JP2007094874A - Financial service providing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security against illegal financial transaction to an account of a legal user through an automatic teller machine. <P>SOLUTION: This financial service providing system includes a financial service providing means for providing a predetermined financial service of a financial institution by means of the automatic teller machine, a use limitation means for limiting financial transaction using the automatic teller machine associated with an account of the user in compliance with setting based on intention of the user, a certificate authentication means issuing an electronic certificate for certifying a mobile communication terminal carried by the user and giving acquisition information for acquiring the electronic certificate to the mobile communication terminal, and an authentication means for giving the acquisition information received from the mobile communication terminal of the user to the certificate authentication means for acquiring the electronic certificate of the mobile communication terminal for authenticating validity of the electronic certificate. When an authentication result by the authentication means shows validity, processing by the financial service providing means or the use limitation means is allowed. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a financial service providing system, and can be applied to, for example, a network system that provides financial transaction services such as withdrawal, transfer, and transfer of cash by financial institutions such as banks and credit card companies.

  In recent years, banks and credit card companies, for example, not only provide financial transaction services to users through ATM (automated teller machine) networks, but also personally owned by individuals or corporations that have contracted with the company, for example. Internet / mobile service systems using mobile phones equipped with computers and Web browsers are also provided.

  However, many fraudulent acts have come to be performed in exchange for the convenience that such card users can withdraw and transfer funds anytime and anywhere.

  For example, the account number of another person's cash card or the credit card number of a credit card and the personal identification number of these cards are stolen in some way, the forged card is inserted into an ATM, the stolen personal identification number is typed in, impersonating someone else, cash There are crimes such as withdrawing money or transferring funds.

  On the other hand, each bank and credit card company has a card user to set the maximum transaction amount per transaction and the maximum transaction amount per day in order to reduce the damage and financial loss caused by unauthorized use of counterfeit cards. It provides a mechanism that can be set. In addition, some banks offer services such as prohibiting transactions from ATMs in principle, and removing card usage restrictions when card users want to use them.

  FIG. 2 is a block diagram showing an example of the overall configuration of a conventional financial transaction system and an example of the configuration of an information system provided on the bank or credit card company side.

  In FIG. 2, a usage restriction system 108 on the information system 104 refers to a usage restriction information database 109 to restrict financial transactions for each account by ATM. Here, examples of setting information items stored in the usage restriction information database 109 include “account number 201”, “ATM availability 202”, “transaction upper limit”, “1” as shown in FIG. Daily transaction limit ”.

  Conventionally, in the case of a bank, such ATM usage restriction settings include, for example, settings by a call center and settings using an Internet / mobile service system. In addition, the setting of the upper limit amount or the like can be requested in writing at the sales office.

  FIG. 4 is a flowchart showing a method for setting use restrictions of ATM using the Internet / mobile service system, and a conventional setting method will be briefly described.

  First, a card user who wants to set usage restrictions logs in to Internet / mobile banking using a personal computer 111 or a mobile phone 113 equipped with a Web browser for a contracted Internet / mobile service (300).

  At this time, the card user inputs a login ID and password for the Internet / mobile service. Depending on the bank, it may be necessary to enter part of the random number table or card user number.

  After logging in, the card user selects a setting item (301). For example, when the card user selects whether or not the ATM can be used (302), when the card user selects whether to use the ATM or not, the input information is used in the usage restriction information database. 109 is set to “ATM availability attribute 202”.

  Similarly, when the card user selects the transaction maximum amount per transaction or the transaction maximum amount per day, when the amount is entered, the amount entered is “per transaction” on the user restriction information database 109. Set to “transaction upper limit attribute 203” or “transaction upper limit per day”.

  Thereafter, setting information is displayed on the screen of the Internet / mobile banking service (305), and logout from the service is performed (306).

  FIG. 5 is a flowchart showing an ATM usage method when “ATM availability” is set as the ATM usage restriction. This will be briefly described. It should be noted that the case where other setting information is set is substantially the same and is omitted.

  First, when a card user who wishes to conduct a financial transaction inserts a card into an ATM, the ATM device 101 reads information on the magnetic field and IC card on the card (401), and the account number and credit card number are stored in the bank / credit card company. To the information system 104 through the ATM network 103 (402).

  At this time, these pieces of information pass through the ATM gateway 105, are transmitted to the billing system 106, and are transmitted to the usage restriction system 108.

