JP2007011525A - Automated teller machine system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To suppress an illegal dealing action using a stolen card or a found card, in an automated teller machine system. <P>SOLUTION: A biometric pattern reading means 1a reads a biometric pattern 3 of a user. A biometric data reading means 1b reads a biometric data 4b of the user that are stored in a storage means 4a, incorporated in a user identification slip 4. A personal authentication means 1c performs personal authentication, by collating the biometric pattern 3 with the biometric data 4b. An authentication data transmission means 1d transmits an authentication data 5, including the biometric pattern 3 to an authentication server 2 via a network 10. Also, an authentication data reception means 2a receives the authentication data 5 from an automated teller machine 1. When the personal authentication means 1c decides that the authentication is error, an authentication error data storage means 2b stores the authentication data 5 as an authentication error data. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a cash deposit machine system, and more particularly to a cash deposit machine system that transmits and receives data through a network.

  At present, when authenticating an individual, attention is focused on biometric information such as fingerprints and palm prints that are difficult to forge, not information such as signatures and passwords. Here, when the individual is biometrically authenticated from the biometric information in order to allow the individual to use the service, the cash deposit payment machine acquires the biometric information of the individual using a camera or the like. Thereafter, the cash deposit payment machine calculates an authentication score from the acquired biometric information, and determines the success or failure of the individual biometric authentication.

  For example, an ATM (Automated Teller Machine) used in a bank or the like uses biometric information as identity verification information as a measure against counterfeiting of a cash card, and makes a transaction when the person can be authenticated. A system has been devised.

  FIG. 12 is an external view of a cash deposit payment machine. As shown in FIG. 12, the cash deposit payment machine 100 includes a passbook insertion unit 150, a card insertion unit 151, a coin deposit / withdrawal unit 152, a banknote deposit / withdrawal unit 153, a display / input unit 154, and a biological pattern reader 155. Yes.

  The passbook insertion unit 150 accepts the passbook, and returns the passbook after performing certain processes such as reading data stored on a magnetic tape attached to the side of the passbook, filling in the passbook, and the like. The card insertion unit 151 receives the card and returns the card after performing certain processing such as reading data stored in the card.

  The coin deposit / withdrawal unit 152 receives and pays out coins. Moreover, the banknote depositing / withdrawing part 153 performs reception of a banknote and payment of a banknote. In addition, the display / input unit 154 displays a transaction content menu, transaction result guidance, and the like. It also accepts processing requests and the like. The biometric pattern reader 155 reads the biometric information of the user.

  FIG. 13 is a diagram illustrating a system configuration example of a cash deposit payment machine. As shown in FIG. 13, the cash deposit payment machine 100 includes a main control unit 160, a communication control unit 161, a card lead unit 162, a receipt printing unit 163, a bill handling unit 164, a coin handling unit 165, a passbook handling unit 166, and a usage. A user operation unit 167, a hard disk 168, a CD-recorder 169, and a user recording unit (camera) 170. The user operation unit 167 includes a screen display unit 167a, a key input unit 167b, and a biometric pattern reader unit 167c.

  The main control unit 160 controls the cash deposit payment machine 100 as a whole. The communication control unit 161 controls communication with the host 700. The card read unit 162 reads information recorded on the cash card 400 inserted from the card insertion unit 151. The cash card 400 is provided with a biometric data storage unit 410 in which user biometric data is stored.

  In addition, the receipt printing unit 163 prints the transaction result after the transaction is performed on the receipt. The banknote handling unit 164 counts the number of banknotes inserted from the banknote deposit / withdrawal unit 153 at the time of depositing or transferring an account, and determines the type of banknote. Further, when the banknotes are paid out, the banknotes to be paid out are counted. The coin handling unit 165 counts the number of coins inserted from the coin deposit / withdrawal unit 152 at the time of deposit / transfer to an account, and determines the type of coin. When coins are paid out, the coins to be paid out are counted.

  The bankbook handling unit 166 reads data stored on the magnetic tape of the bankbook inserted from the bankbook insertion unit 150. In addition, the bankbook is filled in for the bankbook. The user operation unit 167 is an interface when the user operates the cash deposit payment machine 100. That is, the screen display unit 167a displays a transaction menu and guidance regarding transactions. The key input unit 167b has a key for the user to input. The biometric pattern reader unit 167c reads the biometric pattern of the user.

