JP2007048118A - Automatic teller machine and automatic transaction system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic transaction system capable of ensuring minimum convenience even when denying a person himself as a result of collation by biological characteristic information when a customer uses an ATM to perform a financial transaction. <P>SOLUTION: In the automatic teller machine in which a customer operating part 10 by which a customer who wants a financial transaction inputs transaction information, a storage part 18 for storing a plurality of pieces of amount value information as transaction limited amounts, and a control part 17 for performing first person himself or herself confirmation by operation from the customer operating part 10, continuously performs second person himself or herself confirmation and then executing the financial transaction are arranged, the control part 17 makes a switch to the transaction limited amount stored in the storing part 18 when a result of the second person himself or herself confirmation negates the person himself or herself about the customer. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an automatic transaction apparatus and an automatic transaction system that are installed in a business base of a financial institution and are capable of performing a financial transaction by a customer operation.

In an automatic transaction apparatus (ATM: Automatic Teller Machine) installed in each branch office of a financial institution, a convenience store, a gas station, a supermarket, etc., financial transactions can be made day and night using a cash card. In this financial transaction, especially in the case of transactions involving the payment of money, if a personal identification number consisting of several alphanumeric characters is entered and the personal identification number matches the pre-registered personal identification number, the “customer” What is judged to be widespread.
In addition, recently, in order to prevent fraudulent transactions due to cash card skimming, etc., there are those that memorize the total amount of bills and the number of transactions in payment transactions, and if they exceed the limit amount or number of times, there are those that do not accept payment transactions (For example, refer to Patent Document 1). Furthermore, there is a technique that adopts a technique for confirming the customer himself / herself by biometric matching and sets a transaction limit according to the degree of security (for example, see Patent Document 2). In this technique, a security level is determined by one or a combination of card type (magnetic, non-contact type, contact type), personal identification number, biometric collation, and a transaction amount is determined accordingly.
JP 2002-133332 A JP 2002-288424 A

In the above-described prior art, in order to prevent a transaction in which a personal identification number is illegally obtained and impersonate the customer, the biometric feature information is registered in advance, and the operator's If the similarity rate when the feature information is collected and compared is equal to or greater than a certain value, it is determined as “the person”. Since this biometric feature information is analog data, it becomes a comparison and collation after digitization. Therefore, it may be determined that the biometric feature information is different from pre-registered biometric feature information by an operation when collecting the biometric feature information. is there. In such a case, even a legitimate customer may be refused a desired transaction.
The present invention is based on the result of collation based on biometric feature information when a customer conducts a financial transaction using ATM, and the transaction is not canceled when the person is denied. It is an object of the present invention to provide an automatic transaction system that can ensure the convenience of regular customers by performing transactions.

In order to solve the above-described problems, the present invention provides a customer operation unit in which a customer who wants a financial transaction inputs transaction information, a storage unit that stores a plurality of amount value information as transaction limits, and the customer operation unit In the automatic transaction apparatus which arranged the control part which performs a financial transaction after performing a 1st identity verification by operation and then performing a 2nd identity verification,
The control unit switches to the transaction limit stored in the storage unit when the result of the second identity verification denies the customer.

  The invention of the present application is a case where there is a difference in the collection operation at the time of registration of biometric feature information or at the time of transaction, or a variation occurs on the device side to be collected, and even if it is denied that it is the person in the verification result, Since limited transactions and transaction amounts are allowed, customer convenience is not impaired. In addition, even if there is an illegal transaction, the damage amount can be suppressed.

  Embodiments will be described below with reference to the drawings. 2 is a system conceptual diagram of the automatic transaction system of the present invention, FIG. 3 is a control block diagram of the automatic transaction apparatus of the present invention, and FIG. 4 is a conceptual diagram of the IC cash card of the present invention. In the figure, 1 is an automatic transaction apparatus (hereinafter referred to as ATM), 2 is a host computer managed and maintained by a financial institution, account number, customer name, mobile phone number, unlock password, association for each customer. A storage device 3 is stored in which key keywords, ATM transaction limit information, deposit and saving balance information (hereinafter referred to as balance information), and the like are stored. Further, the storage device 3 stores a personal identification number, transaction history information, etc. in association with the account number as customer information for identifying the customer. Reference numeral 4 denotes a dedicated communication line, which connects a later-described communication control unit of the ATM 1 and the host computer 2.

