometric information is collated with ATM) in which data for personal authentication by collation of a password is transmitted from the ATM to the host computer. When the ATM accepts the insertion of the cash card (S30), the ATM reads the account number of the corresponding account from the card storage medium (S31), and reads the type of authentication method set in the account (S32), It is confirmed whether biometric authentication is possible (S33). When biometric authentication is not possible, specifically, for example, when a magnetic tape is used instead of an IC chip in the storage medium and biometric information is not registered, the account number of the customer's deposit account is read from the magnetic stripe portion. (S34). Next, the password entered by the user into the ATM is received (S40), and the account number and the password are transmitted to the host computer (S41).

  On the other hand, if biometric authentication is possible, the biometric information of the account holder registered in advance is read from the storage medium of the card (S35), and the biometric information is also read from the operator using a camera or the like installed at the ATM. (S36). It is confirmed whether or not these pieces of biometric information match (S37). If they do not match, an error is displayed on the operation screen because the identity cannot be confirmed (S38), and the processing is stopped. In this case, a header including an identifier indicating that the biometric information does not match is transmitted to the host computer, and if collation with a personal identification number can be obtained, withdrawals are accepted within the limits of simple authentication. Also good.

  If the biometric information matches, a header including an identifier indicating that biometric authentication has been performed is added to the account number previously read from the card storage medium, and identification information to be transmitted to the host computer is provided. Create (S39). Next, the personal identification number input by the customer into the ATM is received (S40), and the account number and personal identification number with the header including the identifier are transmitted to the host computer (S41).

  The biometric information collation described above may be performed inside the IC card as shown in the flowchart of FIG. In this case, the flow (S70 to 73) from when the ATM accepts the insertion of the cash card and confirms whether or not biometric authentication is possible is the same as in FIG. 11, and when biometric authentication is not possible, The flow (S74, S80, S81) from reading the account number of the customer's deposit account from the magnetic stripe portion to transmitting the account number and PIN to the host computer is the same as in FIG.

  On the other hand, if biometric authentication is possible, the biometric information is read from the operator using a camera or the like installed at the ATM (S75). The read biometric information is transferred to the IC card and collated with the biometric information stored in advance in the IC card (S76). In the IC card, it is confirmed whether or not both match, and the ATM receives information on whether or not they match (S77). If they do not match, an error is displayed on the operation screen as the identity cannot be confirmed (S78). ), Stop processing. In this case, a header including an identifier indicating that the biometric information does not match is sent to the host computer, and if collation with a personal identification number is obtained, withdrawals are accepted within the limits of the case of simple authentication. It is the same as in the case of FIG.

  If the biometric information matches, as in the case of FIG. 11, a header including an identifier indicating that biometric authentication has been performed is added to the account number previously read from the card storage medium, The identification information to be transmitted to the host computer is created (S79), the password entered by the customer into the ATM is received (S80), and the account number and the password with the header including the identifier are transmitted to the host computer ( S81).

  The flowchart of FIG. 12 shows a flow for performing personal authentication from data transmitted from the ATM by the host computer. When the host computer receives the account number and personal identification number from the ATM via a dedicated line or the like (S42), it refers to the master data of the record of the account file corresponding to the account number (S43), and the received personal identification number is registered. It is confirmed whether or not it matches the entered password (S44). If they do not match, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S45). If they match, an instruction signal for displaying the withdrawal request operation screen on the ATM screen is transmitted to the ATM (S46).

  The flowchart in FIG. 13 shows a flow in which the ATM accepts a withdrawal request after the personal authentication. When the ATM receives an instruction signal for displaying a withdrawal request operation screen on the screen from the host computer via a dedicated line or the like (S47), an operation screen showing a withdrawal procedure is displayed (S48). The input of the withdrawal amount for requesting withdrawal is accepted (S49), and the withdrawal amount is transmitted to the host computer (S50).