  The hard disk 168 stores an OS (Operating System), a terminal ID for identifying the cash deposit payment machine 100, and the like. Moreover, the user recording part 170 is a camera with which the cash deposit payment machine 100 is equipped, for example.

As described above, there is an apparatus that performs personal authentication using a fingerprint among devices that perform personal authentication using user's biometric information (see Patent Document 1). In addition, information on the principal and fingerprint information, information on the agent and fingerprint information are registered in an IC (Integrated Circuit) card, and the details of transactions that the agent can or cannot transact for each agent. Was recorded (see Patent Document 2). Further, when the identity verification using the biometric information is performed, if it is determined that the access is made by an unauthorized access person, there is a service that notifies the service providing system (see Patent Document 3).
JP-A-62-90767 (FIG. 4) Japanese Patent Laid-Open No. 2001-67523 (paragraph numbers [0007] to [0009], FIG. 1) JP 2000-132515 A (paragraph numbers [0008] to [0040], FIG. 1)

  However, in a personal authentication system that uses biometric data, it is difficult to impersonate the cardholder even if the card is stolen, because the person's body information, which is biometric data, is determined based on the individual's body information. is there. However, by adopting biometric authentication, a certain level of safety can be secured, but on the other hand, the introduction of biometric authentication does not eliminate a person trying to use a stolen card or a picked up card.

  This invention is made | formed in view of such a point, and it aims at providing the cash deposit payment machine system which can suppress the illegal transaction act by a theft card, a pick-up card, etc.

  In order to solve the above problem, the present invention provides a cash deposit machine system that transmits and receives data through a network as shown in FIG. That is, the cash deposit payment machine 1 includes the biometric data of the user stored in the biometric pattern reading unit 1a that reads the biometric pattern 3 of the user and the storage unit 4a that is incorporated in the identification card 4 of the user. The biometric data reading means 1a that reads 4b, the biometric pattern 3 and the biometric data 4b are collated, the personal authentication means 1c that performs personal authentication, and the authentication data that transmits the authentication data 5 including the biometric pattern 3 to the authentication data server 2 A transmission means 1d. The authentication data server 2 stores the authentication data 5 as authentication abnormality data when the authentication data receiving unit 2a that receives the authentication data 5 from the cash deposit payment machine 1 and the person authentication unit 1c determine that the authentication is abnormal. Authentication abnormality data storage means 2b.

  In such a cash deposit machine system, the biometric pattern reading means 1a reads the biometric pattern 3 of the user. The biometric data reading unit 1b reads the biometric data 4b of the user stored in the storage unit 4a incorporated in the user identification tag 4. The personal authentication means 1c collates the biometric pattern 3 and the biometric data 4b to perform personal authentication. The authentication data transmission unit 1 d transmits authentication data 5 including the biometric pattern 3 to the authentication data server 2. Further, the authentication data receiving means 2 a receives the authentication data 5 from the cash deposit payment machine 1. The authentication abnormality data storage unit 2b stores the authentication data 5 as authentication abnormality data when the personal authentication unit 1c determines that the authentication abnormality has occurred.

  According to the cash deposit machine system of the present invention, it is possible to determine whether or not the transaction causing the authentication abnormality is a transaction due to unauthorized use by storing the authentication abnormality data in the server. There is a deterrent effect. It will also help to criminalize unauthorized users.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a conceptual diagram of the invention applied to this embodiment. As shown in FIG. 1, the cash deposit payment machine 1 includes a biometric pattern reading unit 1a, a card biometric data reading unit 1b, a personal authentication unit 1c, and an authentication data transmission unit 1d. The authentication data server 2 includes an authentication data receiving unit 2a and an authentication abnormality data storage unit 2b.

  The biometric pattern reading unit 1a reads the biometric pattern 3 of the user. The card biometric data reading unit 1b reads the biometric data 4b stored in the storage unit 4a attached to the identification tag 4.

