JP2006350593A - Anticounterfeit system for credit card or cash card using anticounterfeit code, and anticounterfeit method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an anticounterfeit system for credit card and the like using an anticounterfeit code which can update the anticounterfeit code regardless of whether or not the card is used and allows a card holder to update the anticounterfeit code independently in order to prevent damages when the credit card and the like is counterfeited. <P>SOLUTION: A card medium stores the anticounterfeit code and a customer DB of a card company host stores the same anticounterfeit code as the one stored in the card medium. The anticounterfeit code of the customer DB is regularly updated. When the card holder requests checking of the code from an ATM or the like, principal authentication by a password is performed if the anticounterfeit code is not coincident. When the principal authentication is successful, the same anticounterfeit code as the customer DB is overwritten to the card medium. Also the request of the card holder updates the anticounterfeit code. When a sales approval request is received from a CAT terminal, the coincidence between the anticounterfeit codes is confirmed and an approval message is sent back. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a credit card or cash card forgery prevention system using a forgery prevention code and a forgery prevention method for preventing damage when a credit card or a cash card is forged by skimming or the like.

  In recent years, the use of credit cards and cash cards has become a serious problem due to the increase in damage caused by counterfeit cards created by skimming the card number from the magnetic stripe portion of the card. In order to prevent damage caused by skimming, various anti-counterfeiting measures such as using a card medium equipped with an IC chip and storing personal authentication information in addition to a card number or the like are being promoted. However, when switching to a card equipped with an IC chip, there is a problem that not only the card medium but also a terminal device used when using a card such as a CAT terminal or ATM must be updated to one corresponding to the IC chip. It is not easy to ensure safety only by it.

  In addition, as a means for preventing damage caused by skimming, for example, a confirmation code for preventing forgery is stored in a storage medium such as a magnetic stripe of a credit card, and the confirmation stored in the credit card every time the credit card is used. An idea is disclosed in which the code and the confirmation code stored on the management center system side are synchronized and updated, and when the credit card is used, the settlement process is approved on condition that the confirmation code matches (see Patent Document 1). .)

JP 2001-167243 A

  According to the technique described in Patent Document 1, even if the magnetic information on the credit card including the confirmation code is stolen by skimming, the confirmation code on the regular credit card is updated every time the credit card is used. Therefore, even if a forged card is created from the skimmed magnetic information and used, it is possible to detect that the card is a forged card because the confirmation code does not match.

  However, in order to detect a counterfeit card by this method, it is premised that the verification code of a legitimate credit card has been updated after the skimming until the counterfeit card is used. Since the confirmation code is updated when the credit card is used, if the credit card is not used for a long period of time, the period during which the confirmation code is not updated becomes longer, which increases the risk of encountering forged card damage. In addition, if a counterfeit card is used prior to a regular credit card after skimming, the verification code on the counterfeit card will match the verification code on the management center system side. There may also be a problem that it becomes unusable.

  Furthermore, with regard to credit cards, terminals used in stores are often misused to encounter skimming damage, especially when used on overseas trips. If the credit card is not used for a while, the confirmation code will not be updated, which increases the risk of using a counterfeit card. In addition, after supplementing a safety box such as a golf course, etc., after a situation where the risk of skimming is clearly considered to have occurred, It is preferable that only the person can voluntarily take measures to prevent forgery.

  The present invention has been made in order to cope with such a problem, and in order to prevent damage when a credit card or a cash card is forged by skimming or the like, forgery prevention is performed regardless of whether the card is used or not. An object of the present invention is to provide a forgery prevention system and method for preventing forgery of a credit card or a cash card, in which a code for use can be updated and a cardholder can independently update a code for forgery prevention. Is.

  In the present invention that solves such a problem, the same anti-counterfeiting code as the host computer side is stored in a storage medium such as a magnetic stripe or IC chip on the card, and the anti-counterfeiting code on the host computer side is periodically stored. Update. When the card is used, the forgery prevention code read from the card matches the forgery prevention code on the host computer side, and the request for sales or withdrawal is approved, but if it does not match, the card side forgery is subject to personal authentication. Update prevention code.

  With this configuration, even when information is read from the card by skimming and a forged card is created, the forged card can be used after the forgery prevention code on the host computer side is changed. become unable. In addition, by configuring the cardholder to voluntarily update the anti-counterfeit code, the counterfeit card can be used by voluntarily updating the anti-counterfeit code after the risk of skimming increases during overseas travel, etc. The risk of being lost can be reduced.

  The present invention is applied to a credit card and a cash card, and a method for recording the last update date as a reference for periodic activation of anti-counterfeit code update for each, Corresponding to the four aspects of the method of recording the next scheduled update date, it is understood as the following first to fourth inventions.

  A first invention for solving the problem according to the present application is a forgery prevention system for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card. The card information including at least an anti-counterfeit code assigned to the credit card, an update date when the anti-counterfeit code is updated, and a personal identification number designated by the credit card user is stored in a record provided for each card number. Card information storage means, an approval request receiving means for receiving an approval request for sales or withdrawal including a card number read from a credit card and an anti-counterfeit code from the first terminal device, and the approval request receiving means Read the forgery prevention code corresponding to the received card number from the card information storage means, An approval determination means for determining whether the approval request receiving means matches the forgery prevention code, and an approval message for sales or withdrawal when the approval determination means determines that the forgery prevention code matches. An update message stored in the card information storage unit, and an update message stored in the card information storage unit is automatically updated after an elapse of a predetermined period based on the update date. Code update means for updating the date to a new date obtained by updating the forgery prevention code, and a confirmation request for the forgery prevention code including the card number read from the credit card and the forgery prevention code. A confirmation request receiving means for receiving from the second terminal device, and a password input to the second terminal device in accordance with the confirmation request. The personal identification number received from the second terminal device and the personal identification number corresponding to the card number received by the confirmation request receiving means is read from the card information storage means, and the personal identification number received by the personal identification number receiving means When the password number determination means and the password number determination means determine that the password matches, the forgery prevention code corresponding to the card number received by the confirmation request reception means is sent from the card information storage means. When the confirmation determination means determines that the anti-counterfeit code does not match, and the confirmation determination means that determines whether the anti-counterfeit code received by the confirmation request receiving means matches, the read information from the card information storage means Code transmitting means for transmitting a forgery prevention code corresponding to the card number to the second terminal device, In the forgery prevention system, the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with the forgery prevention code transmitted from the code transmitting means. is there.

  In the first invention, for the credit card issued by the card company or the like, the timing of the forgery prevention code update is specified based on the previous update date. Note that the anti-counterfeit code used in the present invention is not limited to the anti-counterfeit code that is generally used in a credit card, but is a counterfeit such as one using an arbitrary area allocated to the card company. Any code may be used as long as it is used for prevention, and the numbers and characters used in the character string constituting the code and the number of digits are not particularly limited. The update date used as a reference for code update is not limited to a day unit as long as the update point can be specified, and can be specified by specifying a month unit, a week unit, or a time zone. It may be specified. The password used for personal authentication is not limited to numbers but may include letters, and the number of digits is not particularly limited.

  The storage medium provided in the credit card is usually a magnetic stripe or an IC chip, but is not limited thereto. The first terminal uses a CAT terminal installed in a store at the time of sales approval, ATM is used at the time of cashing approval, and the second terminal uses an ATM having a function of writing to a credit card storage medium. However, these terminals are not particularly limited, and the same terminal device may be used for the first terminal and the second terminal.

  Further, the first invention provides an update request receiving means for receiving an update request for the forgery prevention code including a card number read from a credit card from a third terminal device into which the credit card is inserted, and the update A second password receiving means for receiving the password entered in the third terminal device in response to the request from the third terminal device, and a password corresponding to the card number received by the update request receiving means. A second password number determining means for reading out a number from the card information storage means and determining whether the second password number receiving means matches the password number received by the second password number receiving means; If it is determined that the numbers match, the forgery prevention code stored in the card information storage means is updated to a new forgery prevention code, and the update date stored in the card information storage means A second code updating means for updating the forgery prevention code to a new date and a second code for transmitting the new forgery prevention code updated by the second code updating means to the third terminal device; The third terminal device that has received the forgery prevention code and has received a forgery prevention code stored in the credit card from the second code transmission means. It can also be characterized by updating to code.

  With this configuration, the cardholder can voluntarily update the anti-counterfeit code, so if it is determined that the risk of skimming has increased during overseas travel, etc., the anti-counterfeit code is voluntarily Renewal can reduce the risk of using counterfeit cards.

  Further, the first invention provides an update reservation request receiving means for receiving an update reservation request for the forgery prevention code including a card number read from a credit card and an update reservation date for the forgery prevention code from a fourth terminal device. And a third code number receiving means for receiving from the fourth terminal device the code number input to the fourth terminal device in response to the update reservation request, and the update reservation request receiving means. A third code number judging unit for reading out a code number corresponding to the card number from the card information storing unit and judging whether the third code number receiving unit matches the code number received by the third code number receiving unit; When the personal identification number determination means determines that the personal identification numbers match, the update period stored in the card information storage means is updated on the update reservation date received by the update reservation request reception means. And update date updating means for updating the date to be excessive, may be characterized in that it comprises.