Reference numeral 5 denotes a portable customer terminal (hereinafter referred to as a mobile phone) owned by a customer, which is composed of a display 5b, an input operation unit 5c and the like in addition to the transmission / reception unit 5a. The cellular phone 5 is in an environment where it can communicate directly or indirectly with the host computer 2 in a wireless manner.
Reference numeral 6 denotes a customer terminal, which is a personal computer owned by the customer (hereinafter referred to as a personal computer) or a multi-function telephone (regardless of wired type or wireless type), which is installed in the home and has a display 6b. And an input operation unit 6c. A communication network 7 connects the host computer 2 and the customer terminal 6, and is configured to be able to transmit and receive financial transaction information to each other via the communication network 7.

Reference numeral 80 denotes a communication antenna embedded in the IC cash card 8 serving as a customer identification medium, and is a part that generates an electromotive force by electromagnetic induction from a card processing unit serving as a medium processing unit to be described later. Reference numeral 81 denotes a controller, which performs various controls by the electric power generated by the antenna 80, and is a microcomputer.
A memory 82 stores various kinds of stored information and can be electrically updated. The controller 81 and the memory 82 are integrated circuits (ICs) and are embedded in the card substrate, but are not limited to the shape and arrangement shown in the figure.

FIG. 4B shows a part of customer information stored in the memory 82 in the IC cash card 8. In this memory 82, customer name information 83, financial institution code, branch code 84, customer account number information 85, and 86 are pre-registered biometric feature information.
In this embodiment, the biometric feature information 86 is described as a palm (palm) vein, and is biometric information unique to a customer and is fixed information that is not updated in principle. 87 is transaction history information which can be rewritten by the controller 81.

  ATM1 can be used for financial transactions by customer operations, specifically deposit and withdrawal transactions, transfer transactions, as well as passbook entry and various notifications. It is installed at financial institution branches, convenience stores, gas stations and supermarkets. The Reference numeral 10 denotes a touch panel as a customer operation unit, which includes a keyboard unit 11 as an input unit configured by a transaction input button or the like for a customer to input a transaction operation, and guidance at the time of the transaction operation. The display unit 12 displays a moving image.

Reference numeral 13 denotes a biometric authentication unit (hereinafter, described as a palm vein recognition unit), which uses the property that hemoglobin in the blood flowing inside the customer's palm absorbs near-infrared light, and a portion that appears dark as a blood vessel pattern A feature point such as a reading point or a branch point is extracted, and the position information is generated as digital feature data as biological feature information (hereinafter referred to as biological information). The biometric authentication unit 13 is arranged side by side with the touch panel 10 so that the customer can easily operate.
Note that biometric authentication based on biometric information (biometrics) methods include palm (palm) veins, finger veins, fingerprints, irises, retinas, faces, voices, signatures, and even DNA, but in this embodiment, Although an example using a palm (palm) vein is described as an example, it is not particularly limited.

  Reference numeral 14 denotes a card processing unit serving as a medium processing unit, which wirelessly communicates information reading and writing in a memory 82 in which customer information such as customer name information 83, financial institution code, branch code 84, and account number information 85 is stored. Perform by method. And it has a function to confirm the existence of the IC cash card 8, authentication, reading, determination, writing, writing, etc. instantaneously (approximately 0.2 seconds), specifically, customer information or registered The biometric feature information 86 and the like are read out. The IC cash card 8 is inserted through the card insertion / return port connected to the front side of the card processing unit 14 and returned when the transaction ends.

Reference numeral 15 denotes a statement slip processing unit, which prints the contents of a transaction result and performs a print issuance process for a transaction statement slip (receipt) issued to a customer according to a procedure described later.
Reference numeral 16 denotes a money deposit / withdrawal unit for authenticating and counting the money deposited by the customer, transporting it and storing it in a money storage vault (not shown), or paying out the money paid to the customer from the money vault. It is transported to the withdrawal port. It should be noted that the money that has been paid from the money storage safe and temporarily accumulated in the withdrawal port can be taken out by the customer by opening a shutter (not shown).

Reference numeral 17 denotes a control unit that controls the above-described units. Reference numeral 18 denotes a storage unit that stores a plurality of pieces of money value information as transaction limit amounts, and performs operation control of the respective units by a stored processing program. The plural amount value information is, for example, “2 million yen” as the maximum value of transaction limit by ATM, “1 million yen” as the intermediate value, and “3000 yen” as the minimum value.
Furthermore, it also has a communication control unit 19 that is a connection port with the host computer 2. In addition, in order to provide the function of ATM1, in addition to a power supply unit that supplies power to each unit, a function for detecting the approach of the customer to ATM1 and various functions and configurations are provided. Description is omitted because it is not related. In addition, the pre-registered biometric feature information 86 is stored in the memory 82, but may be stored on the storage unit 18 or the storage device 3 side. Further, the limit amount information may be stored in the storage unit 18 in the ATM 1 instead of in the storage device 3.

