JP2007299109A - Automatic transaction system, automatic transaction method, server, terminal, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic transaction system in which a user can easily input a personal identification number, and which employs a personal identification number authentication method that includes little risk of eavesdropping or guessing, without substantially changing a conventional automatic transaction system. <P>SOLUTION: Personal identification number information is inputted by an input means 33 of an automatic transaction terminal 1 combined with a transaction amount as transaction amount information. The transaction amount information is sent to a server 5, and a judgment means 53 judges whether the information matches the personal identification information stored in a personal identification information storage means 55 together with an account number, and sends the judgement result to the automatic transaction terminal 1. When the transaction amount information matches the personal identification information, the transaction processing is executed by a money processing means 37 for a transaction amount included in the transaction amount information. The personal identification information can be either a fixed numeric value or a dynamic numeric value decided and registered by a user. The personal identification information is inputted with the personal identification information embedded in the last 3 digits of the transaction amount in the transaction processing with a minimum unit of 1,000 yen. Or the personal identification information may be inputted with the personal identification information added to the head or the end of the transaction amount. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an automatic transaction system that allows a financial institution such as a bank to input a personal identification number to authenticate a user and determine whether or not a transaction is possible.

Conventional automatic teller machine (ATM: automated teller)
machine), when depositing or saving money to another account, insert a portable recording medium such as a magnetic card or IC card into the ATM, and then enter the PIN to verify the validity of the portable recording medium. The transaction is executed after authenticating that he / she is a proper owner.
A four-digit number is often used as a personal identification number, and many portable storage media owners must provide an easy-to-understand number such as their own date of birth or telephone number so that the personal identification number is not forgotten. I use it. In such a case, many illegal transactions are caused by loss or skimming of portable recording media.
In order to prevent such unauthorized use of the portable recording medium, a system has been proposed in which a dummy PIN code is entered when the PIN number is input to improve safety (see Patent Document 1).

JP 2002-150242 A

  However, when entering a personal identification number in this way, even if it is entered multiple times or a dummy personal identification number is entered, there is no change in entering the personal identification number directly. There is a risk of being or guessed. Further, it is complicated to input a plurality of times.

  Furthermore, in order to realize such a method for verifying a personal identification number, it is necessary to replace or drastically change the program for inputting the personal identification number in the ATM or the personal identification authentication program in the host computer. There is a problem that it takes time and cost to develop a system.

  The present invention has been made in view of the above problems, and the object of the present invention is to provide a password authentication method that allows a user to easily input a password and further reduces the risk of eavesdropping and guessing. It is to provide an automatic transaction system having it without significantly changing the conventional automatic transaction system.

  1st invention for solving the subject mentioned above is an automatic transaction system which consists of a terminal and the server connected with the terminal via the communication network, Comprising: A terminal makes a user input transaction amount information A transaction amount information transmission unit for transmitting transaction amount information to the server, and a money processing unit for performing transaction processing on the transaction amount of the transaction amount information, and the server receives the transaction amount information for receiving the transaction amount information. Means for determining whether or not the money processing means can be executed, the transaction amount information is information that combines the transaction amount and the personal identification information, and the determination unit is received by the transaction amount information receiving unit. The password information included in the transaction amount information is compared with the password information registered in advance by the user. If they match, the determination result can be executed, and if they do not match, the determination result cannot be executed. Means is an automatic transaction system, wherein the determination result to execute only transaction processing when the executable. Here, the money processing means is a withdrawal process or a transfer process.

The user registers the password information in advance and, when performing a transaction, enters the password information included in the transaction amount information from the terminal, and the server stores the password information included in the transaction amount information. Is compared with the pre-registered personal identification information, and the user is authenticated only when they match, and the transaction can be executed.
Since the password information can be input by including it in the transaction amount information, the input process is easy. Further, since the password information is input in the transaction amount information, it is difficult to wiretap or guess the password information.

