JP2007115165A - Card unauthorized use prevention system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a method for preventing a card unauthorized use, especially by inhibiting the card use only with a PIN for the card or signature by identifying the person on the spot of the commercial transaction. <P>SOLUTION: A card reader terminal 11 using a card 1 transmits use status information for card use to a contact address indicated in contact address information 4 stored in advance in the card 1 read by the card reader 2, and receives a response from a card user terminal. The contact address information 4 and contact source information 8 are collated. When they match each other, the card is permitted to be used. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a system and method for preventing unauthorized use of cards, and in particular, a system, method, program, and recording suitable for use in preventing unauthorized use of cards such as credit cards that are used by card members for settlement of product prices and financing. It relates to the medium.

  Conventionally, in the case of electronic commerce using a card, it is currently possible to enter a personal identification number (password) predetermined by the user into a terminal or to make a transaction with an autograph. At present, there is a high probability of unauthorized use if a card is lost or stolen.

  The following Patent Document 1 discloses a method of preventing unauthorized use of a card, which makes it possible to detect unauthorized use of a card at an early stage and to create a user action record from transaction contents. Every time a financial institution, card management company, or card usage terminal makes a transaction such as an inquiry, transfer, withdrawal, or deposit using a cash card, or whenever a transaction such as payment or cashing using a credit card occurs In addition, a pre-registered sentence is added to the transaction contents such as the business partner and transaction time, and the pre-registered e-mail is sent to the destination. In addition, a third party designated in advance receives the above-mentioned transaction contents, summarizes the transaction contents of a plurality of cards for each user, and records the user's behavior from the customer and use time of the received contents of the transaction contents. Have created. According to the above-mentioned prior art, the user can grasp his / her card usage status from information on card usage transmitted each time he / she uses a cash card or credit card, and fraudulent by confirming the transaction details transmitted. You can detect usage.

JP 2002-150232 A

  However, in the above prior art, after the card is used, the card usage status is grasped, and therefore unauthorized use cannot be prevented when the card is used.

  Therefore, the object of the present invention is to prevent unauthorized use of a card, in particular to prevent unauthorized use of a card by authenticating the person on the spot when performing a business transaction and not permitting the use of the card only with a personal identification number or signature. A system and method is provided.

  In order to solve the above problems, the present invention employs means for solving the problems having the following characteristics.

A card unauthorized use prevention system according to the present invention acquires a contact information from a card reader that reads information in a card, a card usage information storage unit that stores card usage information, and information in the card read by the card reader. A contact information acquisition unit that generates contact information based on the card usage information stored in the card information storage unit, and a contact information transmission unit that transmits the contact information and the contact information. A contact information receiver, a card reader terminal including an information collator,
A card user terminal that receives the contact information and transmits the card use permission information and contact information;
When the received card use permission / rejection information is card use permission information, the information matching unit checks the contact information and the content of the received contact source information. If not, a mail for stopping the business transaction is transmitted to the card user terminal.

  The card unauthorized use prevention system according to the present invention includes a step of causing a card reader to read a card, and a contact information stored in the card at a card user terminal includes contact information as a part of the data. Transmitting to the card user terminal, after receiving the contact information, inputting card use refusal information, returning the use refusal information to the card reader terminal having the card reader, and the received When the card use permission / rejection information is card use permission information, the contact information is compared with the content of the contact information that is the sender information of the card user terminal. If not, it has a step of transmitting a mail for stopping the business transaction to the card user terminal.

  According to the present invention, since the contact information and the contact information are collated, it cannot be used only with a personal identification number or a signature when using the card, thereby preventing the use of a third party. It can also prevent unauthorized use when a card is lost or stolen.

  Embodiments of the present invention will be described with reference to the drawings. Each time an electronic commerce is performed using the card 1, information related to the electronic commerce is transmitted to the transmission destination. The card 1 storing information on the transmission destination of the other party to be transmitted, such as an address, a telephone number, and an e-mail address, is used for the card reader terminal 11 having the following configuration, and the transmission The information stored in the card including the destination information is read by the card reader 2.

