JP2007183794A - Card management system, card management method and card management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a card management system for eliminating such inconvenience that a user may not use the account of a card, and for further improving its convenience. <P>SOLUTION: This card management system is configured of an authentication processing part 44 for receiving a validation request to be input from an input/output device 20 of a financial institution terminal 16 for validating a card which is invalidated by an invalidation request to be transmitted from a user terminal 12, and for receiving user authentication information to be input from the input/output device from the financial institution terminal, and for acquiring user authentication information preliminarily registered in a user information database 42, and for comparing those user authentication information to execute user authentication processing; and a validation instruction transmission processing part 46 for transmitting the validation instruction of a card to a financial institution relevant server 14 for determining the valid/invalid status of a card when the result of authentication processing is successful. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a card management system, a card management method, and a card management program.

  For cards issued by financial institutions such as banks and credit companies, for example, in order to prevent use by a third party when the card is stolen or lost, the user can use the card's valid / invalid state, that is, use of the card's account. There has been proposed a technology that can set a possible / impossible state from a user terminal (such as a mobile phone, a personal computer, a home-use push phone, a portable terminal).

For example, in Patent Document 1, for the purpose of providing a card management system that centrally manages personal card information and collectively processes information related to cards, at least in connection with transactions with cards, A financial database for registering card information including a card number including a number unique to the individual and a flag indicating whether the card is valid; a plurality of financial institution servers connected to the database and processing card information; A management server that is connected to the servers of the plurality of financial institutions and processes card information; a user ID that is different for each user; a card number of a financial institution that is specified and registered by the user; A card management database having a card table for storing the information and a user terminal (user) connected to the management server via a communication means. Terminal), the terminal transmits a user ID input by the user and information specified to be invalidated among the card information registered in the card management database to the management server, The management server compares the user ID registered in the card management database with the user ID sent from the terminal, and provides information indicating the status of the card specified by the user in the card table on the condition that the result matches. The card number and information indicating that the card is invalidated are transmitted to the server of the relevant financial institution, and the server of the target financial institution accesses the financial database and is sent from the management server. There has been proposed a card management system characterized by invalidating a flag corresponding to a card number.
JP 2002-63530 A

  By the way, in the technique such as Patent Document 1, in a state where the card is invalidated by the card invalidation request transmitted from the user terminal, for example, the user forgets to have a mobile phone or a portable terminal. When the user goes out, the user himself / herself cannot use the account of the card.

  Accordingly, the present invention has been made in view of the above problems, and has solved the inconvenience that the user himself / herself may not be able to use the account of the card, and the card management system and card further improved in convenience The main purpose is to provide a management method and a card management program.

  In order to solve the above problems, the present invention controls the validity / invalidity of a financial institution card via a financial institution terminal (for example, ATM). Here, the present invention includes control using a result of authentication processing performed when a transaction request is made at a financial institution terminal. More specifically, the following aspects are included.

  The card management system of the present invention that solves the above problems is a system for managing the valid / invalid state of a financial institution card owned by a user, and is invalidated by an invalidation request transmitted from a user terminal. In response to an activation request input from the input / output device of the financial institution terminal to validate the card, user authentication information input from the input / output device of the financial institution terminal is received from the financial institution terminal, Acquiring user authentication information registered in the information database in advance, and performing user authentication processing by comparing these user authentication information, according to the result of the authentication processing in the authentication processing unit, Activation instruction transmission processing for transmitting the card activation instruction to the financial institution related server that determines the validity / invalid state of the card And, equipped with a.

  In the card management system, the user authentication information registered in advance in the user information database includes login information to be input from the user terminal when the user logs in to the card management system from the user terminal. In addition, the user authentication processing by the authentication processing unit receives the login information input from the input / output device of the financial institution terminal together with the validation request from the financial institution terminal, and stores the login information in advance in the user information database. It is preferable to include a login information authentication process executed by acquiring the login information included in the registered user authentication information and comparing the login information.