  The personal authentication unit 1c collates the biometric pattern 3 read by the biometric pattern reading unit 1a with the biometric data 4b read by the card biometric data reading unit 1b. And when it is judged that it corresponds more than the predetermined fixed ratio, transactions, such as deposit and withdrawal in the cash deposit payment machine 1, are carried out on the assumption that the person has been authenticated. Then, the authentication data transmitting unit 1d transmits the authentication data 5 including the biometric pattern 3 read by the biometric pattern reading unit 1a to the authentication data server 2 via the network 10. Further, the authentication data transmission unit 1d transmits the authentication data 5 including the biometric pattern 3 to the authentication data server 2 as soon as it is determined that they do not match.

  When the authentication data receiving means 2a receives the authentication data 5, the authentication data receiving means 2a searches the authentication abnormality data storage means 2b using the biometric pattern 3 included in the authentication data 5. Further, it is determined from the authentication data 5 whether or not the authentication has been successful.

  When the biometric pattern 3 is normally authenticated and the biometric pattern 3 is already stored in the authentication abnormality data storage means 2b, it is determined that the stored authentication abnormality data has been stored due to some operation error, Delete the corresponding part of the authentication error data. Further, when the biometric pattern 3 is authenticated as abnormal and the biometric pattern 3 is already stored in the authentication abnormality data storage unit 2b, it is determined that the authentication abnormality is an authentication abnormality due to unauthorized use. The authentication data 5 is stored in the authentication abnormality data storage unit 2b as authentication abnormality data.

  In this way, by obtaining a biometric pattern of a person using a cash deposit payment machine, not only authentication of the person to conduct a transaction such as withdrawing a deposit from a self-named account, but also identifying the user it can.

  In addition, by storing the biometric pattern in the authentication data server as information for identifying the user, the same user can access the cash deposit payment machine connected to the authentication data server again. I can see immediately. If this characteristic is used, it is easy to detect unauthorized use because it is immediately known from the user's biometric pattern that the user who has caused the abnormal authentication before is using it again. Also, by operating such a system, unauthorized use can be suppressed.

  FIG. 2 is a diagram illustrating a system configuration example according to the present embodiment. As shown in FIG. 2, cash deposit payment machines 100, 100 a, and 100 b are connected to an authentication data server 200 via a network 10. Moreover, the cash deposit payment machines 100c, 100d, and 100e are connected to the authentication data server 200a via the network 10a. The authentication data servers 200 and 200a are connected to the common data server 200b via the network 10b.

  The cash deposit machines 100, 100a, 100b and the authentication data server 200 are nodes via the network 10 in the same bank. Also, the cash deposit payment machines 100c, 100d, 100e and the authentication data server 200a are nodes via a network 10a of a bank different from the nodes via the network 10. Further, it is assumed that the common data server 200b is connected to authentication data servers 200 and 200a between different banks. For example, a data server managed by an organization composed of a community of a plurality of banks.

Next, processing functions of the cash deposit machine 100 and the authentication data server 200 of the cash deposit machine system will be described.
FIG. 3 is a diagram illustrating processing functions of the cash deposit payment machine and the authentication data server. As shown in FIG. 3, the cash deposit payment machine 100 includes a biometric pattern reading unit 110, a card biometric data reading unit 120, a personal authentication unit 130, and an authentication data transmission unit 140. The authentication data server 200 also includes an authentication data receiving unit 210 and an authentication abnormality data storage unit 220.

  The biological pattern reading unit 110 reads a user's biological pattern. For example, when performing personal authentication using the vein pattern 300 of the palm of the user, the vein pattern 300 is read using an infrared camera or the like. The card biometric data reading unit 120 reads vein data 420 stored in the IC memory 410 attached to the cash card 400.

  The personal authentication unit 130 collates the vein pattern 300 read by the biometric pattern reading unit 110 with the vein data 420 read by the card biometric data reading unit 120. And when it is judged that it corresponds more than the fixed ratio decided beforehand, transactions, such as deposit and withdrawal in the cash deposit payment machine 100, are carried out assuming that the person has been authenticated. Then, the authentication data transmission unit 140 transmits the authentication data 500 including the vein pattern 300 read by the biometric data reading unit 110 to the authentication data server 200 via the network 10. If it is determined that they do not match, the authentication data transmission unit 140 immediately transmits the authentication data 500 including the vein pattern 300 to the authentication data server 200 before performing the transaction.

