JP2007317094A - Automatic teller machine - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an automatic teller machine which is capable of suppressing leakage of personal information due to a worker or a third party who has browsed journal data. <P>SOLUTION: The automatic teller machine includes a card reader part 104 for reading biometric information of an operator from an IC card where biometric information is stored, a biometric information acquisition part 105 for acquiring the biometric information of the operator, a storage part 114 where journal data being a history of user's transaction operations is stored, an input part 103 for accepting the operator's input operation, and a control part 115 for controlling respective parts. The control part authenticates the operator to permit output of the journal data in response to agreement between biometric information read from the IC card and biometric information acquired by the biometric information acquisition part. When a plurality of operators, whose biometric information read from IC cards agree with biometric information acquired by the biometric information acquisition part, are detected, the control part permits output of the journal data. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an automatic transaction apparatus installed in a financial institution or the like, and particularly relates to an access process to customer information stored in the automatic transaction apparatus.

  When an automatic transaction apparatus is used for transactions with financial institutions, history information such as the contents of the transaction, image information of the card used for the transaction, and a photographed image of the customer is stored in the automatic transaction apparatus as electronic data. Is stored in the department.

  This electronic data is called an electronic journal and is used for investigating when a customer is damaged. Since this electronic journal contains customer personal information such as transaction details and card numbers, it is usually protected by using an IC card, password, etc., and can be browsed only by workers who have the authority to browse.

In addition, in order to prevent misuse such as impersonation, a countermeasure is taken so that an operator's operation history or a photographed image is recorded when browsing electronic data, and an operator can be identified when an accident occurs (Patent Document 1). reference).
JP 2004-318402 A

  In the conventional countermeasures against misuse when browsing electronic journals, by recording an operation history or a photographed image, spoofing of a third party or leakage of the journal data (personal information) by an operator who viewed the electronic journal data or the like. When it is detected, it is possible to identify the worker who has leaked after the leak accident. However, the leakage accident itself cannot be prevented. This invention is made | formed in view of such a problem, and provides the automatic transaction apparatus which can suppress the leakage of personal information by the said operator or a 3rd party.

  In order to solve the above problems, the present invention employs the following means.

A card reader unit that reads the biometric information from an IC card that stores the biometric information of the operator, a biometric information acquisition unit that acquires the biometric information of the operator, and a memory that stores journal data that is a history of transaction operations by the user An input unit that receives an input operation by an operator,
A control unit that controls each unit, and the control unit authenticates the operator and permits the output of the journal data when the biometric information read from the IC card matches the biometric information acquired by the biometric information acquisition unit. In the automatic transaction apparatus, the control unit permits the output of the journal data when detecting a plurality of operators whose biometric information read from the IC card matches the biometric information acquired by the biometric information acquisition unit.

  Since this invention is provided with the above structure, the automatic transaction apparatus which can suppress the leakage of personal information by the worker who browsed journal data, or a 3rd party can be provided.

  Hereinafter, the best embodiment will be described with reference to the accompanying drawings. FIG. 1 is a diagram for explaining an automatic transaction apparatus according to an embodiment of the present invention. In the figure, 101 is an automatic transaction apparatus, and 102 is a display unit composed of a liquid crystal or the like, which displays work guide information or electronic journal data for an operator. Reference numeral 103 denotes an input unit operated by an operator or an administrator thereof, and is configured by a keyboard or a touch panel. Reference numeral 104 denotes a card reader unit, which acquires information on an IC card that stores biometric information for performing biometric authentication of the worker or its manager, and image data of a card used by the worker or his / her manager. . Reference numeral 105 denotes a biometric information reading unit that acquires biometric information of an operator or an administrator necessary for biometric authentication.

  Reference numeral 106 denotes a camera unit that takes a photograph of the customer when making a transaction with the customer. Reference numeral 107 denotes a human sensor sensor that detects, for example, whether or not the worker is within an area where the automatic transaction apparatus can be operated. 108 is a banknote processing unit that performs banknote deposit and withdrawal transactions, 109 is a coin processing unit 109 and 110 that performs coin deposit and withdrawal transactions, a statement slip unit that prints and outputs a statement slip, 111 is a power supply unit, and 115 is It is the main control part which controls operation | movement of the whole automatic transaction apparatus.