  In the card management system, the user authentication information registered in advance in the user information database includes biometric information of a user, and the user authentication processing by the authentication processing unit is performed together with the validation request in the financial institution. The biometric information input from the input / output device of the terminal is received from the financial institution terminal, and the biometric information included in the user authentication information registered in the user information database in advance is acquired, and It is preferable to include a biometric authentication process executed by comparing biometric information.

  In the card management system, it is preferable that the validation instruction transmission processing unit transmits the validation instruction when the result of the authentication process is positive.

  Further, the card management method of the present invention is a method for managing the valid / invalid state of a financial institution card owned by a user on a computer, and is in an invalid state by an invalidation request transmitted from a user terminal. In response to an activation request input from the input / output device of the financial institution terminal to validate the card, the user authentication information input from the input / output device of the financial institution terminal is received from the financial institution terminal, User authentication information pre-registered in the user information database is acquired, and user authentication processing is executed by comparing these user authentication information. When the result of the authentication processing is authentication OK, the card validity / The card validation instruction is transmitted to the financial institution related server that determines the invalid state.

  The card management program of the present invention is a program for causing a computer to execute a management method of a valid / invalid state of a financial institution card owned by a user, in response to an invalidation request transmitted from a user terminal. In response to the validation request input from the input / output device of the financial institution terminal to validate the card in the invalid state, user authentication information input from the input / output device of the financial institution terminal is received from the financial institution terminal. Receiving the user authentication information registered in advance in the user information database, comparing the user authentication information, and executing the user authentication process; and if the authentication process authenticates the card Transmitting a card activation instruction to a financial institution related server that determines the valid / invalid state of the card; and Including the.

  In addition, the problems disclosed by the present application and the solutions thereof will be clarified by the embodiments of the present invention and the drawings.

  According to the present invention, it is possible to eliminate the inconvenience that the user himself / herself cannot use the account of the card and to further improve convenience.

--- System configuration ---
Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including a card management system 10 in the present embodiment. The network configuration of the present embodiment is basically operated by a card management service company, a card management system 10 for managing the valid / invalid state of a card of a financial institution owned by a user, a user terminal 12, It includes a financial institution related server 14 operated by a financial institution such as a bank, a credit company, a securities company, or an insurance company that issues and settles, and a financial institution terminal 16. Here, when the card is “valid”, the card can be used for all transactions performed at the financial institution terminal 16 or the like, and when it is “invalid”, the card is used. A state in which at least part of the transaction is impossible. Here, “at least a part” includes all of them. The “part” includes not invalidating a predetermined transaction such as a balance inquiry among card transactions.

  The card management system 10 is connected to the financial institution related servers 14 of a plurality of financial institutions, and can centrally manage a plurality of financial institution cards owned by the user. FIG. 1 shows only the financial institution related server 14 of one of the financial institutions. The user terminal 12 is a device such as a mobile phone, a personal computer, a home push phone, or a portable terminal, and each includes an input unit for inputting information by a user operation and a display unit for displaying information. It is preferable. In the processing flow example of this embodiment to be described later, a mobile phone is assumed.

  The financial institution related server 14 uses the account information database 18 for storing the account information (contract information) of the issued card, and determines (changes) the valid / invalid state of the card owned by the user, Various processes related to the card, such as an authentication process using a card password of a user who uses the institution terminal 16 are executed. The financial institution terminal 16 uses a card to check / change the contract details of a cash withdrawal or an account (contract) of the card, such as a bank ATM (Automated Teller Machine) or a CD (Automated Teller Machine). The terminal is provided with an input / output device 20 such as a button or a display screen with a touch panel generally provided in ATMs and CDs. A large number of financial institution terminals 16 are usually provided in various places, but only one financial institution terminal 16 is shown in FIG.

  The user terminal 12 and the card management system 10 are connected via a network 22 such as the Internet, a public network, or a dedicated network. The card management system 10 and the financial institution related server 14 are connected by a secure line 24 such as a dedicated line or VPN (Virtual Private Network) in consideration of security. In consideration of security, the financial institution related server 14 and the financial institution terminal 16 are connected by a secure line 26 such as a bank ATM network.

