JP2005339071A - Password input system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a password input system to be used for authenticating identity with a depositor, when the depositor performs the repayment of deposit or the cancellation of a deposit contract for making it possible for the depoistor to surely perform processing, such as repayment or transfer of deposit even when the depoistor has forgotten passwords at the using of an ATM by clarifying hints, when the depositor has forgotten the passwords. <P>SOLUTION: The password information of a user is preliminarily registered in a server, and "password with hints" and "free password" are registered as password information, and the "password with hints" are read even when the user has forgotten the "free password", and the user is encouraged to input the password, while being given hints so that principal authentication can be attained. Thus, it is possible for the user to surely perform processing such as repayment of deposit, even when the user has forgotten the password. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a password input system used for authentication of identity with a depositor when the depositor performs a refund or cancellation of a deposit contract.

  Today, bank terminal devices such as ATMs (automated teller machines) are used to perform various processes such as deposit withdrawal, deposit contract cancellation, balance inquiry, and transfer. At this time, a password is used to determine the identity with the depositor. This password is usually encrypted in the server and stored with the user ID.

  As described above, a password is convenient when authenticating an individual. However, if it is forgotten, it is desirable to set a password that is difficult to forget as much as deposit cannot be withdrawn. However, if you set a birthday, phone number, the same number, or a continuous number as a password, it is easily known to others and does not make sense for the password.

Therefore, the invention of Patent Document 1 has been proposed. In the present invention, when a password for accessing confidential data is forgotten, a hint is given to the operator by giving a hint to the operator.
Japanese Patent Laid-Open No. 06-177872

  However, the above-described conventional password input method only provides a hint of a forgotten password as a hint, and it is simple as a hint for associating a password. Absent.

Further, the above-described conventional example is a configuration used when accessing general confidential information. For example, an access right to a personal computer (PC) is described.
Therefore, the present invention clarifies hints when the password is forgotten more concretely, and even when the password is forgotten when using the ATM, the password input that can reliably perform processing such as deposit withdrawal or transfer A system is provided.

  According to the present invention, the above-described problem is that, according to the present invention, a first storage unit that stores an associative password in advance, a second storage unit that stores a free password, and a password associated with the first storage unit when a password is input. Display control means for reading and displaying the password with association, input means for confirming the display and inputting associated data, and comparison means for comparing the data and the data stored in the first storage means This can be achieved by providing a password input system having:

  By configuring in this way, even if you forget the password, you can read the password with associative, you can authenticate yourself by entering information according to the hint, withdrawal of the deposit based on the comparison result by the comparison means, etc. Processing that requires a password can be performed.

  Also, for example, before reading the password with association from the first storage means, read the free password from the second storage means, and read the password with association from the first storage means only when the free passwords do not match, The password with association is displayed.

  By configuring in this way, the free password can be confirmed first, and the associated password of this example can be used only when the personal authentication cannot be performed with the free password.

  Further, for example, when a free password is not stored in the second storage unit, the password with association is read out from the first storage unit. By configuring in this way, it is possible to first confirm the free password and use the associative password of this example only when no free password is registered.

  Furthermore, the present invention can be realized by a password input method, and can also be realized by a program recorded on a recording medium such as a flexible disk, a CD-ROM, or an MO.

With the above-described configuration, the present invention can perform withdrawals using ATM even when the password is forgotten.
Moreover, if it is set as the structure which selects multiple passwords with an association, security can be improved.

  Furthermore, since the password registered by the user is not left in writing and the person in charge of handling cannot be grasped, the security is high, and it is possible to prevent an illegal act from being induced inside and outside.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing a basic configuration of the present invention, and shows a system configuration of a password input system connected to an ATM (automated teller machine) via a dedicated line. ATMs 1a, 1b, 1c,... Are connected to the bank server 2 via dedicated lines, and ATMs 1a, 1b, 1c,... Are installed at bank branches, convenience stores, and the like.