  Here, the card reader terminal 11 includes a card reader 2, a card usage information storage unit 3, a contact information acquisition unit 5, a contact information creation unit 6, a contact information transmission unit 7, and a contact source information reception unit 9. And an information matching unit 10.

  The card usage information storage unit 3 stores card usage information indicating a history of past card usage. The contact information acquisition unit 5 obtains contact information 4 (for example, a contact ex address, a tel, and a name registered in a contact database managed by a card company) from the information in the card read by the card reader 2. get. The contact information creation unit 6 creates contact information based on the card usage information stored in the card information storage unit 3. This contact information is transaction information or card usage information for performing a commercial transaction using the card 1. For example, it is the name of the store where the card 1 was used for commercial transactions, the name of the purchased product, the purchase price, the date of purchase, and the like.

  Next, what kind of information is exchanged between the card reader terminal 11 and the card user terminal 12 will be described in detail.

  As shown in FIG. 2, when the card reader of the card reader terminal 11 reads the card 1 (step S101), the contact information transmitting unit 7 stores the data in the contact information stored in the card 1 in the card user terminal 12. The contact information (transmission destination information) 4 is included as a part of the data and transmitted to the card user terminal 12 (step S102). In FIG. 1, contact information 4 and contact information 8 are shown as information transmitted and received between the card reader terminal 11 and the card user terminal 12, but in actuality, as described above, these contact information is shown. The destination information 4 is transmitted by being included in the contact information. That is, after receiving the contact information, card use refusal information indicating whether or not the card user terminal is permitted to use is included in the contact information and transmitted to the card reader terminal 11. By the way, even if the contact information 4 is not included in the contact information as part of the data, the contact information 4 may be transmitted continuously after the contact information is transmitted. That is, the card use refusal information may be transmitted separately and independently to the card reader terminal 11 without being included in the contact information.

  Next, after receiving the contact information (step S103), the card user determines whether or not to permit the card use. Input information indicating whether or not the card user terminal 12 can be used (alphanumeric characters negotiated with the card company) is performed by operating a button on the terminal. After the input information is input, the use refusal information is returned to the card reader terminal 11 (step S104). Here, by transmitting the use permission / inhibition information, the contact information of the user is also sent to the card reader terminal 11 as mail address information or IP address information to be described later.

  If the use permission / denial information is use permission information, the card reader terminal 11 receives the use permission information. In this case, after confirming the use permission, the information collation unit 10 collates the contents of the contact information 4 and the contact information 8 (step S105). If both of them match as a result of the collation (Yes in step S105), a mail for starting a commercial transaction is transmitted to the card user terminal 12. If the two do not match (No in step S105), an email for stopping the commercial transaction is transmitted to the card user terminal 12, and if received by the card user terminal 12 (step S111), all processing steps are completed (step S111). S112).

  Here, in step S105, the contents of the contact information 4 and the contact information 8 are collated, but the target of the collation information may be the IP address of the card user terminal 12. In this case, the IP address of the card user terminal 12 needs to be registered in advance in a mail server in the network including the card reader terminal 11. By registering the IP address, the card user terminal 12 that transmits the contact information can be a limited terminal, and mail is transmitted from another card user terminal having an unregistered IP address. You can refuse that.

  Next, another embodiment of the present invention will be described. When a monitoring camera connected to the card reader terminal 11 is provided in the vicinity of the card reader terminal 11, the card reader terminal 11 captures an image of the user shown in the monitoring camera, and the image data is also communicated to the card reader terminal 11. It is attached to the information and sent to the card user terminal 12. In this embodiment, identity verification becomes easier.

  The card unauthorized use prevention method may be performed by a computer by a program that causes the computer to execute the processing steps in the present embodiment. In this case, the present invention is applied even when an information group including the program is supplied to the output device from a storage medium such as a CD-ROM, a flash memory, or an FD, or from an external storage medium via a network. Is. As a storage medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, CD-RW, magnetic tape, nonvolatile memory card, ROM, A DVD or the like can be used.