  When the authentication data receiving unit 210 receives the authentication data 500, the authentication data receiving unit 210 searches the authentication abnormality data storage unit 220 using the vein pattern 300 included in the authentication data 500. Further, it is determined from the authentication data 500 whether or not the authentication is normal.

  When the vein pattern 300 is normally authenticated and the vein pattern 300 is stored in the authentication abnormality data storage unit 220, it is determined that the stored authentication abnormality data is stored due to some operation error, and authentication is performed. Delete the corresponding part of the abnormal data. When the vein pattern 300 is authenticated as abnormal and the vein pattern 300 is stored in the authentication abnormality data storage unit 220, it is determined that the authentication abnormality is an authentication abnormality due to unauthorized use. The authentication data 500 is stored in the authentication abnormality data storage unit 220 as authentication abnormality data.

  In this way, by obtaining a biometric pattern of a person using a cash deposit payment machine, not only authentication of the person to conduct a transaction such as withdrawing a deposit from a self-named account, but also identifying the user it can.

  In addition, by storing the biometric pattern in the authentication data server as information for identifying the user, the same user can access the cash deposit payment machine connected to the authentication data server again. I can see immediately. If this characteristic is used, it is easy to detect unauthorized use because it is immediately known from the user's biometric pattern that the user who has caused the abnormal authentication before is using it again. Also, by operating such a system, unauthorized use can be suppressed. In the case of normal authentication, the authentication data 500 sent to the authentication data server 200 may be the vein pattern 300 alone.

Next, specific examples of various data stored in the authentication abnormality data storage unit 220 will be described.
FIG. 4 is a diagram illustrating an example of the data structure of the abnormal data table. As shown in FIG. 4, the abnormal data table 600 includes columns for biometric patterns and partial authentication. Information arranged in the horizontal direction of each column is associated with each other.

  In the biometric pattern column, a vein pattern read by the biometric pattern reading unit 110 is stored. The vein pattern is stored as an image file in JPEG (Joint Photographic Experts Group) format, for example. The partial authentication column indicates whether or not partial authentication was performed when the personal authentication unit 130 performed personal authentication. In the example of FIG. 4, “◯” is set when the authentication is partial, and “X” is set when the authentication is not complete.

  FIG. 5 is a diagram illustrating a data structure example of the authentication abnormality frequency table. As shown in FIG. 5, the authentication abnormality frequency table 610 includes columns for a device number and the number of authentication abnormality occurrences. Information arranged in the horizontal direction of each column is associated with each other. In the device number column, a terminal number for specifying a terminal in which an authentication error has occurred is set. In the column of the number of occurrences of authentication abnormality, a counter value indicating the number of authentication abnormalities provided for each device number in the authentication data server 200 is set.

The following processing is performed by the cash deposit machine system having the above functions and data.
6 and 7 are flowcharts showing a procedure of authentication processing by the cash deposit machine system. Hereinafter, the processing illustrated in FIGS. 6 and 7 will be described along with step numbers. The flowcharts shown in FIGS. 6 and 7 are originally one flowchart, but will be described separately in two figures for convenience.

  [Step S11] When the cash card 400 is inserted from the card insertion unit 151, the card biometric data reading unit 120 reads the vein data 420 stored in the IC memory 410 attached to the cash card 400 to authenticate the user. To the unit 130.

  [Step S12] Next, the biometric pattern reading unit 110 reads the vein pattern 300 from the palm of the user held over the biometric pattern reader 155 and outputs it to the personal authentication unit 130.

  [Step S13] The personal authentication unit 130 collates the vein pattern 300 and the vein data 420, and determines whether or not they match at a preset ratio or more. If it is determined that they match, the process proceeds to step S25. If it is determined that they do not match, the process proceeds to step S14.

  [Step S14] The authentication data transmission unit 140 receives the vein pattern 300 from the personal authentication unit 130, adds certain information to the authentication data 500, and transmits the authentication data 500 to the authentication data server 200 via the network 10. The fixed information added by the authentication data transmission unit 140 is a device number that is an identifier for identifying the cash deposit payment machine 100.

  [Step S <b> 15] Upon receiving the authentication data 500, the authentication data receiving unit 210 searches whether the vein pattern 300 included in the authentication data 500 is stored in the authentication abnormality data storage unit 220. If the vein pattern 300 is stored, the search result is notified to the cash deposit payment machine 100, and the process proceeds to step S33. If not stored, the process proceeds to step S16.