  The main control unit 115 includes a CPU 112 that controls each unit, a memory 113 that temporarily stores data related to processing of each unit, and a storage unit 114 that stores electronic journal data. The storage unit 114 can be configured with an HDD, a CD-R drive, a DVD-MULTI drive, or the like.

  FIG. 2 is a diagram for explaining the details of the electronic journal data. Electronic journal data is data that stores transaction history information as described above, as shown in the figure, transaction history such as transaction date and time, transaction amount, transaction details, image of card used for transaction, taken at the time of transaction Provide customer photo data (portrait).

  3 and 4 are diagrams for explaining processing when browsing electronic journal data stored in the automatic transaction apparatus, and FIG. 4 is a diagram for explaining the details of the interrupt processing in step S211 of FIG.

  FIG. 5 is a browsing range designation screen displayed when the browsing range is designated, and is displayed on the display unit 102 in step S209 of FIG. FIG. 6 is an electronic journal data browsing screen, which is displayed on the display unit 102 in step S211 of FIG.

  In FIG. 3, the automatic transaction apparatus 101 stands by with an operation guidance screen displayed on the display unit 102. When the operator browses and operates the electronic journal data, first, in step S201, the operator operates the input unit 103 in accordance with the guidance screen displayed on the display unit 102, for example, “electronic journal browsing operation”. select.

  In step S <b> 202, the worker and the administrator insert the IC card storing the biometric authentication information into the card reader unit 104. At this time, the card reader unit 104 acquires biometric information registered by the worker and the manager from each IC card.

  In step S <b> 203, for example, “Please put your finger on the biological information reading unit” is displayed on the display unit 102. When the worker is guided by this display and places his finger on the biometric information reading unit 105, the biometric information of the worker is acquired. In step S204, the biometric information acquired in step S202 is collated with the biometric information acquired in step S203. If the collation results match, the worker is authenticated in step S206. If authentication is not possible, the process returns to step S203.

  In step S <b> 206, for example, “Please put your finger on the biological information reading unit” is displayed on the display unit 102. When the manager places a finger on the biometric information reading unit 105 after being guided by this display, the biometric information of the manager is acquired. In step S207, the biometric information acquired in step S202 is collated with the biometric information acquired in step S206. If the collation results match, the worker is authenticated in step S208. If authentication cannot be performed, the process returns to step S206.

  In step S209, the browsing range designation screen 301 shown in FIG. Using this screen, the administrator designates the electronic journal data browsing range of the worker by a period as shown in the figure, for example. In step S211, the worker can browse the electronic journal data and perform a predetermined work within the specified range. When the browsing is to be ended, the browsing process can be ended by inputting the browsing end in step S212. As shown in FIG. 6, the transaction time, transaction details, card image, and photographed image are displayed on the browsing screen.

  FIG. 4 is a diagram showing details of the interrupt processing in step S211 in FIG. 3, FIG. 4 (a) shows the interrupt processing by the random timer, FIG. 4 (b) shows the human sensor, for example, the operator automatically An interruption process is shown when it is detected that the transaction apparatus has been left.

  First, in the interrupt process by the random timer shown in FIG. 4A, in step S213, the interrupt by the random timer is permitted and the random timer is started. If a random timer interrupt occurs in step S213, the process proceeds to step S214. In step S214, for example, “Please put your finger on the biometric information reading unit” is displayed on the display unit 102. When the worker is guided by this display and places his finger on the biometric information reading unit 105, the biometric information of the worker is acquired. In step S215, the biological information acquired in step S202 is compared with the biological information acquired in step S214. If the collation results match, the worker is authenticated in step S216. In this case, the operator can continue the browsing process. If authentication is not possible, the process returns to step S214.

  As shown in FIG. 4B, when the human sensor detects, for example, that the worker has left the area where the automatic transaction apparatus can be operated, an interrupt process is performed in step S218 according to the detection information of the human sensor. appear. In step S219, timer timing is started. In step S220, it is determined whether or not a predetermined time has elapsed. If the predetermined time has elapsed, the process is terminated. If the predetermined time has not elapsed, the process proceeds to step S221. In step S221, it is determined whether or not the person detection sensor detects a person. If a person is detected, the process proceeds to step S222. If not, the process returns to step S220.