  The case of conducting a money withdrawal transaction using an IC cash card will be described with reference to the flowchart of the automatic transaction apparatus in the first embodiment of the present invention shown in FIG. 1 and the screen display example of the automatic transaction apparatus shown in FIG. It is assumed that the transaction limit amount by ATM for this customer is already set to “1 million yen”, and this limit amount information is stored in the storage device. In addition, in this financial transaction, the customer wants a withdrawal transaction of “2 million yen”. Note that S means an operation step.

S1. When the customer approaches ATM1, an approach detector (not shown) detects this, and the control unit 17 displays a transaction selection screen on the touch panel 10 by the processing program stored in the storage unit 18 and enters the input valid mode.
In the following description, it is assumed that the keyboard unit 11 detects an input by touching the surface of an operation button (also referred to as a key) displayed on the display unit 12 because of a touch panel type.
S2. When the customer selects the “payment” operation button on the transaction selection screen (not shown) of the touch panel 10, the touch panel 10 detects the finger touch position, and the control unit 17 controls the card processing unit 14, the money deposit / withdrawal unit 16 and the like. Set to withdrawal transaction mode.
On the other hand, “Please insert card” is displayed on the touch panel 10.

S3. When the customer inserts the IC cash card 8 from the card insertion / return port, the IC cash card 8 is taken into the card processing unit 14 and the stored customer information (financial institution code 84 and account number 85) is read. If the IC cash card 8 is inserted prior to the transaction selection operation, the control unit 17 takes the inserted IC cash card 8 into the card processing unit 14 and reads the stored information.
S4. Subsequently, “Please enter your password” is displayed on the touch panel 10 to prompt the user to input the password with the number of digits determined for each customer for the first identity verification. The customer touches the touch panel 10 with a password using the password numeric keypad.

S5. The control unit 17 transmits the input personal identification number information and customer (account) information to the host computer 2. The host computer 2 compares the account number and personal identification number information in the storage device 3, and if they match, the transaction limit (a million yen in this embodiment) and balance information are sent to the ATM 1 together with a transaction progress permission signal. Send back.
If the password does not match, a transaction impossible signal is returned, and the control unit 17 displays on the touch panel 10 "The password is different, please enter the password again" and requests re-input. Here, even if re-input is performed a predetermined number of times, a mismatch may occur, but the description is omitted. In addition to the personal identification number, confirmation of whether or not to cancel the transaction, balance information, and the like are performed, and it is also determined whether or not the customer (account) information can be traded.

S6. When the control unit 17 receives from the host computer 2 a signal indicating that the transaction is possible, balance information, etc., the control unit 17 displays a screen requesting input of the desired withdrawal amount as shown in FIG. However, at this time, the amount in the amount display frame 120 is not displayed.
The customer inputs a desired withdrawal amount using the amount numeric keypad 121. In order to withdraw 2 million yen, touch the “2” button and “0” button of the amount keypad 121 twice, then touch the “10,000” button, and finally click the “Confirm” button 123. Touch it. In this way, various buttons 121 to 123 of the touch panel 10 are operated to input a desired amount of withdrawal (withdrawal).

S7. The controller 17 first determines whether or not a transaction is possible from the balance information for the input withdrawal amount (2 million yen), and returns a response to the host computer 2 if the transaction is possible. The host computer 2 sets a flag indicating that the account transaction with the customer is in progress.
S8. The control unit 17 compares the desired withdrawal amount (2 million yen) input by the customer with the received transaction limit value (1 million yen). Although it progresses to S15, since it is a desired withdrawal amount value (2 million yen) in a present Example, it progresses to the following step S9.

S9. As shown in FIG. 5 (b), since the transaction exceeds the transaction limit, the control unit 17 displays a screen to the effect that the transaction can be performed by further authenticating the person by biometric authentication. The identity verification by this biometric authentication is the second identity verification.
S10. The customer touches the “to biometric authentication” button 125 on this screen when performing identity verification by biometric authentication. When the “Cancel” button 126 is touched, the screen display shown in FIG. 5A is restored and the withdrawal amount is re-inputted.
When the “to biometric authentication” button 125 is touched, the control unit 17 activates the biometric authentication unit 13 and guides a screen for a site to read the palm vein.

S11. The customer holds the palm over the biometric authentication unit 13. The control unit 17 collects vein information from the palm in a predetermined procedure. Since the collection timing is not related to the present invention, the description is omitted.
It is determined that the collected biological (palm vein) information has a predetermined amount of data that can be used, and if it is satisfactory as digital data, the process proceeds to the next step. If the digital data is defective, the sampling is automatically executed again. At this time, when it is estimated that the customer does not extend the palm, a word of caution is displayed on the touch panel 10.

