JP2006259836A - Unauthorized use monitoring system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a procedure by a stranger who tries to illicitly make a cash withdrawal from an account by going under cover as an account holder. <P>SOLUTION: When a user 14 requests the procedure for making a cash withdrawal from a specific account by operating an ATM 12, a bank server 34 instructs a monitoring center 44 to determine whether the request is abnormal or not. The abnormality is determined when the request is performed for a large amount of cash never made in the past, and the user 14 must call the monitoring center 44 through the ATM 12. The conversation of the user 14 obtained from a telephone 54 is collated with vocal prints of persons doing dishonest acts in the past by a vocal print analyzer 56. The voice is recognized by a voice recognizing device 72, and whether it is agreed with a scenario spoken by the person doing illicit acts in the past or not, is determined by a scenario determining device 74. The ATM 12 rejects the request by the user 14 when the information common to the person doing illicit act in the past is found as a result of the determination, and permits the request by the user 14, when such information cannot be found. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an unauthorized use monitoring system and an unauthorized use monitoring method for preventing a procedure for illegally withdrawing a property from an account.

If the cash card's magnetic information is stolen by a method such as skimming, and the card PIN is guessed from the date of birth, etc., it becomes possible for another person pretending to be the account holder to withdraw the deposit from the account illegally. . In order to prevent such unfair procedures, a method of setting a maximum amount of deposit withdrawal to prevent withdrawal of a large amount of deposits at once or switching to an IC card with high confidentiality of information is considered. . Or, as described in Patent Documents 1 and 2, when a user requests a procedure that is suspected of fraud, he / she makes a phone call and the phone number of the mobile phone registered by the account holder himself, etc. There is also a method of authenticating whether the user is the account holder or not by confirming the identification information.
JP 2004-220066 A JP 2003-330565 A

  However, setting a withdrawal limit is not a fundamental solution because a large amount of cash can be withdrawn if the number of times is divided. Creating an IC card is time consuming and cumbersome. Furthermore, the method of using the identification information of the mobile phone described in Patent Documents 1 and 2 for the authentication of the person will authenticate the other person as long as the mobile phone has been taken by the other person who impersonated the person. There is a fear.

  Therefore, referring to the customer's transaction history, if an unprecedented large amount of cash withdrawal procedure is requested, the account is suspended as an abnormal behavior, and the request from the account holder himself is truly A method is conceivable in which the request is allowed after confirming whether it exists. However, even in that case, it is difficult to obtain confirmation that the user is the person.

  An object of the present invention is to provide a fraud monitoring system and a fraud monitoring method for solving such a drawback of the prior art and preventing a procedure for illegally withdrawing goods from an account.

  In order to solve the above-described problem, the unauthorized use monitoring system according to the present invention is a procedure that has occurred in the past for each of one or more accounts in the amount of goods in a procedure for moving goods from a certain account to a place other than that account. Procedure recording means for recording every time, acceptance means for accepting a request for moving a property from a specific account to a place other than that account, and accepting or rejecting the request, and property that will be moved by the above request Whether or not the procedure to be performed according to the above request is abnormal based on a comparison between the amount of goods and the amount recorded for each procedure of goods transferred from a specific account in the past. And a message provider that issues a message that asks for a telephone call or interview that can be obtained in the vicinity of the accepting means when the judging means determines that the procedure is abnormal. And one or more voiceprints, and the voiceprint analysis means for determining whether or not the voiceprints and the voiceprint of the voice obtained by telephone or interview match, the voiceprint analysis means If it is determined, the accepting means rejects the request.

  According to the present invention, although it is not possible to obtain confirmation that the user is the account holder himself / herself, it is determined whether or not the user impersonates the account holder in the past and illegally steals goods from the account. Is possible. Therefore, the withdrawal procedure requested by a user who is determined to be an unauthorized person is prevented, the property is prevented from being stolen illegally from the account, and the request of the user who is not determined to be an unauthorized person is permitted. It is possible.