  In step S222, the detected person (worker) is authenticated. First, in step S222, the display unit 102 displays, for example, “Place a finger on the biological information reading unit”. When the worker is guided by this display and places his finger on the biometric information reading unit 105, the biometric information of the worker is acquired. In step S223, the biometric information acquired in step S202 is collated with the biometric information acquired in step S222. If the collation results match, the worker is authenticated in step S224. In this case, the operator can continue the browsing process. If the authentication cannot be performed, the process returns to step S222.

  As described above, according to this embodiment, when an operator browses electronic journal data, biometric authentication of the worker can be performed at regular intervals or at random intervals. For this reason, spoofing of a third party can be prevented. In addition, after the operator is authenticated, the administrator is authenticated so that electronic journal data can be browsed. For this reason, an operator cannot perform browsing alone. In addition, the administrator can specify a viewing range. For this reason, the operator's viewable range can be kept to the minimum necessary. Moreover, it can detect that a worker exists on the spot by a detection sensor. For this reason, when an operator leaves the place during browsing work, browsing work can be interrupted and browsing by a third party can be prevented.

  In the above, the present invention has been described by taking an automatic transaction apparatus equipped with a finger vein authentication apparatus as an example. However, the present invention can be similarly applied to apparatuses equipped with other biometric authentication apparatuses. It is also possible to omit the IC card reader unit by storing the biometric authentication data of the IC card in a storage unit of a terminal or a remote server. In addition, electronic journal data may be recorded on a recording medium such as a CD-R medium and confirmed by a terminal. Even in such a case, it is possible to improve security for browsing electronic journal data by a similar method.

It is a figure explaining the automatic transaction apparatus concerning embodiment of this invention. It is a figure explaining the detail of electronic journal data. It is a figure explaining the process at the time of browsing electronic journal data. It is a figure explaining the detail of the interruption process in step S211 of FIG. It is a figure which shows the browsing range designation | designated screen displayed in the case of browsing range designation | designated. It is a figure which shows an electronic journal data browsing screen.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Automatic transaction apparatus 102 Display part 103 Input part 104 Card reader part 105 Biometric information reading part 106 Camera part 107 Human detection sensor part 108 Bill processing part 109 Coin processing part 110 Description slip part 111 Power supply part 112 CPU
113 Memory 114 Storage unit 115 Main control unit

Claims (3)

A card reader unit that reads the biological information from an IC card that stores the biological information of the operator;
A biological information acquisition unit for acquiring the biological information of the operator;
A storage unit storing journal data which is a history of transaction operations by a user;
An input unit for receiving an input operation by an operator;
A control unit for controlling each unit;
The control unit is an automatic transaction apparatus that authenticates an operator and permits output of the journal data when the biometric information read from the IC card matches the biometric information acquired by the biometric information acquisition unit.
The said control part permits the output of the said journal data, when two or more operators with which the biometric information read from the IC card and the biometric information which the biometric information acquisition part correspond are detected are detected. The automatic transaction apparatus according to claim 1,
When the biometric information read from the IC card coincides with the biometric information acquired by the biometric information acquisition unit, the control unit limits the output range of the journal data according to the operation input received by the input unit. Automatic transaction equipment. A card reader unit that reads the biological information from an IC card that stores the biological information of the operator;
A biological information acquisition unit for acquiring the biological information of the operator;
A storage unit storing journal data which is a history of transaction operations by a user;
An input unit for receiving an input operation by an operator;
A control unit for controlling each unit;
The control unit is an automatic transaction apparatus that authenticates an operator and permits output of the journal data when the biometric information read from the IC card matches the biometric information acquired by the biometric information acquisition unit.
The control unit randomly notifies information requesting re-input of biometric information by the biometric information income unit, and outputs the journal data when the biometric information acquired by re-input does not match the biometric information read from the IC card. An automatic transaction apparatus characterized by prohibiting

Images