JP2007122407A - Identification device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an identification device capable of performing authentication in a financial organ with excellent operability and high security, and to provide an automatic teller machine. <P>SOLUTION: The identification device is arranged in the automatic teller machine system of the financial organ to make a transaction by identification for obtaining authentication. A user transmits a second password to a financial organ host computer from a personal computer or the Web screen of a personal computer or a portable telephone with the use of the device. By the present invention, the excellently operable and convenient identification device and a transaction processor are provided for the user without preparing a special exclusive apparatus, while keeping an authenticating function with high security. Even in an authentication side system, the identification device to be easily configured and the transaction processor are provided without preparing the special exclusive apparatus. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a personal identification device that performs personal authentication using a personal identification number at the time of card payment processing in an automatic machine system that performs personal identification using a personal identification number in an automatic machine system of a financial institution.

  In recent years, card PIN numbers have been stolen by third parties, and cash withdrawals from ATMs due to card theft, skimming, etc. have become frequent and problematic.

  Japanese Patent Publication No. 2000-515273 discloses a personal authentication method using a second personal identification number, which uses a personal identification device. This personal identification device generates a personal identification number by a device carried by the user. In addition, this apparatus changes the displayed personal identification number periodically (for example, every 60 seconds). The authenticating system generates a password that is generated in the same manner as the password displayed on the device held by the user. It is possible to authenticate the transaction when the personal identification number created by the identity verification device matches the personal identification number that is periodically changed by the authenticating system.

JP 2000-515273 A

  In the above-mentioned known example, the user needs a dedicated device that can periodically change the personal identification number in order to associate the personal identification number generated by the personal identification device and the authenticating system. Further, the authentication side system requires a dedicated device having a function for periodically generating the same personal identification number in association with each other.

  For this reason, education for the user of how to use the dedicated device and a new cost are generated, and it is difficult for the user to understand the education and the operation, and there is a possibility that the usability is deteriorated.

  Moreover, there is a possibility that the user's usability is deteriorated by periodically changing the password.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a personal identification device and a transaction processing device that have a highly secure authentication function, do not have a special dedicated device for the user, and are easy to use.

  The authentication system also has an object to solve the above problem by providing a personal identification device and a transaction processing device that do not have a special dedicated device and can be easily constructed.

  In order to achieve the above-mentioned object, according to the present invention, in an automatic machine system of a financial institution that performs a specific identity verification, a user inputs a second personal identification number from a personal computer or a WEB screen of a mobile phone. Bill computer. The host computer is configured to send back the randomly generated personal identification number to the user by mail, mail, etc., and store the personal identification number in the second personal identification number database as a sequential file.

  Since it was set as the above-mentioned structure, when a 2nd PIN code is acquired, a 2nd PIN code can be used without using an exclusive apparatus. In addition, the financial institution host computer can create a second password by using a random number generation function provided in the computer without using a dedicated device, and the user can use the password. appear.

  Further, the second personal identification number is configured such that the second personal identification number having the conventional personal identification number and the expiration date or the valid number of times is input in the financial institution ATM. Moreover, it is good also as a structure with a some PIN code.

  As described above, the user can perform the same operation as the conventional password without using the dedicated device when inputting the second password at the ATM. Therefore, there is an effect that a smooth operation can be performed.

  In addition, this second PIN number has an expiration date or number of times to improve security, and when the PIN number is entered, it is prohibited to use it three times to further improve security. Is possible.

  Furthermore, the host computer of the financial institution is constructed to delete the second password data from the second password database after the transaction is completed.

  With the above configuration, the host computer can delete the used second password data from the second password database, thereby reducing the data capacity and facilitating management.

  ADVANTAGE OF THE INVENTION According to this invention, the identification apparatus and automatic transaction apparatus which can authenticate the financial institution which has good operativity and high security can be provided.

  Hereinafter, an embodiment of the present invention will be described with reference to FIGS. The present embodiment relates to an automatic transaction apparatus such as an ATM (Automatic Teller Machine) employed in a financial institution system such as a bank system.

  First, FIG. 1 is a system configuration diagram according to the present embodiment, FIG. 3 is a second password database format, and FIG. 4 is an internal configuration diagram of an automatic machine and a host server. A schematic configuration will be described with reference to the configuration diagram and the internal configuration diagram.

  The personal computer 1 or the mobile phone 2 is connected to the financial institution host computer 3 via the public line 5 by a user operation. The automatic transaction apparatus 4 (hereinafter referred to as ATM) is an apparatus that automatically executes various transactions requested by the user, and is the same as the automatic apparatus 400, and includes a display unit 401, an input device 402, a card reader. The storage unit 403, a passbook reading unit 404, a passbook printing unit 405, a transmission / reception unit 409, an auxiliary storage device 407, a main storage device 408, and a control unit 406 for controlling these units. The control unit includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and controls various processes and transactions.