  The usage restriction system 108 retrieves the value of the “ATM availability attribute 202” currently set using the account number of the card user from the usage restriction information database 109 as a key (403).

  If the value of the “ATM availability 202” attribute is “Available”, the usage restriction system 108 requests the ATM PIN 101 to enter the card PIN number through the network to continue the transaction, and thereafter checks the balance, makes a withdrawal, etc. Are executed (404 and 405).

  On the other hand, if the value of the “ATM availability 202” attribute is “not available”, the usage restriction system 108 displays the fact that the ATM 101 is not available through the network to restrict the ATM usage, and continues the transaction. (405).

  However, even if the above-described conventional usage restriction system is applied, it is desired to improve security against unauthorized financial transactions to an authorized user's account using an automatic teller machine.

  Specifically, there are the following problems.

(A) Before transacting with a bank or credit card Internet / mobile service, the Internet / mobile service requires input of a login ID, password, or numerical value of a random number table, and many characters are input to a mobile phone or personal computer. It was cumbersome to do.

(B) In the bank / credit card Internet / mobile service, the login ID and password are stolen by another person by fraud such as phishing, etc., and the bank account is illegally transferred to another account, or the cashing of the transfer However, there was a problem that others were illegally used or suffered financial damage.

(C) A person who attempts to create a counterfeit card and commit fraudulently has a high possibility of stealing from the card user, including the login ID and password information of the Internet / mobile service. Even if the card user is using the use restriction function, the use restriction of ATM is canceled by the fraudulent person and the transaction such as cash withdrawal with a forged card becomes possible, which is not a sufficiently safe method.

(D) Bank cash cards and credit cards can be used internationally, not from within Japan, and fraudulent cards could be used for illegal withdrawals from overseas ATMs. .

(E) There is an example where the ATM installation location (information such as prefectures) described in (d) is restricted so that ATM transactions can be made only from the ATM installation location permitted in advance. Only the ATMs owned by the bank and the ATMs of specific owners can be restricted, and it was impossible to place restrictions on ATMs owned by other banks.

(F) Moreover, when the information of all ATM installation locations cannot be obtained in (e), it is not possible to limit the area where ATMs can be used.

  Therefore, there is a need for a financial service providing system that can solve the above problems.

  In order to solve this problem, a financial service providing system of the present invention includes (1) a financial service providing means for providing a predetermined financial service of a financial institution using an automatic teller machine, and (2) providing a financial service. A usage restriction means for restricting financial transactions using an automatic teller machine related to the user's account in response to the setting of the user's intention, and (3) a predetermined number for certifying the mobile communication terminal possessed by the user Certificate authentication means for issuing an electronic certificate by the above method and giving the mobile communication terminal acquisition information for obtaining the issued electronic certificate, and (4) moving the acquisition information stored in the user's mobile communication terminal An authentication unit that receives from the communication terminal, gives the received acquisition information to the certificate authentication unit, obtains the electronic certificate of the mobile communication terminal, and authenticates the validity of the electronic certificate; If the authentication result by the authentication means are valid, and permits the processing of financial service providing unit and or use limitation means.

  ADVANTAGE OF THE INVENTION According to this invention, the security with respect to the unauthorized financial transaction to the account of a legitimate user using an automatic teller machine can be improved.

(A) First Embodiment Hereinafter, a first embodiment of a financial service providing system of the present invention will be described with reference to the drawings.

  This embodiment shows the case where it applies to the network system which provides the financial service which financial institutions, such as a bank and a credit card company, provide using the financial service provision system of this invention.

(A-1) Configuration of the First Embodiment FIG. 1 is a block diagram showing an example of the overall configuration of the financial transaction system of this embodiment and an example of the configuration of an information system provided on the bank or credit card company side.

  As shown in FIG. 1, the financial transaction system 1 of this embodiment is roughly configured to include an information system 504, an ATM device 501, a personal computer 513, a mobile phone 515, and a mobile phone company certificate authority 517.

  The ATM device 501 is a device operated by a card user in order to provide a financial transaction service using a card (cash card, credit card, etc.) 502. For example, the ATM device 501 is installed in a bank store or a convenience store. It is what is done. The ATM device 501 is connected to an information system 504 of each bank or credit card company through an ATM network 503. In FIG. 1, only one ATM device 501 is shown for easy understanding, but the number of ATM devices 501 is not particularly limited.