  The flowchart of FIG. 14 shows a flow in which the host computer that has received a withdrawal request from the ATM determines whether or not withdrawal is possible. When the host computer receives data indicating the withdrawal amount from the ATM via a dedicated line or the like (S51), it refers to the master data of the record of the account file corresponding to the previously accepted account number, as in the case of personal authentication. (S52). In the record, it is confirmed whether or not a withdrawal limit is set according to the level of authentication performed at the ATM (S53). If no withdrawal limit is set, the account corresponding to the account number is subsequently selected. The deposit balance in the file is referred to (S58), and it is confirmed whether the withdrawal amount exceeds the deposit balance (S59). In the case where an overdraft frame is set in the deposit account, the overdraft limit that is the upper limit of the withdrawal amount is applied instead of the deposit balance. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted on the ATM screen is transmitted to the ATM (S60). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount may be withdrawn is sent to the ATM (S61).

  On the other hand, if the authentication level is set for the account, the header of the identification information is detected, and it is confirmed whether or not an identifier indicating biometric authentication is included in the header (S54). If an identifier indicating that biometric authentication has been completed is included, it is determined that biometric information has been authenticated with high safety. The deposit balance of the account file corresponding to is referred to (S58), and it is confirmed whether the withdrawal amount exceeds the deposit balance (S59). In the case where a bank allowance is set in the deposit account, the limit of overdraft which is the upper limit of the withdrawal amount is applied instead of the deposit balance as in the previous case. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted is sent to the ATM screen (S60). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount can be withdrawn is sent to the ATM (S61).

  On the other hand, when the identifier indicating that biometric authentication has been completed is not included, it is determined that only comparatively simple authentication is performed by collating the personal identification number. In order to apply the restriction, the cumulative amount of withdrawals so far and the amount of withdrawals accepted for the request are added (S55), and it is determined whether or not the total amount exceeds the upper limit amount recorded in the record. (S56). If the upper limit is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted is sent to the ATM screen (S57). Instead of displaying an error, an amount that can be withdrawn within a range that does not exceed the upper limit amount may be calculated, and the calculated amount may be transmitted as a possible withdrawal amount.

  On the other hand, if the upper limit is not exceeded, the deposit balance in the account file corresponding to the account number is subsequently referenced (S58), and it is confirmed whether the withdrawal amount does not exceed the deposit balance (S59). In the case where a bank allowance is set in the deposit account, the limit of overdraft which is the upper limit of the withdrawal amount is applied instead of the deposit balance as in the previous case. If the deposit balance is exceeded, an instruction signal for displaying an error indicating that a withdrawal request cannot be accepted is sent to the ATM screen (S60). If the deposit balance has not been exceeded, a withdrawal instruction instruction signal indicating that the withdrawal amount may be withdrawn is sent to the ATM (S61).

  In the above flow, the host computer calculates the amount of money that can be withdrawn and compared with the upper limit amount. However, when the identification information is first received and authenticated, the withdrawal amount is set. Check whether there is a limit, whether or not there is a withdrawal limit, and if there is a withdrawal limit, obtain data from the account file and send it to the ATM. As in the case of the first embodiment, it is also possible to perform processing relating to comparison and calculation.