  Embodiments of the unauthorized use monitoring system and unauthorized use monitoring method according to the present invention will now be described in detail with reference to the accompanying drawings. In the figure, elements not directly related to the present invention are omitted, and similar elements are denoted by the same reference numerals. Further, the signal is indicated by using a reference symbol of a connection line in which the signal appears.

  FIG. 1 is a block diagram showing a first embodiment of an unauthorized use monitoring system according to the present invention. The fraud monitoring system 10 is a stranger in which a user 14 requesting a procedure to move goods from a specific account using a bank's ATM (Automatic Teller Machine) 12 impersonates the owner of the specific account. This is a system for determining whether or not there is. The unauthorized use monitoring system 10 is a system that further causes the ATM 12 to reject the request of the user 14 when it is determined that the user 14 is another person impersonating the person. In FIG. 1, only one ATM 12 is shown for convenience of illustration, but it goes without saying that a plurality of ATMs 12 may be installed at various places.

  The ATM 12 is included in the unauthorized use monitoring system 10 and is a receiving means for transmitting a request inputted by the user 14 by operating the operating device 20 of the ATM 12 to the bank as conceptually shown by the connection line 18. The procedures performed at the request of the user 14 are diverse and include, for example, withdrawal of cash from an account, deposit, transfer to another account, balance inquiry, and the like. However, in the embodiment of the present invention, when a request for a withdrawal procedure, which is a type of procedure for moving goods from a specific account designated by the user 14 to a place other than the account, is accepted or rejected. The ATM 12 will be described as an apparatus.

  Here, the term “account” used in the description of the embodiment of the present invention will be described. As far as this embodiment is concerned, “account” means an account for depositing cash, such as an ordinary or time deposit account prepared by a bank. However, the “account” referred to in the present invention has a broader concept, and is not limited to the deposit account as described above, but may be a securities account prepared by a securities company, a bank, or other institutions. That is, the “property” referred to in the present invention is not limited to cash, and may be an object having any property value including securities such as stock certificates.

  In this embodiment, a bank is introduced as an institution for preparing a deposit account. However, the present invention may be applied to any organization for preparing a deposit account such as a post office.

  The ATM 12 has an operating device 20, which can be operated by the user by a push button, a touch panel or any other method. Although not shown, the device 20 has a portion where cash can be exchanged with the user 14. In response to an instruction 42 of the bank server 34, which will be described later, the device 20 gives an operation instruction to the user 14 or issues a message rejecting a request from the user 14, as conceptually shown by the connection line 21. Is possible. These operation instructions and messages may be displayed on the ATM 12 provided with a display screen, or may be given by voice.

  The ATM 12 further includes a video camera 22 and a video recording device 24. The video camera 22 is a camera that captures a moving image in the vicinity of the ATM 12 in response to an instruction signal 26 from the controller device 20. More specifically, the video camera 22 is installed at a position where the face of the user 14 who operates the operating device 20 of the ATM 12 can be photographed. The photographing of the face of the user 14 is conceptually indicated by a connection line 28. In this embodiment, a moving image photographing device called the video camera 22 is used, but a still camera for photographing a still image may be used. Even in such a case, the camera needs to be installed at a position where the face of the user 14 can be photographed.

  The video recording device 24 is a recording device that receives and records video captured by the video camera 22 through the signal line 30. As indicated by a signal line 32, the device 24 transmits the recorded video of the user 14 to the control device 46 in response to an instruction from the control device 46 described later.

  The unauthorized use monitoring system 10 includes a bank server 34. The server 34 is a device that records the deposit balance of all accounts and executes various procedures such as withdrawal and deposit on the data. The server 34 may be a computer or a workstation. On the other hand, various procedures executed on the data by the server 34 are actually performed at the ATM 12 or a bank window (not shown), and cash is actually exchanged at these places. The server 34 may be installed at a location different from the ATM 12. Although only one server 34 is shown in FIG. 1, a plurality of servers 34 may be provided. In this case, the servers share information and manage deposit balances of all accounts.