  On the other hand, a host computer 3 (hereinafter referred to as a host) connected to the ATM 4 is connected to a transmission / reception unit 409 of the ATM 3, connected via a transmission / reception unit 413 that transmits or receives data to / from the ATM 3, and is provided inside the file unit 411. In addition, it has a second password database 411 for storing a user's card and the like, and a control unit 12 for controlling these. The record 300 of the second password database 411 also stores the second password, issuance date and time, minutes and seconds, and the expiration date / number of times. The password included in the data received from the ATM 4 is compared with the host 3. The result is sent to ATM4. As a result, it is determined whether the password entered by the ATM 4 is acceptable.

  Hereinafter, an embodiment of the present invention will be described with reference to FIGS.

  First, FIG. 1 is a diagram showing an acquisition method from the second password host computer 3, and the user requests acquisition of the second password on the WEB screen of each financial institution of the personal computer 1 or the mobile phone 2. Process. Next, whether to use / do not use the second password on the WEB screen is selected. When “Use” is selected, an expiration date or the number of times of validity is input and transmitted to the host computer 3. When the expiration date is selected, the number of days can be specified within a range of 1 to 7 days. When the effective number is selected, the number of times can be specified in a range of 1 to 3 times.

  Next, when the financial institution host computer 3 receives the second password acquisition request, the financial institution host computer 3 generates a random four-digit number and transmits it to the user's registered mail address.

  The second personal identification number transmitted from the host computer 3 to the user is a fixed number that cannot be changed by the user.

  Further, the host computer 3 additionally registers the second personal identification number in the sequential file 411 together with the card number, issue date / time, minute / second, expiration date / number of times.

  When the expiration date is selected, the date is registered by adding the number of days specified on the second password issue date. When the effective number of times is selected, the number of times is replaced with an alphabetic number and registered (A for one time, B for two times, C for three times).

  In the above operation, after obtaining the second password, the user performs transaction processing by inputting the second password together with the first password at the bank ATM 4.

  At the time of the above operation, the host computer 3 deletes the second password information from the second password database 411 after the transaction ends.

  The processing flow is shown using FIG. 2 and FIG.

  FIG. 2 shows the processing flow of the user, ATM, and host computer at the time of authentication, and FIG. 3 shows the second PIN code record format.

  First, the host computer sets the retry counter (S201) to 0 and displays the first password input screen on the ATM (S203). The user inputs the first password (S204). The host computer checks the input first password (S206). In the case of NG, the retry counter is incremented by 1 (S202) and the first password input screen (S203) is displayed again. If the retry counter exceeds 3, the process is terminated (S202).

  If the first security code check is OK, the host computer 3 searches the second security code database (411), and if there is a record in which the matching card number is registered, the retry counter is set to 0 (S207). The user is requested to enter the second password (S209).

  If there is no matching card number in the second password database 411, transaction processing is enabled (S213).

  The ATM displays the second password input screen (S209), and the user inputs the second password (S210).

  Next, the host computer performs a match check of the second password (S211).

  If the second passwords do not match, the host computer increments the retry counter by 1 (S208) and requests the user to input again (S209). If there is a mismatch, the process is terminated (S208). If the second passwords match, an expiration date check or an effective number check is performed (S212). If this check does not exceed the expiration date or number of times, transaction processing is enabled (S213).

  After the transaction ends, the host computer deletes the second security code record 300 from the second security code database 411 when the expiration date or the number of effective times is exceeded (S215). In the method of calculating the number of valid times described above, the valid number is subtracted once, and the subtracted value is registered in the validity period / number of times of the second personal identification number record 300 that matches the card number of the user in the second personal identification number database. If the subtraction result is 0, the record is deleted from the second password database (S215).

It is a schematic diagram of a 2nd PIN code acquisition-transaction processing. It is a processing flow figure of a user, ATM, and a bank host. It is a record format of 2nd PIN code DB. It is a block diagram of an automatic machine for inputting a personal identification number and a database server of each financial institution.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Personal computer, 2 ... Mobile phone, 3 ... Host computer, 4 ... Cash dispenser (ATM), 400 ... Automatic machine apparatus, 401 ... Display part, 402 ... Input device, 403 ... Card reading / writing part, 404 ... Passbook reading / writing unit, 405 ... Passbook printing unit, 406 ... Control unit (automatic machine side), 407 ... Auxiliary storage unit, 408 ... Main storage unit, 409 ... Transmission / reception unit (automatic machine side), 410 ... Database server Reference numeral 411, second password database, 412, control unit (database server side), 413, transmission / reception unit (database server side).

Claims (3)

  In a personal identification device provided in an automatic machine system of a financial institution that conducts transactions by performing identity verification and obtaining a transaction, the user inputs the second personal identification number from a personal computer or a WEB screen of a mobile phone. Identity verification device that transmits to   The personal identification device is characterized in that the second personal identification number is input at a financial institution ATM with a conventional personal identification number and an expiration date, or a second personal identification number having a valid number of times. In the host computer of the financial institution provided with a second password database containing the second password data and a control unit for controlling the second password and the database, after the transaction ends, the second password data is An identity verification device that is deleted from the second password database.

Images