  Here, the ATM network 503 includes a network operated by a service provider that mediates connection between ATM devices of various owners and a plurality of banks and credit cards.

  Generally, a card user makes a contract with a bank or a credit card company, and receives a loan of a cash card / credit card 502 from the bank or the credit card company. Then, by using the cash card / credit card 502 and the password set for the bank / credit card company to indicate to the bank or credit card company that the card user is a legitimate user, the card user can use the ATM device 501. You can conduct financial transactions such as withdrawals and funds transfers.

  The card information of the cash card / credit card 502 and the transaction of the ATM device 501 are performed in an online manner, and electronic information is exchanged between the bank systems of the information system 504.

  The information system 504 is a system provided on the bank or credit card company side.

  As shown in FIG. 1, the information system 504 includes an ATM gateway system 505, a billing system 506, a customer account database 507, a use restriction system 508, a use restriction information database 509, an unauthorized use warning system 510, and an Internet / mobile service system 511. The mobile authentication system 512 is at least included.

  The ATM gateway system 505 is connected to the ATM network 503 and transmits / receives information exchanged between the ATM system 501 and a billing system 506, a use restriction system 508, an unauthorized use warning system 510, and an ATM device 501 described later.

  The account system 506 manages each bank account information and credit card balance information on the customer account database 507. The account system 506 includes information stored in the customer account database 107 and an ATM gateway system. 505 is a system that performs a settlement process in accordance with the withdrawal / transfer instruction information received from the ATM device 501 through 505.

  The customer account database 507 is a database that stores card user bank account information, credit card balance information, and the like.

  The usage restriction system 508 refers to a usage restriction information database 509 and manages the usage restrictions of the ATM device 501 for each card user.

  Here, the usage restriction system 508 of the present embodiment uniquely identifies an electronic certificate that certifies the mobile phone 515 owned by the card user and the mobile phone 515 during the ATM usage restriction setting registration / cancellation / change processing. The identification number identified by the mobile phone company is given to the mobile phone company certificate authority 517, and after obtaining valid authentication of the mobile phone 515, the ATM registration restriction setting registration / cancellation / change processing is advanced.

  As a result, complicated passwords, user IDs, and the like can be eliminated, so that snooping by unauthorized persons can be eliminated and illegal acts can be prevented. As will be described later, since the use restriction system 508 authenticates using the unique identification information described above, it can be safely received without any risk of tampering or the like.

  Therefore, in this embodiment, the card user needs to generate and issue an electronic certificate for certifying the mobile phone 515 owned by the card user. Here, the electronic certificate includes that the contractor of the mobile phone has a contract with the mobile phone company and a unique identification number assigned to each contract. In addition, as a method for generating / issuing an electronic certificate, a method for generating / issuing a conventional mobile phone company certificate authority 517 can be applied.

  The mobile phone 515 stores the issued electronic certificate in a built-in storage device, and when there is a request for the electronic certificate from the mobile authentication system 512 side, the stored electronic certificate is stored in the mobile authentication system. To 512.

  Here, FIG. 6 shows an example of setting information items stored in the use restriction information database 509 of the present embodiment.

  As shown in FIG. 6, examples of items in the usage restriction information database 509 are “account number”, “ATM availability”, “one-time transaction upper limit”, “daily transaction upper limit”, “contracted mobile company” , “Identification number”, “area restriction”, “available area 1 to 3”, “portable location information date”, “portable location information time”, “portable location information 1 and 2”, and the like.

  The “account number”, “ATM availability”, “transaction upper limit”, and “daily transaction upper limit” are the same as those of the conventional one shown in FIG.

  “Contracted mobile company” is a company name that identifies a provider of a mobile phone used by a user.

  The “identification number” is the contract number of the user stored in the user's mobile phone terminal or the electronic certificate issued by the mobile phone operator. This number is uniquely identified for the terminal and contract, and there is no overlap for each carrier. In addition, the contract number of the mobile phone company is not reused by others even if the user cancels the mobile phone. This contract number can be used continuously even if the user changes the model.

  “Regional restriction” is information indicating how to restrict the area using ATM. For example, in FIG. 6, “No regional restriction” means that transactions can be used from ATMs in any region. However, the daily and per-day transaction limits used in the prior art apply. For example, when “Regional restriction” is “Prohibition of use” or “Alarm”, it is a setting for restricting the use of ATM. In the case of “prohibited use”, the transaction is disabled when an ATM is used outside the available area set by the user. In the case of “alarm”, when a transaction is made from an ATM outside the designated area, the user is notified by e-mail or the like of a mobile phone.

