JP2007087316A - Automatic transaction device and automatic transaction system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To detect a suspicious act where a person uses different cards to perform a transaction with the same automatic transaction device, and thereby suppress an illicit transaction. <P>SOLUTION: When a payout transaction is selected by a customer through operation of the input means, account information is read by the card read/write part 5 while face identification information created by a control part 7 from an image taken with a camera 2 is collated with biological information at the previous payout transaction stored in the face identification information area, and, if the collated information match, then the account information read by the card read/write part is collated with the account information at the time of the previous payout transaction stored in the face information identification area. Then, if these account information match, an alarm notification is transmitted to a monitoring device 12. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an automatic transaction apparatus operated by a customer, and an automatic transaction system including the automatic transaction apparatus, a host apparatus, and a monitoring apparatus, and in particular, an automatic transaction apparatus and an automatic transaction capable of preventing unauthorized payment transactions. It is about the system.

In recent years, in Japan, there have been many crimes in which someone who is not related to an account holder uses a counterfeit cash card (hereinafter referred to as a counterfeit card) to withdraw illegal cash from automatic transaction devices such as ATMs and CDs. It is a problem.
Such cash fraudulent withdrawal means that the account information recorded on the magnetic stripe provided on the depositor's cash card is acquired by another person using a method called skimming, and the customer who is usually the account holder. It is supposed to happen when a secret number that can only be known is stolen from behind at the time of transaction, or is taken with a hidden camera.

Since the magnetic stripe of a cash card can be forged relatively easily with a certain level of expertise, it is possible to easily withdraw a deposit at an ATM by impersonating the customer and using a forged card and PIN. .
As a countermeasure for preventing such crimes, conventionally, a method has been proposed in which it is difficult to forge a card by converting the cash card into an IC card.

However, since an IC card is not sufficient, in order to prevent others from impersonating the customer, for example, a vein pattern (biological information) of a customer's finger is acquired as a means of identity verification that changes to a personal identification number. There has been proposed a personal authentication device that compares the acquired vein pattern with a previously registered vein pattern to identify whether or not the person is the person (for example, see Patent Document 1).
JP 2001-184507 (paragraphs “0009” to “0014”, FIGS. 1 and 4)

However, although the above-described conventional personal authentication technology using biometric information has already been introduced into ATMs of some financial institutions, it has not yet been implemented for all customers. There is a problem that there is a high possibility of illegal withdrawal.
One of the features of fraudulent withdrawal using counterfeit cards is that one fraudulent user withdraws deposits using multiple counterfeit cards in a single ATM, and different ATMs in the same store or different It is difficult to suppress fraudulent withdrawal by counterfeit cards with current automatic transaction devices or automatic transaction systems that can be used with cash cards with magnetic stripes. The fact is.

  An object of the present invention is to solve such a problem.

  Therefore, the present invention has an input means and a card reading means, and in an automatic transaction apparatus for performing a transaction by a customer's operation, a biometric information acquisition means for acquiring biometric information of a customer who makes a transaction with the automatic transaction apparatus, Biometric information storage means for storing the biometric information acquired by the biometric information acquisition means at the time of payment transaction together with the account information acquired from the customer's card, when the customer selects the payment transaction by operating the input means, Account information is read from the customer's card by the card reading means, the customer's biological information is acquired by the biological information acquisition means, and the acquired biological information is collated with the biological information stored in the biological information storage means. If they match, the account information read by the card reading means is checked against the account information stored in the biometric information storage means. And transmitting a notification of alarm viewing device.

  Further, the present invention is an automatic transaction system comprising a plurality of automatic transaction apparatuses that have input means and card reading means and perform transactions by customer operations, and a host device to which the plurality of automatic transaction apparatuses are connected. Each automatic transaction apparatus is provided with biometric information acquisition means for acquiring biometric information of a customer who makes a transaction, and the biometric information acquired by the biometric information acquisition means of each automatic transaction apparatus is associated with the account information of each customer. When the customer operates the input means of the automatic transaction apparatus and selects a transaction involving funds transfer from an account, the account information is read from the customer's card by the card reading means, and the biometric information is stored in the storage means. The biometric information of the customer is acquired by the acquisition means, the biometric information is acquired from the host device based on the account information, and the biometric information of the customer is referenced by the biometric information acquisition means. And, if they do not coincide and transmits a notification of the alarm to the monitoring device.