  Further, each of the above-described embodiments is merely an example of a preferred embodiment of the present invention, and the present invention can be implemented with various modifications without departing from the gist thereof.

It is the figure which showed the structure of the card | curd unauthorized use prevention system which concerns on this invention. It is the flowchart which showed each process step of the card unauthorized use prevention method which concerns on this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Card 2 Card reader 3 Card use information storage part 4 Contact information 5 Contact information acquisition part 6 Contact information creation part 7 Contact information transmission part 8 Contact origin information 9 Contact origin information reception part 10 Information collation part 11 Card reader terminal 12 Card user terminal

Claims (10)

A card reader for reading information in the card, a card usage information storage unit for storing card usage information, a contact information acquisition unit for acquiring contact information from the information in the card read by the card reader, and card information storage A contact information creating unit for creating contact information based on the card usage information stored in the unit, a contact information transmitting unit for transmitting the contact information and the contact information, a contact source information receiving unit, and information verification A card reader terminal including
A card user terminal that receives the contact information and transmits the card use permission information and contact information;
When the received card use permission / rejection information is card use permission information, the information matching unit checks the contact information and the content of the received contact source information. The card illegal use prevention system according to claim 1, wherein if it is not, an e-mail for stopping the commercial transaction is transmitted to the card user terminal.   2. The system for preventing unauthorized use of a card according to claim 1, wherein the contact information is information including a store name, a purchased product name, a purchase price, and a purchase date when a business transaction is performed using the card.   3. The card according to claim 1, wherein the contact information is a mail address of a transmission destination transmitted from a card reader terminal, and the contact information is a transmission mail address of the card user terminal. Unauthorized use prevention system.   The contact information is an IP address of a card user terminal that is a transmission destination of a card reader terminal, and the contact source information is an IP address of a card user terminal that is a receiving terminal of the contact information, and the card user 4. The card illegal use prevention system according to claim 1, wherein the IP address of the terminal is registered in advance in the card reader terminal.   A monitor camera installed in the store is connected to the card reader terminal, and the card reader terminal captures an image of the card user reflected in the monitor camera, and the image data is attached to the contact information to the card user. The card unauthorized use prevention system according to claim 1, wherein the card unauthorized use prevention system is transmitted to a terminal. Having the card reader read the card;
Including the contact information stored as part of the data in the contact information stored in the card in the card user terminal and transmitting it to the card user terminal;
After receiving the contact information, inputting card use refusal information and returning the use refusal information to the card reader terminal having the card reader;
When the received card use permission / rejection information is card use permission information, the contact information is compared with the content of the contact information that is the sender information of the card user terminal. A method of preventing unauthorized use of a card, comprising: a step of transmitting, to the card user terminal, an email for stopping a commercial transaction if they do not match.   7. The method of preventing unauthorized use of a card according to claim 6, wherein the contact information is information including a store name, a purchased product name, a purchase price, and a purchase date when a business transaction is performed using the card.   8. The card according to claim 6, wherein the contact information is a mail address of a transmission destination transmitted from a card reader terminal, and the contact information is a transmission mail address of the card user terminal. How to prevent unauthorized use. On the computer,
Having the card reader read the card;
Including the contact information stored as part of the data in the contact information stored in the card in the card user terminal and transmitting it to the card user terminal;
After receiving the contact information, inputting card use refusal information and returning the use refusal information to the card reader terminal having the card reader;
When the received card use permission / rejection information is card use permission information, the contact information is compared with the content of the contact information that is the sender information of the card user terminal. A program for causing the card user terminal to send an e-mail to stop the commercial transaction if they do not match. A computer-readable information recording medium (including a compact disk, a flexible disk, a hard disk, a magneto-optical disk, a digital video disk, a magnetic tape, or a semiconductor memory), wherein the program according to claim 9 is recorded. .

Images