S12. When the control unit 17 transmits the collected biometric information (digital data) to the IC cash card 8, the controller 81 of the IC cash card 8 receives the biometric feature information 86 in which the received biometric information is stored in the memory 82 in advance. And match. When it does not match the biometric feature information 86 stored in the memory 82, the process proceeds to the next step. If they match, the process proceeds to step S15 described later.
Needless to say, due to the nature of biometric information, the term “perfect match” means that there is no complete match, and that the feature points match or the similarity is extremely high, “match = customer”.

S13. When the control unit 17 receives the determination that the biometric information stored in the memory 82 does not match, the control unit 17 determines that the second identity cannot be confirmed, and notifies that the desired withdrawal amount is to be corrected. In this embodiment, it is displayed as “3000 yen” as shown in FIG.
S14. If the customer approves with the withdrawal of 3000 yen from the screen display shown in FIG. 5C, the “confirm” button 123 is touched. When the “correction” button 122 is touched, the biometric information is re-collected and collated after returning to the biometric information collection guidance, and if it is determined that the identity cannot be confirmed even after the re-collation, the following will be described. The process proceeds to step S19.

S15. The control unit 17 operates the money depositing / withdrawing unit 16 in accordance with the desired withdrawal amount, pays out a predetermined number of moneys, and conveys them to the withdrawal port. At this time, since the shutter is in a closed state, it is impossible to visually check or withdraw money.
Subsequently, the control unit 17 controls the statement slip processing unit 15 to print a transaction statement slip (receipt) and convey it to the discharge port.
In parallel with the transaction statement slip printing operation, the transaction history information 87 is recorded and updated in the IC cash card 8 and then conveyed to the card insertion / return port. On the other hand, “Please remove the card” is displayed on the touch panel 10.

S16. The control unit 17 monitors whether the customer extracts the IC cash card 8 and the transaction slip (receipt). If the customer does not remove these media during this monitoring time, it is processed as “medium forgetting”, but the description is omitted.
S17. When a detector (not shown) detects that the IC cash card 8 and the transaction slip (receipt) have been extracted, the shutter is opened. This makes it possible to take out the money accumulated in the withdrawal port and withdraw it to the customer.
When money is extracted, this is detected and the shutter is returned to the closed state. If there is a residue at the withdrawal port, it is assumed that a part of the money has been removed, and a screen prompting confirmation is displayed on the touch panel 10.

S18. When detecting the completion of the closing operation of the shutter, the control unit 17 transmits a signal indicating the end of the transaction to the host computer 2.
The host computer 2 updates at least the balance amount and transaction limit information (3,000 yen) among the customer information in the storage device 3 and ends the transaction. If the desired withdrawal amount is within the limit in step S8, the process proceeds to step S15. If the identity is obtained from the biometric information as the second identity confirmation in step S12, the transaction limit information is updated. Needless to say, it will not be done, ie it will remain “1 million”.
S19. Transport the IC cash card 8 to the card insertion return slot. On the other hand, the touch panel 10 displays “I can't make a transaction, so I'll give you a card”.
The control unit 17 monitors the removal of the IC cash card 8 by the customer. If the customer does not remove these media during this monitoring time, it is processed as “medium forgetting”, but the description is omitted.

  Although the above explanation has been made with reference to a withdrawal transaction, the present invention is not limited to this. In other words, the present invention can be applied to a transfer transaction or a charge transaction for electronic money. Also, it is possible to confirm the identity of the person with biometric information only when withdrawing the amount exceeding the transaction limit, and raise the transaction limit (1 million yen in this example) to the transaction limit (2 million yen) as an ATM if the identity can be confirmed. it can. In particular, it may be executed when the transaction limit is set to a low amount (for example, 3000 yen) by the previous transaction. Although the biometric feature information has been described as being stored in the IC cash card, it goes without saying that it may be stored in a storage device and collated on the host computer side.

FIG. 6 is a flowchart showing an operation for canceling the setting of limit amount information, and FIGS. 7 and 8 are explanatory diagrams showing examples of display screens of a customer terminal (mobile phone). In the second embodiment, the setting cancellation operation is performed before the transaction limit information is updated in step S18 of the first embodiment.
S21. When the host computer 2 receives a signal indicating the end of the transaction from the ATM 1, the host computer 2 dials a customer terminal device (hereinafter referred to as a mobile phone device) 5 held by the customer stored in association with the customer account information in advance. To do.