  Next, the card management system 10 will be described in more detail. The card management system 10 reads a program 30 stored in a program database 28 such as a rewritable memory into the memory 32 and executes it by the CPU 34 as an arithmetic unit so as to realize the function of executing the card management method of the present invention. The card management system 10 includes a communication unit that exchanges data with the user terminal 12 and the like via the network 22 and various input / output interfaces 36 such as various keyboards and buttons, a display, and the like that are generally provided in a computer device. 38. The I / O unit 40 performs data buffering and various mediation processes between various function units (to be described later) and the communication unit 38 of the card management system 10.

  Next, various function units configured and held by the card management system 10 based on the program 30, for example, will be described. The card management system 10 receives the validation request input from the input / output device 20 of the financial institution terminal 16 to validate the card that has been invalidated by the invalidation request transmitted from the user terminal 12, and User authentication information input from the input / output device 20 of the terminal 16 is received from the financial institution terminal 16, and user authentication information registered in advance in the user information database 42 provided in the card management system 10 is acquired. An authentication processing unit 44 is provided for executing user authentication processing by comparing the user authentication information.

  Here, as the user authentication information, for example, only card information (account information) recorded on the card and a personal identification number of the card may be used. In this case, the user authentication information is normally performed when the user uses the financial institution terminal 16. The user authentication process may be performed only by reading the card information by inserting the card and inquiring the card password entered by the user. In that case, as a modification of the present embodiment, the financial institution terminal 16 or the financial institution related server 14 includes an authentication processing unit 44 that is a part of the card management system 10. This modification will be described in detail later.

  However, in the present embodiment, the login information is also included in the user authentication information in order to prevent the card from being illegally used by the third party by the financial institution terminal 16. The login information is information to be input from the user terminal 12 when the user logs in to the card management system 10 from the user terminal 12, and in the present embodiment, when the user makes a contract with the card management service company. The user ID and password given to the user by the service company are used. The case where the user logs in to the card management system 10 from the user terminal 12 is, for example, the case where the user logs into the card management system 10 in order to invalidate the state of the card by an operation from the user terminal 12.

  Therefore, in the present embodiment, the user authentication processing by the authentication processing unit 44 receives the login information input from the input / output device 20 of the financial institution terminal 16 together with the validation request from the financial institution terminal 16, Further, it includes login information authentication processing executed by acquiring the login information registered in advance in the user information database 42 and comparing the login information.

  As a modification, the user authentication information may also include biometric information such as fingerprints and irises in order to strictly prevent unauthorized use of the card. In that case, the user authentication processing by the authentication processing unit 44 receives the biometric information input from the input / output device 20 of the financial institution terminal 16 together with the validation request from the financial institution terminal 16, What is necessary is just to include the biometric authentication process performed by acquiring the said biometric information previously registered into the said user information database 42, and comparing these biometric information.

  In addition, the card management system 10 serves as a functional unit for the financial institution related server 14 that determines (changes) the valid / invalid state of the card when the result of the authentication processing in the authentication processing unit 44 is authentication OK. An activation instruction transmission processing unit 46 for transmitting a card activation instruction is provided.

  As a modification of the present embodiment, as described above, the authentication processing unit 44 that is a part of the card management system 10 may be included in the financial institution terminal 16 or the financial institution related server 14. In this case, the validation instruction transmission processing unit 46 may be provided in the financial institution terminal 16 or the financial institution related server 14. In such a case, some or all of the functions of the card management system 10 can be regarded as a configuration provided in the financial institution terminal 16 or the financial institution related server 14. When the card management system 10 and the financial institution terminal 16 or the financial institution related server 14 share these functions with each other, the card management method according to the present embodiment is related to the card management system 10 and the financial institution terminal 16 or the financial institution related. This is realized in cooperation with the server 14. However, the point that the valid / invalid state of cards issued by a plurality of financial institutions can be centrally managed, and the point at which the user logs in when making various card validation / invalidation requests from the user terminal 12 is the financial institution. In other words, the functions and information provided in the card management system 10 are divided for each financial institution and provided in the financial institution related server 14 and the financial institution terminal 16 in that they are collected in one place. Instead, it is preferable to consolidate into one card management system 10 as in this embodiment.

