JP2009116567A - Transaction device, and method of processing personal identification number in the transaction device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve customer satisfaction by adapting a transaction device so as not to perform, when waiting for input of personal identification number (PIN) is needed owing to an input interval of PIN to a PIN input device with a PIN encryption processing means shorter than a predetermined time, encryption processing of an input personal identification number based on selection of agreement by a customer, so that a transaction can be performed without interruption, or a busy customer is never made to wait. <P>SOLUTION: When a transaction does not require PIN encryption, and PIN encryption processing is disabled, a display part displays a screen for requesting agreement for transmission of PIN as a plain text together with a selection means for selecting the agreement, and transmits a personal identification number input by an input means of the PIN input device as it is a plain text to a host device when the agreement is selected by the selection means. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a transaction apparatus, in particular, a transaction apparatus including a password input device, and a password processing method in the transaction apparatus.

  Conventionally, operating automatic transaction machines such as ATMs (Automatic Teller Machines) and CDs (Cash Dispensers) installed at branches of financial institutions such as banks, credit unions, post offices, etc. Then, when performing financial transactions such as deposit, withdrawal, transfer, transfer, and remittance, the customer uses a card such as a cash card and inputs a personal identification number. In addition, when payment is made at a restaurant, store, etc., and the payment is made with a card such as a debit card or credit card, the customer uses the card and is placed at the store's cash register. A personal identification number is input by operating a terminal such as a POS (Point of Sales) terminal, a credit card terminal, or an accessory device thereof.

  Then, the automatic transaction apparatus and the terminal transmit the card information read from the card and the entered personal identification number together with information such as the amount of money to a host device such as a host computer connected via a communication line, Execute transaction processing such as transaction and settlement transaction. In this case, if the code number is transmitted to the host device without performing the encryption process, that is, in plain text, the code number may be analyzed by a third party from the communication content.

  Therefore, in recent years, a device called a pin pad has been adopted as a password input device for encrypting an input password. By connecting or incorporating the pin pad to the automatic transaction apparatus and the terminal, it is possible to transmit the encrypted password to the host device, so that the password is analyzed by a third party from the communication contents. There is nothing. Note that the pin pad can also transmit the input password as it is in plain text without encryption processing.

Further, as a standard of the pin pad, Payment Card Industry (PCI): Encrypting PIN Pad (EPP) Security Requirements Manual Version 1.0A is known as a PCI standard. This is a standard established by VISA International, which is a credit card issuing company, and the standard defines functions necessary for the pin pad to obtain VISA International certification. For example, B11 in LOGICAL SECURITY REQUIREMENTS in the chapter of Manufacturer Self-Assessment Form in the standard has a provision that an average interval of 120 times for entering a PIN number is required for encryption processing of the PIN number. (For example, refer nonpatent literature 1).
http://partnernetwork.visa.com/dv/pin/main.jsp

  However, in the automatic transaction apparatus and terminal using the conventional pin pad, the input password may not be encrypted. Depending on the transaction status at the automatic transaction apparatus and the terminal, the PIN number may be input to the pin pad at short time intervals. In such a case, if the average interval of 120 PIN input is less than 30 seconds, Is in conformity with the provisions of the standard, the input password cannot be encrypted.

  Depending on the type of transaction at the automatic transaction apparatus and the terminal, there are some cases where the encryption processing of the PIN is not essential, but even in such a transaction, if the PIN is input to the pin pad, it will be encrypted. If the input interval of the password is shortened, the password cannot be input to the pin pad and the transaction cannot be performed. However, even in such a case, it is possible to input a personal identification number after a predetermined time has elapsed.

  The present invention solves the above-mentioned conventional problems and waits for the input of a personal identification number when the personal identification number input interval to the personal identification number input device having the personal identification number encryption processing means is shorter than a predetermined time interval. When necessary, a screen for requesting customer consent is displayed together with the selection means, and when the customer consent is selected by the selection means, the input password is not encrypted and interrupted. It is an object of the present invention to provide a transaction apparatus capable of performing a transaction without any waiting, waiting for a busy customer, and improving customer satisfaction, and a password processing method in the transaction apparatus.

  Therefore, in the transaction apparatus of the present invention, the input means for inputting the personal identification number, the encryption processing means for encrypting the personal identification number input by the input means, and the personal identification number input by the input means It is provided with non-encryption processing means that keeps plaintext, and when the input interval of the password is shorter than the predetermined time interval, the encryption of the password is disabled, and the encryption of the password is again performed after the predetermined time has elapsed. A transaction apparatus which has a personal identification number input device capable of displaying information related to the input of the personal identification number and has a display unit having an input means, and transmits the personal identification number to the host device for transaction. In the case of a transaction that does not require encryption of the number, and the encryption processing of the personal identification number is impossible, the display unit agrees to transmit the personal identification number in plain text. Display the screen together with a selection means for selecting consent, and when consent is selected by the selection means, the password entered by the input means of the password number input device is transmitted in plain text to the host device. .