S22. When the communication line with the cellular phone 5 is connected, the host computer 2 transmits screen information as "ATM transaction limit update service", and first displays a guidance display 511 as shown in FIG. This is performed on the display 5b.
S23. When the customer agrees to change the transaction limit, the input operation unit 5c is used to disconnect the communication line. Thereafter, the process proceeds to step S29, but the transaction limit is updated by this operation.

S24. The customer who does not wish to change the transaction limit amount inputs the required items from the input operation unit 5c according to the display screen of the display 5b. The customer inputs the current transaction place in the input frame 512 shown in FIG. Thereafter, the display is scrolled from the input operation unit 5 c with reference to the scroll display 513, and the current withdrawal (withdrawal) amount (3,000 yen) is input to the input frame 514.
It may be possible to input the withdrawal location by displaying a financial institution code or a branch code on the display unit 12 of the ATM 1 or the like and taking the time to confirm it visually.
S25. When the current transaction information is input in this way, it is transmitted from the transmission / reception unit 5a to the host computer 2. The host computer 2 collates the received input information with information held in the customer account transaction. If they match, the process proceeds to the next step, and if they do not match, the process proceeds to step S29.

S26. The host computer 2 that has determined that it matches the information in the customer account transaction transmits the screen information and the associative keyword information to the mobile phone 5 for the display shown in FIG. As shown in the figure, the customer inputs the password PW for cancellation into the input frame 515 from the input operation unit 5c. This password PW is stored in advance for each customer in the storage device 3 for canceling the setting, and may be a number or may be converted into English, hiragana or kanji.
S27. The input password PW is transmitted to the host computer 2 and collated with the release password stored in the storage device 3. The transaction information and password PW are transmitted in encrypted form, and security is ensured by decrypting them on the host computer 2 side.

S28. If the passwords PW do not match, the fact is transmitted to the mobile phone 5. The customer can operate the input operation unit 5c so that the password PW is re-input and collated again. If they do not match even in this way, the process proceeds to the next step.
S29. The host computer 2 receives the operation end signal from the transmission / reception unit 5a (this signal is handled in the same way even when the operation is disconnected from the input operation unit 5c), and is stored in the storage device 3. Update transaction limit information. For example, the transaction limit of 1 million yen is updated to 3000 yen. Transactions can be canceled by prior arrangement.

S30. When the update of the transaction limit information is completed, the host computer 2 transmits a signal indicating the end of the process to the mobile phone 5 to disconnect the line.
When the passwords PW match in step S27, the host computer 2 transmits screen information as shown in FIG. 8C to the mobile phone 5 without updating the transaction limit information. In this way, it is possible to prevent the limit amount from being updated to a lower amount by an operation from the mobile phone 5. Further, as shown in FIG. 8 (a), when inputting the password PW, a word or the like reminiscent of the cancellation password is displayed, so that erroneous input can be reduced. When associating the password for cancellation, voice output may be used in addition to displaying the password.

As described above, the transaction limit is updated to a low amount when the identity cannot be confirmed by the biometric information. In addition, it is possible to prevent the transaction limit at the time of the next transaction from being lowered by an operation from the mobile phone, which is useful for customers who frequently use transactions in a relatively short period of time.
Although the cellular phone and the host computer are connected by a communication line, they may be directly transmitted / received by infrared communication as long as both have an infrared communication function.

Next, a case where a setting cancellation operation is performed by operating a customer terminal (personal computer) as a modification of the second embodiment will be described. FIG. 9 is a flowchart of the setting release operation from the customer terminal (personal computer), and FIG. 10 is an explanatory diagram showing a display screen example of the customer terminal (personal computer).
In the second embodiment, in the second embodiment, the transaction limit is updated (low price) in the mobile phone to prevent a large amount of withdrawal, and the customer himself updates the transaction limit to the predetermined transaction limit immediately before the next transaction (returns to the high price). )

S31. The customer operates, for example, a customer terminal (which may be a mobile phone or a multi-function phone, but will be described as a personal computer hereinafter) 6 from home or the like, and connects to the financial institution via the communication network 7 Perform the operation. It is assumed that the customer knows the connection method in advance from a manual or the like and has registered a connection password and the like in advance.
S32. Screen information for line connection is prepared in the host computer 2, and a customer account number input frame 601 and a password input frame 602 are displayed on the display unit 6b of the personal computer 6 (not shown).
S33. When the customer inputs to the input frames 601 and 602 and performs a transmission operation, the data is transmitted to the host computer 2 via the network 7.