  With this configuration, the cardholder can specify in advance the timing for voluntarily updating the anti-counterfeit code, so if it is determined that the risk of skimming has increased during overseas travel, By setting the timing for updating the forgery prevention code in advance, the risk of using the forgery card can be reduced.

  A second invention for solving the problems of the present application is a forgery prevention system for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card. The card information including at least a forgery prevention code assigned to the credit card, a scheduled update date for updating the forgery prevention code, and a personal identification number designated by a user of the credit card is stored in a record provided for each card number. Card information storage means, an approval request receiving means for receiving an approval request for sales or withdrawal including a card number read from a credit card and an anti-counterfeit code from the first terminal device, and the approval request receiving means Read the forgery prevention code corresponding to the received card number from the card information storage means, Approval determination means for determining whether the approval request receiving means matches the forgery prevention code, and if the approval determination means determines that the forgery prevention code matches, the first terminal device approves sales or withdrawal An approval message transmitting means for transmitting a message, and a forgery prevention code stored in the card information storage means are automatically updated on the scheduled update date, and the scheduled update date stored in the card information storage means is prevented. A code updating means for updating to a new date after the elapse of a predetermined period on the basis of a date on which the code is updated, and a confirmation request for the forgery prevention code including a card number read from a credit card and a forgery prevention code, Confirmation request receiving means for receiving from the second terminal device in which the card is inserted, and input to the second terminal device in accordance with the confirmation request. A personal identification number receiving means for receiving the personal identification number from the second terminal device; a personal identification number corresponding to the card number received by the confirmation request receiving means; When the password number determination means determines that the password number matches, the forgery prevention code corresponding to the card number received by the confirmation request receiving means is The card information storage unit reads the card information from the card information storage unit and determines whether the anti-counterfeit code received by the confirmation request receiving unit matches the anti-counterfeit code. Code transmitting means for transmitting a forgery prevention code corresponding to the card number read from the means to the second terminal device; And the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card to the forgery prevention code transmitted from the code transmitting means. Prevention system.

  In the second invention, for a credit card issued by a card company or the like, the next scheduled update date is recorded as the update timing of the forgery prevention code. As with the first invention, the structure of the forgery prevention code, the scheduled update date used as a reference for code update, the personal identification number used for personal authentication, and the storage medium provided in the credit card are not particularly limited. It is. The requirements for the first terminal and the second terminal are not different from those of the first invention.

  Further, the second invention provides an update request receiving means for receiving an update request for the forgery prevention code including a card number read from a credit card from a third terminal device into which the credit card is inserted, and the update A second password receiving means for receiving the password entered in the third terminal device in response to the request from the third terminal device, and a password corresponding to the card number received by the update request receiving means. A second password number determining means for reading out a number from the card information storage means and determining whether the second password number receiving means matches the password number received by the second password number receiving means; If it is determined that the numbers match, the forgery prevention code stored in the card information storage means is updated to a new forgery prevention code, and the update schedule stored in the card information storage means is updated. A second code updating means for updating the date to a new date after the elapse of a predetermined period based on a date on which the anti-counterfeit code is updated, and a new forgery-preventing code updated by the second code updating means, Second code transmitting means for transmitting to a third terminal device, and the third terminal device that has received the forgery prevention code receives the second forgery prevention code stored in the credit card. It is also possible to update to a new forgery prevention code transmitted from the code transmitting means.

  With this configuration, the cardholder can voluntarily update the forgery prevention code and reduce the risk that the forgery card is used, as in the first invention.

  Further, the second invention is an update reservation request receiving means for receiving from the fourth terminal device an update reservation request for the forgery prevention code including a card number read from a credit card and an update reservation date for the forgery prevention code. And a third code number receiving means for receiving from the fourth terminal device the code number input to the fourth terminal device in response to the update reservation request, and the update reservation request receiving means. A third code number judging unit for reading out a code number corresponding to the card number from the card information storing unit and judging whether the third code number receiving unit matches the code number received by the third code number receiving unit; When the personal identification number determination unit determines that the personal identification numbers are the same, the update scheduled date stored in the card information storage unit is updated to the update reservation date received by the update reservation request reception unit. And the scheduled date update means, may be characterized in that it comprises.

  If comprised in this way, the cardholder can reduce the risk that a forgery card will be used by designating the timing for voluntarily updating the forgery prevention code in the same way as the first invention. It is.

  A third invention for solving the problem according to the present application is a forgery prevention system for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card. An account including at least a forgery prevention code assigned to the cash card, an update date when the forgery prevention code is updated, and a personal identification number designated by a user of the cash card in a record provided for each issued account number Account information storing means for storing information, approval request receiving means for receiving a withdrawal approval request including an account number read from a cash card and a forgery prevention code from the first terminal device, and the approval request receiving means Reads the forgery prevention code corresponding to the account number received from the account information storage means, and An approval determining means for determining whether the authenticating means matches with the forgery prevention code received, and an approval for transmitting a withdrawal approval message to the first terminal device when the approval determining means determines that the forgery preventing code matches. The message sending means and the forgery prevention code stored in the account information storage means are automatically updated after a predetermined period of time based on the update date, and the update date stored in the account information storage means is prevented from forgery. Code updating means for updating the code to a new date, and a second terminal device in which the cash card is inserted into the counterfeit prevention code confirmation request including the account number read from the cash card and the forgery prevention code A confirmation request receiving means for receiving from the second terminal device, and a password inputted to the second terminal device in accordance with the confirmation request from the second terminal device; The personal identification number receiving means to be received and the personal identification number corresponding to the account number received by the confirmation request receiving means are read from the account information storage means to determine whether the personal identification number receiving means matches the personal identification number received. When the personal identification number determination means and the personal identification number determination means determine that the personal identification numbers match, the confirmation request receiving means reads out the forgery prevention code corresponding to the account number received from the account information storage means and receives the confirmation request Confirmation determination means for determining whether the means matches the forgery prevention code received, and forgery prevention corresponding to the account number read from the account information storage means when the confirmation determination means determines that the forgery prevention code does not match Code transmitting means for transmitting a code to the second terminal device, and receiving the forgery prevention code The terminal device updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted from the code transmission unit.

  In the third invention, the counterfeit prevention code update timing is specified based on the previous update date for a cash card issued by a bank or the like. As with the first invention, the configuration of the forgery prevention code, the scheduled update date used as a reference for code update, the personal identification number used for personal authentication, and the storage medium provided in the cash card are not particularly limited. It is. The first terminal uses an ATM capable of performing a withdrawal operation from an account including transfer, transfer, etc. in addition to cash withdrawal, and the second terminal has an ATM having a function of writing to a credit card storage medium. However, these terminals are not particularly limited, and the same terminal device may be used for the first terminal and the second terminal.

  A fourth invention for solving the problem according to the present application is a forgery prevention system for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card. An account including at least a forgery prevention code assigned to the cash card, a scheduled update date for updating the forgery prevention code, and a personal identification number designated by a user of the cash card in a record provided for each issued account number Account information storing means for storing information, approval request receiving means for receiving a withdrawal approval request including an account number read from a cash card and a forgery prevention code from the first terminal device, and the approval request receiving means Reads the forgery prevention code corresponding to the account number received by the account information storage means, and Approval determining means for determining whether the receiving means matches the forgery prevention code, and approval for transmitting a withdrawal approval message to the first terminal device when the approval determining means determines that the forgery prevention code matches The date of automatically updating the anti-counterfeit code stored in the message transmission means and the account information storage means on the scheduled update date, and the date of updating the anti-counterfeit code on the planned update date stored in the card information storage means The code update means for updating to a new date after the elapse of a predetermined period of time based on the above, and the cash card is inserted into the forgery prevention code confirmation request including the account number read from the cash card and the forgery prevention code Confirmation request receiving means for receiving from the second terminal device, and a password input to the second terminal device in accordance with the confirmation request, The personal identification number receiving means received from the terminal device and the personal identification number corresponding to the account number received by the confirmation request receiving means are read from the account information storage means and match the personal identification number received by the personal identification number receiving means. When the personal identification number determination unit and the personal identification number determination unit determine that the personal identification number matches, the forgery prevention code corresponding to the account number received by the confirmation request reception unit is read from the account information storage unit, Confirmation determination means for determining whether the confirmation request receiving means matches with the forgery prevention code received, and when the confirmation determination means determines that the forgery prevention code does not match, the account number read from the account information storage means Code transmitting means for transmitting a corresponding forgery prevention code to the second terminal device, and receiving the forgery prevention code. The received second terminal device updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted from the code transmitting means.

  In the fourth invention, for the cash card issued by a bank or the like, the next scheduled update date is recorded as the update timing of the forgery prevention code. As with the third invention, the structure of the forgery prevention code, the scheduled update date used as a reference for code update, the personal identification number used for personal authentication, and the storage medium provided in the credit card are not particularly limited. It is. The requirements for the first terminal and the second terminal are not different from those of the third invention.

  Furthermore, the present invention can be specified as a forgery prevention method using the forgery prevention system according to the first to fourth inventions.