[Step S16] The authentication data server 200 requests a search as to whether or not the vein pattern 300 is stored in the common data server 200b via the network 10b.
[Step S17] The common data server 200b searches whether the vein pattern 300 is stored. If the vein pattern 300 is stored, the search result is notified to the cash deposit payment machine 100, and the process proceeds to step S18. If not stored, the process proceeds to step S22.

  [Step S18] When the cash deposit payment machine 100 receives a search result indicating that the vein pattern 300 is stored in the common data server 200b, the current user may be a malicious user. Take a picture of the user.

  [Step S19] The cash deposit machine 100 displays “Please call an attendant” on the display / input unit 114. At this time, if it is a good-willed user, it is considered that an attendant is called, and if it is a malicious user, it is considered that he / she is hesitant to call an attendant.

  [Step S20] The cash deposit payment machine 100 determines whether or not there is a response from the user within a predetermined time set in advance. If there is a response from the user, the process proceeds to step S21. If there is no response, the process proceeds to step S33.

  [Step S21] The cash deposit machine 100 determines that the user is a bona fide user because there was a response within a predetermined time, and deletes the photograph of the photographed user. That is, the photograph of the user judged to be good intentions is deleted so as not to infringe the privacy of the individual as much as possible.

[Step S22] The cash deposit machine 100 displays on the display / input unit 114 that the transaction is impossible due to an abnormal authentication.
[Step S23] If the personal authentication unit 130 determines that partial authentication is performed as a result of authenticating the vein pattern 300, the personal authentication unit 130 searches the abnormal data table 600 stored in the abnormal authentication data storage unit 220 of the authentication data server 200. Request. Then, the authentication data receiving unit 210 searches whether or not the vein pattern 300 is partially authenticated. If the vein pattern 300 is partially authenticated, it guides the user to re-register data in the IC memory.

[Step S24] The cash deposit payment machine 100 discharges the cash card 400 from the card insertion slot 111 and returns it to the user.
[Step S25] The cash deposit machine 100 displays a transaction menu on the display / input unit 114 and accepts a user's selection. For example, consider the case of withdrawing money from an account.

[Step S26] The cash deposit machine 100 accepts an input of the desired withdrawal amount from the display / input unit 114.
[Step S27] The banknote handling unit 164 counts banknotes with the desired withdrawal amount. It should be noted that the saving amount of the account is more than the desired withdrawal amount.

[Step S28] The cash deposit disbursement machine 100 withdraws the banknotes that have been counted from the banknote deposit and withdrawal unit 113.
[Step S29] The cash deposit payment machine 100 waits for the dispensed banknote to be withdrawn. Also, the cash card 400 is returned from the card insertion slot 111.

[Step S30] The authentication data transmission unit 140 transmits the authentication data 500 including the vein pattern 300 to the authentication data server 200.
[Step S31] The authentication data receiving unit 210 searches whether the vein pattern 300 included in the received authentication data 500 is stored in the authentication abnormality data storage unit 220, and if it is stored, associates it with the vein pattern 300. Delete the stored information.

  [Step S32] The authentication data receiving unit 210 determines whether or not the partially authenticated device number exceeds a threshold value, and if it exceeds the threshold value, notifies the cash deposit payment machine 100. The maintenance of the cash deposit machine 100 is urged.

  [Step S33] The cash deposit machine 100 determines that the cash card 400 has been illegally used and pauses the apparatus. Also, if you have taken a photo, leave a photo. If you have n’t taken a photo, take a photo and leave it. Further, the authentication data transmission unit 140 outputs a storage request signal for requesting the authentication data server 200 to store the authentication data 500 including the vein pattern 300 as authentication abnormality data. When receiving the storage request signal, the authentication data receiving unit 210 stores the authentication data 500 in the authentication error data storage unit 220 as authentication error data.

FIG. 8 is a flowchart showing the procedure of the card data re-registration guidance process. In the following, the process illustrated in FIG. 8 will be described in order of step number.
[Step S41] The authentication data transmission unit 140 makes an authentication error data search request for requesting the authentication data server 200 to search for authentication error data in the authentication error data storage unit 220.