  In another transaction apparatus of the present invention, when consent is selected by the selection means, the display unit displays a numeric keypad, and is input by either the numeric keypad or the input means of the password input device. The secret code number is sent to the host device in plain text.

  In still another transaction apparatus of the present invention, an input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a personal identification number input by the input means. It is provided with non-encryption processing means that keeps plaintext, and when the input interval of the password is shorter than the predetermined time interval, the encryption of the password is disabled, and the encryption of the password is again performed after the predetermined time has elapsed. A transaction apparatus which has a personal identification number input device capable of displaying information related to the input of the personal identification number and has a display unit having an input means, and transmits the personal identification number to the host device for transaction. Whether the display unit agrees to send the PIN code in clear text when the PIN code encryption process is not possible in the case of a transaction that does not require encryption of the PIN number Displays a screen for selecting whether to wait together with a selection means for selecting consent or waiting, and when consent is selected by the selection means, the password entered by the input means of the password entry device is in plaintext. When the standby is selected by the selection means, the password entered by the input means of the password input device is encrypted and transmitted to the host device after the predetermined time has elapsed. To do.

  In still another transaction apparatus of the present invention, the transaction apparatus further includes a printing unit for issuing a transaction statement, the consent is selected by the selection means, and the password entered by the input means of the password entry device is received. When the plain text is transmitted to the host device, the printing unit prints on the transaction statement slip that consent has been selected.

  In still another transaction apparatus of the present invention, the printing unit can print on a passbook, and prints on the passbook that consent has been selected.

  In the personal identification number processing method of the present invention, the input means for inputting the personal identification number, the encryption processing means for encrypting the personal identification number input by the input means, and the personal identification number input by the input means are plaintext. It is provided with non-encryption processing means that keeps the password, and if the input interval of the password is shorter than the predetermined time interval, the encryption processing of the security code becomes impossible and the encryption processing of the security code can be performed again after the predetermined time elapses. A PIN code processing method in a transaction apparatus that has a PIN code input device and a display unit that displays information related to PIN code input and has an input means, and transmits the PIN code to a host device to perform transactions If the PIN code encryption is not required and the PIN code encryption process is disabled, the display unit transmits the PIN code in plain text. A screen for asking for consent with the selection means for selecting consent, and when the consent is selected by the selection means, the password input by the input means of the password number input device remains in plain text and the host device Send to.

  In another personal identification number processing method of the present invention, when consent is selected by the selection unit, the display unit displays a numeric keypad, and either by the numeric keypad or the input unit of the personal identification number input device. The input password is transmitted to the host device in plain text.

  In yet another personal identification number processing method of the present invention, an input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a personal identification number input by the input means. It is provided with non-encryption processing means that keeps the number in plain text, and if the input interval of the PIN number is shorter than the predetermined time interval, the PIN number encryption processing becomes impossible, and the PIN number encryption processing is performed after the predetermined time has passed. PIN code in a transaction apparatus that has a password input device that enables the password again and a display unit that displays information related to the input of the password and includes an input means, and transmits the password to the host device for transactions. When the transaction is a transaction method in which the encryption of the personal identification number is not essential and the personal identification number cannot be encrypted, the display unit keeps the personal identification number in plain text. A screen for selecting whether to agree or wait for transmission is displayed together with a selection means for selecting consent or waiting, and when consent is selected by the selection means, the input means of the personal identification number input device When the waiting means is selected by the selection means, the password entered by the input means of the password input device is passed after the predetermined time has elapsed. Encrypt and send to the host device.

  According to the present invention, the transaction apparatus needs to wait for the input of the personal identification number because the input interval of the personal identification number to the personal identification number input device provided with the encryption processing means of the personal identification number is shorter than the predetermined time interval. In this case, a screen for requesting the customer's consent is displayed together with the selecting means, and when the customer's consent is selected by the selecting means, the input password is not encrypted. As a result, transactions can be performed without interruption, and busy customers can be kept waiting, and customer satisfaction can be improved.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram of a transaction apparatus according to the first embodiment of the present invention.

  In the figure, reference numeral 10 denotes a transaction apparatus according to the present embodiment. For example, an automatic transaction apparatus such as an ATM or a CD arranged in a branch of a financial institution such as a bank, a credit union, a post office, a convenience store, a supermarket, A multifunctional terminal such as a kiosk terminal that is installed in a store of a store such as a department store, an underground mall, etc. and has a ticket reservation function, a product purchase application function, a credit card credit confirmation function, a facility information guidance function, etc., a restaurant POS terminals, credit card terminals, etc., which are arranged at cashiers of restaurants and shops such as bars, etc., but cash cards, debit cards, credit cards, etc. are used for deposits and withdrawals , A device that authenticates by entering a PIN when performing various transactions such as financial transactions such as transfer, transfer, remittance, and payments If, disposed anywhere, it may be any type of device.