  That is, the forgery prevention method corresponding to the first invention is a forgery prevention method for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card. Card information including at least an anti-counterfeit code assigned to the credit card, an update date when the anti-counterfeit code is updated, and a personal identification number designated by a user of the credit card. In a computer system for managing a credit card including a card information storage unit for storing, the forgery prevention code stored in the card information storage unit is automatically updated after a predetermined period of time based on the update date, and The update date stored in the card information storage unit is a new date when the forgery prevention code is updated. Upon request for sales or withdrawal using a credit card, the computer system issues a request for approval of sales or withdrawal including a card number read from the credit card and a forgery prevention code. An approval request receiving step received from the first terminal device, and the computer system reads out a forgery prevention code corresponding to the card number received in the approval request receiving step from the card information storage unit, and the approval request receiving step When the computer system determines that the anti-counterfeit code matches in the approval determination step, sales or withdrawal is made to the first terminal device. An approval message sending step for sending an approval message of When requesting confirmation of the forgery prevention code stored in the credit card, the computer system sends the confirmation request for confirmation of the forgery prevention code including the card number read from the credit card and the forgery prevention code. A confirmation request receiving step received from the second terminal device, and a password reception by which the computer system receives from the second terminal device the password entered in the second terminal device in response to the confirmation request And the computer system reads a password corresponding to the card number received in the confirmation request receiving step from the card information storage unit and determines whether it matches the password received in the password receiving step A personal identification number determining step, and the computer system determines the personal identification number If it is determined that the passwords match in the predetermined step, the forgery prevention code corresponding to the card number received in the confirmation request receiving step is read from the card information storage unit and matches the forgery prevention code received in the confirmation request receiving step. If the computer system determines that the forgery prevention code does not match in the confirmation judgment step, the forgery prevention code corresponding to the card number read from the card information storage unit is determined. The code transmitting step for transmitting to the second terminal device is executed, and the second terminal device receiving the forgery prevention code is transmitted with the forgery prevention code stored in the credit card in the code transmitting step. The forgery prevention method is characterized by updating to a forgery prevention code.

  A forgery prevention method corresponding to the second invention is a forgery prevention method for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card, the card of the credit card The card information including at least a forgery prevention code assigned to the credit card, a scheduled update date for updating the forgery prevention code, and a personal identification number designated by a user of the credit card is stored in a record provided in units of numbers. In the computer system for managing a credit card having a card information storage unit, the forgery prevention code stored in the card information storage unit is automatically updated on the scheduled update date and stored in the card information storage unit. A new date after the lapse of a specified period based on the date on which the scheduled update date was updated. When a request for sales or withdrawal using a credit card is made, the computer system requests an approval request for sales or withdrawal including a card number read from the credit card and a forgery prevention code. Receiving the approval request from the first terminal device, and reading out the forgery prevention code corresponding to the card number received by the computer system in the approval request receiving step from the card information storage unit. When the computer system determines that the forgery prevention code matches in the approval determination step, the approval determination step for determining whether it matches the forgery prevention code received in the reception step or sales to the first terminal device An approval message sending step for sending a withdrawal approval message, and At the time of request for confirmation of the forgery prevention code stored in the credit card, the computer system inserts the request for confirmation of the forgery prevention code including the card number read from the credit card and the forgery prevention code. A confirmation request receiving step received from the second terminal device, and a personal identification number received by the computer system from the second terminal device with the personal identification number input to the second terminal device in response to the confirmation request; A receiving step, and the computer system reads a password corresponding to the card number received in the confirmation request receiving step from the card information storage unit, and determines whether or not it matches the password received in the password receiving step A personal identification number determining step, and the computer system If it is determined in the number determination step that the passwords match, the forgery prevention code corresponding to the card number received in the confirmation request reception step is read from the card information storage unit, and the forgery prevention code received in the confirmation request reception step If the computer system determines that the anti-counterfeit code does not match in the confirmation determination step, the anti-counterfeit code corresponding to the card number read from the card information storage unit, A code transmission step for transmitting to the second terminal device, and the second terminal device receiving the forgery prevention code transmits the forgery prevention code stored in the credit card in the code transmission step. The forgery prevention method is characterized in that the forgery prevention code is updated.

  A forgery prevention method corresponding to the third invention is a forgery prevention method for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card, wherein Account information including at least an anti-counterfeit code assigned to the cash card, an update date when the anti-counterfeit code is updated, and a personal identification number designated by a user of the cash card is stored in a record provided in units of numbers. In the computer system for managing a deposit account provided with an account information storage unit, the forgery prevention code stored in the account information storage unit is automatically updated after a predetermined period of time based on the update date, and the account The update date stored in the information storage unit is configured to be updated to a new date when the forgery prevention code is updated. An approval request receiving step of receiving, from the first terminal device, an approval request for withdrawal including an account number and an anti-counterfeit code read from the cash card at the time of a withdrawal request using a cash card And the computer system reads a forgery prevention code corresponding to the account number received in the approval request receiving step from the account information storage unit and determines whether it matches the forgery prevention code received in the approval request receiving step. And an approval message transmission step of transmitting a withdrawal approval message to the first terminal device when it is determined in the approval determination step that the forgery prevention codes match. When confirming the forgery prevention code stored in the cash card A confirmation request receiving step in which the computer system receives a confirmation request for the forgery prevention code including the account number read from the cash card and a forgery prevention code from the second terminal device into which the cash card is inserted; The computer system receives a personal identification number input to the second terminal device in response to the confirmation request from the second terminal device, and the computer system receives the confirmation request in the confirmation request reception step. A code number corresponding to the received account number is read from the account information storage unit and a code number determining step for determining whether the code number received in the code number receiving step is the same as the code number received; and If it is determined in the determination step that the passwords match, the confirmation request reception step is A confirmation determination step of reading out the forgery prevention code corresponding to the account number received in step from the account information storage unit and determining whether it matches the forgery prevention code received in the confirmation request receiving step; When it is determined that the forgery prevention code does not match in the confirmation determination step, a code transmission step of transmitting the forgery prevention code corresponding to the account number read from the account information storage unit to the second terminal device is executed. And receiving the forgery prevention code, wherein the second terminal device updates the forgery prevention code stored in the cash card to the forgery prevention code transmitted in the code transmission step. It is.

  A forgery prevention method corresponding to a fourth invention is a forgery prevention method for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card, wherein The account information including at least the forgery prevention code assigned to the cash card, the scheduled update date for updating the forgery prevention code, and a personal identification number designated by the user of the cash card is stored in a record provided in units of numbers. In the computer system for managing a deposit account having an account information storage unit, the forgery prevention code stored in the account information storage unit is automatically updated on the scheduled update date and stored in the account information storage unit. Will be updated to a new date after a specified period of time based on the date the anti-counterfeit code was updated. When the withdrawal request using the cash card is configured, the computer system receives the withdrawal approval request including the account number read from the cash card and the forgery prevention code from the first terminal device. An approval request receiving step, and the computer system reads the forgery prevention code corresponding to the account number received in the approval request receiving step from the account information storage unit, and matches the forgery prevention code received in the approval request receiving step. An approval determination step for determining whether to do so, and an approval message transmission step for transmitting a withdrawal approval message to the first terminal device when the computer system determines that the forgery prevention code matches in the approval determination step And confirm the forgery prevention code stored in the cash card. When the request is received, the computer system receives a confirmation request for confirmation of the forgery prevention code including the account number read from the cash card and the forgery prevention code from the second terminal device into which the cash card is inserted. A step of receiving a personal identification number input to the second terminal device in response to the confirmation request from the second terminal device; and a step of receiving the personal identification number from the second terminal device. A personal identification number corresponding to the account number received in the request reception step is read from the account information storage unit to determine whether the personal identification number matches the personal identification number received in the personal identification number reception step; , If it is determined that the code numbers match in the code number determination step, A confirmation determination step of reading out the forgery prevention code corresponding to the account number received in the confirmation request receiving step from the account information storage unit and determining whether it matches the forgery prevention code received in the confirmation request receiving step; When the system determines that the forgery prevention code does not match in the confirmation determination step, a code transmission step of transmitting a forgery prevention code corresponding to the account number read from the account information storage unit to the second terminal device; And the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted in the code transmission step. It is a forgery prevention method.

  According to the present invention, even if the owner does not perform an operation necessary for rewriting the code stored for preventing counterfeiting on the card, the effect of suppressing damage to the forged card by skimming using the forgery preventing code Can be increased. In addition, if it is determined that the risk of skimming has increased due to overseas travel etc., the cardholder can voluntarily update the anti-counterfeit code after returning home, or specify the timing of returning home before leaving the country to prevent forgery. Risk can be reduced by making code update reservations.

  The best mode for carrying out the present invention will be described below in detail with reference to the drawings. In the following, an example in which the present invention is applied to a credit card will be mainly described, but the present invention can also be applied to a cash card. Further, the update means, timing, etc. of the forgery prevention code are only examples of the present invention, and the present invention is not limited to such an embodiment.