  According to the former invention described above, the biological information storage means for storing the biological information acquired by the biological information acquisition means at the time of the previous payment transaction together with the account information acquired from the customer's card in the automatic transaction apparatus is provided. It is possible to monitor whether or not the same person is going to conduct a transaction using a different card with the same automatic transaction device using the account information obtained from the customer's card as biometric information stored in the information storage means Therefore, since it is possible to detect a suspicious act in which the same person attempts to conduct a transaction using different cards with the same automatic transaction apparatus, an effect of suppressing unauthorized transactions can be obtained.

  In the latter invention, face identification information created on the basis of a customer image taken with a camera provided in the automatic transaction apparatus is registered in the database of the host apparatus in correspondence with the account information, and ATM is used at the time of payment transaction. Face identification information is created based on a customer image taken by a camera, and face identification information is acquired from the host device. If both face identification information does not match, an alarm notification is transmitted to the monitoring device. Therefore, even if a person who intends to make an unauthorized withdrawal moves to a different automatic transaction apparatus in the same store or an automatic transaction apparatus in another store and tries to withdraw a deposit, the act is detected and an unauthorized withdrawal is made. The effect that it can suppress is acquired.

  Further, in the third embodiment, even if the customer who is the account holder does not register the face identification information at the store of the financial institution, the face identification information is automatically registered in the database of the host computer at the time of ATM transaction. Therefore, it is possible to save the trouble of both the financial institution and the customer.

  Embodiments of an automatic transaction apparatus and an automatic transaction system according to the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram showing a system configuration common to the embodiments.
In the figure, reference numeral 1 is an automatic transaction apparatus (hereinafter referred to as ATM) installed in a sales office or convenience store of a financial institution such as a bank, 11 is a host computer (high-order apparatus) provided in the center of the financial institution, and 12 is a monitoring center. In the monitoring apparatus provided, a plurality of ATMs 1 are connected to the host computer 11 and the monitoring apparatus 12 via a communication line 13.

Each ATM 1 includes a camera 2, an input unit (input unit) 3, a display unit (display unit) 4, a card read / write unit 5, a cash acquisition unit 6, a control unit (control unit) 7, a storage unit 8, and a communication unit 9. , And a passbook entry machine, a receipt printer, etc. (not shown).
The camera 2 captures a face image of a customer who uses the ATM 1 and is arranged at a moderate height.

  The input unit 3 and the display unit 4 are provided even when exposed on the customer service surface in front of the ATM 1, and the input unit 3 is a touch panel disposed on the display unit 4 such as a CRT display or a liquid crystal display with the display surface facing upward. Used to display a screen with messages for guiding customer operations on the display unit 4 and various input keys. By pressing the input keys with a finger on the touch panel, information defined in the input keys is input. The display unit 4 can also display the input information.

The card read / write unit 5 has a function as a card reading means for reading information on a magnetic stripe provided on a customer's card and a card writing means for writing, and the card insertion / return port serves as the customer service surface. Is provided.
The cash deposit / withdrawal unit 6 performs a cash deposit / withdrawal process associated with the transaction, and includes a banknote deposit / withdrawal machine that handles banknotes and a coin deposit / withdrawal machine that handles coins. It is provided on the customer service surface.