  The functional units such as the authentication processing unit 44 and the validation instruction transmission processing unit 46 described above may be realized as hardware, or as programs stored in an appropriate storage device such as the memory 32 or an HDD (Hard Disk Drive). It may be realized. In this case, the CPU 34 reads the corresponding program from the storage device to the memory 32 and executes it in accordance with the program execution.

--- Database structure ---
Next, the structure of the database used in this embodiment will be described. FIG. 2 is a diagram showing an example of the data structure of the user information database 42 used by the card management system 10 in the present embodiment, and FIG. 3 is an example of the data structure of the account information database 18 used by the financial institution related server 14.

  The user information database 42 is a database for registering information about users who have contracted with the card management service company. For example, other user authentication information using the user ID and password information given by the card management service company as keys. (For example, biometric information and various personal information) and a collection of records in which the card information (account information) of the card for which the user applied for the card management service is associated. In the illustrated example, only an example of a bank account is shown, and the account information includes the name of the financial institution, the store number, the subject, and the account number of the card. As can be seen from the example of FIG. 2, the account information of cards of a plurality of financial institutions owned by the user can be registered centrally for one user.

  The account information database 18 is a process in which the financial institution related server 14 provided for each financial institution determines (changes) the valid / invalid state of the card owned by the user, and the card PIN of the user who uses the financial institution terminal 16. This is a database used for various processing related to the card of the financial institution such as authentication processing by, for example, records of records that relate information such as the card PIN number of each account, card validity / invalidity status, etc. using account information as a key. It is an aggregate. When the “valid / invalid state of card” is “valid”, the financial institution related server 14 is set to a state in which any transaction relating to the card is possible, and when it is “invalid”, any transaction is performed. Set to an impossible state.

--- Actual processing ---
Hereinafter, the actual procedure of the card management method in the present embodiment will be described with reference to the drawings. Various operations corresponding to the card management method described below are realized by a program 30 that the card management system 10 reads into the memory 32 and executes. And this program 30 is comprised from the code | cord | chord for performing various operation | movement demonstrated below.

--- Processing flow example 1 ---
FIG. 4 is a flowchart showing a procedure example 1 of the card management method according to the present embodiment. Here, a process executed when the user invalidates a desired card from the user terminal 12, here the mobile phone 12, will be described.

  The user accesses the card management system 10 from his / her mobile phone 12 which is the user terminal 12 and transmits a login request. At that time, along with the login request, the login information entered by the user on the screen of the mobile phone 12, that is, the user ID and password given by the card management service company in this embodiment is transmitted (S100). In response to this, the card management system 10 compares the login information stored in advance in the user information database 42 to execute the user authentication process (S102). Note that the present invention includes performing this authentication process based on whether or not the results of matching match, but the present invention is not limited to this method.

  As a result of the authentication processing, if the authentication is OK, that is, if authentication is successful (S102: Yes), a menu screen (not shown) for performing card validation / invalidation processing is transmitted to the user's mobile phone 12 (S104). If authentication fails as a result of the authentication process (S102: No), a message indicating that the authentication has failed is transmitted to the user's mobile phone 12 to notify the user (S106). That is, in the present invention, processing is controlled according to the authentication result. For this reason, when the authentication fails, an invalidation instruction for invalidating the card may be issued. It also detects the validity / invalidity of the card and issues an activation instruction if it is "authentication successful" and "card invalid", and issues an invalidation instruction if it is "authentication failure" and "card valid" Also good. Further, the processing may be terminated except in these cases.

  When the user inputs an invalidation request for a desired card on the menu screen displayed on the screen of the mobile phone 12 (S108), the invalidation request is sent to the financial institution related server 14 of the financial institution that issued the card. (S110). In response to this, the financial institution related server 14 sets the card to an invalidation process, that is, sets the card account to an unusable state (S112). At that time, the financial institution related server 14 also rewrites the “card valid / invalid state” information in the account information database 18. Here, as a modification of the present embodiment, an invalidation request from the user terminal 12 is first received by the card management system 10, and then the card is invalidated from the card management system 10 toward the financial institution related server 14. An instruction may be transmitted. In such a case, the attribute item stored in the user information database 42 used by the card management system 10 includes “valid / invalid state of card” information similar to that of the account information database 18. The information may be rewritten.