FIG. 1 and FIG. 2 are diagrams showing an outline of embodiments in which the forgery prevention system according to the present invention is applied to a credit card and a cash card, respectively. FIG. 3 is a block diagram showing the configuration of a credit card forgery prevention system according to the present invention. FIG.
It is a figure which shows an example of the customer master stored in a customer database in the forgery prevention system of the credit card concerning this invention. FIGS. 5 to 8 are first to fourth diagrams respectively showing the timing of updating a forgery prevention code in the credit card forgery prevention system according to the present invention. FIG. 9 is a flowchart showing a processing flow for automatically updating the forgery prevention code on the host computer side in the credit card forgery prevention system according to the present invention. FIG. 10 is a flowchart showing a processing flow for updating the forgery prevention code in response to a request from the card owner in the credit card forgery prevention system according to the present invention. FIG. 11 is a flowchart showing a processing flow for confirming whether the forgery prevention code has been updated in response to a request from the card owner in the credit card forgery prevention system according to the present invention.

  An outline of an embodiment in which the forgery prevention system according to the present invention is applied to a credit card issued by a card company or a cash card issued by a bank or the like will be described with reference to FIGS. FIG. 1 shows an example of an embodiment when applied to a credit card. The credit card is provided with a storage medium such as a magnetic stripe or an IC chip, and generally a storage medium such as a credit card card number or expiration date. In addition to the information stored in, a forgery prevention code used for detecting a forgery card is stored. The card company's host computer is equipped with a customer database, and the customer master provided for each card number is linked to the card number and basic information such as the customer's name, the card expiration date, and the specified password. Thus, the forgery prevention code assigned to the card number is stored.

  Generally, a CAT terminal used for communication with a card company is installed in a store where the purchase price of goods and the like can be paid with a credit card. When a credit card is used for payment at a store, the CAT terminal reads the anti-counterfeit code from the credit card storage medium along with the card number and transmits it to the card company host. The card company host searches the customer database for the customer master corresponding to the card number received from the CAT terminal, reads the forgery prevention code from the corresponding customer master, and determines whether it matches the forgery prevention code received from the CAT terminal. To do. If they match, a message indicating a sales approval message is sent to the CAT terminal.

  In addition, when cashing is performed at an ATM set up by a credit card company, when a credit card is inserted into the ATM and an operation for cashing is performed, the ATM stores a forgery prevention code together with the card number from the credit card storage medium. Is sent to the card company host. The card company host searches the customer database for the customer master corresponding to the card number received from the ATM, reads the forgery prevention code from the corresponding customer master, and determines whether it matches the forgery prevention code received from the ATM. If they match, a message that confirms caching is sent, and if they do not match, a message indicating an error message is sent to the ATM. The ATM receives these messages and confirms whether or not caching is possible.

  In this way, while the match of the anti-counterfeit code is a condition for approving sales and caching, the anti-counterfeit code on the host side is changed at a predetermined timing or by a request from the card owner, thereby storing the credit card. Even when the information stored in the medium is skimmed and a forged card is used, it is possible to detect the use of the forged card from the mismatch of the forgery prevention code and prevent damage.

  For example, a regular update time such as once every six months is set, and the card company host is set to automatically update the forgery prevention code. In this case, the date when the anti-counterfeit code was last updated (may be grasped in units of months, weeks, etc.) is recorded in a record provided for each card number in the customer database, and 6 months have passed since that date. If it is confirmed, the forgery prevention code recorded in the record is updated to a new forgery prevention code. Alternatively, it is also possible to record the next scheduled update date that is six months after the date when the forgery prevention code is updated, and select the record that has reached the scheduled update date to update the forgery prevention code.

  When the anti-counterfeit code is automatically updated at the card company host, the anti-counterfeit code stored in the credit card is not updated, so if you try to use the credit card as it is, the card company host side The anti-counterfeit code on the credit card side is inconsistent and the credit card cannot be used. Therefore, the cardholder can maintain the state in which the forgery prevention code on the card company host side and the credit card side match by performing confirmation for updating the forgery prevention code from the card company ATM as follows. .

  That is, the cardholder inserts a credit card into the card company ATM, and performs an operation for requesting confirmation that the forgery prevention code on the credit card side matches the forgery prevention code on the card company host side. A message for such a request is sent to the card company host with the card number read from the credit card and a forgery prevention code, and stored in the customer master corresponding to the card number received in the customer database at the card company host. Whether it matches the anti-counterfeit code.

  If they match, it is determined that the anti-counterfeit code has not been updated, and a message is sent to the card company ATM instructing to return the credit card as is, but if it does not match, it is stored in the credit card Therefore, it is necessary to update the forgery prevention code to a new code. Therefore, when making a confirmation request, it is confirmed that the password is entered by the cardholder at the ATM and sent to the card company host, so that it matches the password registered in the customer master corresponding to the card company host. If it is, an instruction message for updating the forgery prevention code on the credit card side is transmitted from the card company host to the card company ATM. In other words, if the personal authentication is performed by matching the password, a new forgery prevention code stored in the customer master is transmitted to the card company ATM that has requested confirmation, and the card company ATM uses the received forgery prevention code as a credit card. Overwrite update to the storage medium.

  Note that the personal authentication method for overwriting a new forgery prevention code is not limited to the coincidence of passwords, and other methods such as biometric authentication using fingerprint information may be used. If the anti-counterfeit code on the card company host side has been updated, even if a third party using a counterfeit card by skimming etc. makes a confirmation request, as long as it can not impersonate the person authentication such as obtaining a PIN Thus, it becomes impossible to update the forgery prevention code stored in the credit card to a new forgery card that matches the card company host side, and the risk of using the forgery card can be reduced.

  In addition to the periodic automatic updating of the forgery prevention code, the forgery prevention code may be independently updated at the request of the cardholder. In other words, when the cardholder inserts a credit card into the card company ATM and makes a request to update the forgery prevention code, a message with the card number read from the credit card and the password entered by the cardholder is sent to the card company. It is checked whether the password stored in the customer master corresponding to the card number received by the customer database at the card company host matches the received password.

  If they match, it is determined that the request is an update request from the cardholder himself, and the forgery prevention code of the corresponding customer master on the card company host side is updated and the forgery prevention code on the credit card side is updated. Is sent from the card company host to the card company ATM. At the card company ATM, the received forgery prevention code is overwritten on the credit card storage medium. If they do not match, it is determined that the request is not an update request from the cardholder, and the update process results in an error.

  Note that the personal authentication method for updating the forgery prevention code is not limited to the coincidence of the secret code numbers, and other authentication methods may be used as in the previous case. With this configuration, for example, if you think that the risk of skimming has increased after returning from overseas travel, the cardholder will use a counterfeit card by skimming etc. by voluntarily updating the anti-counterfeit code Even in such a case, it is possible to detect the fraud from the mismatch of the forgery prevention code and reduce the risk of using the forgery card.

  It should be noted that the above-described cashing, forgery prevention code confirmation and renewal operations performed by the card company ATM can be accepted by operating ATMs of other affiliated card companies and ATMs of affiliated banks. It may be configured. In addition, the device for confirming or updating the forgery prevention code may be a dedicated terminal having a card writing function, instead of a general-purpose machine such as ATM.

  FIG. 2 shows an example of an embodiment when applied to a cash card. The cash card is provided with a storage medium such as a magnetic stripe or an IC chip, and the account number of a deposit account corresponding to the cash card is generally used. In addition to the information stored in the storage medium, a forgery prevention code used for detecting a forgery card is stored. The bank's host computer is equipped with an account file that records deposits and withdrawals to and from the deposit account. The account master provided for each account number is specified with basic information such as the name of the account holder in association with the account number. A forgery prevention code assigned to the account number is stored together with the personal identification number. The operation in the embodiment of FIG. 2 is also basically the same as that of the embodiment of FIG. 1, and the same effect can be achieved by replacing the credit card with a cash card and replacing the customer master with an account master. it can.

  FIG. 3 shows a configuration of a credit card forgery prevention system according to the present invention. The credit card counterfeit prevention system according to the present invention is a partial function of the card company system 10. The card company system 10 includes at least a CPU 11, a RAM 12, a ROM 13, and an HDD 14. The HDD 14 stores application programs such as a code update program 141 and a sales approval program 142, and the customer information storage unit 143 stores customer information as a customer database. In addition to this, the HDD 14 stores various programs for managing ordinary credit card transactions.

  In order for application programs such as the code update program 141 and the sales approval program 142 stored in the HDD 14 to execute predetermined processing, the basics for hardware control such as input control and output control stored in the ROM 13 When the CPU 11 performs arithmetic processing while starting various various programs and causing the RAM 12 to function as a work area, processing necessary for each application is executed.

  The ATM 20 includes at least a magnetic information reading unit 21, a magnetic information writing unit 22, and a communication control unit 23. The magnetic information reading unit 21 reads information stored in a magnetic stripe provided on the card 40, The magnetic information writing unit 22 can add / update new information to the magnetic stripe provided on the card 40. The communication control unit 23 has a function of transmitting information read from the card 40 to the card company system 10 and receiving a message transmitted from the card company system 10. When the card 40 is an IC card, the magnetic information reading unit 21 and the magnetic information writing unit 22 have functions of reading information from the IC chip and writing information to the IC chip, respectively.

  The CAT terminal 30 is provided with at least a magnetic information reading unit 31 and a communication control unit 32. The magnetic information reading unit 31 reads information stored in a magnetic stripe provided on the card 40, and controls the communication control unit 32. To the card company system 10. In addition, a message message indicating the result of sales approval can be received from the card company system 10 via the communication control unit 32. When the card 40 is an IC card, the magnetic information reading unit 31 has a function of reading information from the IC chip.