  FIG. 2 is a schematic diagram of the server 2. In the figure, the server 2 is composed of a CPU 3, a ROM 4, and a RAM 5. The CPU 3 performs processing according to a system program stored in the ROM 4, and accesses a storage device 6 connected to the server 2 as necessary.

  In addition, necessary information is displayed on the display 7 and information is exchanged via a communication line. The system control of this example is executed in accordance with a program stored in the ROM 4, but a recording medium 9 such as a CD-ROM, a flexible disk, or MO is attached to the media driver 8 provided in the server 2 as shown in FIG. The program may be mounted and read from the recording medium 9 for use.

  FIG. 3 shows an example of a database constructed in the storage device 6. As shown in the figure, there is a storage area for customer account number, customer name, and password information. The storage area for password information is further composed of storage areas for "password with hint" and "free password". Yes.

  For example, in the example shown in the figure, the password information of the customer name “00” is registered in the storage area of the account number “0001”, the zodiac is “mouse”, the constellation in the storage area of “password with hint”. Is registered as “Canicus” and blood type “A (type)”. In addition, information on the free password “9988” is registered in the storage area of “free password”. The password information shown in the figure is also registered for customers with account numbers “0002” and later.

In the above configuration, the processing operation of this example will be described below.
FIG. 4 is a flowchart for explaining the processing of this example, in which the left side shows the ATM side processing and the right side shows the server side processing.

  First, the user goes to ATM1 (for example, ATM1a), confirms a menu displayed on the screen, and selects a desired process (step (hereinafter, indicated by S) 1). If there is no operation on ATM1 (S1 is NO), the process waits until ATM1 is operated by the user.

  Next, when the user selects a process (S1 is YES), it is determined whether a password is required when performing the process (S2). For example, when a password is required, there is a withdrawal of a deposit, cancellation of a deposit contract, balance inquiry, etc., and when no password is required, there is a cash deposit.

  Here, when it is not necessary to input a password (S2 is NO), a corresponding process is performed in accordance with an instruction displayed on the screen thereafter (S3). On the other hand, when it is necessary to input a password (S2 is YES), the user is prompted to input an account number, and the account number input by the user is acquired (S4). And the information of the said account number is transmitted with respect to the server 2 (S5).

  The server 2 waits for the account number information to be input from the ATM 1 (S6). When the account number information is input (S6 is YES), the server 2 refers to the database constructed in the storage device 6 and inputs the account number. The password information corresponding to is read (S7).

  For example, if the input account number is “0001”, the customer “00” is referenced from the aforementioned database, and the password information stored in the corresponding area is read out. In this case, as described above, the zodiac, constellation, and blood type information is registered in the “password with hint” storage area, and one password is registered in the “free password” storage area. Has been. In other words, “mouse” information is registered as the zodiac recorded in the “password with hint”, “crab” information is registered as the constellation, and “A (type)” information is registered as the blood type. Yes. In addition, the information “9988” described above is registered as “free password”.

  Next, the server 2 determines whether the customer of the account number has registered a “free password” (S8). If “free password” is registered, the server 2 first instructs the ATM 1 to input “free password” (S9). In this case, the ATM 1 prompts the user to input a “free password” in accordance with an instruction from the server 2 (S10, S11). When there is an input of “free password” (YES in S12), the “free password” is transmitted to the server 2 (S13).

  When the “free password” information is input (S14), the server 2 compares the “free password” (S15). If they match, the processing desired by the user (for example, deposit withdrawal processing) is performed thereafter. (S16). On the other hand, if they do not match, the process shifts again to prompting the user to input a “free password” (S15, S17).

Next, a case where the user forgets the “free password” will be described using the flowchart shown in FIG.
In this case, the process branches from the “free password” input process of the process (S11) shown in FIG. 4, and the process of forgetting the “free password” is performed. This process is executed, for example, when the user does not input the “free password” for a certain period of time after the “free password” input instruction screen is displayed.

