JP2006277431A - Automatic transaction device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the following problem of input processing when performing rearrangement (a shuffle) of secret code number input key arrangement: when the same user continuously performs transactions or when redisplaying a secret code number input screen inside the same transaction, the numeric key arrangement of the secret code number input screen displayed in each the transaction is not unified to reduce convenience of the user or to cause an input error or the like. <P>SOLUTION: When the same user continuously executes the transactions, display position information of the key arrangement rearranged in time of the initial transaction is stored as it is and is taken over, and a screen is displayed by the same key arrangement even in a continuously performed transaction. Thereby, the convenience of the user is improved, and a crime prevention countermeasure can be performed. When desiring to change the key arrangement again, the user depresses a key arrangement change key to change the key arrangement. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an automatic machine for inputting a personal identification number, and more particularly to a screen display control method for an automatic teller machine or the like installed in a financial institution and taking countermeasures against the personal identification number.

  In recent years, crimes due to card counterfeiting and password peeping have been increasing, and as part of those crime prevention measures, the number keys on the password input screen on which the user inputs the password are rearranged randomly according to the random number The security code entered by the user is being taken in a short time without being inferred by a nearby third party from the movement of the hand and without making a mistake. The number key arrangement for entering the PIN number is randomly changed and displayed for each transaction performed by the user. There exists patent document 1 in the applicable technique.

Japanese Patent Laid-Open No. 10-105781

  However, in the above background art, when the same user makes a transaction continuously, or when the password input screen is redisplayed within the same transaction, the number key of the password input screen displayed in each transaction is displayed. The arrangement is not uniform, and problems such as a decrease in user convenience and input errors are considered as disadvantages.

  In order to solve the above-described problem, in the present invention, when the same user performs a transaction continuously in an automatic machine device having an input means for inputting a personal identification number, the key arrangement rearranged at the first transaction is displayed. The position information is stored as it is, and the screen is displayed with the same key arrangement even in the subsequent transaction. However, if the user wants to change the key layout again, the user can change the key layout by pressing the key layout change key.

  According to the present invention, when the same user carries out a transaction continuously, the password input number key arrangement displayed in each transaction is unified, and the convenience for the user is improved. Moreover, since the PIN code input number key arrangement to be displayed is rearranged and displayed, it is also effective for security measures.

The best mode for carrying out the present invention will be described below in detail with reference to the drawings.
FIG. 1 shows a drawing showing a system including an ATM connected via a host communication network, and FIG. 2 shows an internal block diagram of the system shown in FIG. An automatic cash transaction apparatus (hereinafter referred to as ATM) 1 is an automatic transaction apparatus that is installed in a financial institution and performs transactions such as cash deposits and withdrawals by customer operations. It is connected to the line connection unit 11. The ATM is a device that automatically executes various transactions requested by the user, and includes an operation unit 3, a card / detail slip mechanism unit 4, a passbook mechanism unit 5, a bill deposit / withdrawal mechanism unit 6, and a coin deposit / withdrawal mechanism unit 7. The control unit 2 is configured to control each unit. The control unit includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and controls various processes and transactions described later.

  Each part will be described below. The operation unit 3 has screen display, key input detection, and voice guidance output functions. When an ATM user conducts a transaction, the operation unit 3 mainly displays a guidance screen for the transaction operation, or uses the user's operation or finger such as a personal identification number. This is the part that accepts the pressed key input. The operation unit 3 is preferably an input / display unit (also referred to as an input display unit) constituted by a touch panel or the like, and displays various information on the display screen, and of course, various items included in the display screen can be pressed. Detect.

  The card mechanism unit 4 has a user card insertion or ejection operation, a card magnetic stripe or IC chip read or write operation, a card embossed portion image reading function, and the like. Moreover, it has the statement slip mechanism part 4 which prints the transaction contents on a statement slip by a printing part, and discharge | emits it from the inside of an apparatus. The passbook mechanism unit 5 has a user's passbook insertion / ejection operation, magnetic stripe read / write operation, a printing function by the passbook printing unit, and the like.