  In the present invention, the customer information storage unit 143 of the card company system 10 is provided with a record for each customer specified by the card number of the credit card, the basic information such as the customer's name, the personal identification number designated by the customer, the card Forgery prevention code etc. written in the storage medium of the card in order to prevent the forgery are stored. FIG. 4 shows an example of the customer master stored in the customer information storage unit 143. For each credit card card number, the customer name, the card expiration date, the password, the forgery prevention code, and the forgery prevention code are stored. The previous code update date, which is the updated date, is stored.

  In the present invention, when a credit card storing a forgery prevention code is used in a store or the like, when the card 40 is passed through the CAT terminal 30, the magnetic information reading unit 31 reads the card number and the forgery prevention code from the card 40. To the card company system 10. In the card company system 10, the sales approval program 142 is read, the customer information storage unit 143 refers to the customer master corresponding to the card number received from the CAT terminal 30, and the counterfeit prevention code and the CAT registered in the customer master. The forgery prevention codes received from the terminal 30 are compared. If they match, a message indicating the sales approval message is transmitted from the card company system 10 to the CAT terminal 30. If they do not match, a message indicating an error message not approving sales is sent.

  Further, when a credit card storing a forgery prevention code is used for cashing, when the card 40 is inserted into the ATM 20, the magnetic information reading unit 21 reads the card number and the forgery prevention code from the card 40, Send to the card company system 10. In the card company system 10, the sales approval program 142 is read out, and the customer information storage unit 143 refers to the customer master corresponding to the card number received from the ATM 20, and receives the counterfeit prevention code registered in the customer master and the ATM 20. Compare anti-counterfeit codes. If they match, a message indicating a caching approval message is transmitted from the card company system 10 to the ATM 20. If they do not match, a message indicating an error message that does not approve caching is transmitted.

  In order to make the forgery prevention code function effectively, in the present invention, the forgery prevention code is updated as follows. First, an operation in which the forgery prevention code is automatically updated periodically will be described. In the card company system 10, the code update program 141 is activated at a regular timing, for example, once a day, and each customer master is read from the customer information storage unit 143 to acquire data related to the previous code update date. Check whether a predetermined period (for example, 6 months) has passed since the last code update date acquired, and if it has passed, identify a new forgery prevention code randomly assigned by the card company system 10, Update the forgery prevention code of the customer master. Also, the previous code update date is updated to the date when the new forgery prevention code is updated.

  In addition, about the update date confirmation method as mentioned above, it is good also as setting a scheduled update date beforehand. That is, when the forgery prevention code is updated, the date when a predetermined period (for example, 6 months) elapses from the update date is stored in the customer master as the “scheduled update date”. The code update program 141 refers to the scheduled update date, and updates the forgery prevention code by the same method as described above when the scheduled update date has been reached, and newly adds a predetermined period from the update date. A new scheduled update date is set from the selected date. The newly set forgery prevention code and the scheduled update date are stored in the corresponding customer master.

  Next, an operation in which the forgery prevention code is updated by a request from the card owner will be described. The cardholder inserts the card 40 into the ATM 20 and performs a counterfeit prevention code update request operation. The magnetic information reading unit 21 provided in the ATM 20 reads the card number and the forgery prevention code from the card 40, and sends a request for updating the forgery prevention code with the card number read from the card 40 and the forgery prevention code to the communication control unit. 23 to the card company system 10.

  When the card company system 10 accepts the code update request, the code update program 141 is activated, and an instruction message for requesting the cardholder to input a personal identification number is transmitted to the ATM 20. A request for inputting a personal identification number is displayed on the ATM 20, and when the ATM 20 accepts the input of the personal identification number, the inputted personal identification number is transmitted to the card company system 10 via the communication control unit 23. In the card company system 10, the customer information storage unit 143 obtains a password from the customer master corresponding to the card number received from the ATM 20 and collates it with the password entered in the ATM 20. If they match, then the anti-counterfeit code is verified.

  For the verification of the forgery prevention code, the customer information storage unit 143 obtains the forgery prevention code from the customer master corresponding to the card number received from the ATM 20, and compares it with the forgery prevention code read from the card 40 received from the ATM 20. Is done by. If they match, the forgery prevention code stored in the customer master is updated, and the previous code update date is updated on the update date. Further, in order to overwrite the updated forgery prevention code on the card 40, a message specifying a new forgery prevention code is transmitted to the ATM 20.

  When the forgery prevention code read from the card 40 does not match the forgery prevention code included in the customer master, it is determined that the forgery prevention code of the customer master has already been automatically updated after a specified period. Therefore, it is not necessary to update the forgery prevention code of the customer master, and a message specifying the updated forgery prevention code is transmitted to the ATM 20 in order to overwrite the forgery prevention code stored in the customer master with the forgery prevention code of the card 40. To do. As for the operation here, even if the forgery prevention code has already been automatically updated, a new forgery prevention code is uniformly assigned in the same way as when the forgery prevention code has not been updated to prevent forgery of the customer master. The code may be updated.

  When a message specifying a new forgery prevention code is transmitted to the ATM 20 by these processes, the forgery prevention code received from the card company system 10 is stored in the magnetic information writing unit 22 in the ATM 20 into which the credit card is inserted. The data is written to the card 40 and overwritten with a new forgery prevention code.

  Next, an operation for confirming whether the forgery prevention code of the card company system 10 is automatically updated and does not coincide with the forgery prevention code stored in the card 40 will be described. The cardholder inserts the card 40 into the ATM 20 and performs a request operation for confirming the forgery prevention code. The magnetic information reading unit 21 provided in the ATM 20 reads the card number and the forgery prevention code from the card 40, and sends a request for confirmation of the forgery prevention code with the card number read from the card 40 and the forgery prevention code. 23 to the card company system 10.

  When the card company system 10 accepts the code confirmation request, the code update program 141 is activated, and an instruction message for requesting the cardholder to input a personal identification number is transmitted to the ATM 20. A request for inputting a personal identification number is displayed on the ATM 20, and when the ATM 20 accepts the input of the personal identification number, the inputted personal identification number is transmitted to the card company system 10 via the communication control unit 23. In the card company system 10, the customer information storage unit 143 obtains a password from the customer master corresponding to the card number received from the ATM 20 and collates it with the password entered in the ATM 20.

  If the passwords match, then the forgery prevention code is verified. For the verification of the forgery prevention code, the customer information storage unit 143 obtains the forgery prevention code from the customer master corresponding to the card number received from the ATM 20, and compares it with the forgery prevention code read from the card 40 received from the ATM 20. Is done by. If they match, the forgery prevention codes on the card side and the host side are in a matching state, so that it is determined that no special processing for matching the codes is necessary. If they do not match, it is necessary to update the forgery prevention code on the card side. Therefore, in order to overwrite the updated forgery prevention code stored in the customer master on the card 40, a new forgery prevention code is given to the ATM 20. Send the specified message.

  In this way, when a message specifying a new forgery prevention code is transmitted to the ATM 20, the ATM 20 with the credit card inserted receives the forgery prevention code received from the card company system 10 in the magnetic information writing unit 22. Write on the card 40 and update it with a new forgery prevention code.

  In addition to this, the above-described voluntary update may be reserved to be executed at a future date. In order to enable an update reservation, the customer master shown in the example of FIG. 4 is provided with a field for recording “update reservation date” in addition to these. As for the renewal reservation date, the renewal reservation date entered in the ATM 20 is assumed to be the card, assuming that the user has been authenticated by the personal identification number as in the case of code renewal, etc. It is written in the customer master of the company system 10.

  When the code update program 141 is activated for automatic update, the date recorded in the update reservation date field is checked in addition to the previous code update date. If the reservation date has been reached, the forgery prevention code Update automatically. Other operations after updating the anti-counterfeit code are the same as in the case of periodic automatic update, a new update date is set, and the cardholder is promptly updated to the card 40 at the ATM 20 It will overwrite the anti-counterfeit code.

  Next, timing for updating the forgery prevention code in the credit card forgery prevention system according to the present invention will be described with reference to FIGS. 5 to 8, it is assumed that the automatic update period of the forgery prevention code on the host side is set to 6 months.

  In FIG. 5, if both the host-side and card-side counterfeit prevention codes are set to “123” on January 1, 2005, the automatic counterfeit prevention code update date on the host side is July 1, 2005. It becomes. Since the anti-counterfeiting codes of both coincide for the six months from January 1, 2005 to June 30, 2005, the card can be used as usual. On July 1, 2005, when the card company counterfeit prevention code is automatically updated to “456”, the card counterfeit prevention code is “123” and the card cannot be used. It is necessary to overwrite the anti-counterfeit code. Here, when a code confirmation request is made at ATM or the like on August 1, 2005, the forgery prevention code “456” on the host side is also overwritten on the card side, and both the forgery prevention codes match and the card continues. It becomes possible to use.

  Furthermore, the automatic update of the anti-counterfeiting code on the host side is normally January 1, 2006, six months after July 1, 2005. On the 15th, the forgery prevention code on the host side and the card side is updated to “789”. In this case, since the update date of the forgery prevention code is also reset on November 15, the next automatic update is performed on May 15, 2006.