The registration processing terminal includes a registration processing terminal for performing pre-registration of the personal identification information, and the registration processing terminal transmits a personal identification information registered by the registration processing unit to the server. Preferably, the server includes password information storage means for receiving the password information transmitted by the password information transmitting means and storing the password information.
Further, the terminal has a registration processing means for registering the password information by the user and a password information transmitting means for transmitting the password information registered by the registration processing means to the server. The server transmits the password information by the password information transmitting means. A password information storage means for receiving the password information and storing the password information.
A user inputs password information at the time of registration via a registration processing terminal or terminal installed at a window or the like, and the input password information is stored in the server together with account information and the like.

  The password information is preferably a second password registered in addition to the normal password. In addition to authentication with a normal password, authentication with another password information is performed, so that the safety is increased.

Here, when the transaction unit amount of the transaction amount is N digits, the password information is a numerical value of (N-1) digits, and the input means places the (N-1) digits below the transaction amount of the transaction amount information. The user is prompted to embed the password information, and the determination means compares the password number registered in advance with the lower (N-1) digits of the transaction amount information and outputs a determination result.
The password information is a (N-1) digit value when the transaction unit amount of the transaction amount is N digits, and the input means calculates a (N-1) digit value from the transaction amount of the transaction amount information. The user inputs the subtracted numerical value, and the determination means executes the determination result when the lower (N−1) digit of the value obtained by adding the pre-registered password information to the transaction amount information becomes “0”. If it is not “0”, the determination result may not be executed.
The above input means is intended for the case of transaction processing in units of 1,000 yen or the like normally performed by withdrawal or the like, and causes the password information to be embedded and input in the (N-1) digits of the transaction amount. As a result, the transaction amount and the password information can be easily integrated and input, and the password information can be prevented from being wiretapped or guessed.

Further, the password information is a positive integer value, and the input means adds the password information to the end of the transaction amount of the transaction amount information and inputs the information, and the determination means includes the password information registered in advance and the end of the transaction amount information. The determination result may be executable when the numerical values are equal.
The user can input the password information following the transaction amount, and is easy to input, and since the password information is integrated with the transaction amount, the password information is not easily eavesdropped or guessed.
Furthermore, the password information is a positive integer value, and the input means adds the password information to the front of the transaction amount of the transaction amount information and inputs the information, and the determination means includes the password information and the transaction amount information registered in advance. The determination result may be executable when the numerical values added to are equal.

The personal identification information may be a dynamic numerical value determined at the time of prior registration. The dynamic numerical value is, for example, a date, day of the week, time, or a combination thereof.
By making the password information dynamic rather than fixed, it is possible to prevent the password information from being guessed.

  The second invention is an automatic transaction method comprising a terminal and a server connected to the terminal via a communication network, and the terminal causes the user to input transaction amount information that combines the transaction amount and the password information. The process, the step of transmitting the transaction amount information input at the terminal to the server, the step of receiving the transaction amount information by the server, and the password information included in the transaction amount information received by the server by the user in advance An automatic transaction method characterized by comprising a step of transmitting a determination result of coincidence or mismatch to a terminal in comparison with registered password information, and a step of executing a transaction process only when the determination result is coincidence. It is.

A third invention is a server connected to a terminal via a communication network,
Compare the amount information receiving means for receiving transaction amount information including the PIN information sent from the terminal and the PIN information included in the transaction amount information with the PIN information registered in advance. In the case of a mismatch, the server includes a determination unit that determines a determination result indicating that the transaction cannot be executed.
The fourth invention is a program for causing a computer to function as the server and the terminal.

  According to the present invention, by inputting the transaction amount information including the personal identification information, it is possible to provide a highly secure automatic transaction system that is easy to input personal identification information and is not easily eavesdropped or guessed. .

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a conceptual configuration diagram of an automatic transaction system 1 according to an embodiment of the present invention, FIG. 2 is a configuration diagram of the automatic transaction system 1, FIG. 3 is a flowchart showing a flow of processing, and FIG. FIG. 5 is an explanatory diagram of an example of password information and an example of an input method, and FIG. 6 is a diagram illustrating an example of registration of password information in a database.