The control unit 7 has a function of performing various transactions by controlling the input unit 3, the display unit 4, the card read / write unit 5, the cash deposit / withdrawal unit 6 and the like based on a control program stored in the storage unit 8. In order to carry out this, it communicates with the host computer 11 via the communication unit 9 to exchange necessary information.
In addition, the control unit 7 transmits the operating status of the ATM 1 to the monitoring device 12 via the communication unit. In the present invention, the camera 3 is used to photograph a customer's face at the time of payment transaction, and feature extraction is performed from the acquired face image. Functions as biometric information acquisition means for creating (acquiring) face identification information (biometric information) and storing the created face identification information together with account information in an identification information storage area, which will be described later, A function of comparing and checking information with face identification information based on the face image acquired in the previous transaction performed by the ATM 1 and a function of transmitting the created face identification information to the host computer 11 Yes.

The storage unit 8 stores a control program for control executed by the control unit 7 and a program for identity verification, a transaction selection screen, a guidance screen for each processing step in each transaction, an input screen, and the like. Also stores.
Further, in this storage unit 8, an identification information storage area for storing and storing the face identification information of the customer who made the previous payment transaction with the ATM 1 together with the account information read from the magnetic stripe provided on the customer's card. Is set, and the face identification information and account information stored in the identification information storage area are updated for each payment transaction.

On the other hand, the host computer 11 stores the name, contact phone number, account number, personal identification number, unregistered data, account balance, etc. of each customer who has opened an account as account information (storage means) 14. have.
The monitoring device 12 monitors the operating status of the ATM 1 installed in each store of a financial institution. Like a normal terminal device (personal computer), a display unit such as an LCD, an input unit such as a keyboard and a mouse, It is configured by a control unit or the like having a storage unit, and is operated by an operator resident in the monitoring center.

The operation of the above configuration will be described.
FIG. 2 is a flowchart showing the operation of the above-described configuration. Hereinafter, the operation will be described according to the step indicated by S in this figure.
In the following description, it is assumed that face identification information is stored together with the account information in the identification information storage area of the storage unit 8 if the payment transaction has been performed even once after the ATM 1 starts operation. It is assumed that the face identification information and the account information are not stored unless it is performed once.

First, when a customer approaches ATM 1, a customer detection sensor (not shown) provided in ATM 1 detects the customer, and when the detection signal is sent to the control unit 7, the control unit 7 activates the camera 2 to activate the customer's The face is photographed, the customer's face image is acquired (S1), and stored in a temporary memory (not shown).
When the customer sees the transaction selection screen displayed on the display unit 4 and selects a transaction with the input unit 3 and then inserts the card into the card insertion / extraction port according to the screen prompting card insertion displayed on the display unit 4, Account information such as an account number is read from the magnetic stripe of the card by the read / write unit 5 and temporarily stored in the temporary memory (S2).

Next, the control part 7 judges whether the selected transaction is payment (S3).
In the case of a transaction other than payment, the transaction is executed (S4), but since this is performed in the same manner as before, the description thereof is omitted.
If the transaction is payment, the control unit 7 displays a screen for prompting the input of the personal identification number and a screen prompting for the input of the payment amount on the display unit 4 to allow the customer to input the personal identification number and the payment amount.

Thereafter, the control unit 7 reads out the customer's face image from the temporary memory (S5), performs feature extraction from the read face image, and creates (acquires) face identification information (biological information) (S6a).
Next, the control unit 7 accesses the storage unit 8 to determine whether the face identification information and the account information created during the previous payment transaction are stored in the identification information storage area (S7). In the case, the face identification information and account information are read (S8).

  Then, it is determined whether or not the face identification information created this time, that is, the face identification information created in S6 matches with the read comparison collation (S9), and if they match, the same customer continuously performs payment transactions. Therefore, the account information stored in the temporary memory is read out and compared with the account information read out from the identification information storage area to determine whether or not they match (S10).