  As shown in the example of FIG. 5, when the forgery prevention code is periodically updated, it is possible to detect this when the counterfeit card is illegally used as shown in the example of FIG. become. When skimming is performed in a state where both the host-side and card-side forgery prevention codes are “123”, the forgery card is created with the forgery prevention code “123”. After that, on July 1, 2005, if the forgery prevention code on the card company system side is automatically changed to “456”, the forgery prevention code “123” of the forgery card becomes inconsistent. If used, an error will occur.

  On the other hand, even if the owner of the counterfeit card tries to update the forgery prevention code by making a code confirmation request, it is required to enter a personal identification number when requesting confirmation of the forgery prevention code. As long as the card holder is not authorized, the anti-counterfeit code on the card side cannot be updated. Therefore, the counterfeit card cannot be used at least after the forgery prevention code on the host side has been updated, and unauthorized use can be suppressed.

  FIG. 7 and FIG. 8 show two processing patterns when the cardholder voluntarily makes a forgery prevention code update request. As described in the example of FIG. 6, the use of a counterfeit card can be suppressed after the timing of automatic update, but the counterfeit card can be used until then. Therefore, when the risk of skimming increases due to overseas travel or the like, it is preferable to voluntarily request forgery prevention code update.

  In FIG. 7, after the forgery prevention code is set to “123” on January 1, 2005, the next scheduled automatic update date is July 1, 2005, and the next automatic update scheduled date is 2006. January 1st. If the card company system counterfeit prevention code is automatically updated to “456” on July 1, 2005 and then a code update request is made on August 1, 2005, the host counterfeit prevention code is already Since it is updated to “456”, the card side counterfeit prevention code can be updated by overwriting the card side counterfeit prevention code to the same “456” as the host side. Here, since the forgery prevention code on the host side has not been updated, the previous code update date is not updated, and the next scheduled automatic update date remains January 1, 2006.

  Thereafter, when a code update request is made again on November 15, 2005, the forgery prevention codes on the host side and the card side match with “456”. Are updated to “789”. Here, since the host side counterfeit prevention code is also updated, the previous code update date is also updated, and the next scheduled automatic update date is May 15, 2006. In this way, if it is considered that the risk of skimming has increased, the anti-counterfeit code on the host side is automatically updated to shorten the period during which the skimmed anti-counterfeit code is valid, and the risk of using a forged card Can be reduced.

  FIG. 8 is basically the same as FIG. 7 except that when a code update request is made on August 1, 2005, the forgery prevention code on the host side has already been updated to “456”. Instead of using the updated “456” forgery prevention code on the card side, a new forgery prevention code is assigned in response to a code update request. In other words, both the host-side and card-side forgery prevention codes are updated to the newly-numbered “789”, and the host-side forgery prevention codes are also updated. The scheduled automatic update date is February 1, 2006.

  A process flow for automatically updating the forgery prevention code on the host computer side in the credit card forgery prevention system according to the present invention will be described with reference to the flowchart of FIG.

  For example, when a program for automatically updating the forgery prevention code is started at an arbitrary timing such as once every business day, one customer data is read from the customer database (S01), and the date on which the forgery prevention code was updated last time The date of the previous code update is acquired (S02). Check whether a predetermined period (6 months here) has passed since the last code update date acquired (S03). If it has passed, assign a new forgery prevention code in the card company system. The forgery prevention code registered as customer data is updated to a new code (S04). At the same time, the previous code update date of the customer data is also updated to the date when the update process was performed (S05).

  As for the previous code update date, in this flow, the date when the forgery prevention code was actually updated is set, but the update process is performed by recording the scheduled date of the next code update in the customer data. The date when a predetermined period (six months) elapses from the previous date may be updated as the next scheduled update date. In this case, in S02 to S03, it is determined whether the date for confirmation has passed the next code update scheduled date, and whether or not it is an object for automatic update of the forgery prevention code.

  When the update of the forgery prevention code and the previous code update date is completed, it is searched whether the next customer data exists in the customer database (S06). If there is, the next customer data is obtained from the acquisition of the previous code update date. The processing up to the update (S02 to S06) is repeated, and if it does not exist, the processing is terminated as it is. This process is repeated until confirmation of all target customer data in the customer database is completed.

  Next, with reference to the flowcharts of FIGS. 10 and 11, the processing flow for updating or confirming the forgery prevention code at the request of the card owner in the credit card forgery prevention system according to the present invention will be described. In either case, the processing is not automatically started on the host side as shown in FIG. 9 but is triggered by a request made by the cardholder from an ATM or the like. The processing flow of FIG. 11 is activated when the user presses a menu such as “card update” at an ATM or the like for the purpose of voluntarily updating the anti-counterfeit code, whereas the processing flow of FIG. Is activated by pressing a menu such as “card check” at an ATM or the like for the purpose of maintaining the card in a usable state.

  In FIG. 10, when a card holder receives an update request for an anti-counterfeit code made by operating an ATM (S11), it transmits a password input request to the ATM (S12). When the password entered in the ATM by the cardholder is received according to the input request (S13), the customer data of the card number that is the object of the update request is read from the customer database (S14), and the password entered in the ATM And the password registered in the customer database match (S15).

  If the passwords do not match, an error process such as transmission of an error message is performed (S20), and the process ends. If the passwords match, the forgery prevention code read from the card received together with the update request is compared with the forgery prevention code included in the customer data read from the customer database (S16), and the forgery prevention code is If they match, the forgery prevention code registered as customer data is updated to a forgery prevention code newly assigned in the host computer (S17). At the same time, the previous code update date registered as customer data is updated to the date of processing (S18). The next code update scheduled date after the elapse of a predetermined period from the processing date may be set instead of the previous code update date, as in the description of the flowchart of FIG.

  When the update of the customer database is completed, a new forgery prevention code is transmitted to the ATM (S19). On the ATM side, the received anti-counterfeit code is overwritten on the storage medium of the credit card. If the forgery prevention codes do not match, it is determined that the host side forgery prevention code has already been automatically updated, and the forgery prevention code newly assigned to the customer database is transmitted to the ATM (S19). Even when the forgery prevention codes do not match, as in the case of matching, a new forgery prevention code may be assigned and the same operations as S17 to S18 may be executed.

  In FIG. 11, when a card owner accepts a forgery prevention code check request made by operating an ATM (S21), it transmits a password input request to the ATM (S22). When the password entered in the ATM by the cardholder is received according to the input request (S23), the customer data of the card number that is the object of the update request is read from the customer database (S24), and the password entered in the ATM is read. And the password registered in the customer database match (S25).

  If the passwords do not match, an error process such as transmission of an error message is performed (S28), and the process ends. If the passwords match, the forgery prevention code read from the card received together with the check request is compared with the forgery prevention code included in the customer data read from the customer database (S26). If they match, it is determined that the card can be used as it is, and the processing is ended as it is. If the anti-counterfeit code does not match, the host-side anti-counterfeit code has already been automatically updated, so it is judged that the card-side anti-counterfeit code needs to match, and the new data set as customer data A forgery prevention code is transmitted to the ATM (S27), and the process is terminated.

It is a figure which shows the outline | summary of embodiment which applies the forgery prevention system concerning this invention to a credit card. It is a figure which shows the outline | summary of embodiment which applies the forgery prevention system concerning this invention to a cash card. It is a block diagram which shows the structure of the forgery prevention system of the credit card concerning this invention. It is a figure which shows an example of the customer master stored in a customer database in the forgery prevention system of the credit card concerning this invention. In the credit card forgery prevention system according to the present invention, it is a first diagram showing the timing of the forgery prevention code update. In the credit card forgery prevention system according to the present invention, it is a second diagram showing the timing of the forgery prevention code update. In the credit card forgery prevention system according to the present invention, it is a third diagram showing the timing of the forgery prevention code update. In the credit card forgery prevention system according to the present invention, it is a fourth diagram showing the timing of the forgery prevention code update. 6 is a flowchart showing a processing flow for automatically updating a forgery prevention code on the host computer side in the credit card forgery prevention system according to the present invention. 6 is a flowchart showing a processing flow for updating a forgery prevention code in response to a request from a card owner in the credit card forgery prevention system according to the present invention. 6 is a flowchart showing a processing flow for confirming whether a forgery prevention code has been updated in response to a request of a card owner in the credit card forgery prevention system according to the present invention.