As shown in FIG. 1, the automatic transaction system 1 includes a plurality of automatic transaction terminals (3-1 to 3-m) such as ATM, a plurality of registration processing terminals (7-1 to 7-n), and a server 5. It is configured to be connected via a communication line 9.
Automatic transaction terminals (3-1 to 3-m) are terminals installed in bank stores and the like for users to insert cards 11 and passbooks and perform transaction processing such as cash withdrawal, deposit, and transfer. It is. The server 5 is installed in a calculation center of a financial institution such as a bank, and performs user account management processing. On the other hand, the registration processing terminals (7-1 to 7-n) are installed at, for example, a bank store window and used by bank employees to perform account opening processing or the like, or the Internet. A terminal such as a personal computer connectable to a network. The card 11 is a portable recording medium such as a magnetic card or an IC card, and is used at the time of transaction processing such as withdrawal and transfer of deposits and savings in a financial institution such as a bank.

In order to realize the automatic transaction system 1 of the present embodiment, the automatic transaction terminal (3-1 to 3-m) includes an input unit 33, a transaction amount information transmission unit 35, and a money processing unit 37. The input means 33 allows the user to input the password information together with the transaction amount. The transaction amount and the password information input by the input unit 33 are sent to the server 5 via the communication line 9 by the amount information transmission unit 35.
The server 5 includes a transaction amount information receiving unit 51, a determination unit 53, and a password information storage unit 55, and the transaction amount transmitted by the transaction amount information transmission unit 35 of the automatic transaction terminal (3-1 to 3-m). And the password information are received by the transaction amount information receiving means 51, and the determination means 53 compares the password information in the received information with the password information stored in the password information storage means 55 in advance, and if it matches, If the determination result that the personal identification information is authenticated does not match, the determination result indicating that authentication is impossible is transmitted to the automatic transaction terminal (3-1 to 3-m) that transmitted the amount information via the communication line 9. To do.
The money processing means 37 of the automatic transaction terminal (3-1 to 3-m) receives the determination result transmitted by the determination means 53 of the server 5, and based on the transaction amount when the password information is authenticated. Execute transaction processing. On the other hand, when the personal identification information is not authenticated, processing for canceling execution of the transaction processing is performed.

On the other hand, the registration processing terminals (7-1 to 7-n) have a registration processing means 73 and a password information transmission means 75. The registration processing unit 73 executes a user password information registration process, and the registered content is transmitted to the server 5 via the communication line 9 by the password information transmitting unit 75.
The transmitted password information is stored and managed in the server 5 by the password information storage means 55 of the server 5.

Next, the hardware configuration of the automatic transaction system 1 will be described. FIG. 2 is a hardware configuration diagram of the automatic transaction system 1 shown in FIG.
The server 5 includes a control unit 501 such as a CPU (Central Processing Unit), a storage unit 503 such as a RAM (Random Access Memory), a ROM (Read Only Memory), and an HDD (Hard Disc Drive), and an output unit such as a display and a printer. An input / output unit 505 including an input unit such as a keyboard, a communication unit 507 including a modem or a LAN board for connecting to the communication line 9, a database 509, and the like are included.
Transaction amount information receiving means 51 and determination means 53 in the server 5 shown in FIG. 1 are programs executed by the control unit 501 and the communication unit 507, and are stored in the storage unit 503. The password information storage means 55 is placed in the database 509, and the password information is stored together with the account number, other account information, and transaction information.

The automatic transaction terminal 3 is also a computer system including a control unit 313 such as a CPU, a storage unit 315 such as a RAM, a ROM, and an HDD, and a communication unit 317 including a modem and a LAN board for connection to the communication line 9. It consists of various hardware and software that communicate with users.
That is, a display / input unit 311 such as a touch panel display, a cash input / output unit 309 for taking in and out banknotes and coins, a transaction statement issuing unit 307 for printing and issuing a transaction statement 15, a card 11 loading and unloading, A card processing unit 305 for reading, a passbook processing unit for loading / unloading, reading, and printing of the passbook 13, a voice guidance / call processing unit 301 such as voice guidance and a call button, and the like.
The control unit 313 controls each of these parts. The control program and transaction processing program are stored in the storage unit 315. The input means 33, transaction amount information transmission means 35, and money processing means 37 shown in FIG. 1 are also programs, stored in the storage unit 315, and executed by the control unit 313 and the communication unit 317.