S34. The host computer 2 confirms transaction limit information in ATM from the received account number and password. That is, the value of the limit amount at the time when the final transaction of the corresponding customer account number is performed is read, and for example, it is determined whether or not the maximum value can be reset.
S35. If the host computer 2 is an account for which a limit amount can be set, the current amount information frame 603 (3000 yen in the figure) and the maximum amount frame that can be updated as the setting information as shown in FIG. 604 is displayed and an input to the limit amount frame 604 is requested. It is also possible to display a maximum value of 2 million yen as the default value.

S36. When the host computer 2 receives the limit information input in the limit amount frame 604, the new transaction limit is equal to or less than the maximum transaction limit (2 million yen) determined in advance. It will be updated to the forehead. Needless to say, the maximum amount is not required to be 2 million yen, and if 500,000 yen or 1 million yen is input according to the customer's intention, it is needless to say.
S37. In step S34, if the transaction limit at the time when the final transaction is performed is the upper limit of the transaction limit in ATM, it is notified that the withdrawal limit change process is unnecessary. In step S36, if the transaction limit is a predetermined maximum amount (2 million yen) or more, a display requesting correction input is performed.

S38. The host computer 2 updates the transaction limit information of the customer account. For example, if it is updated to 500,000 yen, when a transaction after this point occurs, the transaction is induced as a transaction limit (500,000 yen) without obtaining confirmation by biometric information.
S39. The personal computer 6 displays the received transaction limit update result. Thereafter, if the customer disconnects the communication line, the setting release operation is completed. When the customer performs a termination operation on the personal computer 6, the communication network 7 is disconnected.

  As described above, when the identity cannot be confirmed by the biometric information during the financial transaction, the transaction limit can be kept lowered and the transaction limit can be restored immediately before the next transaction. Or, since it can be set to the required amount value, even if transactions are performed between the previous transaction and the current transaction, only low-value transactions are allowed, so even if illegal transactions are performed, damage will be reduced Can be suppressed.

Embodiment 3 will be described with reference to the flowchart in the automatic transaction apparatus shown in FIG.
In the first embodiment, the transaction limit amount is switched based on the result of the authentication of the biometric information at the time of transaction by the automatic transaction apparatus (ATM). In the third embodiment, the transaction limit amount to be switched is set stepwise by the similarity rate of the biometric information. It is.
The memory 82 of the IC cash card 8 used in the third embodiment has stored data as shown in FIG. As shown in the figure, the memory 82 stores transaction restriction information 88 and a biometric information comparison program 89.

As shown in Table 1, the transaction restriction information 88 is divided into 8 levels from level 0 to level 7. Level 0 (zero) allows transactions up to “2 million yen”, which is the maximum transaction limit by ATM. The result of collation by biometric information is assumed to be a similarity rate of 98% or more, and the number of transactions is limited. There is no. Level 7 is the limit for transactions with ATMs up to “3,000 yen”. The result of collation by biometric information is a case where the similarity rate is less than 85%. Limited to 10 times. The number of transactions and the transaction limit are described as being limited by the similarity ratio, but only the limit may be set according to each level according to the similarity ratio, or only the number of transactions according to each level. May be set.
Table 1 shows examples of transaction restrictions based on the above levels.

  The biometric information comparison program 89 takes in biometric information collected from the customer, digitizes it, compares it with the biometric feature information 86 in the memory 82, calculates its similarity, and a level value corresponding to the similarity Determine (0-7). A predetermined transaction limit and the number of transactions are determined corresponding to the determined level. For example, if the similarity rate is 97%, it corresponds to level 1, the transaction limit is 1 million yen, and the number of transactions is 1 time / month is stored in the transaction limit information 88 in the memory 82. Become. In the transaction limit information 88, the limit amount and the number of transactions may be stored as they are, but may be stored as a level value, and the limit amount corresponding to the level may be searched and limited during processing.

When the customer approaches ATM1, an approach detector (not shown) detects this, and the transaction is started. From the operation corresponding to step S8, the process proceeds from step S1 to step S7 described in the first embodiment. explain.
S41. The control unit 17 reads and compares the desired withdrawal amount (2 million yen) input by the customer and the transaction limit information (1 million yen) from the transaction limit information 88 in the memory 82, and compares it with the amount less than the transaction limit. Sometimes, the process proceeds to step S49, which will be described later, but since it is the desired withdrawal (withdrawal) amount value (2 million yen) in this embodiment, the process proceeds to the next step S42.