  As described above, the server 34 is a device that executes various procedures on data, but even if a request 36 of the user 14 from the ATM 12 managed by the server 34 is received, it is immediately permitted and executed. Not to do. Upon receipt of the request 36, the server 34 forwards it to a monitoring center 44, which will be described later, as shown by a signal line 38, and makes a decision of permission or rejection.

  The unauthorized use monitoring system 10 includes a monitoring center 44. The monitoring center 44 is a device that receives the request 38 issued by the user 14 and relayed by the ATM 12 and the bank server 34 and determines whether or not the procedure to be performed by the request 38 is abnormal. If the monitoring center 44 determines that the procedure is abnormal, the monitoring center 44 gives an operation instruction 40 to the user 14 to the operation device 20 of the ATM 12 via the server 34 or an instruction 40 to reject the request. It is a device to give. A typical operation instruction 40 issued in the present embodiment is an instruction to the user 14 to call the monitoring center 44 or to have an interview.

  The monitoring center 44 includes a control device 46. The control device 46 actually determines whether or not the procedure to be performed by the request 38 is abnormal, and if it is determined to be abnormal, determines whether or not the user 14 is another person impersonating the person. This is a device for determining whether or not to reject the request. The monitoring center 44 is provided with a transaction history database 47. The transaction history 47 is a record of a transaction history for each account. The transaction history 47 may store the procedure recorded by the bank server 34 via the control device 46. In this embodiment, among the transaction histories of the accounts for which a cash withdrawal procedure has been requested, the control unit 46 refers to the amount of each withdrawal procedure that has occurred in the past as indicated by the connection line 49, and is performed according to the above request. It is determined whether the withdrawal procedure to be executed is abnormal.

  A method for determining whether or not the procedure is “abnormal” may be freely determined. Generally, when the user 14 requests a procedure for withdrawing cash that is significantly higher than the past withdrawal procedure recorded in the transaction history 47, it may be determined as abnormal. This is because, when the user 14 is a person impersonating the person, it is assumed that a large amount of cash is to be withdrawn from the person's account. Therefore, for example, when an amount exceeding a predetermined maximum withdrawal amount is requested, it may be determined as abnormal. Further, attention may be paid only to procedures that have occurred during a recent fixed period, and an abnormality may be determined when an amount exceeding the maximum withdrawal amount during the period is requested. Furthermore, when such a large amount of withdrawal procedure is continuously requested, it may be determined as abnormal. That is, the first time is permitted, but the second time is determined to be abnormal. For example, it may be determined that there is an abnormality when a request for withdrawing a withdrawal upper limit determined by a bank is continued twice.

  As described above, the control device 46 determines the abnormality of the requested procedure, and controls all devices described later in the monitoring center 44 as shown by the control signal lines 48, 50, 52, etc. These devices are devices that receive the determination result of whether or not the user 14 is another person who impersonates the person. Further, the control device 46 receives the video 32 of the user 14 recorded by the video recording device 24 of the ATM 12 and assists in the determination.

  The monitoring center 44 includes a telephone 54 and a voice print analyzer 56. The telephone 54 is a device that receives a call from the telephone 59 of the user 14 and makes an operator talk as conceptually shown by a connection line 58. On the other hand, the voiceprint analysis device 56 is a device that receives a call made by the operator with the user 14 as a voice 60 using the telephone 54 and determines whether or not they match with a specific voiceprint. As shown by the connection line 66, the voiceprint analysis device 56 refers to a criminal voice 64 held in an unauthorized database 62 described later, and compares the voiceprint stored therein with the voiceprint of the voice 60. Note that the audio 60 may be a recording of what the person in charge of the bank and the user 14 have had an interview and have a conversation.