  Similarly, the registration terminal device 7 is a computer system including a control unit 701, a storage unit 703, an input / output unit 705, and a communication unit 707. The registration processing unit 73 and the password information transmission unit 75 shown in FIG. 1 are programs and are stored in the storage unit 703 or sent from the server 5 via the communication line 9 and the communication unit 707, and the control unit 701. It is executed by. The input / output unit 705 includes a display device such as a display, an output device such as a printer, and an input device such as a keyboard and a mouse. When the registration terminal device 7 is installed at a financial institution or the like, an input device with a numeric key for allowing the user to input a password or the like may be installed.

FIG. 3 is a flowchart showing a process flow of the automatic transaction system 1.
In order to perform automatic transactions with the automatic transaction terminal 3, first, the user must open an account, own the card 11 used when using the account, and register a normal password. This is a process currently performed in a normal financial institution account.
First, the user applies for opening an account at a bank or other financial institution, and registers a normal 4-digit password (referred to as the first password). In this case, the person in charge at the window opens the account based on the user's application at the window registration processing terminal 7, and the user inputs the first password using, for example, a numeric key input device (s100). The input first password (for example, “9876”) is sent to the server 5 together with the account number (for example, “123451”) (s101), and the account number, first password, and account are stored in the database 509 in the server 5. Storer information, balance information, transaction information, and the like are stored (s102).
The registration of the first personal identification number may be performed by the user using the numeric key input device or the like as described above, but may be registered by a predetermined method inside the financial institution.
After these account opening processes are completed, the card 11 is issued to the user.

Normally, cash withdrawal processing and transfer processing from an account can be executed by registering the first password and issuing the card 11.
That is, the user inserts the card 11 into an automatic transaction terminal 3 such as an ATM, selects and inputs a transaction type such as withdrawal / transfer, in accordance with an instruction of the display input unit 311 or voice guidance, The first password (“9876”) is input according to the instruction. The account number (“123451”) of the inserted card 11 and the input first password are sent to the server 5. The server 5 receives this information by the communication unit 507, and the control unit 501 stores it in the storage unit 503. The authentication process for the first password is executed in accordance with the stored program. In the authentication process, a first password corresponding to the account number is searched from the database 509 and compared with the received first password. If they match, the authentication process is completed and information indicating that the transaction process can be executed is transmitted to the automatic transaction terminal 3, and the automatic transaction terminal 3 receives the information and executes the transaction process. For example, if it is a withdrawal, the amount to be withdrawn is input to the user, and if the remaining amount and the upper limit amount are not exceeded, cash is output to the cash input / output unit 309.

Normally, the authentication process is performed using only the first personal identification number, but a user who thinks that the first personal identification number alone is not sufficient can register other personal identification information. Further, all users may register password information different from the first password.
Next, registration processing of password information different from the first password will be described.
As shown in FIG. 3, the user registers the password information at the registration processing terminal 7. That is, after confirming that the user is the account owner, the input is performed using the keyboard of the input / output unit 705, the numeric key input device, or the like (s150). The password information is, for example, a three-digit numerical value (for example, “123”). The entered password information (“123”) is sent to the server 5 via the communication unit 707 and the communication line 9 together with the account number (“123451”) and the like (s151), and the account number (“123451”) is stored in the database 509. And the first password (“9876”) and the like (s152).

  After the password information registration process as described above is completed, the password information can be used in addition to the first password. By executing the transaction process only when the password information is correct in addition to the first password, it is possible to further prevent the transaction process due to fraud such as skimming.