  Here, the transaction apparatus 10 has a control unit 11, a display unit 12, and a pin pad 13 as a PIN code input device, and various types such as a telephone line network, a LAN (Local Area Network), an intranet, an online network, and the Internet. Is connected to a host device such as a host computer (not shown) via a communication network. Then, together with information such as the amount of money, the card information read from the IC included in the card, the magnetic stripe, etc. and the input password are sent to the host device, and processing of transactions such as financial transactions and settlement transactions is executed.

  The control unit 11 is a kind of computer that includes a calculation unit such as a CPU and an MPU, a storage unit such as a semiconductor memory and a magnetic disk, a communication interface, and the like, and operates according to a program. The operation of the display unit 12 and the pin pad 13 is performed. The overall operation of the transaction apparatus 10 including it is comprehensively controlled.

  The display unit 12 includes a CRT, a liquid crystal display, an LED (Light Emitting Diode) display, and the like, and displays a screen for a customer to perform an operation necessary for a transaction according to an instruction from the control unit 11. Furthermore, it is desirable that the display unit 12 is a touch panel or the like that also has a function as an input unit, and is capable of input.

  The pin pad 13 is a device that is operated by a customer to input a personal identification number, has a numeric keypad as an input means for inputting the personal identification number, and encrypts the input personal identification number by performing an encryption process. Encryption processing means for transmitting the entered personal identification number, and encryption non-processing means for accepting and transmitting the input personal identification number as plain text without encryption processing. The pin pad 13 may be incorporated in the transaction apparatus 10 or may be configured separately from the transaction apparatus 10 and connected to the transaction apparatus 10 via a communication cable or the like. Good.

  The pin pad 13 is compliant with the Payment Card Industry (PCI): Encryption PIN Pad (EPP) Security Requirements Manual Version 1.0A as the pin pad standard described in the “Background Art” section. For this reason, in the encryption processing of the personal identification number, an average interval of 120 personal identification number inputs requires 30 seconds or more. That is, when a password is input to the pin pad 13 at a short time interval, the input password cannot be encrypted unless the average interval of 120 password inputs is less than 30 seconds. That is, if the input interval of the password is shorter than the predetermined time interval, the encryption processing of the security code becomes impossible, and the encryption processing of the security code becomes possible again after the predetermined time has elapsed. When the encryption process becomes impossible in this way, the customer needs to wait for a predetermined time before the password to be encrypted can be input.

  Therefore, in the present embodiment, when the customer selects a transaction that does not require the encryption of the personal identification number, the average interval of 120 input of the personal identification number to the pin pad 13 is 30 seconds or less, that is, the waiting time is When it is in a necessary state, the input of the personal identification number is accepted in plain text with the consent of the customer.

  Next, operation | movement of the transaction apparatus 10 of the said structure is demonstrated. Here, only the operation when inputting the personal identification number will be described.

  FIG. 2 is a diagram showing an example of an agreement request screen of the transaction apparatus according to the first embodiment of the present invention, and FIG. 3 is a flowchart showing the operation of the transaction apparatus according to the first embodiment of the present invention.

  In the present embodiment, a password input process for transferring a password entered by a customer from the pin pad 13 to the control unit 11 when a customer selects a transaction that does not require encryption of the password is described.

  First, the control unit 11 obtains a waiting time, inquires the pin pad 13 whether or not the pin pad 13 is in a state where a waiting time is required for the input of the personal identification number, and the waiting time is necessary based on the result of the inquiry. Judge whether there is.

  If no waiting time is required, the control unit 11 prepares for encryption, and instructs the pin pad 13 to prepare for receiving the encrypted password. Also, a password input request screen is displayed on the display unit 12, and the customer is requested to input the password. Then, the customer operates the pin pad 13 and inputs a personal identification number. When the input of the password is completed, the pin pad 13 encrypts the password, encrypts the password input by the customer, and passes the encrypted data to the control unit 11. Thereby, the password input process is completed.

  On the other hand, if the waiting time is necessary by determining whether the waiting time is necessary, the control unit 11 causes the display unit 12 to display an agreement request screen as shown in FIG. In the consent request screen, when the transaction device 10 currently handles the encrypted password entered by the customer, a waiting time is required to enable encryption, and the transaction device 10 When the entered password is handled in plain text, a message 14 requesting the selection of whether the security level is reduced but the transaction is possible immediately and whether or not the transaction apparatus 10 agrees to treat the password in plain text is displayed. Is displayed. Further, a function key 15 as a selection unit for selecting an agreement marked “I agree” and a function key 16 as a selection unit for not selecting an agreement marked “I disagree” are also displayed.