  The banknote deposit / withdrawal mechanism 6 and the coin deposit / withdrawal mechanism 7 have a cash deposit / withdrawal function, a cash discrimination / conveyance function, and a storage function. This is the part that controls And as above-mentioned, the process of each of these site | parts is controlled by the control part 2. FIG.

  On the other hand, a host computer (hereinafter referred to as a host) 9 connected to the ATM 1 is connected to the line control unit 8 of the ATM 1, a line connection unit 11 for transmitting or receiving data with the ATM 1, and an account for storing user account information and the like. A file unit 14 including a file 13 and a file for storing user information corresponding to an account, and an account information file for controlling the account information file 13 among a plurality of files included in the file unit 14 It has the control part 12 and the host computer control part 10 which controls these. The account information file 13 also stores the user's personal identification number, and the control unit 10 compares the personal identification number included in the data received from the ATM 1 and transmits the result to the ATM 1. Thereby, it is determined whether or not the password entered by ATM1 is acceptable.

  Next, FIG. 3 shows a processing flow when the user performs a balance inquiry transaction at the ATM. A welcome screen is displayed on the operation unit 3 (S300). This welcome screen is the first screen displayed on ATM1 and is also called the initial screen. The initial screen has multiple transaction keys, specifically, “deposit transaction”, “payment transaction”, “balance inquiry”, “transfer” Various transaction items that can be transacted at ATM 1 such as “transaction” and “change PIN” are displayed. When the user selects “Balance inquiry” from the transaction keys displayed in the transaction selection (S301) from among these items, the operation unit 3 detects the selection and starts the transaction. Subsequently, a card insertion guidance is displayed on the operation unit 3 to prompt the card mechanism unit 4 to insert a magnetic card or IC card held by the user (S302). The card mechanism unit 4 reads the information of the magnetic stripe or IC chip on the card and displays a password input screen so that the user can input the password. When displaying the password input screen on the operation unit 3, the password input screen key arrangement determining process (S303) is performed to determine the password key arrangement. The key arrangement determination process (S303) will be described later with reference to FIG.

  For the user, the balance inquiry transaction is the first transaction, which is fundamentally different from previous user transactions. In other words, if the number key arrangement of the PIN number is displayed with the same key arrangement as the previous user, the malicious person may know what numbers are entered by the movement of the finger. is there. Therefore, when the previous user completes the transaction and the next user performs the transaction, the control unit 2 of the ATM 1 recognizes and judges it, and shuffles it as a key arrangement determination process before displaying the PIN code input screen. Process. After confirming the password key arrangement, a password input screen is displayed on the operation unit 3 (S304) to prompt the user to input the password. As described above, the password input screen displayed here is in a state in which numeric keys are randomly displayed so that the contents input to the third party from the key input operation cannot be inferred.

  When the user inputs a personal identification number, the operation unit 3 detects it (S305), transmits data including the inputted personal identification number to the host 9, and executes central communication with the host 9 to obtain the determination result. (S307). After the central update with the host, the balance of the user is printed on the statement slip by the statement slip mechanism unit 4 based on the information received from the host, released together with the card, and waiting for the user to receive (S308). The inquiry transaction ends.

  Here, if the password entered on the password entry screen (S304) is not valid, NO is determined in S306, the password entry screen is displayed again to the user (S304), and the password is entered. Prompt for In this case as well, the code number input screen key arrangement determination process (S303) is performed to determine the code key arrangement. If the key arrangement at the time of re-input is different from the key arrangement at the first input, the user ( There is a possibility that the convenience of the end user will be reduced. For this reason, the key arrangement on the password input screen displayed at the time of the re-input process is not the shuffle process, but is designated in the same way as the previous display key arrangement, and the key arrangement determination process (S303) is executed. That is, the control unit 2 performs the process of taking over the key arrangement of the previously displayed code number and displays the same number key arrangement when displaying the code number at the time of re-input. In addition, as shown in FIG. 7, the password input screen displayed in S304 is a guidance message “Please press the password”, a numeric key 700 from 0 to 9, and the number that has been pressed is “xxxx”. As an area for displaying digits and a shuffle key 701. By detecting that the user presses the shuffle key 701, the key arrangement is shuffled again, the key arrangement determination process (S303) of the code number input screen is performed, and the code key arrangement is changed. Is possible. Of the number keys, seven numbers “0” are displayed in combination with the lower row and the right column, and pressing of all the numbers “0” is effective, and guidance to that effect is also displayed.