It is a block diagram which shows the structure of the payment | withdrawal management system concerning this invention. It is a figure which shows the outline | summary of 1st Embodiment of the payment | withdrawal management system concerning this invention. It is a figure which shows an example of the account file used by 1st Embodiment of the payment management system concerning this invention. 5 is a flowchart showing a flow of transmitting data for personal authentication from an ATM to a host computer in the first embodiment of the withdrawal management method according to the present invention. 5 is a flowchart showing a flow for performing identity authentication from data transmitted from an ATM by a host computer in the first embodiment of the withdrawal management method according to the present invention. In 1st Embodiment of the payment management method concerning this invention, it is a flowchart which shows the flow in which ATM receives a payment request | requirement after identity authentication. In the first embodiment of the withdrawal management method according to the present invention, it is a flowchart showing a flow in which the host computer that has accepted a withdrawal request from the ATM determines whether or not withdrawal is possible. 6 is a comparison table comparing differences between an IC card and a magnetic card. It is a figure which shows the outline | summary of 2nd Embodiment of the payment | withdrawal management system concerning this invention. It is a figure which shows an example of the account file used by 2nd Embodiment of the payment management system concerning this invention. In 2nd Embodiment of the payment | withdrawal management method concerning this invention, it is a flowchart which shows the flow (when biometric authentication is performed by ATM) which transmits the data for personal authentication from ATM to a host computer. It is a flowchart which shows the flow which performs personal authentication from the data transmitted from ATM by the host computer in 2nd Embodiment of the payment | withdrawal management method concerning this invention. In 2nd Embodiment of the payment management method concerning this invention, it is a flowchart which shows the flow which ATM receives a payment request | requirement after identity authentication. It is a flowchart which shows the flow which the host computer which received the payment request | requirement from ATM determines whether the payment is possible or not in the second embodiment of the withdrawal management method according to the present invention. In the second embodiment of the withdrawal management method according to the present invention, it is a flowchart showing a flow (when biometric authentication is performed with an IC card) to transmit data for personal authentication from the ATM to the host computer.

Explanation of symbols

10 IC card 11 Identification information storage unit 20 ATM
21 Identification Information Reading Unit 22 Control Unit 23 Biometric Information Reading Unit 30 Bank Host 31 Control Unit 32 Account File

Claims (27)

A withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal.
The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of a deposit account of the requester and a withdrawal request amount;
The host computer identifying determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account from the withdrawal request information;
The host computer refers to a master file of a deposit account corresponding to the account number, and determines whether an upper limit amount of withdrawal is set corresponding to the determination information;
If the upper limit amount is not set, the host computer sends an instruction signal indicating that the withdrawal request amount may be withdrawn to the withdrawal terminal device;
A withdrawal management method characterized by comprising: A withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal.
The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of a deposit account of the requester and a withdrawal request amount;
The host computer identifying determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account from the withdrawal request information;
The host computer refers to a master file of a deposit account corresponding to the account number, and determines whether an upper limit amount of withdrawal is set corresponding to the determination information;
If the upper limit is set, the host computer sends an instruction signal to the withdrawal terminal device indicating that the host computer cannot withdraw more than the upper limit;
A withdrawal management method characterized by comprising: The master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount,
3. The host computer transmits to the withdrawal terminal device an amount obtained by subtracting the cumulative amount from the upper limit amount as an upper limit amount that cannot be withdrawn from the withdrawal terminal device. Withdrawal management method. A withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal.
The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of a deposit account of the requester and a withdrawal request amount;
The host computer identifying determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account from the withdrawal request information;
The host computer refers to a master file of a deposit account corresponding to the account number, and determines whether an upper limit amount of withdrawal is set corresponding to the determination information;
When the upper limit amount is set, the host computer compares the withdrawal request amount with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount;
If the withdrawal request amount does not exceed the upper limit amount, the host computer sends an instruction signal indicating that the withdrawal request amount may be withdrawn to the withdrawal terminal device;
A withdrawal management method characterized by comprising: A withdrawal management method in which a host computer that accepts a withdrawal request from a withdrawal terminal device operated by a withdrawal requester determines whether or not withdrawal is possible and manages withdrawal.
The host computer receiving, from the withdrawal terminal device, withdrawal request information including at least an account number of a deposit account of the requester and a withdrawal request amount;
The host computer identifying determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account from the withdrawal request information;
The host computer refers to a master file of a deposit account corresponding to the account number, and determines whether an upper limit amount of withdrawal is set corresponding to the determination information;
When the upper limit amount is set, the host computer compares the withdrawal request amount with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount;
If the withdrawal request amount exceeds the upper limit amount, the host computer may indicate an instruction signal indicating whether the withdrawal amount may be exceeded or the withdrawal request cannot be accepted. Transmitting to the withdrawal terminal device;
A withdrawal management method characterized by comprising: The master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount,
2. The host computer according to claim 1, wherein, in the comparison between the withdrawal request amount and the upper limit amount, the cumulative amount is added to the withdrawal request amount to determine whether or not the upper limit amount is exceeded. 4. The withdrawal management method according to 4 or 5. In the step of specifying the determination information, the host computer detects, from the withdrawal request information, identification information indicating a type of a storage medium from which the account number is read by the withdrawal terminal device, and stores the storage information. Specify the type of medium as the determination information,
In the step of determining whether or not the upper limit amount of withdrawal is set, the host computer refers to the master file of the deposit account corresponding to the account number, and the upper limit amount of withdrawal depending on the type of the storage medium The withdrawal management method according to claim 1, wherein it is determined whether or not is set. The withdrawal terminal device identifies the type of storage medium storing the account number of the deposit account of the client from the cash card inserted by the client;
The withdrawal terminal device selecting identification information indicating the type of the storage medium corresponding to the type of the storage medium;
The withdrawal terminal device reads the account number stored in the storage medium;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
The withdrawal terminal device sending withdrawal request information including at least the account number, the withdrawal request amount and the identification information to the host computer;
The withdrawal management method according to claim 7, further comprising: The withdrawal terminal device has identification information indicating the account number of the deposit account of the client stored in the storage medium of the cash card inserted by the client and the type of the storage medium storing the account number. A reading step;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
The withdrawal terminal device sending withdrawal request information including at least the account number, the withdrawal request amount and the identification information to the host computer;
The withdrawal management method according to claim 7, further comprising: There are at least two types of storage media, IC chip and magnetic stripe,
10. The withdrawal management method according to claim 7, wherein an upper limit amount of withdrawal is set in the master file of the deposit account when the storage medium is a magnetic stripe. In the step of identifying the determination information, the host computer detects, from the withdrawal request information, personal authenticated information indicating that the requester has been authenticated in the withdrawal terminal device. , Specifying whether or not identity authentication has been performed in the withdrawal terminal device as the determination information,
In the step of determining whether or not the upper limit amount of withdrawal is set, the host computer refers to a master file of a deposit account corresponding to the account number, and authenticates the person in the withdrawal terminal device. 7. The withdrawal management method according to claim 1, wherein it is determined whether or not an upper limit amount of withdrawal is set depending on whether or not it has been accepted. The withdrawal terminal device identifies the type of storage medium storing the account number of the deposit account of the client from the cash card inserted by the client;