  “Available areas 1 to 3” sets area names such as prefectures where the user can use ATMs.

“Mobile location information date” sets the date when the user notified the location information of the mobile phone to the system using the location information notification function (for example, GPS function) of the mobile phone. Similarly, “portable location information time” sets the time at which location information is notified. “Mobile location information 1 and 2” sets location identification information determined by the mobile phone company. Specifically, the unauthorized use warning system 510, which is information such as longitude, uses the card by a predetermined means when detecting that the ATM device 501 is used under the conditions restricted by the use restriction system 508. This is a system that alerts the person in charge, security company, bank or credit card company. Although various means may be applied to the unauthorized use warning system 510, for example, an alarm notification to a card user by e-mail or a security meeting can be widely applied.

  The Internet / mobile service system 511 is connected to an open network such as the Internet 514 or the mobile phone network 516, and is used for predetermined inquiry such as balance inquiry, transfer and transfer from the card user's personal computer 513 and the mobile phone 515 equipped with a Web browser. It is a system that realizes financial transactions.

  As will be described later, the mobile authentication system 512 authenticates the mobile phone 515 using the electronic certificate acquired from the mobile phone 515 owned by the card user during the ATM usage restriction setting registration / cancellation / change processing. Is to do. If the authentication is successful by the portable authentication system 512, the ATM usage restriction setting registration / cancellation / change process by the usage restriction system 508 can be executed.

(A-2) Operation of the First Embodiment Next, the operation of the financial transaction system 1 of the present embodiment will be described with reference to the drawings.

(A-2-1) Cell Phone Certificate Registration Processing First, the procedure for registering the certificate of the cell phone 515 by the cell authentication system 512 will be described with reference to the flowchart of FIG.

  First, before using the service of this system, the card user accesses the registration site provided by the Internet / mobile service system 511 by using the mobile phone 515, specifically, by using the Web browser of the mobile phone. .

  The mobile authentication system 512 requests the card user's mobile phone to send an electronic certificate held by the card user (702).

  The mobile phone 515 sends the electronic certificate for the contractor issued by the mobile phone company to the mobile authentication system 512 in accordance with the sending instruction from the mobile authentication system 512.

  The mobile authentication system 512 uses a public key encryption method, and the sent electronic certificate is correctly issued by the mobile phone company, has not been tampered with, and the certificate has expired. It confirms that there is no (703).

  As a result of the verification of the electronic certificate, if it is determined that the electronic certificate is invalid (704), the fact that the certificate is not valid is sent to the mobile phone 515, and the mobile phone 515 displays an error reason on the screen, The system 512 is terminated (709).

  On the other hand, when it is confirmed that the electronic certificate is valid as a result of the verification of the electronic certificate (704), the mobile authentication system 512 extracts the identification number from the electronic certificate of the mobile phone 515 (705).

  Thereafter, the mobile authentication system 512 requests the mobile phone 515 to input a user ID and password for login, which is used when the card user uses the Internet / mobile banking system 511 (706).

  The card user inputs the user ID and password using the Web browser screen of the mobile phone 515, and the mobile authentication system 512 captures the input user ID and password through the network. Then, the mobile authentication system 512 performs authentication using the input user ID and password (707).

  If it is determined by authentication that the user is not a valid user (708), the mobile authentication system 512 displays a message such as a user ID difference on the screen of the mobile phone 515, and ends the processing (710).

  On the other hand, if the user is identified and authenticated with a valid user ID and password (708), the mobile authentication system 512 obtains an account number based on the user ID (711).

  Next, the mobile authentication system 512 searches for the corresponding user record in the usage restriction information database 509 from the extracted account number, and uses the unique identification number extracted from the electronic certificate extracted in 705 as “ It is registered in the items of “contract partner company” and “identification number” (712).

  After registering the identification information of the electronic certificate, the mobile authentication system 512 next inputs whether or not to restrict the area for using the ATM on the web browser screen of the card user's mobile phone 515 (713).

  At this time, if the card user selects no location restriction, “ATM availability” in the usage restriction information database 509 is set to “unusable” (714), and the attribute of “region restriction” is set to “no area restriction”. ”(715).