  Here, the customer makes a selection, selects the function key 15 when the transaction apparatus 10 agrees to handle the customer's personal identification number in plain text, and selects the function key 16 when it does not agree. The control unit 11 determines whether or not the customer has agreed based on whether the function key 15 or the function key 16 is selected.

  When the customer selects the function key 15, the control unit 11 determines that the customer agrees, prepares to receive plaintext, and instructs the pin pad 13 to prepare for receiving the password in plaintext. Also, a password input request screen is displayed on the display unit 12, and the customer is requested to input the password. Then, the customer operates the pin pad 13 and inputs a personal identification number. When the input of the personal identification number is completed, the pin pad 13 accepts the personal identification number input by the customer in plain text without encryption processing, and passes it to the control unit 11 as it is. Thereby, the password input process is completed.

  If the customer selects the function key 16, the control unit 11 determines that the customer does not agree, and ends the password input process.

Next, a flowchart will be described.
Step S1: Waiting time is acquired.
Step S2: It is determined whether a waiting time is necessary. If the waiting time is necessary, the process proceeds to step S3, and if the waiting time is not necessary, the process proceeds to step S7.
Step S3 The consent request screen is displayed.
Step S4: It is determined whether or not it is agreed to handle the password in plain text. If it is agreed to handle the password in plain text, the process proceeds to step S5. If the password is not agreed to be processed in plain text, the process is terminated.
Step S5: Prepare plaintext reception.
Step S6: The password input request screen is displayed on the display unit 12, the customer is requested to input the password, and the process is terminated.
Step S7 Prepare for encryption.
Step S8: The personal identification number input request screen is displayed on the display unit 12, and the customer is requested to input the personal identification number.
Step S9: The password entered by the customer is encrypted and the process is terminated.
Step S10 The customer makes a selection.
Step S11 The customer operates the pin pad 13 to input a personal identification number.
Step S12 The customer operates the pin pad 13 to input a personal identification number, and the process is terminated.

  As described above, in the present embodiment, when the customer selects a transaction that does not require the encryption of the personal identification number, when the customer inputs the personal identification number, the pin pad 13 waits for the input of the personal identification number. Is necessary, the control unit 11 causes the display unit 12 to display an agreement request screen as shown in FIG. When the customer agrees to input the personal identification number in plain text, the control unit 11 instructs the pin pad 13 to prepare for receiving the personal identification number in plain text and causes the display unit 12 to display a personal identification number input request screen. . Then, the pin pad 13 receives the password in plain text and passes it to the control unit 11. If the customer does not agree to enter the password in plain text, the password input process is stopped.

  As a result, even when the pin pad 13 is in a state where a waiting time is required for the input of the personal identification number, the customer who wants to make a transaction quickly is requested to input the personal identification number in plain text, and the customer's consent is obtained. It is possible to process with a plaintext PIN. Therefore, the effect that a busy customer can trade without waiting can be expected.

  Next, a second embodiment of the present invention will be described. In addition, about what has the same structure as 1st Embodiment, the description is abbreviate | omitted by providing the same code | symbol. The description of the same operation and the same effect as those of the first embodiment is also omitted.

  In the transaction apparatus 10 in the present embodiment, when a customer selects a transaction that does not require encryption of a personal identification number, if the pin pad 13 is in a state where a waiting time is required for input of the personal identification number, the first implementation is performed. In the same manner as the above, the input of the personal identification number is accepted in plaintext with the customer's consent. However, when accepting the input of the personal identification number in plain text, the numeric keypad 21 (to be described later) is displayed on the personal identification number input request screen, and the personal identification number can be input from the numeric keypad 21 as well. Is different. The display unit 12 in the present embodiment is a touch panel or the like that also has the function of an input unit, and can be input.

  Since the configuration of other points is the same as that of the first embodiment, description thereof is omitted.

  Next, operation | movement of the transaction apparatus 10 in this Embodiment is demonstrated.

  FIG. 4 is a diagram showing an example of a password input request screen of the transaction apparatus according to the second embodiment of the present invention, and FIG. 5 is a flowchart showing an operation of the transaction apparatus according to the second embodiment of the present invention.

  In the present embodiment, as in the first embodiment, when the customer selects a transaction that does not require encryption of the personal identification number, the personal identification number entered by the customer is transferred from the pin pad 13 to the control unit 11. The password input process will be described.

  First, the control unit 11 obtains a waiting time, inquires the pin pad 13 whether or not the pin pad 13 is in a state where a waiting time is required for the input of the personal identification number, and the waiting time is necessary based on the result of the inquiry. Judge whether there is. Here, since the operation when the waiting time is not necessary is the same as that of the first embodiment, the description thereof is omitted. Further, even when a waiting time is necessary, the operation until the plaintext reception preparation is performed is the same as that in the first embodiment, and the description thereof is omitted.