  [Step S42] Upon receiving an authentication abnormality data search request, the authentication data receiving unit 210 searches whether the vein pattern 300 is stored in the abnormality data table 600 in the authentication abnormality data storage unit 220. If the vein pattern 300 is stored, the process proceeds to step S42. If not stored, the process ends.

  [Step S43] The authentication data receiving unit 210 includes both an item indicating whether the authentication included in the authentication data 500 is a partial authentication and a partial authentication item associated with the vein pattern 300 in the abnormal data table 600. Judge whether or not. If both are o, the process proceeds to step S44, and if at least one has x, the process ends.

  [Step S44] The authentication data receiving unit 210 notifies the cash deposit disbursement machine 100 that both items of the partial authentication are “◯”. When the cash deposit machine 100 receives the notification, the cash deposit machine 100 displays a guide for prompting re-registration of data stored in the IC memory 410 on the display / input unit 114. For example, when the vein pattern 300 is represented as a biometric pattern XXXXXX, it is registered as a biometric pattern in the abnormal data table 600 shown in FIG. A prompt to prompt is displayed.

  In the case of biometric authentication using a cash card with an IC memory, it is necessary to register one's biometric pattern as biometric data in the IC memory. The biometric pattern read when registering this biometric data cannot be read well, and may be registered in the IC memory as biometric data as it is. For example, when reading the palm vein pattern, the palm vein pattern may be read in a state where a part of the palm is bent with respect to the camera. When authentication is performed using a cash card with an IC memory in which such biometric data is registered, it may be determined that the registered biometric data and the biometric pattern read during authentication are different, resulting in an authentication error. is there. In biometric authentication, multiple authentication logics are used for authentication, so only the part that has been bent and read with respect to the camera becomes an authentication error, and the other part may be partly authenticated as normal authentication. is there. In such a case, the biometric data registered in the IC memory must be re-registered. Therefore, it is very effective because the corresponding user can be found by performing the processing as described above and can be guided to that effect.

FIG. 9 is a flowchart showing a procedure of authentication abnormality database deletion processing by the authentication data server. In the following, the process illustrated in FIG. 9 will be described in order of step number.
[Step S51] When the authentication data receiving unit 210 receives the authentication data 500 including the vein pattern 300 that has been normally authenticated, the authentication data receiving unit 210 searches whether the vein pattern 300 is stored in the authentication abnormality data storage unit 220.

  [Step S52] The authentication data receiving unit 210 searches the abnormality data table 600 of the authentication abnormality data storage unit 220 to determine whether the vein pattern 300 is registered. If the vein pattern 300 is registered, the process proceeds to step S53. If not registered, the process ends.

[Step S <b> 53] The authentication data receiving unit 210 deletes the vein pattern 300 and items set in association with the vein pattern 300 from the abnormal data table 600.
In this way, if authentication abnormality data is stored in the authentication data server and authentication is normally performed, it is determined that the authentication abnormality data stored in the authentication data server was stored due to some operation error or the like. Delete the stored authentication error data. By performing such processing, it is possible to prevent a bona fide user from being stored as authentication abnormality data.

FIG. 10 is a flowchart showing a procedure of maintenance necessity determination processing by the authentication data server. In the following, the process illustrated in FIG. 10 will be described in order of step number.
[Step S61] Upon receiving the authentication data 500, the authentication data receiving unit 210 determines whether or not there is an authentication abnormality. If it is determined that there is an authentication abnormality, 1 is added to the value of the counter corresponding to the device number included in the authentication data 500 provided in the authentication data server 200.

  [Step S62] The authentication data receiving unit 210 searches the authentication abnormality frequency table 610 of the authentication abnormality data storage unit 220, and determines whether or not a preset threshold value is exceeded. If the threshold is exceeded, the process proceeds to step S63. If not, the process ends.

  [Step S63] The authentication data receiving unit 210 notifies the cash deposit payment machine 100 that the threshold is exceeded. When the cash deposit machine 100 receives the notification, the cash deposit machine 100 stops functioning and displays a message on the display / input unit 114 requesting that an attendant be called for maintenance.