Explanation of symbols

10 Card company system 11 CPU
12 RAM
13 ROM
14 HDD
141 Code update program 142 Sales approval program 143 Customer information storage unit 20 ATM
DESCRIPTION OF SYMBOLS 21 Magnetic information reading part 22 Magnetic information writing part 23 Communication control part 30 CAT terminal 31 Magnetic information reading part 32 Communication control part 40 Card

Claims (12)

A forgery prevention system for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card,
A card including at least a forgery prevention code assigned to the credit card, a renewal date when the forgery prevention code is updated, and a personal identification number designated by the credit card user in a record provided for each credit card number Card information storage means for storing information;
An approval request receiving means for receiving an approval request for sales or withdrawal including a card number read from a credit card and a forgery prevention code from the first terminal device;
An authorization determination means for reading out the forgery prevention code corresponding to the card number received by the authorization request receiving means from the card information storage means and determining whether it matches the forgery prevention code received by the authorization request receiving means;
When the approval determination means determines that the forgery prevention code matches, an approval message transmission means for transmitting a sales or withdrawal approval message to the first terminal device;
The forgery prevention code stored in the card information storage means is automatically updated after a predetermined period of time based on the update date, and the forgery prevention code is updated with the update date stored in the card information storage means. Code update means to update the date,
Confirmation request receiving means for receiving a confirmation request for the forgery prevention code including a card number read from a credit card and a forgery prevention code from the second terminal device into which the credit card is inserted;
A personal identification number receiving means for receiving the personal identification number input to the second terminal device in accordance with the confirmation request from the second terminal device;
A personal identification number corresponding to the card number received by the confirmation request receiving unit is read from the card information storage unit, and a personal identification number determining unit for determining whether the personal identification number matches the personal identification number received by the personal identification number receiving unit;
When the personal identification number determination means determines that the personal identification numbers match, the counterfeit prevention code received by the confirmation request receiving means is read from the card information storage means by reading out the forgery prevention code corresponding to the card number received by the confirmation request receiving means. Confirmation determination means for determining whether the code matches,
When the confirmation determination means determines that the forgery prevention code does not match, a code transmission means for transmitting the forgery prevention code corresponding to the card number read from the card information storage means to the second terminal device;
With
The second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with the forgery prevention code transmitted from the code transmitting means. An update request receiving means for receiving an update request for the forgery prevention code including a card number read from a credit card from a third terminal device into which the credit card is inserted;
Second password receiving means for receiving the password entered in the third terminal device in response to the update request from the third terminal device;
A second code number for reading out the code number corresponding to the card number received by the update request receiving unit from the card information storage unit and determining whether the code number matches the code number received by the second code number receiving unit A determination means;
When the second code number determination unit determines that the code numbers match, the forgery prevention code stored in the card information storage unit is updated to a new forgery prevention code, and the update date stored in the card information storage unit A second code update means for updating the forgery prevention code to a new date updated;
Second code transmitting means for transmitting a new forgery prevention code updated by the second code updating means to the third terminal device;
With
The third terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with a new forgery prevention code transmitted from the second code transmitting means. The forgery prevention system according to claim 1. An update reservation request receiving means for receiving, from a fourth terminal device, an update reservation request for the forgery prevention code including a card number read from a credit card and an update reservation date for the forgery prevention code;
Third password receiving means for receiving the password entered in the fourth terminal device in response to the update reservation request from the fourth terminal device;
A third password for reading out the password corresponding to the card number received by the update reservation request receiving means from the card information storage means and determining whether it matches the password received by the third password receiving means. Number determination means;
When the third code number determination unit determines that the code numbers match, the update date stored in the card information storage unit is changed to the date when the predetermined period elapses on the update reservation date received by the update reservation request reception unit. Update date update means to update;
The anti-counterfeit system according to claim 1 or 2, further comprising: A forgery prevention system for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card,
A card including at least a forgery prevention code assigned to the credit card, a scheduled update date for updating the forgery prevention code, and a personal identification number designated by a user of the credit card in a record provided for each credit card number Card information storage means for storing information;
An approval request receiving means for receiving an approval request for sales or withdrawal including a card number read from a credit card and a forgery prevention code from the first terminal device;
An authorization determination means for reading out the forgery prevention code corresponding to the card number received by the authorization request receiving means from the card information storage means and determining whether it matches the forgery prevention code received by the authorization request receiving means;
When the approval determination means determines that the forgery prevention code matches, an approval message transmission means for transmitting a sales or withdrawal approval message to the first terminal device;
The forgery prevention code stored in the card information storage means is automatically updated on the scheduled update date, and the scheduled update date stored in the card information storage means is determined based on the date on which the forgery prevention code is updated. Code update means for updating to a new date after the period has elapsed;
Confirmation request receiving means for receiving a confirmation request for the forgery prevention code including a card number read from a credit card and a forgery prevention code from the second terminal device into which the credit card is inserted;
A personal identification number receiving means for receiving the personal identification number input to the second terminal device in accordance with the confirmation request from the second terminal device;
A personal identification number corresponding to the card number received by the confirmation request receiving unit is read from the card information storage unit, and a personal identification number determining unit for determining whether the personal identification number matches the personal identification number received by the personal identification number receiving unit;
When the personal identification number determination means determines that the personal identification numbers match, the counterfeit prevention code received by the confirmation request receiving means is read from the card information storage means by reading out the forgery prevention code corresponding to the card number received by the confirmation request receiving means. Confirmation determination means for determining whether the code matches,
When the confirmation determination means determines that the forgery prevention code does not match, a code transmission means for transmitting the forgery prevention code corresponding to the card number read from the card information storage means to the second terminal device;
With
The second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with the forgery prevention code transmitted from the code transmitting means. An update request receiving means for receiving an update request for the forgery prevention code including a card number read from a credit card from a third terminal device into which the credit card is inserted;
Second password receiving means for receiving the password entered in the third terminal device in response to the update request from the third terminal device;
A second code number for reading out the code number corresponding to the card number received by the update request receiving unit from the card information storage unit and determining whether the code number matches the code number received by the second code number receiving unit A determination means;
When the second code number determination unit determines that the code numbers match, the forgery prevention code stored in the card information storage unit is updated to a new forgery prevention code, and the update schedule stored in the card information storage unit A second code updating means for updating the date to a new date after the elapse of a predetermined period based on the date on which the forgery prevention code is updated;
Second code transmitting means for transmitting a new forgery prevention code updated by the second code updating means to the third terminal device;
With
The third terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with a new forgery prevention code transmitted from the second code transmitting means. The forgery prevention system according to claim 4. An update reservation request receiving means for receiving, from a fourth terminal device, an update reservation request for the forgery prevention code including a card number read from a credit card and an update reservation date for the forgery prevention code;
Third password receiving means for receiving the password entered in the fourth terminal device in response to the update reservation request from the fourth terminal device;
A third password for reading out the password corresponding to the card number received by the update reservation request receiving means from the card information storage means and determining whether it matches the password received by the third password receiving means. Number determination means;
If the third code number determination unit determines that the code numbers match, the update date update unit that updates the update date stored in the card information storage unit to the update reservation date received by the update reservation request reception unit. When,
The anti-counterfeit system according to claim 4 or 5, further comprising: A forgery prevention system for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card,
In the record provided for each account number issued by the cash card, the forgery prevention code assigned to the cash card, the update date when the forgery prevention code is updated, and the password specified by the user of the cash card Account information storage means for storing account information including at least;
An approval request receiving means for receiving a withdrawal approval request including the account number and anti-counterfeit code read from the cash card from the first terminal device;
An authorization determination means for reading out the forgery prevention code corresponding to the account number received by the authorization request receiving means from the account information storage means and determining whether it matches the forgery prevention code received by the authorization request receiving means;
When the approval determination means determines that the forgery prevention code matches, an approval message transmission means for transmitting a withdrawal approval message to the first terminal device;
The forgery prevention code stored in the account information storage means is automatically updated after a predetermined period of time based on the update date, and the forgery prevention code is updated with the update date stored in the account information storage means. Code update means to update the date,
Confirmation request receiving means for receiving a confirmation request for the forgery prevention code including the account number read from the cash card and a forgery prevention code from the second terminal device into which the cash card is inserted;
A personal identification number receiving means for receiving the personal identification number input to the second terminal device in accordance with the confirmation request from the second terminal device;
A personal identification number corresponding to the account number received by the confirmation request receiving unit is read from the account information storage unit, and a personal identification number determining unit for determining whether the personal identification number matches the personal identification number received by the personal identification number receiving unit;
When the personal identification number determining means determines that the personal identification numbers match, the forgery prevention code received by the confirmation request receiving means is read from the account information storage means by reading out the forgery prevention code corresponding to the account number received by the confirmation request receiving means. Confirmation determination means for determining whether the code matches,
When the confirmation determination means determines that the forgery prevention code does not match, a code transmission means for transmitting the forgery prevention code corresponding to the account number read from the account information storage means to the second terminal device;
With
The forgery prevention system, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted from the code transmitting means. A forgery prevention system for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card,
In a record provided for each account number issued by the cash card, an anti-counterfeit code assigned to the cash card, an update date for updating the anti-counterfeit code, and a password specified by the user of the cash card Account information storage means for storing account information including at least;
An approval request receiving means for receiving a withdrawal approval request including the account number and anti-counterfeit code read from the cash card from the first terminal device;
An authorization determination means for reading out the forgery prevention code corresponding to the account number received by the authorization request receiving means from the account information storage means and determining whether it matches the forgery prevention code received by the authorization request receiving means;