If the two match, the possibility of being the account holder is high, so the face identification information and account information in the identification information storage area are updated. That is, the face identification information and the account information at the time of the previous payment transaction stored in the identification information storage area are deleted, and the face identification information created this time is stored in the storage unit 8 together with the customer account information read from the current card and saved. (S11).
Subsequently, the control unit 7 executes a payment transaction (S12). Since the execution of the payment transaction in this case is performed in the same manner as in the past, the detailed description thereof is omitted, but the PIN number and the payment amount entered by the customer according to the screen for prompting the password input and the screen for prompting the amount input The control unit 7 transmits the account information stored in the temporary memory to the host computer through the communication line 13 by the communication unit 9, and the host computer 11 confirms the account and its balance, and the identity verification by the personal identification number is performed. When a notification that the transaction is permitted is returned from the host computer 11, the control unit 7 causes the cash processing unit 6 to withdraw cash for the payment amount, and prints the transaction details on the receipt by a receipt printer (not shown). And return the card.

On the other hand, if it is determined in S7 that the face identification information and the account information at the time of the previous payment transaction are not stored, it is the first payment transaction after the ATM 10 is operated, so it is considered that the possibility of fraud is low. The face identification information created this time is stored and stored in the storage unit 8 together with the customer account information read from the card this time, and then a payment transaction is executed (S12).
If it is determined in S9 that the face identification information does not match, it means that the same customer has not made continuous payment transactions. The face identification information created this time is stored and stored in the storage unit 8 together with the customer account information read from the card this time, and then a payment transaction is executed (S12). If it is determined in S10 that the account information does not match, the same person is continuously performing payment transactions with different cards, so the control unit 7 communicates with the monitoring device 12 of the monitoring center via the communication unit 9. An alarm is notified and a face image photographed by the camera is transmitted (S13), and an instruction from the monitoring device 12 is awaited.

  In the monitoring center, when the monitoring device 12 receives the alarm, the operator reports with an alarm buzzer or the like, and the face image sent from the ATM 1 is displayed on the display unit. In view of this, the operator transmits necessary instructions such as permission to continue the transaction or stop the transaction to the ATM 1 through the input unit of the monitoring device 12. For example, if there is no suspicious point in the person in the displayed image, the transaction continuation permission is sent to ATM1, and the person in the displayed image is hiding his face with sunglasses or a mask. If it is determined to be a suspicious person, an instruction to stop the transaction is sent.

  In response to this, the control unit 7 of the ATM 1 determines the content of the instruction (S14), and in the case of continuation, moves to SS11 and stores the face identification information created this time together with the customer account information read from the current card and the storage unit 8 After being stored and stored, the payment transaction is executed (S12). If the transaction is not continued, that is, if the transaction is stopped, a screen indicating that the transaction is canceled is displayed on the display unit 4, the card is returned, and the process is ended.

According to the first embodiment described above, since it is possible to detect a suspicious action in which the same person attempts to conduct a transaction using different cards at the same ATM, it is possible to suppress unauthorized transactions.
Next, a second embodiment will be described.
FIG. 3 is a flowchart showing the second embodiment.

  In the second embodiment, after performing the same processing as in the first embodiment from S1 to S6a, the control unit 7 displays a screen for guiding input of a name, a telephone number and the like on the display unit 4, The customer is allowed to input customer-specific information such as his / her name and contact telephone number, and is stored in a memory in a temporary memory, and the account information read from the customer's card in S2 is transmitted from the communication unit 9 via a communication line. The information is transmitted to the host computer 11 and customer-specific information such as the customer name and telephone number corresponding to the account information is acquired from the host computer 11 and stored in the temporary memory (S6b).

  In S7, as in the first embodiment, the control unit 7 accesses the storage unit 8 and stores the face identification information, the account information, the customer's name, etc. created during the previous payment transaction in the identification information storage area. If it is not saved, the process proceeds to S11, and the face identification information created this time is stored and saved in the storage unit 8 together with the account information read from the card this time, and then the first implementation is performed in S12. Execute a payment transaction as in the example.

On the other hand, when the face identification information and the account information are stored in the identification information storage area of the storage unit 8, the control unit 7 reads the face identification information and the account information, and proceeds to S9 to create this time, that is, in S6 It is determined whether the created face identification information matches with the read comparison collation.
If they match, the same customer has been continuously making payment transactions, so the account information stored in the temporary memory is read in S10 and compared with the account information read from the identification information storage area. If there is a match, the customer-specific information entered by the customer and the customer-specific information obtained from the host computer are read from the temporary memory to see if they match. If they match, the processes of S11 and S12 are executed and the process ends.