S42. As shown in FIG. 5 (b), the control unit 17 displays a screen to the effect that the transaction can be performed by performing biometric authentication and further confirming the identity because the transaction exceeds the transaction limit amount. The identity verification by biometric authentication is the second identity verification as described above.
S43. When the customer confirms the identity by biometric authentication, the customer presses the “to biometric” button 125 on this screen. When the “Cancel” button 126 is touched, the screen display shown in FIG. 5A is restored and the withdrawal amount is re-inputted.
When the “to biometric authentication” button 125 is touched, the control unit 17 activates the biometric authentication unit 13 and guides a screen for a site to read the palm vein.

  S44. When the customer holds the palm over the biometric authentication unit 13, the control unit 17 collects vein information from the palm in a predetermined procedure. It is determined that the collected biological (palm vein) information has a predetermined amount of data that can be used, and if it is satisfactory as digital data, the process proceeds to the next step. If the digital data is defective, the sampling is automatically executed again. At this time, when it is estimated that the customer does not extend the palm, the caution wording is displayed on the touch panel 10 as described above.

  S45. When the control unit 17 transmits the collected biological information (digital data) to the controller 81, the controller 81 compares the received biological information with the biological characteristic information 86 stored in the memory 82 in advance. This comparison process is performed by the biometric information comparison program 89, and the similarity rate is output. In addition, although it judges that it is closer to the person as the similarity rate is higher, the result of the similarity rate of 100% is not output from the feature of biometric information, and in this embodiment, it is denied that the person is less than 85%. To do. For example, if the similarity is 97%, the process proceeds to step S46. Also, since the degree of similarity is extremely high (98% or higher), if it is determined that the person is the person, the process proceeds to step S49 described later.

S46. The controller 81 determines the level from the output similarity rate and determines the limit amount. For example, in the setting shown in Table 1, if the similarity rate is 94%, it corresponds to “level 2”, and the limit amount is set to 500,000 yen.
S47. When the controller 81 transmits the transaction limit amount information to the control unit 17, the control unit 17 displays on the touch panel 10 that the identity cannot be confirmed and that the transaction amount is to be corrected. This display example is shown in FIG. 12, and is displayed as “500,000 yen” in this embodiment.
S48. When the customer approves with the withdrawal of 500,000 yen from the screen display shown in FIG. 12, the “confirm” button 123 is touched. When the “correction” button 122 is touched, the biometric information is re-collected and collated after returning to the biometric information collection guidance, and the same processing as described above is performed. Note that, when the similarity is low even after sampling and collation again, and a low price is set, the window guidance display 126 shown in FIG. 12 is performed.

S49. The control unit 17 operates the money deposit / withdrawal unit 16 in accordance with the desired withdrawal amount, pays out a predetermined number of moneys, and conveys them to the withdrawal port. At this time, since the shutter is in a closed state, it is impossible to visually check or withdraw money.
Subsequently, the control unit 17 controls the statement slip processing unit 15 to print a transaction statement slip (receipt) and convey it to the discharge port.
S50. In parallel with the transaction statement printing operation, the transaction history information 87, the transaction limit information 88 and the transaction count in the memory 82 are counted up and updated. When this update is completed, the IC cash card 8 is also transported to the card insertion / return port. On the other hand, the display unit 12 displays “Please take out the card”.

S51. The control unit 17 monitors whether the customer extracts the IC cash card 8 and the transaction slip (receipt). If the customer does not remove these media during this monitoring time, it is processed as “medium forgetting”, but the description is omitted.
S52. When a detector (not shown) detects that the IC cash card 8 and the transaction slip (receipt) have been extracted, the shutter is opened. This makes it possible to take out the money accumulated in the withdrawal port and withdraw it to the customer.
When money is extracted, this is detected and the shutter is returned to the closed state. When there is a residue at the withdrawal port, it is assumed that a part of the money has been removed and a screen for prompting confirmation is displayed on the display unit 12.

S53. When detecting the completion of the shutter closing operation, the control unit 17 transmits a signal indicating the end of the transaction to the host computer 2.
The host computer 2 updates at least the balance amount and the transaction history information among the customer information in the storage device 3 and ends the transaction. Note that information regarding transaction restrictions may be stored on the storage device 3 side.
S54. Transport the IC cash card 8 to the card insertion return slot. On the other hand, the touch panel 10 displays “I can't make a transaction, so I'll give you a card”.
The control unit 17 monitors the removal of the IC cash card 8 by the customer. If the customer does not remove these media during this monitoring time, it is processed as “medium forgetting”.

  As described above, because of the feature of biometric information collation, transaction restrictions can be determined in stages according to the similarity rate, so when collecting biometric information, we respond with great care. The recognition rate is expected to improve. In addition, even if the transaction limit is reduced in the biometric information matching result at the previous transaction, if the similarity rate in this transaction is high, the transaction limit will also be increased. Disappears.