When the approval determination means determines that the forgery prevention code matches, an approval message transmission means for transmitting a withdrawal approval message to the first terminal device;
The forgery prevention code stored in the account information storage means is automatically updated on the scheduled update date, and the scheduled update date stored in the card information storage means is determined based on the date on which the forgery prevention code is updated. Code update means for updating to a new date after the period has elapsed;
Confirmation request receiving means for receiving a confirmation request for the forgery prevention code including the account number read from the cash card and a forgery prevention code from the second terminal device into which the cash card is inserted;
A personal identification number receiving means for receiving the personal identification number input to the second terminal device in accordance with the confirmation request from the second terminal device;
A personal identification number corresponding to the account number received by the confirmation request receiving unit is read from the account information storage unit, and a personal identification number determining unit for determining whether the personal identification number matches the personal identification number received by the personal identification number receiving unit;
When the personal identification number determining means determines that the personal identification numbers match, the forgery prevention code received by the confirmation request receiving means is read from the account information storage means by reading out the forgery prevention code corresponding to the account number received by the confirmation request receiving means. Confirmation determination means for determining whether the code matches,
When the confirmation determination means determines that the forgery prevention code does not match, a code transmission means for transmitting the forgery prevention code corresponding to the account number read from the account information storage means to the second terminal device;
With
The forgery prevention system, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted from the code transmitting means. A forgery prevention method for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card, wherein the credit card is recorded on a record provided for each credit card number. Managing a credit card having a card information storage unit for storing card information including at least a forgery prevention code assigned to the card, an update date when the forgery prevention code is updated, and a password specified by a user of the credit card In the computer system, the forgery prevention code stored in the card information storage unit is automatically updated after a predetermined period of time based on the update date, and the update date stored in the card information storage unit is Configured to be updated to a new date when the code is updated,
When requesting sales or withdrawal using a credit card,
An approval request receiving step in which the computer system receives an approval request for sales or withdrawal including a card number read from a credit card and a forgery prevention code from the first terminal device;
An approval for the computer system to read out the forgery prevention code corresponding to the card number received in the approval request receiving step from the card information storage unit and determine whether it matches the forgery prevention code received in the approval request receiving step A determination step;
When the computer system determines that the forgery prevention code matches in the approval determination step, an approval message transmission step of transmitting a sales or withdrawal approval message to the first terminal device is executed.
When requesting confirmation of anti-counterfeit code stored in credit card,
A confirmation request receiving step in which the computer system receives a confirmation request for the forgery prevention code including a card number read from a credit card and a forgery prevention code from the second terminal device into which the credit card is inserted;
A password receiving step for receiving, from the second terminal device, the password entered in the second terminal device in response to the confirmation request;
The computer system reads a password corresponding to the card number received in the confirmation request receiving step from the card information storage unit and determines whether the password matches the password received in the password receiving step Steps,
When the computer system determines that the passwords match in the password number determination step, the forgery prevention code corresponding to the card number received in the confirmation request reception step is read from the card information storage unit, and the confirmation request reception step A confirmation determination step for determining whether it matches the forgery prevention code received at
When the computer system determines that the forgery prevention code does not match in the confirmation determination step, the code transmission for transmitting the forgery prevention code corresponding to the card number read from the card information storage unit to the second terminal device Step and
The forgery prevention method, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with the forgery prevention code transmitted in the code transmission step. A forgery prevention method for preventing forgery of a credit card using a forgery prevention code stored in a storage medium provided in the credit card, wherein the credit card is recorded on a record provided for each credit card number. A credit card having a card information storage unit for storing card information including at least a forgery prevention code assigned to the user, a scheduled update date for updating the forgery prevention code, and a personal identification number designated by a user of the credit card In the computer system, the forgery prevention code stored in the card information storage unit is automatically updated on the scheduled update date, and the scheduled update date stored in the card information storage unit updates the forgery prevention code. Is configured to be updated to a new date after a predetermined period of time,
When requesting sales or withdrawal using a credit card,
An approval request receiving step in which the computer system receives an approval request for sales or withdrawal including a card number read from a credit card and a forgery prevention code from the first terminal device;
An approval for the computer system to read out the forgery prevention code corresponding to the card number received in the approval request receiving step from the card information storage unit and determine whether it matches the forgery prevention code received in the approval request receiving step A determination step;
When the computer system determines that the forgery prevention code matches in the approval determination step, an approval message transmission step of transmitting a sales or withdrawal approval message to the first terminal device is executed.
When requesting confirmation of anti-counterfeit code stored in credit card,
A confirmation request receiving step in which the computer system receives a confirmation request for the forgery prevention code including a card number read from a credit card and a forgery prevention code from the second terminal device into which the credit card is inserted;
A password receiving step for receiving, from the second terminal device, the password entered in the second terminal device in response to the confirmation request;
The computer system reads a password corresponding to the card number received in the confirmation request receiving step from the card information storage unit and determines whether the password matches the password received in the password receiving step Steps,
When the computer system determines that the passwords match in the password number determination step, the forgery prevention code corresponding to the card number received in the confirmation request reception step is read from the card information storage unit, and the confirmation request reception step A confirmation determination step for determining whether it matches the forgery prevention code received at
When the computer system determines that the forgery prevention code does not match in the confirmation determination step, the code transmission for transmitting the forgery prevention code corresponding to the card number read from the card information storage unit to the second terminal device Step and
The forgery prevention method, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the credit card with the forgery prevention code transmitted in the code transmission step. A forgery prevention method for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card, wherein the cash card is recorded in a record provided for each account number of the cash card. A deposit account provided with an account information storage unit for storing account information including at least an anti-counterfeit code assigned to the account, an update date when the anti-counterfeit code is updated, and a personal identification number designated by a user of the cash card In the computer system, the forgery prevention code stored in the account information storage unit is automatically updated after a predetermined period of time based on the update date, and the update date stored in the account information storage unit is prevented from forgery. Configured to be updated to a new date when the code is updated,
When requesting withdrawal with a cash card,
An approval request receiving step in which the computer system receives an approval request for withdrawal including an account number read from a cash card and a forgery prevention code from the first terminal device;
Approval for determining whether the computer system reads the forgery prevention code corresponding to the account number received in the approval request receiving step from the account information storage unit and matches the forgery prevention code received in the approval request receiving step A determination step;
When the computer system determines that the forgery prevention code matches in the approval determination step, an approval message transmission step of transmitting a withdrawal approval message to the first terminal device is executed.
When requesting confirmation of the anti-counterfeit code stored in the cash card,
A confirmation request receiving step in which the computer system receives a confirmation request for the forgery prevention code including an account number read from the cash card and a forgery prevention code from the second terminal device into which the cash card is inserted;
A password receiving step for receiving, from the second terminal device, the password entered in the second terminal device in response to the confirmation request;
The computer system reads a password corresponding to the account number received in the confirmation request receiving step from the account information storage unit and determines whether the password matches the password received in the password receiving step Steps,
When the computer system determines that the passwords match in the password number determination step, the forgery prevention code corresponding to the account number received in the confirmation request reception step is read from the account information storage unit, and the confirmation request reception step A confirmation determination step for determining whether it matches the forgery prevention code received at
When the computer system determines that the forgery prevention code does not match in the confirmation determination step, the code transmission for transmitting the forgery prevention code corresponding to the account number read from the account information storage unit to the second terminal device Step and
The forgery prevention method, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted in the code transmission step. A forgery prevention method for preventing forgery of a cash card using a forgery prevention code stored in a storage medium provided in the cash card, wherein the cash card is recorded in a record provided for each account number of the cash card. Managing a deposit account provided with an account information storage unit that stores account information including at least an anti-counterfeit code assigned to, an update date for updating the anti-counterfeit code, and a personal identification number designated by a user of the cash card In the computer system, the forgery prevention code stored in the account information storage unit is automatically updated on the scheduled update date, and the scheduled update date stored in the account information storage unit updates the forgery prevention code. Is configured to be updated to a new date after a predetermined period of time,
When requesting withdrawal with a cash card,
An approval request receiving step in which the computer system receives an approval request for withdrawal including an account number read from a cash card and a forgery prevention code from the first terminal device;
Approval for determining whether the computer system reads the forgery prevention code corresponding to the account number received in the approval request receiving step from the account information storage unit and matches the forgery prevention code received in the approval request receiving step A determination step;
When the computer system determines that the forgery prevention code matches in the approval determination step, an approval message transmission step of transmitting a withdrawal approval message to the first terminal device is executed.
When requesting confirmation of the anti-counterfeit code stored in the cash card,
A confirmation request receiving step in which the computer system receives a confirmation request for the forgery prevention code including an account number read from the cash card and a forgery prevention code from the second terminal device into which the cash card is inserted;
A password receiving step for receiving, from the second terminal device, the password entered in the second terminal device in response to the confirmation request;
The computer system reads a password corresponding to the account number received in the confirmation request receiving step from the account information storage unit and determines whether the password matches the password received in the password receiving step Steps,
When the computer system determines that the passwords match in the password number determination step, the forgery prevention code corresponding to the account number received in the confirmation request reception step is read from the account information storage unit, and the confirmation request reception step A confirmation determination step for determining whether it matches the forgery prevention code received at
When the computer system determines that the forgery prevention code does not match in the confirmation determination step, the code transmission for transmitting the forgery prevention code corresponding to the account number read from the account information storage unit to the second terminal device Step and
The forgery prevention method, wherein the second terminal device that has received the forgery prevention code updates the forgery prevention code stored in the cash card with the forgery prevention code transmitted in the code transmission step.