When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information;
The withdrawal terminal device reads first biological information from the requester's body;
The withdrawal terminal device reads out second biological information stored in the storage medium;
The withdrawal terminal device reads the account number stored in the storage medium;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
When the withdrawal terminal device compares the first biological information and the second biological information and determines that the first biological information and the second biological information match, the host computer Sending withdrawal request information including at least the account number, the withdrawal request amount, and the user authenticated information;
The withdrawal management method according to claim 11, further comprising: The withdrawal terminal device identifies the type of storage medium storing the account number of the deposit account of the client from the cash card inserted by the client;
When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information;
The withdrawal terminal device reads first biological information from the requester's body;
The withdrawal terminal device delivering the first biometric information to the cash card;
The arithmetic device provided in the cash card compares the first biological information with the second biological information stored in the storage medium, and the first biological information and the second biological information match. Outputting a determination result for determining whether or not to the withdrawal terminal device;
The withdrawal terminal device reads the account number stored in the storage medium;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
When the determination terminal determines that the first biometric information and the second biometric information match, the withdrawal terminal device sends the account number and the withdrawal request to the host computer. Sending withdrawal request information including at least the amount and the personally authenticated information;
The withdrawal management method according to claim 11, further comprising: In the step of identifying the determination information, the host computer detects, from the withdrawal request information, authentication means information indicating a means by which the client's identity is authenticated in the withdrawal terminal device, The authentication means that has been authenticated in the terminal device for withdrawal is specified as the determination information,
In the step of determining whether or not the upper limit amount of withdrawal is set, the host computer refers to a master file of a deposit account corresponding to the account number, and authenticates the person in the withdrawal terminal device. 7. The withdrawal management method according to claim 1, wherein it is determined whether or not an upper limit amount of withdrawal is set by the authentication means. The withdrawal terminal device identifies the type of storage medium storing the account number of the deposit account of the client from the cash card inserted by the client;
When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information;
The withdrawal terminal device reads first biological information from the requester's body;
The withdrawal terminal device reads out second biological information stored in the storage medium;
The withdrawal terminal device reads the account number stored in the storage medium;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
When the withdrawal terminal device compares the first biological information and the second biological information and determines that the first biological information and the second biological information match, the host computer Sending withdrawal request information including at least the account number, the withdrawal request amount, and the user authenticated information;
The withdrawal management method according to claim 14, further comprising: The withdrawal terminal device identifies the type of storage medium storing the account number of the deposit account of the client from the cash card inserted by the client;
When the withdrawal terminal device identifies that the type of the storage medium is an IC chip, the step of requesting the requester to obtain biometric information;
The withdrawal terminal device reads first biological information from the requester's body;
The withdrawal terminal device delivering the first biometric information to the cash card;
The arithmetic device provided in the cash card compares the first biological information with the second biological information stored in the storage medium, and the first biological information and the second biological information match. Outputting a determination result for determining whether or not to the withdrawal terminal device;
The withdrawal terminal device reads the account number stored in the storage medium;
The withdrawal terminal device accepting a withdrawal request amount by an input operation of the requester;
When the determination terminal determines that the first biometric information and the second biometric information match, the withdrawal terminal device sends the account number and the withdrawal request to the host computer. Sending withdrawal request information including at least the amount and the personally authenticated information;
The withdrawal management method according to claim 14, further comprising: A withdrawal management system comprising a plurality of withdrawal terminals and a host computer connected to the withdrawal terminal through a network,
At least some withdrawal terminal devices
Account number reading means for reading the account number of the deposit account of the client stored in the storage medium of the cash card inserted by the client requesting withdrawal;
A withdrawal request amount receiving means for receiving a withdrawal request amount by the input operation of the requester;
Withdrawing request information transmitting means for transmitting withdrawal request information including at least the account number and the withdrawal request amount to the host computer;
The host computer includes:
Withdrawing request information receiving means for receiving the withdrawal request information from the withdrawal terminal device;
Determination information specifying means for specifying determination information for determining whether or not an upper limit amount of withdrawal is set in the deposit account from the withdrawal request information;
The host computer refers to a master file of a deposit account corresponding to the account number, and an upper limit setting determination unit that determines whether an upper limit amount of withdrawal is set corresponding to the determination information;
A withdrawal instruction transmitting means for transmitting to the withdrawal terminal device an instruction signal indicating that the withdrawal request amount may be withdrawn when the upper limit amount is not set;
A withdrawal management system characterized by comprising: The withdrawal instruction transmitting means transmits, when the upper limit amount is set, an instruction signal indicating that the withdrawal cannot exceed the upper limit amount to the withdrawal terminal device. Item 20. The withdrawal management system according to Item 17. The master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount,