  The cash deposit machine 100 transmits the device number as the authentication data 500 to the authentication data server 200 in order to specify which terminal the malicious user is using. On the other hand, a malfunction of the cash deposit payment machine 100, in particular, the biometric pattern reader 155 may cause an authentication error. Therefore, the number of abnormal authentication is counted for each terminal by providing a counter corresponding to the terminal number. Then, it can be determined that a terminal in which an authentication abnormality has occurred more than a certain number of times has a possibility of an authentication abnormality due to a machine malfunction.

  FIG. 11 is a flowchart showing the procedure of the multiple authentication process by the personal authentication unit. In the following, the process illustrated in FIG. 11 will be described in order of step number. It should be noted that in the personal authentication in the biometric authentication, the user is authenticated through a plurality of authentication logics, but in this embodiment, the authentication is performed by a three-stage logic.

  [Step S71] The personal authentication unit 130 determines whether or not the authentication logic A is authenticated. If authenticated, the process proceeds to step S72. If not authenticated, the process proceeds to step S76. Here, it is assumed that the authentication logic A is, for example, basic logic such as contour extraction.

  [Step S72] The personal authentication unit 130 determines whether or not the authentication logic B is authenticated. If authenticated, the process proceeds to step S73, and if not authenticated, the process proceeds to step S75. Here, the authentication logic B is, for example, a determination as to whether or not the upper half of the vein pattern 300 is authenticated.

  [Step S73] The personal authentication unit 130 determines whether or not the authentication logic C is authenticated. If authenticated, the process proceeds to step S74, and if not authenticated, the process proceeds to step S75. Here, the authentication logic C is, for example, a determination as to whether or not the lower half of the vein pattern 300 is authenticated.

[Step S74] The personal authentication unit 130 determines that the vein pattern 300 is a legitimate user's vein pattern, and performs authentication.
[Step S75] The personal authentication unit 130 authenticates only a part of the vein pattern 300.

[Step S76] The personal authentication unit 130 does not authenticate the vein pattern 300.
In this way, in the biometric authentication using the vein pattern 300, the authentication data server 200 is connected to the cash deposit payment machine 100. Therefore, the authentication data is the authentication biometric pattern of the user when the authentication is abnormal. It can be stored in the server 200. That is, even when biometric authentication is performed by a malicious user and an authentication error occurs, the biometric pattern of the malicious user is stored in the authentication data server 200 as authentication error data. Therefore, when a malicious user performs biometric authentication again, it becomes clear that any cash deposit payment machine connected to the authentication data server 200 has previously caused an authentication error. By operating such a cash deposit machine system, it is possible to determine whether or not the transaction is due to unauthorized use. It will also help to criminalize unauthorized users.

  In this embodiment, a palm vein pattern is used as biometric information used for biometric authentication. However, the present invention is also applicable to biometric authentication using biometric information such as finger vein patterns, fingerprints, and irises as biometric information. it can.

(Supplementary note 1) In a cash deposit machine system that transmits and receives data through a network,
Biological pattern reading means for reading a user's biological pattern;
Biometric data reading means for reading the user's biometric data stored in the storage means incorporated in the user identification tag;
A personal authentication means for comparing the biometric pattern and the biometric data and performing personal authentication;
A cash deposit payment machine having authentication data transmitting means for transmitting authentication data including the biometric pattern to an authentication data server;
Authentication data receiving means for receiving the authentication data from the cash deposit payment machine;
An authentication data server having authentication anomaly data storage means for storing the authentication data as authentication anomaly data when the identity authentication means determines an authentication anomaly;
A cash deposit machine system comprising:

  (Additional remark 2) When the said biometric pattern contained in the said authentication data is stored as the said authentication abnormality data in the said authentication abnormality data storage means, the said authentication data receiving means is an authentication abnormality by unauthorized use The cash deposit payment machine system according to appendix 1, characterized by:

  (Additional remark 3) The said authentication data receiving means transmits the function stop signal which stops the function of the said cash deposit payment machine with respect to the said cash deposit payment machine with unauthorized use, The cash of Additional remark 2 characterized by the above-mentioned Deposit payment system.

(Additional remark 4) The cash deposit payment machine system of Additional remark 1 characterized by including the cash deposit payment machine identifier for specifying the said cash deposit payment machine in the said authentication data.
(Additional remark 5) The said authentication data receiving means is provided with the counter provided for every said cash deposit payment machine identifier, and when the value of the said counter becomes more than a threshold value, the said cash deposit corresponding to the said cash deposit payment machine identifier The cash deposit payment machine system according to appendix 4, wherein it is determined that the payment machine is out of order.