  In the present embodiment, after preparing for receiving plaintext, the control unit 11 displays a password input request screen as shown in FIG. 4 on the display unit 12 and requests the customer to input a password. To do. On the personal identification number input request screen, a numeric keypad 21 is displayed together with a message for requesting input of the personal identification number. The numeric keypad 21 has a function of accepting customer input in plain text. Then, the customer operates either the numeric keypad 21 or the pin pad 13 to input the password.

  When the customer operates the pin pad 13 to input a password, the pin pad 13 accepts the password entered by the customer in plain text without being encrypted, and passes it to the control unit 11 as it is. When the customer operates the numeric keypad 21 to input a personal identification number, the display unit 12 accepts the personal identification number entered by the customer in plain text and passes it directly to the control unit 11. Thereby, the password input process is completed.

Next, a flowchart will be described.
Step S21 The waiting time is acquired.
Step S22: It is determined whether a waiting time is necessary. When the waiting time is necessary, the process proceeds to step S23, and when the waiting time is not necessary, the process proceeds to step S27.
Step S23 The consent request screen is displayed.
Step S24: It is determined whether or not it is agreed to handle the password in plain text. If it is agreed that the password is handled in plain text, the process proceeds to step S25. If the code number is not agreed to be handled in plain text, the process is terminated.
Step S25: Plain text reception preparation is performed.
Step S26: The password input request screen is displayed on the display unit 12, the customer is requested to input the password, and the process is terminated.
Step S27: Preparation for encryption is performed.
Step S28: The password input request screen is displayed on the display unit 12, and the customer is requested to input the password.
Step S29: The password entered by the customer is encrypted and the process ends.
Step S30 The customer makes a selection.
Step S31 The customer operates the pin pad 13 to input a personal identification number.
Step S32 The customer operates the pin pad 13 to input a personal identification number, and the process is terminated.

  As described above, in the present embodiment, when the customer selects a transaction that does not require the encryption of the personal identification number, when the customer inputs the personal identification number, the pin pad 13 waits for the input of the personal identification number. When the user agrees to enter the password in plain text, the numeric keypad 21 is displayed on the password input request screen. Thereby, since the customer can input the personal identification number from the screen of the display unit 12, in addition to the effect of the first embodiment, a further effect that the convenience of the customer is improved is expected. be able to.

  Next, a third embodiment of the present invention will be described. In addition, about the thing which has the same structure as 1st and 2nd embodiment, the description is abbreviate | omitted by providing the same code | symbol. Also, the description of the same operations and effects as those of the first and second embodiments is omitted.

  In the transaction apparatus 10 in the present embodiment, when a customer selects a transaction that does not require encryption of a personal identification number, when the pin pad 13 is in a state where a waiting time is required for the input of the personal identification number, the customer You can choose to wait at.

  Note that the configuration of the transaction apparatus 10 is the same as that of the first embodiment, and thus the description thereof is omitted.

  Next, operation | movement of the transaction apparatus 10 in this Embodiment is demonstrated.

  FIG. 6 is a diagram showing an example of a customer selection screen of a transaction apparatus according to the third embodiment of the present invention, and FIG. 7 is an example of a screen for inputting a personal identification number of the transaction apparatus according to the third embodiment of the present invention. FIG. 8 is a flowchart showing the operation of the transaction apparatus in the third embodiment of the present invention.

  First, the control unit 11 obtains a waiting time, inquires the pin pad 13 whether or not the pin pad 13 is in a state where a waiting time is required for the input of the personal identification number, and the waiting time is necessary based on the result of the inquiry. Judge whether there is. Here, since the operation when the waiting time is not necessary is the same as that of the first embodiment, the description thereof is omitted.

  When waiting time is required, the control unit 11 causes the display unit 12 to display a customer selection screen as shown in FIG. In the customer selection screen, when the transaction device 10 currently handles the encryption code entered by the customer, a waiting time is required to enable encryption, and the transaction device 10 When the entered PIN is handled in plain text, the security level is reduced but it is possible to trade immediately, and the transaction apparatus 10 agrees to treat the PIN in clear text, waits for a predetermined time, or trades A message 31 for requesting selection of whether to cancel is displayed. Furthermore, a function key 32 as a selection means for selecting an agreement marked “I agree”, a function key 33 as a selection means for selecting a wait marked “Wait”, and “Cancel” A function key 34 is also displayed as a selection means for selecting to cancel the transaction.

