JP2008077587A - Transaction system, transaction method and transaction server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To urge an authorized user of an account to take measures against an illegal attack to the account. <P>SOLUTION: In this transaction system comprising a transaction terminal 1 operated by the user and a transaction server 2 for receiving a transaction request from the transaction terminal 1, the transaction server 2 has a user authenticating part 22 for authenticating the user of the transaction terminal 1 for making a transaction request and a difference information managing part 23 for storing difference information showing an authentication result of the user who is not allowed to start a transaction by the user authenticating part 22 in a storing means and transmitting the difference information to the transaction terminal, and the transaction terminal has a difference information processing part 15 for outputting the difference information received from the transaction server. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a transaction system, a transaction method, and a technology of a transaction server.

Conventionally, an ATM (Automated Teller Machine) terminal authenticates a user such as having a user who requests a transaction input a password before starting the transaction. Then, a transaction such as a transfer is started for a user who is permitted to trade as an authentication result. The user confirms the past transaction history by referring to the transaction history displayed on the ATM terminal.
JP-A-8-36665 (Claim 1, paragraphs 0013 to 0015, FIG. 5)

  However, a fraudster may perform a fraud attack such as trying to withdraw cash from another person's account without permission. In this case, for example, the unauthorized person steals another person's cash card, inserts the cash card into the ATM terminal, and starts an unauthorized attack. If the password entered by the unauthorized person is correct, the unauthorized attack succeeds.

  On the other hand, it cannot be said that it is safe just because one illegal attack was not successful, such as the wrong PIN. A fraudster may try and cheer many times by trial and error. If the authentication succeeds even once among several times of unauthorized attacks, the unauthorized attack is successful. Therefore, it is not preferable to give unauthorized persons many chances of unauthorized attacks.

  In addition, there is a form in which the number of times is set such that the account transaction is automatically stopped when the authentication of the personal identification number fails three times in succession. However, even in this case, even if it fails twice, the legitimate user cannot know the risk that his / her account has been illegally attacked. For this reason, legitimate users rarely voluntarily take countermeasures against fraud attacks such as changing their PIN or changing their account number when there is no opportunity for them. I kept giving.

  Therefore, the present invention provides a transaction system, a transaction method, and a transaction server that allow a user to check difference information, and finally, measures against deterring fraudulent attacks on accounts are made to authorized users of accounts. The main challenge is to encourage.

  In order to solve the above-described problem, a transaction system including a transaction terminal operated by a user and a transaction server that receives a transaction request from the transaction terminal, wherein the transaction server performs the transaction request. The user authentication unit that authenticates the user who operates the transaction terminal, and the difference information indicating the authentication result of the user who is not permitted to start the transaction by the user authentication unit in the storage means and the difference that is transmitted to the transaction terminal An information management unit, and the transaction terminal includes a difference information processing unit that outputs the difference information received from the transaction server.

  According to the present invention, the user can check the difference information. By recognizing the presence or absence of a fraud attack, for example, in a bank system, it is possible to urge a legitimate user of an account to take measures to prevent a fraud attack such as changing a personal identification number.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram showing a trading system 100.

  The transaction terminal 1 operated by the user requests a transaction such as a transfer from the transaction server 2 which is a higher system of the bank. The transaction server 2 authenticates whether or not the user is valid, and then starts a transaction for the user who is recognized as valid. The authentication is, for example, biometric authentication, password authentication, password authentication, or the like. The transaction server 2 stores and manages the deposit balance defined for each user account in the storage means.

  Transaction terminal 1 may be configured as an ATM terminal that is installed in a bank store or a convenience store and accesses a bank network. In this case, the transaction is, for example, withdrawal, deposit, transfer, transfer, balance inquiry, passbook entry / carry-over, and PIN change to the user's account. For example, when performing withdrawal, the transaction terminal 1 outputs the withdrawal amount as a bill to the user, and the transaction server 2 reduces the withdrawal amount from the deposit balance of the user's account.

  Further, the transaction terminal 1 may be configured as a PC (Personal Computer) terminal that uses Internet banking. At that time, the transaction is, for example, transfer to the user's account, transfer, purchase of bonds, inquiry of balance, and change of the PIN.

  The transaction terminal 1 includes a medium input / output unit 11, an information input unit 12, an information output unit 13, a transaction request unit 14, and a difference information processing unit 15. The medium input / output unit 11 is an interface through input / output of a medium such as a card or cash. The information input unit 12 receives input of authentication information and transaction information. The information output unit 13 outputs a transaction result and difference information. The transaction request unit 14 notifies the transaction server 2 of the transaction request. The difference information processing unit 15 outputs (displays) the difference information (described in detail in FIG. 2 to be described later) via the information output unit 13.