  As described above, when the password input screen of S304 is displayed, the control unit determines that the number key layout is not shuffled uniquely, but the password is re-input in one transaction. One feature is that the numeric key layout before re-input is maintained, the handover process is performed, and the password input screen is displayed with the same key layout.

Next, continuous transactions will be described. A continuous transaction is basically a process in which a single user conducts multiple transactions at the same time using ATM1, and the user conducts a balance inquiry transaction at ATM and then performs a payment transaction continuously. This will be described with reference to FIG. The balance inquiry transaction is the same as that in FIG.
A welcome screen is displayed on the operation unit 3 (S400), a plurality of transaction keys are displayed, and a transaction is started by selecting "Balance inquiry" from the transaction keys displayed by the user in transaction selection (S401). . The insertion of the medium of the magnetic card used for the transaction is accepted in the card insertion (S402). Next, in order to display a personal identification number input screen so that the user can input the personal identification number, a personal identification number input screen key arrangement determination process (S403) is performed to determine the personal identification key arrangement. This key arrangement determination process (S403) will be described later with reference to FIG. In this case, since it is a personal identification number input screen to be displayed at the first time of the transaction, the key layout is designated as “shuffle”, that is, the shuffle process is actively performed, and the key arrangement determination process (S403) is executed. After confirming the personal identification key arrangement, a personal identification number input screen is displayed on the operation unit 3 (S404), and the user is prompted to input the personal identification number (see FIG. 7). The password input screen displayed here is in a state in which keys are randomly displayed in consideration of the fact that the content input to the third party from the key input operation cannot be inferred by the shuffle process by the control unit 2.

  Subsequently, the user inputs a password (S405). When the input of the personal identification number is checked and the check is normal (S406), central communication with the host computer 9 (S407) is performed. If the security code input check is abnormal, maintain the numeric key layout displayed on the initial security code input screen as described above, take over processing, and use the same key layout as before re-input when re-entering. indicate. When the input of the personal identification number is normal, the balance held in the user's account included in the data received from the host 9 is displayed on the operation unit 3 as an amount. Along with the display of the balance held, “payment transaction” and “end” keys are displayed on the screen. In addition, transaction keys such as “deposit transaction” and “transfer transaction” may be displayed.

  Here, when the user presses the “end” key, it is detected by the operation unit 3, and the control unit 2 does not enter the status of the continuous transaction or shifts to the status of the single transaction of balance inquiry. It is determined that the operation has been completed, the card is ejected from the card mechanism unit 4, and the above-described initial screen is displayed on the operation unit 3. Therefore, when payment transaction or balance inquiry is selected, a new single transaction occurs. Therefore, when displaying the PIN code input screen of FIG. 7, it is different from the PIN code key arrangement displayed at the time of balance inquiry by shuffling. Display randomly.

  On the other hand, when the user selects “payment transaction”, the operation unit 3 detects it and starts a continuous transaction (S408). At this time, the control unit 2 determines that the status of the continuous transaction is shifted or the transaction is continued. Based on this determination, in order to display a personal identification number input screen so that the user can input the personal identification number next, a personal identification number input screen key arrangement determination process (S409) is performed to determine the arrangement of the personal identification key. It will be. In this arrangement determination process, when the key arrangement at the time of the continuous transaction in the payment transaction is different from the key arrangement displayed at the balance inquiry transaction at the time of the initial transaction, the convenience for the end user may be lowered. For this reason, the key arrangement determination process (S409) is executed by designating that the key arrangement on the password input screen displayed at the time of the continuous transaction is a random number generation or shuffle suppression process, or a process similar to the previous display key arrangement. As described above, after the personal identification key arrangement is determined, the personal identification number input screen shown in FIG. 7 is displayed on the operation unit 3 (S410), and the user is prompted to input the personal identification number. Here, when the user selects the shuffle key 701 (S417), the key arrangement is again designated as shuffle processing, and the code number input screen key arrangement determination process (S409) is performed to change the code key arrangement. Is also possible.