  Also in this embodiment, if it is determined in S9 that the face identification information does not match, the same customer does not continuously make payment transactions, so in this case too, the possibility of fraud is low. The process proceeds to S10, and the face identification information created this time is stored and stored in the storage unit 8 together with the account information of the customer read from the card this time, and then a payment transaction is executed (S12). If the information matches, but it is determined in S10 that the account information or customer-specific information does not match, the same person is making consecutive payment transactions with different cards, or who is suspected of not being the account holder Since the payment transaction is continuously performed, the process proceeds to S13 to notify the monitoring device 12 of the monitoring center of the alarm and transmit the face image captured by the camera. Similarly S14, processing up to S15, or proceeds from S14 to S11 and performs the processing in S11 and S12.

According to the second embodiment described above, the same effects as in the first embodiment can be obtained, and the following effects can also be obtained.
That is, in the first embodiment described above, even when a customer who has opened an account at a plurality of financial institutions conducts transactions continuously using a plurality of cash cards in the name of the principal, an alarm is issued to the monitoring center. You will be notified, but you will be able to enter customer-specific information such as name and phone number, and collate this input customer-specific information with customer-specific information obtained from the host computer to multiple financial institutions. When a customer who has opened an account conducts transactions continuously using multiple cash cards in the name of the principal, it is possible to avoid notifying the monitoring center of an alarm, and to reduce the burden on the operator of the monitoring center. Can be reduced.

Next, a third embodiment will be described.
In the third embodiment, the identification information area for storing the face identification information and the account information is not set in the storage unit 8 of the ATM 1, but the face identification information of each customer is held in the database of the host computer 11.
FIG. 4 is a flowchart showing the third embodiment.

In the third embodiment, after performing the same processing as in the first embodiment from S1 to S6a, the control unit 7 sends a request for transmitting face identification information together with the account information read from the customer's card in S2. 9 to the host computer 11 via the communication line (S6b).
In response to the request, the host computer 11 searches the database 14 based on the received account information to determine whether or not the corresponding customer face is registered, and if so, the face identification information must be registered. If so, the information to that effect is transmitted to ATM1.

The control unit 7 of the ATM 1 recognizes the content received from the host computer 11 and determines whether it is face identification information (S7). In the case of face identification information, the face identification information and the face identification created in S6a are determined. The information is compared and checked to determine whether or not they match (S8).
And when it corresponds, the payment transaction similar to S12 in a 1st Example is performed (S9).

  If the content received from the host computer 11 is not face identification information but information indicating that it is not registered, the control unit 7 transmits the face identification information created in S6a to the host computer 11 (S10). Thus, the host computer 11 registers the face identification information in the database 14 in association with the account information of the customer, and the ATM 1 executes a payment transaction similar to S12 in the first embodiment (S9).

  On the other hand, if it is determined in S8 that the face identification information does not match, the control unit 7 considers that a person other than the account holder is conducting a payment transaction, and similarly to S13 in the first embodiment, the control center 7 An alarm is sent to the monitoring device 12 and a face image photographed by the camera is transmitted. Thereafter, the processing in S12 and S13 is the same as S14 and S15 in the first embodiment, or the same as S14 and S12 in the first embodiment. Steps S12 and S9 are performed.

  According to the third embodiment described above, the face identification information created based on the customer's image taken with the camera provided for the ATM is registered in the database of the host computer in correspondence with the account information, and at the time of payment transaction In addition, the face identification information is created based on the image of the customer taken by the ATM with the camera and the face identification information is acquired from the host computer. If the two face identification information does not match, an alarm notification is transmitted to the monitoring device. Therefore, even if a person who intends to make an unauthorized withdrawal moves to a different ATM in the same store or an ATM in another store and tries to withdraw a deposit, the act is detected and unauthorized withdrawal is suppressed. The effect that it can be obtained.