  The monitoring center 44 includes an unauthorized database 62. The fraud database 62 has a criminal voice database 64. The criminal voice 64 stores voice prints of those who have withdrawn deposits in the past. The voiceprint analysis device 56 compares these criminal voiceprints with the voiceprints of the voice 60 obtained from the telephone 54 to determine whether or not the user 14 is a person who intends to withdraw the deposit illegally. If a person asks a bank for a procedure to withdraw a deposit illegally, the controller 46 determines that it is an abnormal procedure, and even if the person and the bank operator have a telephone conversation, If it is not registered in the criminal voice 64 in the past, it cannot be determined whether or not the person is an unauthorized person. However, once it has become clear that an unauthorized withdrawal procedure has been performed, the voiceprint of the person is registered in the offender's voice 64 through the consortium 84 described later, and that person has requested an unauthorized withdrawal procedure again. In this case, a conversation is made with the person on the telephone 54, and the voiceprint analyzer 56 searches for a matching voiceprint from the voice 64 of the criminal, so that it can be determined that the person is another person impersonating the person.

  The unauthorized database 62 includes an unauthorized user video database 68. Once it has become clear that the unauthorized user video 68 has also been subjected to an unauthorized withdrawal procedure, an image of the person who requested the unauthorized procedure is stored through a consortium 84 described later. If the person requests an unauthorized withdrawal procedure again, the image obtained by photographing the person's face with the video camera 22 is image-analyzed or identified with the eyes of the person, and from the unauthorized user video 68 By searching for a matching face image, it may be possible to determine that the person is the other person impersonating the person.

  The monitoring center 44 includes a voice recognition device 72 and a scenario determination device 74, and the unauthorized database 62 has an unauthorized scenario database 76. The voice recognition device 72 is a device that receives the voice 60 from the telephone 54, performs voice recognition, and passes text data 78 to the scenario determination device 74 as a recognition result. The scenario judgment device 74 checks whether or not the text recorded in the illegal scenario database 76 described later exists in the received text data 78, and the content spoken by the user 14 has been impersonated in the past. It is determined whether or not it is similar to the content spoken by. In other words, once it becomes clear that fraudulent withdrawal procedures have been carried out in the fraud scenario database 76, the fraudulent scenario and the bank operator are included in the conversation between the fraudulent user and the bank operator through the consortium 84 described later. Record the keyword.

  For example, a person who is trying to withdraw a large amount of cash explains in a telephone conversation with a bank operator that the companion is dead and 3 million yen is immediately needed for a funeral fee. It is assumed that when this is trusted and the withdrawal procedure is performed as requested, it is found that this user is another person who has impersonated the account holder. In that case, a series of keywords such as “accompanying”, “dead funeral fee”, “3 million yen”, and “immediately” are registered in the fraud scenario 76 as one of the fraud scenarios. . When a criminal conducts fraud, there is a possibility of explaining a similar situation, so the criminal explanation of the criminal may contain a word that matches the keywords that make up the registered fraud scenario. is there. If the same criminal requests an unauthorized withdrawal procedure again, the telephone conversation is recognized by the voice recognition device 72 and the scenario determination device 74 refers to the fraud scenario 76 as shown by the connection line 80. There is a possibility that it can be presumed that the offender used to commit fraud. Even if not all of the keywords that make up a certain fraud scenario appear in the conversation, if a certain percentage of the keywords appear, it may be presumed that the offender used to be fraudulent. If a synonym of a keyword appears, it may be determined that the keyword has appeared. If a synonym dictionary database is prepared, fraud determination by such keyword search is easy.

  The scenario determination device 74 uses text mining in addition to the simple keyword / synonym search described above to determine whether the story of the user 14 is similar to the scenario of a person who has been cheating in the past. May be. Text mining does not simply categorize text content by words appearing in text data. For example, as described in Japanese Patent Application Laid-Open No. 2002-140346, text mining statistically clarifies the appearance tendency of words in the text, what kind of other words the two words are connected to, etc. By clarifying the relationship between words, the “intention” of the text is extracted, and the text having the same intention can be searched from a huge amount of text databases. As a specific tool, the text mining tool “CB Market Intelligence” of Justsystem Corporation may be used.