  Thus, in the process of shifting from the first transaction (eg, balance inquiry) to the second transaction (eg, payment transaction), it is determined whether the second transaction is a continuous transaction. One feature is that a password input screen is displayed while maintaining the key layout displayed in the transaction.

  Subsequently, when the user inputs a personal identification number on the personal identification number input screen shown in FIG. 7 displayed on the operation unit 3, it is detected as numeric information (S411), and a personal identification number input check is performed (S412). As described above, a check is performed by receiving data from the host 9 as to whether the check is correct. If the check is normal, a payment amount input process is executed (S413). In S413, numeric keys and the like for allowing the user to input the payment amount are displayed on the operation unit 3, and central communication (S414) with the host 9 is performed based on the amount input there. After central communication with the host (S414), a cash withdrawal process instructed to input from the banknote depositing / withdrawing mechanism unit 6 or the coin depositing / withdrawing mechanism unit 7 is performed (S415), and the statement slip mechanism is based on the information received from the host. The statement is printed on the statement slip by the unit 4 and discharged together with the card, and the user waits for receipt (S416). Note that the processing when the password input is not correct in S412 is the same as that in FIG.

  Next, the personal identification number input screen key arrangement determination process described in S303 in FIG. 3 and S403 and 409 in FIG. 4 will be described with reference to FIG. When this process is executed, input parameters are added (S500). This input parameter specifies the state of the numeric key arrangement on the password input screen, and has three parameters of “initial value”, “same as previous time”, and “shuffle”.

  When “shuffle” is designated as the input parameter, a random number is generated by a function in the control unit 2 (S501), and a key array corresponding to the random number is searched from a table (S502). With respect to this table, as shown in FIG. 6, the arrangement and arrangement of numeric keys displayed on the personal identification number input screen are determined corresponding to each random number. As described above, a plurality of numbers “0” in the number keys are displayed and all of them are valid. Focusing on this number “0”, there are four position states: (1) lower row and right column, (2) lower row and left column, (3) upper row and right column, (4) upper row and left column, and Are displayed regularly. Of these four “0” arrangement states, 1 to 9 are regularly arranged from above or below in the row direction, and are displayed in a state regularly arranged from above or below in the column direction. Therefore, for one random number generated in S501, one numeric key arrangement is selected and confirmed from the table of FIG. 6 stored and held in the control unit 2 (S503), and based on the confirmed result. It is defined as the key position information on the personal identification number input screen of FIG. 7 and the numeric key arrangement is determined (S504). This shuffle process is a process executed by the control unit 2 when the above-described single transaction ends and the next new single transaction occurs or when the shuffle key 701 in FIG. 7 is pressed.

  Next, the case where the input parameter is designated “same as previous display key arrangement” will be described. The value of this input parameter is used at the time of re-entering the password in FIG. 3 and at the time of continuous transaction in FIG. Since the control unit 2 also has a storage function for storing data and information, the control unit 2 stores the numeric key sequence displayed on the password input screen until the single transaction ends. Therefore, when this parameter is designated, it is acquired as the previously displayed screen information stored (S505), the key layout is confirmed (S503), the key position information according to the confirmed key layout is defined, and the password is identified. A number input screen is determined (S504). In other words, the same parameter as the previous display key arrangement can be said to be a key arrangement takeover and maintenance parameter. In addition to storing the previously displayed key array 601 in the control unit 2, a method of storing the previously used random number 600, taking over and maintaining the stored random number, and reading the array pattern 601 from the table of FIG. However, it is necessary to consider the retrieval and reading time in the table as compared with storing the above key arrangement itself.

  When an initial value screen is designated as an input parameter, screen information defined as an initial value is acquired (S506), a key layout is determined (S503), and key position information according to the key layout is defined (S503). S504). When this input parameter is specified, it is used when the ATM 1 is opened and the power is turned on. For example, a specific random number or key layout shown in the table of FIG. 6 is stored in the control unit 2 as an initial value. Then, the key arrangement of the password is determined by reading the initial value.