Next, a flow of transaction processing using the password information will be described.
As shown in FIG. 3, first, the authentication process by a 1st PIN is performed similarly to the conventional transaction using a card | curd.
That is, first, the type of transaction (“withdrawal”, “deposit”, “balance confirmation”, “passbook entry”, “transfer”, etc.) is displayed on the display / input unit 311 of the touch panel display of the automatic transaction terminal 3. Then, the type of transaction (for example, “drawer”) is selected by the user (s200). Next, the card 11 is inserted into the card processing unit 305 (s201). At this time, in addition to the card 11, the passbook 13 may be inserted into the passbook processing unit 303. Then, the first password (“9876”) is inputted (s202), and the first password (“9876”) together with the account number (“123451”) known from the card 11 and the passbook 13 is input to the communication unit 317 and the communication line. 9 to the server 5.
The server 5 receives the account number and the first password (s204), searches the database 509, extracts the correct first password corresponding to the account number (“123451”, and sends the sent first password ( “9876”) is collated (s205), and if it matches, the processing result is transmitted to the automatic transaction terminal 3 (s206).

  The automatic transaction terminal 3 receives the determination result (s207), and when the determination result indicates that the process cannot be continued (No in s208), the transaction is stopped (s217). For example, when the authentication of the first password is unsuccessful, the processing of s200 to s208 can be repeated several times (for example, three times), and the transaction is canceled when the wrong first password is input several times. You may do it.

If the determination result is that processing can be continued (s208 is allowed), password information is further input (s209).
FIG. 4 is a display example of the display / input unit 311 for inputting the password information. This is an example of a method for inputting the amount and the second password together. The display / input unit 311 includes a numerical key 321, a correction key 323 for correcting the input numerical value, a partial exchange key 327 for requesting a partial withdrawal of 1000 yen bills, an input numerical value display 329, For example, in the case of a touch panel display, the user can input information by touching the displayed key parts (321, 323, 325, 327).
In the automatic transaction terminal 3 that is currently operating, when the transaction type is withdrawal, 1000 yen is the minimum unit, and cash less than 1000 yen cannot be withdrawn. In such a case, since the last three digits of the amount to be withdrawn (for example, 15000 yen) are not used, the password information is embedded and input here.
In this case, a value “15123” obtained by adding “123” as the password information to the last 3 digits of 15000 yen as the amount to be withdrawn is input by the numerical key 321, and the transaction including the amount and the password information (second password number). The amount information.

The input transaction amount information “15123” is transmitted to the server 5 via the communication unit 317 and the communication line 9 (s210). At this time, the account number is also transmitted.
The server 5 receives the transaction amount information (s211), searches the database 509, extracts the correct password information (second password) corresponding to the account number (“123451”), and sends the transaction amount information sent thereto. The last three digits of ("15123") are collated as password information (s212), and if they match, the processing result is sent to the automatic transaction terminal 3 (s213).

  The automatic transaction terminal 3 receives the determination result (s214), and when the determination result indicates that the process cannot be continued (No in s215), the transaction is stopped (s218). When the determination result is that processing can be continued (s215 is possible), transaction processing (for example, withdrawal processing) is executed, and the card 11 and the bankbook 13 or the statement 15 in which the transaction content is recorded are output and the processing is terminated (s216). ). That is, the cash input / output unit 309 outputs the amount (15000 yen) in which “000” is embedded in the personal identification information (“123”) of the transaction amount information (“15123”).

  As described above, by using another password information in addition to the first password, and performing the authentication process, it is possible to prevent an illegal act from occurring. Further, since the password information is embedded in the transaction amount and input, there is little possibility of reading or guessing the password information, and a highly secure system can be constructed. It is also easy for the user to use the PIN information together with the amount information because it can be easily input.