  The control device 46 receives the determination results 48 and 52 performed by the voiceprint analysis device 56 and the scenario determination device 74. If neither the voiceprint determination result 48 nor the scenario determination result 52 includes the result that the information of the person who has performed the fraud has been matched, the control device 46 requests the ATM 12 to request the user 14 You may be instructed to allow However, if it is later determined that the procedure is an unauthorized withdrawal procedure, the control device 46 acquires the voiceprint of the user 14 from the voiceprint analysis device 56, and uses the scenario determination device 74 to obtain the keyword obtained from the contents of the telephone conversation. The video of the user 14 is acquired from the video recording device 32. Then, they are transmitted to the consortium 84 described later through the communication line 82.

  The unauthorized use monitoring system 10 includes a consortium 84. This is an information bank jointly used by member banks 86 including the banks appearing in this embodiment, and may be a server for managing information such as workstations. In the consortium 84, the voiceprint, video, and fraud scenario of the fraudulent person are accumulated and distributed to the monitoring center 44 and other member banks 86 via the communication line 88. The voiceprint, video, and fraud scenario of the person who performed fraud are stored in the databases 64, 68, and 76 of the fraud database 62 of the monitoring center 44, respectively.

  The operation of the embodiment of the present invention configured as described above will be described below. It is assumed that the user 14 operates the operation device 20 and requests a procedure for withdrawing cash from a specific account. The bank server 34 that has received this request 36 forwards it to the monitoring center 44 and asks for an instruction to either permit or deny. When receiving the request, the control device of the monitoring center 44 first refers to the transaction history 47 and compares it with the withdrawal amount of the withdrawal procedure that has occurred in the account in the past. As a result, if it is determined that the procedure to be performed according to the request is not abnormal, an instruction to permit the request is given to the ATM 12 via the bank server 34. On the other hand, if it is determined that the procedure to be performed by the request is abnormal, a message is displayed on the ATM 12 so that the user 14 makes a call to the monitoring center 44. Further, the video camera 22 is operated by the operation device 20 to capture the face image of the user 14 and record it in the video recording device 24.

  When the user 14 uses the telephone 59 to call the monitoring center 44, the bank operator uses the telephone 54 to respond. The contents of this conversation are transmitted as voice 60 to voiceprint analyzer 56 and voice recognizer 72. The voiceprint analysis device 56 compares the voiceprint of the voice 60 with the voiceprint stored in the criminal voice 64 and searches for a match. If there is a match, the voiceprint analyzer 56 sends the determination result to the controller 46 as a determination result.

  The operator asks the user 14 why he needs a lot of cash. As a result, the reason explained by the user 14 is recognized by the voice recognition device 72 and sent to the scenario determination device 74. The scenario determination device 74 searches for a scenario similar to the fraud scenario 76, and when such a scenario is found, the scenario determination device 74 sends the determination result to the control device 46 as a determination result.

  Either the voiceprint analysis performed by the voiceprint analysis device 56 or the scenario search performed by the scenario determination device 74 is performed first, and the result of matching with a person who has performed fraud in the past in the previous process is If it comes out, the process performed later may be omitted. Needless to say, both steps may be performed in parallel.

  The control device 46 receives the determination results from the devices 56 and 74, and if any one of the results matches the information of the criminal who performed the fraud, the control device 46 Then, a message rejecting the request from the user 14 may be displayed. Also, if none of the results match the criminal information, the image of the unauthorized user is further obtained by acquiring an image from the video recording device 24 and performing image analysis or human verification. It may be determined whether there is a match with 68. As a result, if there is a match, a message rejecting the request of the user 14 may be displayed as described above. Note that the request permission / refusal rule according to the determination result is not limited to that described above, and may be freely determined.