  Here, the customer makes a selection, selects the function key 32 when the transaction apparatus 10 agrees to handle the customer's personal identification number in plain text, selects the function key 33 when waiting, and selects the transaction. To cancel the function key 34, the function key 34 is selected. The control unit 11 determines the customer selection content based on which of the function key 32, the function key 33, or the function key 34 is selected.

  When the customer selects the function key 32, the control unit 11 determines that it has agreed, prepares to receive plain text, and instructs the pin pad 13 to prepare to receive the password in plain text. Also, a password input request screen is displayed on the display unit 12, and the customer is requested to input the password. Then, the customer operates the pin pad 13 and inputs a personal identification number. When the input of the personal identification number is completed, the pin pad 13 accepts the personal identification number input by the customer in plain text without encryption processing, and passes it to the control unit 11 as it is. Thereby, the password input process is completed.

  When the customer selects the function key 34, the control unit 11 determines to cancel the transaction, and ends the password input process.

  Further, when the customer selects the function key 33, the control unit 11 determines to wait for a predetermined time, and causes the display unit 12 to display a standby screen. Then, when the password can be input after the standby time has elapsed, the control unit 11 causes the display unit 12 to display an available message on the password number input enabled screen as shown in FIG. On the password input enable screen, immediately input “Yes” written together with the message 35 indicating whether encryption is possible with the pin pad 13 and whether or not the password is to be input immediately. Also displayed are a function key 36 as a selection means for selecting, and a function key 37 as a selection means for selecting not to input immediately, which is described as “done later”.

  Here, the customer makes a selection, and selects the function key 36 when he / she wants to input the personal identification number immediately. Further, for example, when the standby screen has a plurality of screens and a user wants to conduct a transaction after looking at the characters on the pin pad 13 before viewing all the screens, the function key 37 is selected. Based on whether the function key 36 or the function key 37 is selected, the control unit 11 determines whether or not to enter the password immediately.

  When the function key 36 is selected, the control unit 11 determines that the password is to be input immediately, prepares for encryption, and instructs the pin pad 13 to prepare for receiving the encrypted password. When the function key 36 is selected, the control unit 11 displays the standby screen until the end and then prepares for encryption. Then, a password input request screen is displayed on the display unit 12, and the customer is requested to input the password. Then, the customer operates the pin pad 13 and inputs a personal identification number. When the input of the password is completed, the pin pad 13 encrypts the password, encrypts the password input by the customer, and passes the encrypted data to the control unit 11. Thereby, the password input process is completed.

Next, a flowchart will be described.
Step S41 Wait time acquisition is performed.
Step S42: It is determined whether a waiting time is necessary. When the waiting time is necessary, the process proceeds to step S43, and when the waiting time is not necessary, the process proceeds to step S47.
Step S43 A customer selection screen is displayed.
Step S44: The customer selection content is determined. If the customer has selected the function key 32, the process proceeds to step S45. If the customer has selected the function key 34, the process ends. If the customer has selected the function key 33, the process proceeds to step S50.
Step S45 Prepare to receive plain text.
Step S46: The password input request screen is displayed on the display unit 12, the customer is requested to input the password, and the process is terminated.
Step S47: Preparation for encryption is performed.
Step S48: The personal identification number input request screen is displayed on the display unit 12, and the customer is requested to input the personal identification number.
Step S49: The password entered by the customer is encrypted and the process is terminated.
Step S50: The standby screen is displayed on the display unit 12.
Step S51: An available message is displayed.
Step S52: It is determined whether or not to enter the password immediately. If the password is to be input immediately, the process returns to step S47. If the password is not input immediately, the process proceeds to step S53.
Step S53 The standby screen is displayed until the end.
Step S54 The customer makes a selection.
Step S55 The customer operates the pin pad 13 to input a personal identification number.
Step S56 The customer makes a selection.
Step S57 The customer operates the pin pad 13 to input a personal identification number, and the process is terminated.

  As described above, in the present embodiment, when the customer selects a transaction that does not require the encryption of the personal identification number, when the customer inputs the personal identification number, the pin pad 13 waits for the input of the personal identification number. Is necessary, the control unit 11 causes the display unit 12 to display a customer selection screen as shown in FIG. When the customer agrees to input the personal identification number in plain text, the control unit 11 instructs the pin pad 13 to prepare for receiving the personal identification number in plain text and causes the display unit 12 to display a personal identification number input request screen. . Then, the pin pad 13 receives the password in plain text and passes it to the control unit 11. If the customer chooses to cancel the password, the password input process is stopped. In addition, when the customer selects standby, a standby screen is displayed on the display unit 12. When the standby time has elapsed and the password can be entered, the PIN number can be entered by operating the pin pad 13. To do. Further, the control unit 11 displays a password input enable screen as shown in FIG. 7, and when the customer selects to enter the password after the standby screen is finished, the pin pad 13 is displayed after the standby screen is displayed to the end. To enter the security code.