  Next, the financial institution related server 14 that has invalidated the card in step S110 transmits a message of invalidation completion report to the user's mobile phone 12 (S114). The mobile phone 12 receives this and displays an invalidation completion report message on the screen (S116). Here, as a modification of the present embodiment, the validation completion report and the invalidation completion report from the financial institution related server 14 are first received by the card management system 10, and then directed from the card management system 10 to the user terminal 12. It is good also as being transmitted. In such a case, the attribute items stored in the user information database 42 used by the card management system 10 include “card valid / invalid state” information similar to the account information database 18. The information may be rewritten when the validation completion report or invalidation completion report from the related server 14 is received.

--- Processing flow example 2 ---
FIG. 5 is a flowchart showing an execution procedure example 2 of the card management method of the present embodiment. Here, a description will be given of processing executed when a user who has forgotten to take the user terminal 12 such as the cellular phone 12 and goes out to validate the card in an invalid state in order to withdraw cash from the financial institution terminal 16. To do.

  First, the user inserts a card into the financial institution terminal 16 and requests a cash withdrawal transaction from the input / output device 20 of the financial institution terminal 16. At that time, together with the cash withdrawal request, the card information (account information) recorded on the card and the password of the card entered by the user from the input / output device 20 of the financial institution terminal 16 are transmitted to the financial institution related server 14. (S200). The financial institution related server 14 receives these user authentication information (account information and card password) in the same manner as in the normal case, that is, in the same way as when the user is not a contractor of the card management service company of this embodiment. Then, the user authentication process is executed by collating with the account information and password stored in advance in the account information database 18 (S202).

  As a result of the authentication process, if the authentication is OK, that is, if the authentication is successful (S202: Yes), the financial institution related server 14 accesses the account information database 18 and executes a process of checking the card validity / invalidity state (S204). ). If the authentication process fails as a result of the authentication process in step S202 (S202: No), a message indicating that the authentication has failed is transmitted to the financial institution terminal 16 to notify the user (S206).

  As a result of checking whether or not the card status is invalid in step S204, if the card status is valid (S204: No), a message indicating that cash can be withdrawn is sent to the financial institution terminal 16 to notify the user. (S208). If the card status is invalid (S204: Yes), the financial institution related server 14 then sends a message to the financial institution terminal 16 to notify the user that the card status is invalid (S210). . In response to this, the financial institution terminal 16 displays on the screen that the card status is invalid, and displays a message on the input / output device 20 asking the user whether or not to validate the card. After that, it is determined whether or not to send a card validation request (S212).

  If there is no card activation request from the user (S212: No), a message indicating that cash cannot be withdrawn is displayed on the input / output device 20 (S214). If there is a card validation request from the user (S212: Yes), the financial institution terminal 16 displays a login information input request screen on the input / output device 20 (S216). Next, login information input by the user from the input / output device 20 is transmitted to the card management system 10 together with an activation request (S218).

  The authentication processing unit 44 of the card management system 10 receives the login information transmitted from the financial institution terminal 16 and acquires the login information included in the user authentication information registered in advance in the user information database 42. The user authentication process is executed by comparing the login information (S220). As a result of the authentication process, if the authentication is OK, that is, the authentication is successful (S220: Yes), the activation instruction transmission processing unit 46 of the card management system 10 transmits the card activation instruction to the financial institution related server 14 (S222). . As a result of the authentication process, if the authentication fails (S220: No), a message indicating that the authentication has failed is transmitted to the financial institution terminal 16 to notify the user (S224).

  When the financial institution related server 14 receives the card activation instruction from the card management system 10, the financial institution related server 14 sets the card to an activation process, that is, sets the card account to a usable state (S226). At that time, the financial institution related server 14 also rewrites the “card valid / invalid state” information in the account information database 18. Next, the financial institution related server 14 transmits a message indicating that the validation process is completed and the cash withdrawal transaction is possible to the financial institution terminal 16 (S228). The financial institution terminal 16 receives this and displays a cash withdrawal screen on the input / output device 20 (S230). Thus, the user can perform a cash withdrawal transaction (S232) from the financial institution terminal 16.