  FIG. 2 is an example of a configuration diagram showing the difference information DB 24.

The difference information stored in the difference information DB 24 includes a difference content that is an authentication result (operation record) when the transaction server 2 rejects the transaction start as an authentication result. Further, the difference information may be configured by associating the content of the difference with the date and place where the authentication is performed. For example, at the date and time “2004/12/20 12:00” and at the place (transaction terminal 1) “XX Bank, Shibaura Branch No. 5”, a PIN code difference indicating that an incorrect PIN has been entered twice. It has been broken. Thus, when the transaction terminal 1 is an ATM terminal, branch / unit information is stored.
Further, when the transaction terminal 1 is a PC terminal using Internet banking, information indicating that the transaction terminal 1 is used from “Internet banking” is stored as information corresponding to the ATM location. For example, at the date “2004/12/25 21:00” and the place (transaction terminal) “XX bank, Internet banking”, a password difference indicating that an illegal password has been input is made twice.
As described above, the difference information DB 24 is configured to integrate and store difference information generated in ATMs such as financial institution stores and difference information generated in PC terminals using Internet banking. That is, if the difference information is generated by accessing the account of the financial institution user, the difference information is recorded together with the terminal information used for the access. Note that the difference information DB 24 is managed in units of users.

FIG. 3 is a screen diagram showing the display contents of the difference information. In accordance with the contents of the difference information DB 24, the difference information generated in both ATM and Internet banking is displayed. The information output unit 13 displays the difference information received from the transaction server 2 on the screen of the transaction terminal 1 or the medium input / output unit 11 of the transaction terminal 1 every time the process of FIG. Print on paper (detail slip) or output the difference information by voice from the speaker. When the confirmation button 13a is pressed, the display of the difference information is terminated.
As a result, if the user uses the ATM, the user can check not only the ATM but also the difference information generated in the internet banking, and can efficiently check the presence or absence of the illegal attack.

  As shown in FIG. 3, the difference information may be notified for each fraud type (biometric authentication, personal identification number, password). As a result, a user who wants to take a fraud countermeasure can take a countermeasure according to the fraud type, so that the fraud countermeasure can be realized at a low cost. For example, when many password attacks are performed, only the password needs to be changed.

The transaction server 2 includes a transaction processing unit 21, a user authentication unit 22, a difference information management unit 23, and a difference information DB 24 (storage means). The transaction processing unit 21 starts a transaction based on the transaction information. The user authentication unit 22 authenticates whether the transaction is possible. The difference information management unit 23 manages (data access) the difference information stored in the difference information DB 24. The difference information DB 24 stores difference information.
When a PIN code difference or biometric information difference occurs at an ATM terminal, the date and time of the difference, terminal information (bank name, branch name, machine number), and the content of the difference are notified to the transaction server 2 as difference information. Also, when a password difference occurs in Internet banking, the difference information is similarly notified to the transaction server 2.

  The processing units constituting the transaction terminal 1 and the transaction server 2 are configured such that a program stored in a ROM (Read Only Memory) (not shown) is executed by a CPU (Central Processing Unit) (not shown) or stored on a hard disk (not shown). The stored program is implemented in a RAM (Random Access Memory) (not shown) and executed by a CPU (not shown).

  FIG. 4 is a flowchart showing transaction processing of an ATM terminal including difference information notification processing. This flowchart starts from a state where the user touches the touch panel of the ATM terminal, for example.

  The medium input / output unit 11 accepts insertion of a cash card related to the user's account from the user (S111). The information input unit 12 accepts input of authentication information such as a password required for authentication by a user's input operation on a touch panel or a keyboard (S112). Further, the information input unit 12 accepts input of transaction information such as specifying a transfer amount and transaction type necessary for the transaction from the user (S113).

  Transaction terminal 1 and transaction server 2 perform communication processing related to authentication and transaction (S114). First, the transaction request unit 14 notifies the transaction server 2 of the authentication information in S112 and the transaction information in S113 as a transaction request. The user authentication unit 22 authenticates whether or not the transaction is possible based on the notified authentication information in S112, and determines whether or not the determination condition “authentication of whether or not transaction is OK is OK (transaction permission)” is satisfied ( S121).

  When the determination condition of S121 is not satisfied (S121, No), the difference information management unit 23 adds the authentication result of this time, which is not permitted to start the transaction, to the difference information DB 24 (S124), and as a transaction response A communication process for notifying the transaction terminal 1 is performed (S125). Transaction terminal 1 performs communication processing for receiving a transaction response (S114).