  This makes it possible to wait on the spot when the customer has time and wants to handle the encryption code encrypted. In addition to the effects of the first and second embodiments, the customer It is possible to expect a further effect of improving the convenience.

  Next, a fourth embodiment of the present invention will be described. In addition, about the thing which has the same structure as 1st-3rd embodiment, the description is abbreviate | omitted by providing the same code | symbol. Explanation of the same operations and effects as those of the first to third embodiments is also omitted.

  FIG. 9 is a block diagram of a transaction apparatus according to the fourth embodiment of the present invention.

  Transaction device 10 according to the present embodiment, when a customer selects a transaction for which encryption of the personal identification number is not essential, if the customer agrees to input the personal identification number in plain text, prints the consent on receipt 45. It is like that. Therefore, the transaction apparatus 10 includes a data input unit 41, a printing unit 42, and a communication processing unit 43.

  The data input unit 41 is a device that is operated by a customer to input various data necessary for a transaction, and includes, for example, a keyboard, a touch panel, and the like. The printing unit 42 is a device for issuing a receipt 45 as a transaction statement slip on which data such as transaction details is printed, and includes print heads of various printing methods such as an ink jet method, a heat sensitive method, and an electrophotographic method. Prepare. Further, the communication processing unit 43 communicates with the host device.

  Since the configuration of other points is the same as that of the first embodiment, description thereof is omitted.

  Next, operation | movement of the transaction apparatus 10 in this Embodiment is demonstrated.

  FIG. 10 is a diagram showing an example of a receipt issued by the transaction apparatus according to the fourth embodiment of the present invention, and FIG. 11 is a flowchart showing the operation of the transaction apparatus according to the fourth embodiment of the present invention.

  In the present embodiment, an operation when a customer selects a transaction that does not require encryption of a personal identification number will be described.

  First, the customer selects a transaction and operates the data input unit 41 of the transaction apparatus 10 to select a transaction that does not require encryption of the personal identification number. Subsequently, the customer inputs information and operates the data input unit 41 to input various data necessary for the transaction.

  Subsequently, the customer authenticates. In the authentication, as in the first embodiment, the customer selects to agree to input the password in plain text on the consent request screen as shown in FIG. It is assumed that the PIN number is prepared by operating the pin pad 13 that has been prepared to be received in step S1, and the password is input.

  Then, the control unit 11 transmits a plaintext personal identification number from the communication processing unit 43 to the host device. When authentication is permitted by the host device, the customer performs a transaction.

  Subsequently, when the transaction is completed, the control unit 11 prints and discharges the receipt, and prints on the receipt 45 the content indicating that the secret code has been entered together with the transaction content in plain text. Instruct to discharge. Then, as shown in FIG. 10, the receipt 45 is printed with contents clearly indicating that the password has been entered in plain text when the password is entered in the remarks column.

  Then, the customer receives the discharged receipt 45, and the process ends.

Next, a flowchart will be described.
Step S61 The customer selects a transaction.
Step S62 The customer inputs information.
Step S63: Authentication is permitted by the host device.
Step S64 The customer makes a transaction.
Step S65: The controller 11 performs receipt printing and discharge, and ends the process.

  As described above, in the present embodiment, when the customer selects a transaction that does not require the encryption of the personal identification number, when the customer inputs the personal identification number, the pin pad 13 waits for the input of the personal identification number. When the customer agrees to input the personal identification number in plain text, the fact that the customer agrees is printed on the receipt 45 and discharged.

  As a result, it becomes possible to store the record that the personal identification number is inputted in plain text as evidence, and the customer's convenience is improved in addition to the effects of the first to third embodiments. The effect can be expected.

  In the present embodiment, an example has been described in which the customer agrees to input the personal identification number in plain text, but the receipt 45 is printed on the receipt 45. Even if the contents are described, the same effect can be obtained.

  The password input process described in the third embodiment is also effective when the selected transaction requires encryption of the password, in which case either waiting or cancellation is selected. It becomes possible.

  Further, in the third embodiment, it has been described that the preparation for encryption is performed after the standby screen is displayed to the end. However, if the standby screen can be terminated at the customer's will, it is not always necessary to display it to the end. The same effect can be obtained even if the customer prepares for encryption after the standby screen is finished.

  In addition, this invention is not limited to the said embodiment, It can change variously based on the meaning of this invention, and does not exclude them from the scope of the present invention.