  If suspicious information cannot be obtained from any of the voiceprint, scenario, and video, the control device 46 may give an instruction to permit the request to the ATM 12 via the bank server 34. However, if it is determined that the withdrawal procedure performed after that request has been performed by another person impersonating the principal, the control device 46 may obtain the voiceprint, scenario, and video information obtained for the user 14. Are obtained from the devices 56, 74 and 24, respectively, and sent to the consortium 84. Each information is distributed from the consortium 84 to other member banks 86 and also to the monitoring center 44, and stored in the databases 64, 68, and 76 of the unauthorized database 62, respectively.

  FIG. 2 is a block diagram showing a second embodiment of the unauthorized use monitoring system according to the present invention. In the unauthorized use monitoring system 100 of FIG. 2, the user 14, the bank server 34, the monitoring center 44, and the consortium 84 that also appeared in FIG. 1 are denoted by the same reference numerals as in FIG. FIG. 2 shows that a user 14 issues a withdrawal procedure request from the target account, that is, the bank account to which the bank server 34 belongs, using the ATM 105 of another bank, as conceptually shown by the connecting line 101. Example of the case. Naturally, it is the server 102 of the other bank that has jurisdiction over the other ATM 105, so that the request is first transmitted to the other bank server 102 via the connection line 103, and further through the connection line 104 to the bank server 34. Brought to you. The subsequent operation is the same as in the first embodiment, and it is determined whether or not the procedure is abnormal from the withdrawal amount, and voiceprints and scenarios are further analyzed.

  On the other hand, since only the video of the user 14 can be obtained only from the other bank ATM 105, the connection lines 106, 108, and 88 are traced to the monitoring center 44 from the monitoring center 110 of the other bank through the consortium 84. Provided.

It is a block diagram which shows the 1st Example of this invention. It is a block diagram which shows the 2nd Example of this invention.

Explanation of symbols

10 Unauthorized use monitoring system
12 ATM
34 Bank server
44 Monitoring center
56 Voiceprint analyzer
62 Invalid database
72 Voice recognition device
74 Scenario judgment device

Claims (8)