In the above explanation, assuming a transaction process with a transaction unit amount of 1000 yen, a fixed 3-digit number determined and registered by the user is used as the password information, and the lower 3 digits of the transaction amount information are used as the password. The method of embedding and inputting information has been described, but the number of digits of the password information is not limited to three digits. If the automatic transaction system of the present invention is used for a currency other than Japan, for example, if the transaction unit amount is N digits, use a numerical value of (N-1) digits or less, preferably (N-1) digits as the secret information. can do.
Also, the type of password and the input method are not limited to this.

As shown in FIG. 5, as the personal identification information, a dynamic personal identification number can be used in addition to the fixed personal identification number (a numerical value determined and registered by the user, for example, “123”) as described above. .
The dynamic password is, for example, date, transaction time, day of the week + date, date + day of the week, etc., and when the password is registered, the user uses either the fixed password or the dynamic password as the password. When the dynamic personal identification number is used, the dynamic personal identification number is selected and registered in the database 509 of the server 5 in advance.
FIG. 6 is a diagram illustrating an example of registration of password information in the database 509.
The database 509 is provided with items for storing a password information type and password information together with account information such as an account number, first password, address / name / phone number / transaction history / balance. For the password information type item, for example, “0” is used when a fixed password is used, “1” is used when a date is used with a dynamic password, “2” is used when a transaction time is used, and a day of the week and date are used. If the date and day of the week are used, “4” is registered. Also, in the password information item, a second password (for example, “123”) determined by the user is registered only when a fixed password is used.

The method for using the dynamic personal identification number will be described below.
After executing the processing of s200 to s208 in FIG. 3 at the automatic transaction terminal 3, the user inputs transaction amount information including the transaction amount and the password information as shown in the display example of FIG. If the date is used as the personal password, the registered user inputs the password information such as “025” if the date is 25th, or “001” if the date is 25th. That is, if the withdrawal amount is 15000 yen and 25 days, “15025” is entered.
This transaction amount information is sent to the server 5, but the determination means 53 of the server 5 searches the database 509 by account number, examines the personal identification information type used by this user, and if it is a date ("1") Then, authentication processing is performed with the password information received as the password information of the day.

If it is registered that the transaction time is used as the password information, if the time is 14:25, “014” is input as the password information. When a day of the week + date is used, each day of the week is represented by a numerical value (for example, Sunday: 1, Monday: 2, Tuesday: 3,..., Saturday: 7). And For example, if it is Monday of 30th, it is “230”. On the other hand, if the date + day of the week is the password information, it is “302” if Monday is the 30th.
As described above, by using the dynamic personal identification number as the personal identification information, the personal identification information changes and it is possible to prevent unauthorized transactions.

Next, another input method will be described.
In the case of a transaction with a minimum unit of 1000 yen, in addition to the method of using “the value obtained by adding 3-digit password information to the transaction amount” described above as the transaction amount information, The value obtained by subtracting information may be input as transaction amount information. That is, when the transaction amount is 15000 yen and the password information is “123”, the transaction amount information is input as “14877”.
The automatic transaction terminal 3 may specify the input method, or the user may specify the input method of the password information when registering the password information.
When the automatic transaction terminal 3 designates the type of the input method, when the password information is transmitted to the server 5 (s210), the type of the input method may be transmitted together with the account number and the password information.
On the other hand, when the user designates an input method, the type of the input method is also registered at the time of registration of the password information, and an item of “type of input method” is provided in the database 509 in the server 5 to provide the account number and password information. In addition, the type of input method is stored.

When the type of the input method is “a value obtained by subtracting the 3-digit password information from the transaction amount”, the determination unit 53 of the server 5 searches the database 509 using the account number as a key, extracts the password information, Add the value of the extracted password information to the value of the transaction amount information, and if the last three digits of the value is “000”, it is judged that the authentication has been made possible (OK), otherwise it is not permitted (No And the determination result is transmitted to the automatic transaction terminal 3.
When the determination result is “OK”, the automatic transaction terminal 3 processes the amount obtained by rounding up the last three digits of the transaction amount information input by the user as the transaction amount.
When entering the above “value obtained by subtracting the 3-digit password information from the transaction amount” as transaction amount information, the transaction is the same as when inputting the “value obtained by adding the 3-digit password information to the transaction amount”. When the transaction unit amount of the amount is N digits, the password information may be (N-1) digits.