  First, the server 2 determines whether or not a predetermined time has elapsed from the input instruction of “free password” (step (hereinafter, indicated by ST) 1). Here, when a certain period of time has elapsed from the input instruction, the server 2 searches the database, reads a hint randomly from the corresponding “password with hint” (ST2), and transmits the hint to ATM1 (ST3). .

  The ATM 1 side receives the transmitted data and displays it on the display (ST4, ST5). At this time, for example, when a zodiac is selected as a hint, “Zodiac” is displayed. When a constellation is selected as a hint, “constellation” is displayed, and when a blood type is selected, “blood type” is displayed.

  The user inputs an answer corresponding to the displayed hint (ST6). For example, in the case of the zodiac, enter your zodiac. In this case, the user inputs his / her zodiac and can easily input it. On the other hand, even if the hint is a constellation or blood type, the constellation or blood type is input, and can be easily input.

  Next, this input data is transmitted to the server 2 (ST7), and the server 2 compares the zodiac signs designated by the user with the data registered in the database in advance (ST8, ST9). If they match, the process desired by the user (for example, a process such as deposit withdrawal) is performed (ST10). Therefore, even if the user forgets the “free password”, the user can input the correct password by the “password with hint”, and can perform processing such as withdrawal of deposit.

  In the confirmation process of “password with hint”, if they do not match, the process proceeds to a process for prompting the input of “free password” again (ST11). However, it is not always necessary to move to the re-processing, and the subsequent processing may be stopped if there is an error even once. Further, the hint of “password with hint” to be transmitted again may be configured to be executed by a constellation or blood type.

  On the other hand, in order to ensure the identity verification, a plurality of “passwords with hints” may be transmitted and all answers may be correct. Even if comprised in this way, the reply of each hint is a self content and can be input easily.

  Further, in the above description, it corresponds to the customer information of the account number “0001”, but the same can be executed for the case of a customer of another account number. For example, in the case of a customer with an account number “0002”, the number of a car owned by himself other than the zodiac is registered as “password with hint”, and in the case of a customer with an account number “0003” My father's date of birth is registered as a “password with hint”.

  Also, regarding the “free password”, two passwords may be registered like a customer with an account number “0002”, and “free password” is not registered like a customer with an account number “0003”. Also good.

It is a system configuration figure of a password input system of the present invention. It is a schematic diagram of a server. It is a figure explaining the structure of the database registered into the recording device. It is a flowchart explaining the processing operation of this example. It is a flowchart explaining the processing operation of this example.

Explanation of symbols

1 ATM
2 server 3 CPU
4 ROM
5 RAM
6 Storage Device 7 Display 8 Media Device 9 Recording Medium

Claims (6)

First storage means for storing an associative password in advance;
Second storage means for storing a free password;
A display control means for reading an associated password from the first storage means and displaying the associated password when the password is input;
Input means for confirming the display and inputting associated data;
A comparison means for comparing the data with the data stored in the first storage means;
A password input system characterized by comprising:   Before reading the associative password from the first storage means, the free password is read from the second storage means, and the associative password is read from the first storage means only when the free passwords do not match. The password input system according to claim 1, wherein the password is displayed.   2. The password input system according to claim 1, wherein when a free password is not stored in the second storage means, an associative password is read from the first storage means.   The password input system according to claim 1, 2 or 3, wherein the password with association read from the first storage means is a plurality of different passwords with association. A first storage process for storing an associative password in advance;
A second storage process for storing a free password;
A display control process for reading an associated password stored by the first storage process and displaying the associated password when the password is input;
An input process for confirming the display and inputting associated data;
A comparison process for comparing the data and the data stored by the first storage process described above;
The password input method characterized by performing. A first storage function for storing a password with an association in advance;
A second storage function for storing free passwords;
A display control function for reading an associated password stored by the first storage function and displaying the associated password when the password is input;
An input function for confirming the display and inputting associated data;
A comparison function for comparing the data and the data stored by the first storage process described above;
A password input program executable by a computer.

Images