  According to the present embodiment, the card is invalidated by the card invalidation request transmitted from the user terminal 12, for example, forgetting to carry the mobile phone 12 or the portable terminal, etc. Even in this case, since the card can be validated from the financial institution terminal 16, the conventional inconvenience that the user himself / herself cannot use the account of the card is solved, and the card management system is further improved. 10 convenience can be improved.

  Since the user authentication information includes login information, it is possible to reliably prevent the card from being illegally used by the third party by the third party.

  As mentioned above, although embodiment of this invention was described concretely based on the embodiment, it is not limited to this and can be variously changed in the range which does not deviate from the summary.

It is a network block diagram including the card management system in this embodiment. It is a figure which shows the example of a data structure of the user information database in this embodiment. It is a figure which shows the example of a data structure of the account information database in this embodiment. It is a flowchart which shows the implementation procedure example 1 of the card management method in this embodiment. It is a flowchart which shows the implementation procedure example 2 of the card management method in this embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Card management system 12 User terminal 14 Financial institution related server 16 Financial institution terminal 20 Input / output device 42 User information database 44 Authentication process part 46 Validation support transmission process part

Claims (6)

A system for managing the valid / invalid state of a financial institution card owned by a user,
In response to the validation request input from the input / output device of the financial institution terminal to validate the card that has been invalidated by the invalidation request transmitted from the user terminal, the card is input from the input / output device of the financial institution terminal. An authentication processing unit that receives user authentication information from the financial institution terminal, obtains user authentication information registered in advance in a user information database, and executes user authentication processing by comparing these user authentication information;
In response to the result of the authentication processing in the authentication processing unit, an activation instruction transmission processing unit that transmits the card activation instruction to the financial institution related server that determines the valid / invalid state of the card;
A card management system comprising: In claim 1,
The user authentication information registered in advance in the user information database includes login information to be input from the user terminal when the user logs into the card management system from the user terminal,
The user authentication processing by the authentication processing unit receives the login information input from the input / output device of the financial institution terminal together with the validation request from the financial institution terminal, and is registered in advance in the user information database. A card management system comprising: a login information authentication process executed by acquiring the login information included in the user authentication information and comparing the login information. In claim 1 or 2,
The user authentication information registered in advance in the user information database includes user biometric information,
The user authentication processing by the authentication processing unit receives the biometric information input from the input / output device of the financial institution terminal together with the validation request from the financial institution terminal, and is registered in advance in the user information database. A card management system including a biometric authentication process executed by acquiring the biometric information included in the user authentication information and comparing the biometric information. In claim 1,
The card management system, wherein the validation instruction transmission processing unit transmits the validation instruction when the result of the authentication process is affirmative. A method of managing the valid / invalid state of a financial institution card owned by a user on a computer,
In response to the validation request input from the input / output device of the financial institution terminal to validate the card that has been invalidated by the invalidation request transmitted from the user terminal, the card is input from the input / output device of the financial institution terminal. Receiving user authentication information from the financial institution terminal, obtaining user authentication information registered in advance in the user information database, and performing user authentication processing by comparing these user authentication information,
When the result of the authentication process is authentication OK, the card validation instruction is transmitted to the financial institution related server that determines the valid / invalid state of the card.
A card management method. A program for causing a computer to execute a management method of valid / invalid state of a financial institution card owned by a user,
In response to the validation request input from the input / output device of the financial institution terminal to validate the card that has been invalidated by the invalidation request transmitted from the user terminal, the card is input from the input / output device of the financial institution terminal. Receiving user authentication information from the financial institution terminal, obtaining user authentication information registered in advance in a user information database, and performing user authentication processing by comparing these user authentication information; and
A step of transmitting a card activation instruction to a financial institution related server that determines the valid / invalid state of the card when authenticated by the authentication process;
A card management program.

Images