Further, in the third embodiment, even if the customer who is the account holder does not register the face identification information at the store of the financial institution, the face identification information is automatically registered in the database of the host computer at the time of ATM transaction. Therefore, it is possible to save the trouble of both the financial institution and the customer.
In each of the above-described embodiments, the payment transaction has been described as an example. However, any transaction involving funds transfer from an account such as a transfer transaction or an electronic money charge can be applied.

  In addition, when registering face identification information in the database of the host computer, transaction data using a passbook such as during a deposit transaction using the passbook can be obtained from the customer's account information from the magnetic stripe of the passbook. It is possible to create customer face identification information in a transaction other than the payment transaction and register it in the database of the host computer in advance.

A diagram showing a system configuration common to each embodiment Flowchart showing the first embodiment Flowchart showing the second embodiment Flowchart showing the third embodiment

Explanation of symbols

1 ATM
2 camera 3 input unit 4 display unit 5 card read / write unit 6 cash deposit / withdrawal unit 7 control unit 8 storage unit 9 communication unit 11 host computer 12 monitoring device 14 database

Claims (7)

In an automatic transaction apparatus which has an input means and a card reading means and conducts a transaction by a customer's operation,
Biometric information acquisition means for acquiring biometric information of a customer who makes a transaction with the automatic transaction apparatus;
Biometric information storage means for storing the biometric information acquired by the biometric information acquisition means during the previous payment transaction together with the account information acquired from the customer's card,
When the customer selects the payment transaction by operating the input means, the card reading means reads account information from the customer's card, and the biometric information acquisition means acquires the customer's biometric information, and the acquired biometric information When the information is checked against the biometric information stored in the biometric information storage means, and if the information matches, the account information read by the card reading means is checked against the account information stored in the biometric information storage means. Transmits an alarm notification to a monitoring device. The automatic transaction apparatus according to claim 1,
After the customer selects a payment transaction, the customer is allowed to input customer-specific information, and customer-specific information corresponding to the account information read from the card is acquired from the host device.
When both of the biometric information and the account information are matched, the customer-specific information entered by the customer is matched with the customer-specific information acquired from the previous device, and if they match, an alarm is notified to the monitoring device An automatic transaction apparatus characterized by transmitting In the automatic transaction apparatus according to claim 1 or claim 2,
Equipped with a camera to shoot customers,
An automatic transaction apparatus using facial identification information created by extracting facial features from an image of a customer photographed by the camera as biometric information. In the automatic transaction apparatus of Claim 3,
An automatic transaction apparatus characterized in that, when an alarm notification is transmitted to the monitoring apparatus, an image of a customer photographed by the camera is added and transmitted. In an automatic transaction system having an input means and a card reading means, and having a plurality of automatic transaction apparatuses that perform transactions by customer operations, and a host device to which the plurality of automatic transaction apparatuses are connected,
Provide biometric information acquisition means for acquiring biometric information of customers who make transactions in each automatic transaction apparatus,
The biometric information acquired by the biometric information acquisition means of each automatic transaction apparatus is stored in the storage means of the host device in association with the account information of each customer,
When the customer operates the input means of the automatic transaction apparatus and selects a transaction involving funds transfer from an account, the card reading means reads account information from the customer's card, and the biometric information acquisition means Obtain biometric information,
In addition, biometric information is acquired from the host device based on the account information, and the biometric information acquisition unit compares the biometric information of the customer. If they do not match, an alarm notification is transmitted to the monitoring device. An automatic transaction system characterized by that. In the automatic transaction system according to claim 5,
Each automatic transaction device is equipped with a camera to photograph customers,
An automatic transaction system using facial identification information created by extracting facial features from a customer image taken by the camera as biometric information. The automatic transaction apparatus according to claim 6,
An automatic transaction system characterized in that when an alarm notification is transmitted to the monitoring device, an image of a customer photographed by the camera is added and transmitted.