  After completing these settings, the mobile authentication system 512 displays the set information on the Web browser screen of the mobile phone 515 (721), and ends the process.

  On the other hand, when the user selects the presence of area restriction (713), the mobile authentication system 512 sets “ATM availability” in the utilization restriction information database 509 to “unusable”.

  Then, the mobile authentication system 512 displays a region restriction method selection screen for the card user (717), and when the card user selects “alarm”, the “region restriction” in the use restriction information database 509 is displayed. Is set to “alarm” (718), and if the card user selects “use prohibited”, “area restriction” in the use restriction information database 509 is set to “use prohibited” (719).

  Next, the portable authentication system 512 asks the card user to input a maximum of three prefecture names for which ATM use is permitted, and sets it to “available areas 1 to 3” of “area restriction” (720).

  After these settings are completed, the mobile authentication system 512 displays the set information on the Web browser screen of the mobile phone 515 (721), and ends the process.

(A-2-2) ATM Usage Restriction Change Processing Next, the operation of the change processing for canceling / setting the ATM usage restriction according to this embodiment will be described with reference to FIG.

  After the registration process shown in FIG. 7, the card user uses a mobile phone 515 to access a predetermined setting site to perform ATM use cancellation / setting process (801).

  This setting site is configured as a part of the Internet / mobile service system 511.

  The mobile authentication system 512 requests the customer mobile phone 515 to transmit an electronic certificate (802).

  The mobile phone 515 sends an electronic certificate issued by the mobile phone company to the mobile authentication system 512 to the mobile authentication system 512. The mobile authentication system 512 that has received the electronic certificate uses the public key encryption method to confirm that the sent electronic certificate has been correctly issued by the mobile phone company and has not been tampered with. It is confirmed that the expiration date has not expired (803).

  As a result of the verification of the electronic certificate, if it is found that the electronic certificate is invalid (804), the fact that the certificate is not valid is sent to the mobile phone 515, and the mobile phone 515 displays an error reason on the screen, The mobile authentication system 512 ends (806).

  On the other hand, when it is confirmed that the electronic certificate is valid as a result of the verification of the electronic certificate (804), the portable authentication system 512 extracts the identification number from the electronic certificate (805).

  The portable authentication system 512 retrieves the account number of the user corresponding to the identification number as a key from the use restriction information database 509 (807).

  If the account number is not found (808), the mobile authentication system 512 displays a message that the service is not subscribed to the mobile phone 515, and ends the processing (809).

  On the other hand, when the corresponding account number is found (808), the usage restriction system 508 extracts the value of “ATM availability” from the usage restriction information database 509 using the account number as a key, and displays the current state on the mobile phone 515. To do.

  Next, when the value of “ATM availability” is “available”, the usage restriction system 508 sets the value of “ATM availability” in the usage restriction information database 509 to “unusable” (813). The current ATM available state (“available” or “not available”) is displayed on the mobile phone 515, and the process is terminated (814).

  On the other hand, when the value of “ATM availability” is “unusable”, the usage restriction system 508 sets the value of “ATM availability” in the usage restriction information database 509 to “usable” (812).

  Next, the use restriction system 508 extracts the value of “region restriction” from the use restriction information database 509, and if the value of “region restriction” is “no region restriction” (815), ATM available information is displayed (817), and the process is terminated.

  On the other hand, when the value of “Regional restriction” is “Alarm” or “Unusable” (815), the usage restriction system 508 issues a request for sending the current device information to the mobile phone 515 (816).

  The card user approves the location information transmission confirmation of the mobile phone 515 and sends the current location information to the usage restriction system 508 (818).

  In addition, the usage restriction system 508 sets the received location information to “mobile location information date”, “mobile location information time”, and “mobile location information 1 and 2” in the user restriction information database 509 (819). ).

  The usage restriction system 508 sets the state of “Availability of ATM” in the user restriction information database 509 to the “available” state, displays a message indicating that the information has been updated on the mobile phone, and ends the processing (820). .

(A-2-3) ATM Usage Procedure Next, an ATM usage procedure by the financial transaction system 1 of the present embodiment will be described with reference to the flowchart of FIG.

  The card user inserts the cash card / credit card 502 into the ATM device 501 (901).