Further, a method of inputting the password information at the end of the transaction amount or a method of inputting the password information at the beginning of the transaction amount may be used. In this case, the number of digits of the password information may be any number.
When adding the password information to the end of the transaction amount, if the transaction amount is 45230 yen and the password information is “123”, “45230123” is input. On the other hand, when adding personal identification information to the head of the transaction amount, “12345230” may be input. The determination unit 53 of the server 5 determines the “type of input method” from the information sent from the automatic transaction terminal 3 or the information specified in the database 509, and separates the transaction amount information into transaction amount and password information. Authenticate the password information.
As described above, if password information can be added and input at the end or the beginning of the transaction amount, a transfer process in which the transaction unit is not limited to 1000 yen can be realized.

  In addition, a delimiter such as “*” may be inserted between the transaction amount and the password information. In this case, a delimiter key may be added to the numerical value input key 321. For example, if the transaction amount is 45230 yen and the password information is “123”, “45230 * 123” is input. The automatic transaction terminal 3 sends the password information to the server 5 with the front part of the transaction amount as * and the rear part as the password information, and executes the authentication process of the password information.

As described above, by making it possible to input the transaction amount and the password information at the same time, it becomes difficult for others to read and guess the password information, which helps to prevent fraud.
Further, the password authentication method of the present embodiment can be implemented by making small changes and additions to the program without significantly changing the existing automatic transaction processing program, and is easy to implement.

The present invention is not limited to the embodiment described above, and various modifications are possible, and these are also included in the technical scope of the present invention.
For example, in the present embodiment, the registration processing terminal 7 is a terminal installed at a financial institution, but the automatic transaction terminal 3 is provided with a means for registering the password information of the registration processing terminal 7 to automatically The transaction information may be registered at the transaction terminal 3. In that case, the automatic transaction terminal 3 may have the password information registration processing function shown in the processing flow of the registration processing terminal 7 in FIG. 3 as a program.
Further, the password information may be registered on a terminal such as a user's personal computer. In this case, a password registration function may be added to functions such as Internet banking.
In addition, other input methods combining the transaction amount and the password information may be considered, for example, “password information + separator + transaction amount”, and these are also included in the technical scope of the present invention.
Further, in the description of the present embodiment, after the authentication process of the first personal identification number that is normally used, another personal identification information is combined with the transaction amount to authenticate the personal identification information. The first personal identification number may be input in combination with the transaction amount.
Furthermore, in the method of adding the password information to the end or the beginning of the transaction amount, or the method of inputting the transaction amount and the password information by entering a separator, the password information need not be limited to three digits. .

Functional configuration diagram of an automatic transaction system 1 according to an embodiment of the present invention Configuration diagram of the automatic transaction system 1 of FIG. The flowchart which shows the flow of processing of automatic transaction system 1 Display example of display / input unit 311 Explanatory diagram of the type of password information and the type of input method Configuration example of database 509

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ......... Automatic transaction system 3 ......... Automatic transaction terminal 5 ......... Server 7 ......... Registration processing terminal 9 ......... Communication line 11 ......... Card 33 ......... Input means 35 ......... Transaction amount information Transmission means 37... Money processing means 51... Transaction amount information receiving means 53... Determination means 73... Registration processing means 75 ... .. PIN information transmission means 311. ... database

Claims (17)