  As described above, after a certain single transaction is completed, the new single transaction has the idea of shuffling or randomly displaying the numeric keys on the password input screen. In a single transaction, guidance is given to re-enter the PIN when the PIN check is not correct. At that time, the numeric pattern of the PIN input screen before re-entry is taken over and maintained. Therefore, it does not affect the user's operability. Moreover, since it is judged that it became a continuous transaction and the number pattern of the PIN code displayed in the first transaction is also displayed in the second transaction, the convenience of the user is also improved. Moreover, it is possible to prevent the user from having difficulty operating by displaying the numbers with the regularity described in FIG. 6 as the key arrangement for shuffle or random display.

Outline diagram of automatic teller machine and host computer Internal configuration diagram of automatic teller machine and host computer Flow chart showing balance inquiry single transaction processing in automatic teller machine Flow diagram showing transaction processing when a payment transaction is carried out as a continuous transaction from a balance inquiry in an automatic teller machine Security code input screen Key layout determination process overview Configuration diagram of key layout definition file Image of password input screen

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Automatic cash transaction apparatus, 2 ... Control part, 3 ... Operation part, 4 ... Card mechanism part and statement slip mechanism part, 5 ... Passbook mechanism part, 6 ... Banknote depositing / withdrawing mechanism part, 7 ... Coin depositing / withdrawing mechanism part, 8 ... line connection unit, 9 ... host computer, 10 ... host computer control unit

Claims (7)

In the automatic transaction apparatus that automatically executes the first transaction and the second transaction,
An operation unit that displays transaction items necessary for the transaction, and a control unit that controls the operation unit,
The control unit is based on the transaction selected by the operation unit,
When the transition from the first transaction to the second transaction is each a single transaction, the number array of the PIN number input screen displayed on the operation unit in the second transaction is changed using a random number,
When the transition from the first transaction to the second transaction is a continuous transaction, the operation in the second transaction is performed by maintaining or taking over the number array on the password input screen displayed on the operation unit in the first transaction. An automatic transaction apparatus for determining a numerical arrangement of a personal identification number input screen. The password input screen displayed on the operation unit includes a shuffle key,
2. The automatic transaction apparatus according to claim 1, wherein the control unit uses a random number when the shuffle key is pressed to change a numerical arrangement on a password input screen and displays the changed number on the operation unit.   The control unit prompts the operation unit to re-enter the password when the result of the password input in the first transaction is not correct, and sets the number sequence of the password at the time of the re-entry of the password before re-input. 2. The automatic transaction apparatus according to claim 1, wherein the automatic transaction apparatus displays the same number array.   4. The automatic transaction apparatus according to claim 1, wherein the first transaction includes a balance inquiry, and the second transaction includes a payment transaction. 5. In an automatic transaction device that automatically executes a transaction selected by a customer,
An operation unit that displays a plurality of transaction items and detects an input to the selected transaction item, and a control unit that controls a screen displayed on the operation unit,
The control unit has a random number generation function for generating a random number, and a change function for changing a numerical arrangement of a personal identification number input screen displayed on the operation unit according to the generated random number, and the transaction selected by the operation unit is An automatic transaction apparatus characterized in that when it is determined that the transaction is a continuous transaction, the random number generation function is suppressed. The continuous transaction includes different first transaction and second transaction,
The control unit stores a numeric arrangement of a password input screen displayed on the operation unit in the course of the first transaction, and maintains a number arrangement of the password input screen in the second transaction while maintaining the stored numeric arrangement. 6. The automatic transaction apparatus according to claim 5, wherein an array is displayed. In an automatic transaction device that automatically executes transactions,
It has an operation unit that displays various transaction items, and a control unit,
The control unit has a random number generation function for generating a plurality of random numbers, stores a different number array for entering a PIN number displayed on the operation unit corresponding to each random number,
The number array stored corresponding to the random number generated by the random number generation function when the transaction is a single transaction in the operation unit and the single transaction is completed and a new single transaction occurs from the operation to the operation unit. Is selected and displayed on the operation unit as a number array on the password input screen,
When the first transaction and the second transaction detected from the operation unit are continuous transactions, the random number generation of the random number generation function is suppressed, and the number array on the password input screen displayed at the time of the first transaction is the second transaction. An automatic transaction apparatus characterized in that it is handed over.

Images