  When the cash card / credit card 502 is inserted, the ATM device 501 reads out the card insertion information stored in the card 502 and transmits the card insertion information to the information system 504 through the ATM network 503. At this time, the card insertion information is notified to the usage restriction system 508 via the ATM gateway system 505 and the billing system 506.

  When the card insertion information is notified, the usage restriction system 508 reads the user's account number from the ATM user's card insertion information, and uses the account number as a key to determine the value of “ATM availability” from the usage restriction information database 509. Is taken out (902).

  When the value of “ATM availability” is set to “unusable”, the usage restriction system 508 returns the setting state of ATM unusable to the ATM device 501, and the ATM device 501 uses the ATM to the card user. A message indicating that the setting is disabled is displayed, and the process ends (905).

  On the other hand, if the value of “ATM availability” is set to “available”, the usage restriction system 508 extracts “regional restriction” from the usage restriction information database 509 using the account number as a key (904).

  If the value of “Regional Restriction” is “No Regional Restriction”, the usage restriction system 508 returns it to the ATM device 501 as usable (913), and then the ATM device 501 continues normal transactions. (914).

  When the value of “Regional restriction” is “Alarm” or “Unusable”, the usage restriction system 508 uses the account number as a key from the usage restriction information database 509 to “Mobile location information 1” and “Mobile location information 2”. Is taken out (907). In addition, the usage restriction system 508 extracts an ATM identification number from the ATM message (908).

  The usage restriction system 508 checks whether the set time of the mobile location information set in “mobile location information date” and “mobile location information time” is within 30 minutes of the current time (909).

  If the set time of the mobile location information exceeds 30 minutes from the current time, the usage restriction system 508 displays a message on the screen of the ATM device 501 that the location information is updated by the mobile phone, and ends the processing. (911).

  Further, when the set time of the mobile location information is within 30 minutes of the current time, the use restriction system 508 calculates the prefecture of the location of the mobile phone from “mobile location information 1” and “mobile location information 2” (910). .

  The usage restriction system 508 determines whether or not the prefecture where the mobile phone is located is included in “available areas 1 to 3” of the usage restriction information database 509 (912).

  The usage restriction system 508 returns to the ATM device 501 that it can be used if it is included in the “prefecture 1 to 3” in the current prefecture (913), and then the ATM device 501 A screen is displayed to enable the transaction (914).

  The usage restriction system 508 checks the value of “regional restriction” in the usage restriction information database 509 when the “prescribed area 1 to 3” is not included in the current prefecture (915), and “regional restriction”. When the value of “alarm” is “alarm”, a notice of transaction start is mailed to the mail address of the user's mobile phone (917).

  On the other hand, when the value of “Regional restriction” is “Unusable”, the use restriction system 508 displays a message of the ATM unusable setting state on the ATM device 501 and ends the ATM transaction (916).

(A-3) Effects of First Embodiment As described above, according to the financial transaction system of the present embodiment, the following effects can be obtained.

(1) Bank cash card and credit card users do not need to enter a login ID, password, or random number table when canceling ATM transactions or authenticating when using Internet / mobile services. In addition, since it is possible to log-in and cancel ATM usage by only entering a PIN number, it is not necessary to input many characters into the mobile phone or personal computer.

(2) When using bank / credit card Internet / mobile services, since the electronic certificate stored in the mobile phone is used, the mobile phone itself exists even if the login ID and password are stolen. Otherwise, you will not be able to log in and the risk of unauthorized use by others due to phishing or fraud will be greatly reduced.

(3) Even if the card user including the login ID and password information of the Internet / mobile service is stolen from a person who creates a counterfeit card and attempts fraud, according to the present embodiment, the counterfeit card Withdrawing from an ATM device is impossible unless you have both a very difficult mobile phone and electronic certificate and all PIN numbers for using the electronic certificate, and the risk of fraudulent withdrawal from counterfeit cards Can be greatly reduced.

(4) Bank cash cards and credit cards can be used internationally, not just from within Japan, but fraudulent withdrawals using counterfeit cards were possible from overseas ATM devices. According to this embodiment, since it can be used only from the mobile phone network in Japan, it is impossible to withdraw money from overseas, and safety is improved.

(5) Until now, there is an example where restrictions have been made so that ATM transactions can only be made from the ATM device installation location permitted in advance from the ATM device installation location (information such as prefectures). It is possible to restrict only owned ATMs or ATMs of specific owners, and it was not possible to place restrictions on a plurality of other bank-owned ATM devices. It is also possible to place withdrawal restrictions on ATMs of other companies and ATMs.