The withdrawal instruction transmitting means transmits an amount obtained by subtracting the cumulative amount from the upper limit amount to the withdrawal terminal device as an upper limit amount that cannot be withdrawn from the withdrawal terminal device. The withdrawal management system according to 18. The host computer
When the upper limit setting determination unit determines that the upper limit amount is set, the withdrawal request amount is compared with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount. It has an upper limit determination means,
If the withdrawal request amount does not exceed the upper limit amount, the withdrawal instruction transmission means transmits an instruction signal indicating that the withdrawal request amount may be withdrawn to the withdrawal terminal device. The withdrawal management system according to claim 17. The host computer
When the upper limit setting determination unit determines that the upper limit amount is set, the withdrawal request amount is compared with the upper limit amount to determine whether the withdrawal request amount exceeds the upper limit amount. It has an upper limit determination means,
If the withdrawal request amount does not exceed the upper limit amount, the withdrawal instruction transmission means indicates that either the withdrawal amount may be withdrawn or the withdrawal request cannot be accepted. 18. The withdrawal management system according to claim 17, wherein an instruction signal is transmitted to the withdrawal terminal device. The master file stores a cumulative amount withdrawn in the past corresponding to the upper limit amount,
The upper limit excess determining means, in the comparison between the withdrawal request amount and the upper limit amount, determines whether or not the upper limit amount is exceeded by adding the cumulative amount to the withdrawal request amount. The withdrawal management system according to claim 20 or 21. The withdrawal terminal device
Storage medium identifying means for identifying the type of storage medium of the cash card;
Corresponding to the type of the storage medium, comprising identification information selection means for selecting identification information indicating the type of the storage medium,
The withdrawal request information transmitting means transmits withdrawal request information including the identification information to the host computer,
In the host computer,
The determination information specifying means detects the identification information from the withdrawal request information, specifies the type of the storage medium specified from the identification information as determination information,
18. The upper limit setting determining unit refers to a master file of a deposit account corresponding to the account number, and determines whether an upper limit amount of withdrawal is set according to the type of the storage medium. 23. The withdrawal management system according to any one of 22 to 22. The withdrawal terminal device
An identification information reading means for reading identification information indicating the type of the storage medium stored in the storage medium of the cash card inserted by the requester;
The withdrawal request information transmitting means transmits withdrawal request information including the identification information to the host computer,
In the host computer,
The determination information specifying means detects the identification information from the withdrawal request information, specifies the type of the storage medium specified from the identification information as determination information,
18. The upper limit setting determining means refers to a master file of a deposit account corresponding to the account number and determines whether or not an upper limit amount of withdrawal is set according to the type of the storage medium. 23. The withdrawal management system according to any one of 22 to 22. There are at least two types of storage media, IC chip and magnetic stripe,
The withdrawal management system according to claim 23 or 24, wherein an upper limit amount of withdrawal is set in the master file of the deposit account when the storage medium is a magnetic stripe. The withdrawal terminal device
Storage medium identification means for identifying the type of storage medium storing the account number of the deposit account of the client from the cash card;
When the type of the storage medium is identified as an IC card, biometric authentication requesting means for requesting the requester to read biometric information;
Biometric information reading means for reading first biometric information from the requester's body;
Biological information reading means for reading the second biological information stored in the storage medium;
Biometric authentication means for comparing the first biometric information and the second biometric information to determine whether the first biometric information and the second biometric information match;
When the biometric authentication unit determines that the first biometric information and the second biometric information match, the withdrawal request information transmission unit obtains withdrawal request information including authentication information indicating that biometric authentication has been performed. To the host computer,
In the host computer,
The determination information specifying means detects the authentication information from the withdrawal request information, specifies biometric authentication from the authentication information as determination information,
18. The upper limit setting determining means refers to a master file of a deposit account corresponding to the account number, and determines whether or not an upper limit amount of withdrawal is set depending on whether biometric authentication is completed or not. 23. The withdrawal management system according to any one of 22 to 22. The withdrawal terminal device
Storage medium identification means for identifying the type of storage medium storing the account number of the deposit account of the client from the cash card;
If the type of the storage medium is identified as an IC card, biometric authentication requesting means for requesting the requester to read biometric information;
Biometric information reading means for reading first biometric information from the requester's body;
First biological information delivery means for delivering the first biological information to the cash card;
The arithmetic device provided in the cash card compares the first biological information with the second biological information stored in the storage medium, and the first biological information and the second biological information match. A determination result receiving means for receiving a determination result for determining whether or not,
If the determination result is that the first biometric information and the second biometric information match, the withdrawal request information transmission means includes authentication information indicating that biometric authentication has been performed. Sending money request information to the host computer,
In the host computer,
The determination information specifying means detects the authentication information from the withdrawal request information, specifies biometric authentication from the authentication information as determination information,
18. The upper limit setting determining unit refers to a master file of a deposit account corresponding to the account number, and determines whether or not an upper limit amount of withdrawal is set based on biometric authentication or incomplete. 23. The withdrawal management system according to any one of 22 to 22.