It is a block diagram of the transaction apparatus in the 1st Embodiment of this invention. It is a figure which shows the example of the consent request screen of the transaction apparatus in the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the transaction apparatus in the 1st Embodiment of this invention. It is a figure which shows the example of the PIN code input request screen of the transaction apparatus in the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the transaction apparatus in the 2nd Embodiment of this invention. It is a figure which shows the example of the customer selection screen of the transaction apparatus in the 3rd Embodiment of this invention. It is a figure which shows the example of the PIN code input possible screen of the transaction apparatus in the 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the transaction apparatus in the 3rd Embodiment of this invention. It is a block diagram of the transaction apparatus in the 4th Embodiment of this invention. It is a figure which shows the example of the receipt which the transaction apparatus in the 4th Embodiment of this invention issues. It is a flowchart which shows operation | movement of the transaction apparatus in the 4th Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Transaction apparatus 12 Display part 13 Pin pad 15, 32, 33 Function key 21 Ten key 42 Printing part 45 Receipt

Claims (8)

(A) An input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a non-encrypted code that keeps the personal identification number input by the input means in plain text. A personal identification number input device comprising a processing means, wherein the personal identification number encryption process becomes impossible when the personal identification number input interval is shorter than a predetermined time interval, and the personal identification number encryption process can be performed again after a predetermined period of time; ,
(B) A transaction device that displays information related to input of a personal identification number and has a display unit that includes an input means, and transmits the personal identification number to a host device for transactions.
(C) In the case of a transaction in which the encryption of the personal identification number is not indispensable and the personal identification number cannot be encrypted, the display unit agrees to transmit the personal identification number in plain text. Display the requested screen with a selection means to select consent,
(D) When consent is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is transmitted in plain text to the host device in plain text. When consent is selected by the selection means, the display unit displays a numeric keypad and transmits the password entered by either the numeric keypad or the input means of the password number input device to the host device in plain text. The transaction apparatus according to claim 1. (A) An input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a non-encrypted code that keeps the personal identification number input by the input means in plain text. A personal identification number input device comprising a processing means, wherein the personal identification number encryption process becomes impossible when the personal identification number input interval is shorter than a predetermined time interval, and the personal identification number encryption process can be performed again after a predetermined time; ,
(B) A transaction device that displays information related to input of a personal identification number and has a display unit that includes an input means, and transmits the personal identification number to a host device for transactions.
(C) In the case of a transaction in which the encryption of the personal identification number is not essential, and the personal identification number cannot be encrypted, the display unit transmits the personal identification number in plain text. A screen for selecting whether to agree or wait is displayed together with a selection means for selecting consent or waiting,
(D) When consent is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is transmitted in plain text to the host device,
(E) When waiting is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is encrypted and transmitted to the host device after the predetermined time has elapsed. Transaction equipment. A printing unit for issuing a transaction statement slip; consent is selected by the selection unit; and the code number input by the input unit of the code number input device is transmitted to the host device in plain text, the printing unit The transaction apparatus according to any one of claims 1 to 3, which prints on the transaction statement slip that consent has been selected. The transaction device according to claim 4, wherein the printing unit is capable of printing on a passbook and prints on the passbook that consent has been selected. (A) An input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a non-encrypted code that keeps the personal identification number input by the input means in plain text. A personal identification number input device comprising a processing means, wherein the personal identification number encryption process becomes impossible when the personal identification number input interval is shorter than a predetermined time interval, and the personal identification number encryption process can be performed again after a predetermined time; ,
(B) A password processing method in a transaction apparatus that displays information related to input of a password and has a display unit having an input means, and transmits the password to a higher-level device to perform a transaction,
(C) In the case of a transaction in which the encryption of the personal identification number is not indispensable and the personal identification number cannot be encrypted, the display unit agrees to transmit the personal identification number in plain text. Display the required screen with a selection means to select consent,
(D) When the consent is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is transmitted in plain text to the host device in plain text. When consent is selected by the selection means, the display unit displays a numeric keypad and transmits the password entered by either the numeric keypad or the input means of the password number input device to the host device in plain text. The personal identification number processing method according to claim 6. (A) An input means for inputting a personal identification number, an encryption processing means for encrypting the personal identification number input by the input means, and a non-encrypted code that keeps the personal identification number input by the input means in plain text. A personal identification number input device comprising a processing means, wherein the personal identification number encryption process becomes impossible when the personal identification number input interval is shorter than a predetermined time interval, and the personal identification number encryption process can be performed again after a predetermined time; ,
(B) A password processing method in a transaction apparatus that displays information related to input of a password and has a display unit having an input means, and transmits the password to a higher-level device to perform a transaction,
(C) In the case of a transaction in which the encryption of the personal identification number is not indispensable and the personal identification number cannot be encrypted, the display unit transmits the personal identification number in plain text. A screen for selecting whether to agree or wait is displayed together with a selection means for selecting consent or waiting,
(D) When consent is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is transmitted in plain text to the host device,
(E) When waiting is selected by the selection means, the personal identification number input by the input means of the personal identification number input device is encrypted and transmitted to the host device after the predetermined time has elapsed. PIN code processing method.

Images