  (Additional remark 6) The said authentication data receiving means searches whether the said biometric pattern which the said authentication data contains as said authentication abnormal data is stored when the said personal authentication means judges normal authentication, and there exists 3. The cash deposit payment machine system according to appendix 1, wherein the corresponding authentication abnormality data is deleted.

  (Supplementary Note 7) When the personal authentication means performs personal authentication using a plurality of logics, and only part of the authentication is successful, a part of the authentication data indicating that the part is normal authentication is used as the authentication data. The cash deposit payment machine system according to appendix 1, wherein

  (Supplementary Note 8) When the authentication data server receives the authentication data including the partial authentication data when the partial authentication data is stored, the biometric data is re-registered with respect to the cash deposit payment machine. 8. The cash deposit machine system according to appendix 7, wherein a re-registration guidance display request signal for requesting to display guidance prompting is transmitted.

  (Additional remark 9) The said authentication data server is connected with the server where the said authentication abnormality data with which the cash deposit payment machine which is not connected with the said authentication data server is connected are stored, and the said stored The cash deposit disbursement system according to appendix 1, characterized in that it is connected to a common data server to which authentication abnormality data is synchronized.

It is a conceptual diagram of the invention applied to this Embodiment. It is a figure which shows the system configuration example which concerns on this Embodiment. It is a figure which shows the processing function of a cash deposit payment machine and an authentication data server. It is a figure which shows the example of a data structure of an abnormal data table. It is a figure which shows the example of a data structure of an authentication abnormal frequency table. It is a flowchart which shows the procedure of the authentication process by a cash deposit payment machine system. It is a flowchart which shows the procedure of the authentication process by a cash deposit payment machine system. It is a flowchart which shows the procedure of a card data re-registration guidance process. It is a flowchart which shows the procedure of the deletion process of the authentication abnormality database by an authentication data server. It is a flowchart which shows the procedure of the necessity determination process of a maintenance by an authentication data server. It is a flowchart which shows the procedure of the multiple authentication process by a principal authentication part. It is an external view of a cash deposit payment machine. It is a figure which shows the system structural example of a cash deposit payment machine.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Cash deposit payment machine 1a Biometric pattern reading means 1b Card biometric data reading means 1c Personal authentication means 1d Authentication data transmission means 2 Authentication data server 2a Authentication data receiving means 2b Authentication abnormal data storage means 3 Biometric pattern 4 Identification tag 4a Storage means 4b Biometric data 5 Authentication data 10 Network

Claims (5)

In a cash deposit machine system that sends and receives data over a network,
Biological pattern reading means for reading a user's biological pattern;
Biometric data reading means for reading the user's biometric data stored in the storage means incorporated in the user identification tag;
A personal authentication means for comparing the biometric pattern and the biometric data and performing personal authentication;
A cash deposit payment machine having authentication data transmitting means for transmitting authentication data including the biometric pattern to an authentication data server;
Authentication data receiving means for receiving the authentication data from the cash deposit payment machine;
An authentication data server having authentication anomaly data storage means for storing the authentication data as authentication anomaly data when the identity authentication means determines an authentication anomaly;
A cash deposit machine system comprising:   The authentication data receiving means determines that the authentication abnormality is an authentication abnormality due to unauthorized use when the biometric pattern included in the authentication data is stored as the authentication abnormality data in the authentication abnormality data storage means. The cash deposit payment system according to claim 1.   2. The cash deposit machine system according to claim 1, wherein the authentication data includes a cash deposit machine identifier for specifying the cash deposit machine.   The authentication data receiving unit searches whether the biometric pattern included in the authentication data is stored as the authentication abnormality data when the personal authentication unit determines that the authentication is normal, and in some cases, the corresponding data 2. The cash deposit dispenser system according to claim 1, wherein authentication abnormality data is deleted.   When the personal authentication means performs personal authentication using a plurality of logics and only a part of the authentication is authenticated, the authentication data includes a part of the authentication data indicating that a part of the authentication is normal authentication. The cash deposit payment machine system according to claim 1.

Images