  When the determination condition of S121 is satisfied (S121, Yes), the transaction processing unit 21 starts a transaction based on the transaction information of S113 (S122). The transaction server 2 performs a communication process in which the transaction result (transaction start permission) by the transaction processing unit 21 and the difference information stored in the difference information DB 24 are included in the transaction response and notified to the transaction terminal 1 (S123). Transaction terminal 1 performs communication processing for receiving a transaction response (S114).

  The transaction terminal 1 refers to the authentication result received as the transaction response in S114, and ends the process if it is not authentication OK (No in S115). Note that the card of S111 may be released to the user before the process is terminated. On the other hand, if the authentication is OK (S115, Yes), the following processing is performed.

  The medium input / output unit 11 releases the medium (card, cash, etc.) to the user according to the transaction result included in the transaction response notified from the transaction server 2 (S116). The difference information processing unit 15 outputs (displays) the difference information included in the transaction response notified from the transaction server 2 via the information output unit 13 (S117).

  Thereby, a user can judge the presence or absence of information leakage, such as transaction information, by notifying a user of difference information for every transaction.

  The information output unit 13 may display the difference information regarding the predetermined user stored in the difference information DB 24, or may display the latest difference information. The latest difference information is, for example, a predetermined number of difference information in the order from the newest, difference information from the present to a predetermined period before, and difference information after performing a countermeasure against fraud such as a password change. In this way, by narrowing down the difference information to be displayed to a part, it is possible to prevent the user from being confused by not displaying much previous error information.

  In the flowchart described above, the transaction procedure (S113, S116) and the difference information processing procedure (S112, S117) are collectively performed in one round-trip communication process (S114). On the other hand, only the difference information processing procedure may be performed without performing the transaction procedure.

  Further, when the authentication is not OK (S121, No), the user who made the transaction request is regarded as an unauthorized person and the difference information is not transmitted in S125. However, the difference information is transmitted in S125, and in S117, the difference information is not transmitted. Difference information may be output.

  Furthermore, after displaying the difference information (S117), the medium (card, cash, etc.) may be released to the user (S116). Thereby, it is possible to prevent an impatient user who misunderstands that the transaction processing is completed when the medium is released and forgets to confirm the difference information.

  And the difference information processing part 15 is good also as prompting a user of the fraud countermeasure regarding difference information after outputting difference information to a user (S117). For example, when a password attack is performed three times, a password change is prompted to change to a password having a longer character than the current password. Thereby, since the user can implement from understanding of difference information to fraud countermeasures as a single process, the burden on the user is small.

  Furthermore, although FIG. 4 has been described on the assumption of an ATM terminal, a PC terminal that performs Internet banking may be substituted. At that time, the insertion of the cash card (S111) and the release of the medium (S116) are omitted.

The contents of announcements to the user when implementing fraud countermeasures include the following, for example.
・ When the “PIN Difference” is more than the specified number of times → “Check if the PIN is difficult to guess”
・ When the “password difference” is more than the specified number of times → “Check if the password is difficult to guess. Also, it is recommended to change to a longer password”
・ When “PIN difference” or “Password difference” and biometric information is not registered → “Recommend using biometric authentication”

  Moreover, the transaction server 2 is good also as transmitting difference information and the content of announcement to a user to a user terminal with an email. Thereby, the user can know the transmitted difference information and take measures against an illegal attack before accessing his / her account.

  FIG. 5 is a flowchart executed as an alternative to the flowchart shown in FIG. In FIG. 4, the communication process for authentication and the communication process for the transaction after authentication are integrated and performed once (S114). On the other hand, in FIG. 5, the communication process for authentication (S213) and the communication process for starting the transaction after authentication (S216) are performed in two steps. And when it is authenticated with transaction start disapproval, the transaction terminal 1 will complete | finish a process, without inputting transaction information. Thereby, it can be set as an authentication disapproval without inputting transaction information with respect to an unauthorized person. Details of the flowchart of FIG. 5 will be described below.

  The medium input / output unit 11 accepts insertion of a cash card related to the user's account from the user (S211). The information input unit 12 accepts input of authentication information such as a password required for authentication by a user's input operation on a touch panel or a keyboard (S212).

  Transaction terminal 1 and transaction server 2 perform communication processing related to authentication (S213). First, the transaction request unit 14 notifies the transaction server 2 of the authentication information in S212 as an authentication request. The user authentication unit 22 authenticates whether or not the transaction is possible based on the notified authentication information in S212, and determines whether or not the determination condition “authentication of whether or not transaction is OK is OK (transaction permission)” is satisfied ( S221).

  When the determination condition of S221 is not satisfied (S221, No), the difference information management unit 23 adds the current authentication result that is not permitted to start the transaction to the difference information DB 24 (S225), and as an authentication response. A communication process for notifying the transaction terminal 1 is performed (S226). Transaction terminal 1 performs communication processing for receiving an authentication response (S213).