A procedure recording means for recording, for each of one or more accounts, a procedure that has occurred in the past for each of the one or more accounts;
Accepting a request for a procedure to move a property from a specific account to a place other than the account, and accepting means for permitting or rejecting the request;
Performed according to the request based on a comparison between the amount of goods that will be moved by the request and the amount of goods that have been transferred from the specific account in the past and recorded for each procedure. A determination means for determining whether or not the procedure is abnormal,
A message providing means for issuing a message requesting a telephone call or an interview that can be obtained in the vicinity of the accepting means when the judging means determines that the procedure is abnormal;
One or more voiceprints are stored, and voiceprint analysis means for determining whether or not the voiceprint matches the voiceprint of the voice obtained by the telephone or the interview,
The unauthorized use monitoring system according to claim 1, wherein when the voiceprint analyzing means determines that they match, the accepting means rejects the request. A procedure recording means for recording, for each of one or more accounts, a procedure that has occurred in the past for each of the one or more accounts;
Accepting a request for a procedure to move a property from a specific account to a place other than the account, and accepting means for permitting or rejecting the request;
Performed according to the request based on a comparison between the amount of goods that will be moved by the request and the amount of goods that have been transferred from the specific account in the past and recorded for each procedure. A determination means for determining whether or not the procedure is abnormal,
A message providing means for issuing a message requesting a telephone call or an interview that can be obtained in the vicinity of the accepting means when the judging means determines that the procedure is abnormal;
Voice recognition means for recognizing voice obtained by the telephone or interview;
A procedure for storing one or more keywords, detecting the one or more keywords from the speech recognized by the speech recognition means, and performing the request based on the detection result A scenario detection means for determining whether or not is abnormal,
The unauthorized use monitoring system according to claim 1, wherein when the scenario detecting unit determines that the procedure is abnormal, the receiving unit rejects the request. A procedure recording means for recording, for each of one or more accounts, a procedure that has occurred in the past for each of the one or more accounts;
Accepting a request for a procedure to move a property from a specific account to a place other than the account, and accepting means for permitting or rejecting the request;
Performed according to the request based on a comparison between the amount of goods that will be moved by the request and the amount of goods that have been transferred from the specific account in the past and recorded for each procedure. A determination means for determining whether or not the procedure is abnormal,
A message providing means for issuing a message requesting a telephone call or an interview that can be obtained in the vicinity of the accepting means when the judging means determines that the procedure is abnormal;
An image database storing images of one or more persons;
Image recording means capable of photographing and recording an image in the vicinity of the receiving means;
Whether the procedure to be performed by the request is abnormal based on a comparison between the image photographed and recorded by the image recording means and the image of the one or more persons stored in the image database. Image comparison means for determining whether or not,
The unauthorized use monitoring system according to claim 1, wherein when the image comparison unit determines that the procedure is abnormal, the reception unit rejects the request. In the unauthorized use monitoring system according to any one of claims 1 to 3,
The procedure recording means further records the time at which the procedure occurred for each procedure that has occurred in the past,
The determination means determines whether or not the procedure to be performed according to the request is abnormal in consideration of the time of each procedure of the goods moved from the specific account in the past. Usage monitoring system. Receiving a request for a procedure to move a property from a specific account to a location other than the account; and
Based on a comparison between the amount of goods that will be moved by the request and the amount of goods that has occurred in the past and that is transferred from the specific account to a place other than the account for each procedure. Determining whether the procedure to be performed is abnormal or not;
If it is determined that the procedure is abnormal in the step, a step of issuing a message requesting a telephone call or an interview that can be acquired in the vicinity of the place where the receiving step is performed;
A voiceprint analysis step of determining whether one or more voiceprints and voice voiceprints obtained by telephone or interview match;
An unauthorized use monitoring method, comprising: a step of rejecting the request when it is determined in the voiceprint analysis step that the two match. Receiving a request for a procedure to move a property from a specific account to a location other than the account; and
Based on a comparison between the amount of goods that will be moved by the request and the amount of goods that has occurred in the past and that is transferred from the specific account to a place other than the account for each procedure. Determining whether the procedure to be performed is abnormal or not;
If it is determined that the procedure is abnormal in the step, a step of issuing a message requesting a telephone call or an interview that can be acquired in the vicinity of the place where the receiving step is performed;
Recognizing speech obtained by the telephone or interview;
A scenario in which one or more keywords are detected from the voice recognized in the voice recognition step, and whether or not the procedure to be performed by the request is abnormal based on the detection result A detection process;
And a step of rejecting the request when the scenario detection step determines that the procedure is abnormal. Receiving a request for a procedure to move a property from a specific account to a location other than the account; and
Based on a comparison between the amount of goods that will be moved by the request and the amount of goods that has occurred in the past and that is transferred from the specific account to a place other than the account for each procedure. Determining whether the procedure to be performed is abnormal or not;
If it is determined that the procedure is abnormal in the step, a step of issuing a message requesting a telephone call or an interview that can be acquired in the vicinity of the place where the receiving step is performed;
An image comparison step of determining whether or not the procedure to be performed by the request is abnormal based on a comparison between an image in the vicinity of the place where the receiving step has been performed and an image of one or more persons; ,
And an unauthorized use monitoring method comprising: rejecting the request when it is determined that the procedure is abnormal in the image comparison step. In the unauthorized use monitoring method according to any one of claims 5 to 7,
In the determining step, it is further determined whether or not the procedure to be performed by the request is abnormal in consideration of the time point for each procedure of the goods moved from the specific account in the past. Unauthorized use monitoring system.

Images