  The technical idea of the present invention is not limited to limiting the transaction limit amount. For example, it is possible to limit the time zone to be used, limit the accumulated transaction amount, and limit only the withdrawal transaction as a transaction item, not to mention the number of transactions.

It is a flowchart of the automatic transaction apparatus in Example 1 of this invention. It is a system conceptual diagram of the automatic transaction system of this invention. It is a control block diagram of the automatic transaction apparatus of this invention. It is a conceptual diagram which shows the IC cash card of this invention. It is explanatory drawing which shows the example of a screen display of the automatic transaction apparatus of this invention. It is a flowchart which shows the setting cancellation | release operation of limit amount information in Example 2 of this invention. It is explanatory drawing (1) which shows the example of a display screen of the mobile telephone of Example 2 of this invention. It is explanatory drawing (2) which shows the example of a display screen of the mobile telephone of Example 2 of this invention. It is a flowchart which shows the setting cancellation | release operation in the modification of Example 2 of this invention. It is explanatory drawing which shows the example of a screen display of the personal computer in the modification of Example 2 of this invention. It is a flowchart of the automatic transaction apparatus in Example 3 of this invention. It is explanatory drawing which shows the example of a screen display of the automatic transaction apparatus of Example 3 of this invention.

Explanation of symbols

1 Automatic transaction equipment (ATM)
2 Host computer 3 Storage device 5 Customer terminal (mobile phone, personal computer)
8 IC cash card 10 Customer operation unit (touch panel)
11 Keyboard Unit 12 Display Unit 13 Biometric Authentication Unit 14 Medium Processing Unit (Card Processing Unit)
17 Control unit 18 Storage unit

Claims (11)

A customer operation unit for a customer who wants a financial transaction to input transaction information;
A storage unit storing a plurality of amount value information as transaction limits;
In the automatic transaction apparatus in which the first identity verification is performed by the operation from the customer operation unit, and then the control unit for executing the financial transaction is performed after performing the second identity verification,
The controller is
When the result of the second identity verification denies the customer, the automatic transaction apparatus switches to the transaction limit amount stored in the storage unit. The automatic transaction apparatus according to claim 1,
In the customer operation unit,
An input unit for inputting a personal identification number for the first identity verification;
An automatic transaction apparatus provided with a biometric authentication unit for collecting biometric feature information for the second identity verification. The automatic transaction apparatus according to claim 1,
An automatic transaction apparatus for notifying that a financial transaction is restricted after the transaction limit is switched. The automatic transaction apparatus according to claim 1,
Instead of switching the transaction limit amount, an automatic transaction apparatus that limits the number of subsequent transactions. A customer operation unit for a customer who wants a financial transaction to input transaction information;
A storage unit storing a plurality of amount value information as transaction limits;
In the automatic transaction apparatus having a biometric authentication unit for collecting biometric feature information for confirmation of the customer himself,
A medium processing unit for reading out the biometric feature information from a customer identification medium in which the biometric feature information of the customer is stored in advance,
An automatic transaction apparatus that compares biometric feature information collected by the biometric authentication unit and biometric feature information read from a customer identification medium, and determines a transaction limit based on the similarity. The automatic transaction apparatus according to claim 5,
From the comparison result of the biometric feature information, the transaction limit is determined based on the similarity rate on the customer identification medium side. The automatic transaction apparatus according to claim 5,
From the comparison result of the biometric feature information, when the similarity rate is equal to or higher than a specified value, the person is determined to be the upper limit value of the transaction limit, and when the similarity rate is equal to or lower than the specified value, it is determined stepwise according to the value of the similarity rate. Automatic transaction device. An automatic transaction apparatus according to claim 1;
A customer terminal having an input unit and a display unit;
In order to conduct financial transactions, in an automatic transaction system in which a host device that stores and manages transaction information for each customer account is connected via a communication line.
The host device is
An automatic transaction system for notifying the customer terminal device before the transaction limit is switched, and providing operation guidance for returning the transaction limit. In the automatic transaction system according to claim 8, in order to return the transaction limit amount by operating the customer terminal,
Enter the transaction information about the transaction and the password to confirm the customer,
An automatic transaction system when the host device determines that the input information is valid. The automatic transaction system according to claim 9, wherein the customer terminal is guided to associate the password. An automatic transaction apparatus according to claim 1;
A customer terminal maintained and managed by the customer;
In an automatic transaction system with a line connection to a host device that stores and manages transaction information for each customer account in order to conduct financial transactions,
An automatic transaction system, wherein the transaction restriction in the automatic transaction apparatus can be released from the customer terminal.

Images