(6) Moreover, when the information of the installation location of all the ATM devices cannot be obtained, the area where the ATM device can be used could not be restricted. Since the location information of the user's mobile phone is used without being used, it is possible to place a withdrawal restriction even on an ATM device that has no ATM device installation information.

(B) Other Embodiments An example of ATM usage restriction processing using a bank cash card or credit card has been described above, but the present invention can be widely applied to financial service systems provided by other financial institutions.

  In the authentication method of the first embodiment described above, ATM use is stopped / released by the function of the Web browser of the mobile phone. In the unlikely event that a mobile phone is lost, it can be replaced by using a personal computer at home or at work to stop or cancel the use of ATM.

  The accounting system, the use restriction system, the unauthorized use system, the Internet / mobile service system, and the mobile authentication system that constitute the information system 504 described above are realized by an information processing apparatus such as a server executing a processing program, for example. Things, so-called software.

  The account system, the use restriction system, the unauthorized use system, the Internet / mobile service system, and the mobile authentication system described in the first embodiment can be distributed if they can be connected to a common network. Is possible. Moreover, if each processing is possible, you may make it mount in the same server.

  In the first embodiment described above, the electronic certificate is issued to the mobile phone, but is not limited to the mobile phone, and can be widely applied to mobile communication terminals possessed by the user.

  The items of the usage restriction information described in FIG. 6 are examples and are not limited thereto. In addition, for example, the “available area” in FIG. 6 is not limited to a prefecture area such as “Tokyo” or “Niigata”, but a plurality of special areas such as “Setagaya Ward” or “Kanto Region”. The range of the area can be determined as needed, such as the area that crosses the prefectures. Of course, foreign countries can also be designated. In addition, it does not prevent that only a specific branch such as “XX branch” can be used.

  Furthermore, in the above-described first embodiment (particularly 909 in FIG. 9), the time for determining the validity of the set time of the mobile location information is described as “30 minutes”, but this time is not particularly limited. Absent.

It is an image figure showing the example of whole composition of the financial transaction system of a 1st embodiment. It is an image figure which shows the example of whole structure of the conventional financial transaction system. It is explanatory drawing which shows the example of an item stored in the conventional usage restriction information database. It is a flowchart which shows the setting process of the conventional ATM utilization restriction. It is a flowchart which shows the conventional ATM utilization operation | movement. It is explanatory drawing which shows the example of an item stored in the use restriction information database of 1st Embodiment. It is a flowchart which shows the setting process of the use restriction using the certificate of the mobile phone of 1st Embodiment. It is a flowchart which shows the change process of ATM utilization restrictions of 1st Embodiment. It is a flowchart which shows ATM utilization operation | movement of 1st Embodiment.

Explanation of symbols

501 ... ATM device, 504 ... Information system, 506 ... Account system, 508 ... Usage restriction system, 509 ... Usage restriction information database, 510 ... Unauthorized use warning system, 511 ... Internet / mobile service system, 512 ... Mobile authentication system, 515: Mobile phone, 517: Mobile phone company certificate authority.

Claims (3)

Financial service providing means for providing a predetermined financial service of a financial institution using an automatic teller machine;
Usage restriction means for restricting financial transactions using the automatic teller machine related to the user's account in accordance with the intention of the user receiving the financial service;
A certificate authentication means for issuing a digital certificate by a predetermined method in order to prove a mobile communication terminal possessed by a user, and giving the mobile communication terminal acquisition information for obtaining the issued electronic certificate; Receiving the order information stored in the mobile communication terminal of the user from the mobile communication terminal, giving the received order information to the certificate authentication means, obtaining the electronic certificate of the mobile communication terminal; An authentication means for authenticating the validity of the electronic certificate,
A financial service providing system which permits processing by the financial service providing means and / or the use restricting means when an authentication result by the authenticating means is valid.   The authentication means performs another authentication process different from the authentication process of the electronic certificate of the mobile communication terminal, and enables determination using the authentication result of the electronic certificate and / or the authentication result of the other authentication process. The financial service providing system according to claim 1. The authentication means obtains location information from the mobile communication terminal, and the location information from the mobile communication terminal belongs to the range of the use area of the automatic teller machine set in advance by the user. 3. The financial service providing system according to claim 1, wherein use of a deposit machine is permitted.

Images