  When the determination condition of S221 is satisfied (S221, Yes), the transaction server 2 performs communication processing for notifying the transaction terminal 1 of the current authentication result that is permitted to start the transaction as an authentication response (S222). Transaction terminal 1 performs communication processing for receiving an authentication response (S213).

  Transaction terminal 1 refers to the authentication result received as an authentication response, and ends the process if authentication is not OK (No in S214). On the other hand, if the authentication is OK (S214, Yes), the following processing is performed.

  The information input unit 12 accepts input of transaction information such as specifying the transfer amount and transaction type necessary for the transaction from the user (S215). Transaction terminal 1 performs communication processing for notifying transaction information to transaction server 2 (S216).

  The transaction processing unit 21 starts a transaction based on the transaction information in S215 (S223). The transaction server 2 includes a transaction result by the transaction processing unit 21 and the difference information stored in the difference information DB 24 in the transaction response, and performs a communication process of notifying the transaction terminal 1 (S224). Transaction terminal 1 performs communication processing for receiving a transaction response (S216).

  The medium input / output unit 11 releases the medium (card, cash, etc.) to the user according to the transaction result included in the transaction response notified from the transaction server 2 (S217). The difference information processing unit 15 outputs (displays) the difference information included in the transaction response notified from the transaction server 2 via the information output unit 13 (S218).

  The medium input / output unit 11 may accept not only a cash card but also a credit card. When a credit card is input, the difference information is managed in the server of the credit card management company.

  The output of the difference information (S218) may be executed after the determination of whether or not the authentication is OK (S214) and before the input of transaction information (S215).

It is a block diagram which shows the transaction system regarding one Embodiment of this invention. It is a block diagram which shows difference information DB regarding one Embodiment of this invention. It is a screen figure which shows the display content of the difference information regarding one Embodiment of this invention. It is a flowchart which shows the transaction process of the ATM terminal including the notification process of the difference information regarding one Embodiment of this invention. It is a flowchart which shows the transaction process of the ATM terminal including the notification process of the difference information regarding one Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Transaction terminal 2 Transaction server 11 Medium input / output part 12 Information input part 13 Information output part 14 Transaction request part 15 Difference information processing part 21 Transaction processing part 22 User authentication part 23 Difference information management part 24 Difference information DB

Claims (10)

A transaction system configured to include a transaction terminal operated by a user for a transaction and a transaction server that receives a transaction request from the transaction terminal,
The transaction server stores, in a storage unit, difference information indicating a user authentication unit that authenticates a user who operates the transaction terminal that performs the transaction request, and a user authentication result that is not permitted to start a transaction by the user authentication unit. And having a difference information management unit to be transmitted to the transaction terminal,
The transaction system includes a difference information processing unit that outputs the difference information received from the transaction server.   The transaction system according to claim 1, wherein the transaction server transmits the difference information to a user terminal by electronic mail.   The transaction terminal is configured as an ATM terminal that accesses a bank network, and the transaction is withdrawal, deposit, transfer, transfer, balance inquiry, passbook entry / carry-over, and PIN change to the user's account The transaction system according to claim 1, wherein:   The transaction terminal is configured as a PC terminal that accesses the Internet, and the transaction is a transfer, transfer, bond purchase, balance inquiry, and PIN change to a user's account. The transaction system according to claim 2.   The transaction system according to any one of claims 1 to 4, wherein the difference information processing unit outputs the latest difference information among the difference information related to a user.   The difference information includes an authentication type of authentication performed by the user authentication unit, which includes at least one of biometric authentication, password authentication, and password authentication. The transaction system according to any one of 5.   The transaction system according to claim 6, wherein the difference information processing unit executes an illegal attack countermeasure process according to the authentication type included in the difference information.   8. The transaction server includes a transaction result for the transaction request and the difference information regarding a user of the transaction request included in one transaction response and transmits the transaction result to the transaction terminal. The transaction system according to any one of the above. A transaction method executed by a transaction system configured to include a transaction terminal operated by a user for a transaction and a transaction server that receives a transaction request from the transaction terminal,
The transaction server authenticates a user who operates the transaction terminal that makes the transaction request, stores difference information indicating an authentication result of the user who is not permitted to start a transaction in a storage unit, and transmits the difference information to the transaction terminal. ,
The transaction terminal outputs the difference information received from the transaction server. A transaction server used in a transaction system configured to include a transaction terminal operated by a user for transaction and a transaction server for receiving a transaction request from the transaction terminal,
A user authentication unit that authenticates a user who operates the transaction terminal that makes the transaction request, and stores difference information indicating an authentication result of a user that is not permitted to start a transaction by the user authentication unit in a storage unit, and the transaction A transaction server comprising: a difference information management unit to be transmitted to a terminal.

Images