An automatic transaction system comprising a terminal and a server connected to the terminal via a communication network,
The terminal has an input means for allowing a user to input transaction amount information including transaction amount and personal identification information;
Transaction amount information transmitting means for transmitting the transaction amount information input by the input means to the server;
The server includes transaction amount information receiving means for receiving the transaction amount information;
Judgment of comparing the password information included in the transaction price information received by the transaction price information receiving means with the password information registered in advance by the user, and transmitting a determination result of match or mismatch to the terminal Means,
The automatic transaction system, wherein the terminal executes a transaction process only when a determination result sent by the determination unit matches. A registration processing terminal for pre-registering the personal identification information;
The registration processing terminal has registration processing means for the user to register the personal identification information, and personal identification information transmission means for transmitting the personal identification information registered by the registration processing means to the server,
2. The automatic transaction system according to claim 1, wherein the server includes a password information storage unit that receives the password information transmitted by the password information transmission unit and stores the password information. The terminal includes registration processing means for registering the personal identification information by the user, and personal information transmission means for transmitting the personal identification information registered by the registration processing means to the server,
2. The automatic transaction system according to claim 1, wherein the server includes a password information storage unit that receives the password information transmitted by the password information transmission unit and stores the password information.   2. The automatic transaction system according to claim 1, wherein the personal identification information is a second personal identification number registered in addition to a normal personal identification number.   When the transaction unit amount of the transaction amount is N digits, the password information is a numerical value of (N-1) digits, and the input means places the (N-1) digits below the transaction amount of the transaction amount information. The user inputs to embed the personal identification information, and the determination means compares the personal identification number registered in advance with the lower (N-1) digits of the transaction amount information and outputs a determination result. The automatic transaction system according to claim 1, wherein:   When the transaction unit amount of the transaction amount is N digits, the password information is a numerical value of (N-1) digits, and the input means calculates the (N-1) digits from the transaction amount of the transaction amount information. When the user inputs a numerical value obtained by subtracting a numerical value, and the determination unit adds “0” to the lower (N−1) digit obtained by adding the previously registered personal identification information to the transaction amount information. The automatic transaction system according to claim 1, wherein the determination result is executable, and if the determination result is not "0", the determination result is not executable.   The personal identification information is a positive integer value, and the input unit adds the personal identification information to the end of the transaction amount of the transaction amount information, and the determination unit includes the personal identification information registered in advance and the transaction The automatic transaction system according to claim 1, wherein the determination result is executable when the numerical values at the end of the amount information are equal.   The personal identification information is a positive integer value, and the input unit adds the personal identification information to the front of the transaction amount of the transaction amount information and inputs the personal identification information. The automatic transaction system according to claim 1, wherein the determination result is executable when the numerical values added before the transaction amount information are equal.   The automatic transaction system according to claim 1, wherein the personal identification information is a dynamic numerical value determined at the time of prior registration.   9. The automatic transaction system according to claim 8, wherein the dynamic numerical value is a date, a day of the week, a time, or the like.   The automatic transaction system according to claim 1, wherein the money processing means is a cash withdrawal process for withdrawing the transaction amount.   2. The automatic transaction system according to claim 1, wherein the money processing means is a transfer process for transferring the transaction amount to another account. An automatic transaction method comprising a terminal and a server connected to the terminal via a communication line network,
The terminal allows the user to input transaction amount information including transaction amount and personal identification information; and
Transmitting the transaction amount information input at the terminal to the server;
The server receiving the transaction amount information;
Comparing the password information included in the transaction amount information received by the server with the password information registered in advance by the user, and transmitting a determination result of match or mismatch to the terminal;
The said terminal consists of the process of performing a transaction process only when the said determination result is in agreement, The automatic transaction method characterized by the above-mentioned. A server connected to a terminal via a communication network,
Transaction amount information receiving means for receiving transaction amount information including transaction amount and password information transmitted from the terminal,
Password information storage means for storing the password information registered in advance by a user;
The password information included in the transaction price information received by the transaction price information receiving means is compared with the password information stored in the password information storage means, and a determination result of match or mismatch is transmitted to the terminal And a determination unit that performs the determination. A terminal connected to a server via a communication network,
An input means for allowing a user to input transaction amount information including transaction amount and personal identification information;
Transaction amount information transmitting means for transmitting the transaction amount information input by the input means to the server;
A terminal that executes a transaction process only when a determination result of the personal identification information transmitted from the server matches.   The program for functioning a computer as a server of Claim 14.   The program for functioning a computer as a terminal of Claim 15.

Images