JP2010278652A - Password input device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To identify that assembly of a skimming device has been tried even when a device body itself is stolen and the skimming device is assembled. <P>SOLUTION: A position where the device 1 is placed at present is sequentially measured, and information about the position measured is compared with pre-registered installation information on the device 1 by a comparison means 301. When the position information about where the device 1 is placed at present does not match the registered installation information, operation function, such as read of data from a credit card 3, is stopped by a function stop means 302. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a personal identification number input device that enables an operation function such as data reading for an IC card corresponding to an input personal identification number.

There is a payment terminal device having a payment function. This settlement terminal device inserts an IC card and inputs a password, and if it corresponds to the IC card into which the password is inserted, it makes a payment by enabling operations such as data reading with respect to the IC card.
In such a settlement terminal device, there is a very high risk that a skimming device for stealing a personal identification number is attached. For this reason, when trying to disassemble the skimming device by using a tamper switch or the like to the settlement terminal device, the device is mechanically locked so that the device cannot be restarted. .

  For example, Patent Document 1 discloses unauthorized opening of a terminal housing for the purpose of attaching a skimming device for illegally stealing data processed by a terminal as means for preventing unauthorized use in a payment terminal device having a payment function. In order to check the function and stop the function of the terminal before using the terminal, and to confirm whether the user who uses the terminal is an unauthorized user, the user password is input to the terminal at the start of terminal use. It is disclosed that authentication using user authentication using biometric authentication such as all authentication or fingerprint authentication is generally performed.

  Further, Patent Document 1 monitors the operation status of the power switch of a financial terminal having a settlement function, so that even if the unauthorized opening detection of the terminal does not operate normally, the unauthorized terminal is used. In order to contribute to the construction of safer payment processing means, the terminal is opened and a skimming device is installed inside the terminal so that the tampering detection circuit does not work. We disclose that we appropriately respond to the act of stealing authentication data such as user passwords by circuit and software analysis.

  However, there is a possibility that the settlement terminal device itself may be stolen from, for example, a store, the tamper switch operation is avoided, the device body is disassembled, a skimming device is incorporated in the device body, and returned to the store.

  An object of the present invention is to provide a personal identification number input device that can prove that such a skimming device has been incorporated even if the device body itself has been stolen and a skimming device has been incorporated.

  A personal identification number input device according to a main aspect of the present invention is a personal identification number input device that enables an operation function for an IC card corresponding to an input personal identification number, and registers information on an installation position where the device is installed. Registration means, position measurement means for measuring the position where the apparatus is placed, comparison means for comparing the position information measured by the position measurement means with the installation information registered in the position information registration means, When the comparison result by the comparison means indicates that the position information measured by the position measurement means is different from the installation information registered in the position information registration means, a function stop means for stopping the operation function for the IC card is provided.

  ADVANTAGE OF THE INVENTION According to this invention, even if apparatus main body itself is stolen and a skimming apparatus is integrated, the PIN code input device which can turn out that this skimming apparatus was going to be integrated can be provided.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is an external view showing a card processing device provided with an embodiment of a personal identification number input device according to the present invention. The block block diagram of the apparatus. The functional block diagram which shows the control part in the same apparatus. The figure which shows mounting of the apparatus board | substrate integrated in the main body of the apparatus. 6 is a flowchart for inputting a password in the apparatus.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 shows an external view of a card processing device 1 provided with a password input device. This card processing apparatus 1 is used in a credit settlement system. The card processing apparatus 1 is connected to a POS (Point Of Sales) terminal 2, reads data of a credit card 3, for example, a contact IC card, and sends the data to the POS terminal 2 through a transmission cable 4. The POS terminal 2 executes credit settlement processing based on the data of the credit card 3 sent from the card processing device 1.

  The card processing apparatus 1 includes a main body 10 including a keyboard 11, a display unit 12, and a card reader 13. The card reader 13 is provided with a card slot 14. The card slot 14 can be inserted with a contact IC card. A contact electrode 200 is provided inside the card slot 14 as shown in FIG. 2 so as to come into contact with the electrode portion of the credit card 3 inserted to a predetermined position in the card slot 14.

  FIG. 2 is a block diagram of the card processing device 1 provided with a password input device. The card processing apparatus 1 includes a control unit 201 equipped with a CPU (Central Processing Unit). The control unit 201 is connected to the keyboard 11, the display unit 12, the contact electrode 200, the storage unit 202, the communication unit 203, the position information storage unit 204, and the GPS circuit 205.

The storage unit 202 forms a ROM area for storing fixed data such as a code number input program and a RAM area for temporarily storing variable data such as data read from the credit card 3. is doing.
The communication unit 203 performs data communication performed through the transmission cable 4 between the POS terminal 2 and the control unit 201.

An antenna 206 is connected to the GPS circuit 205. The GPS circuit 205 and the antenna 206 have a function of a position measuring unit that measures the position where the device 1 is placed. The GPS circuit 205 inputs signals corresponding to radio waves from a plurality of geostationary satellites received by the antenna 206, and measures the position where the device 1 is currently located based on these signals.
The GPS circuit 205 measures the position where the device 1 is placed when the device 1 is activated (during setup).
The GPS circuit 205 measures the position where the device 1 is placed periodically, for example, every hour.

The control unit 201 has a function of capturing key input data by a signal corresponding to an operation key from the keyboard 11 and a function of displaying characters and the like on the display unit 12 based on the display data.
Further, the control unit 201 functions as a personal identification number input device, that is, sequentially measures the position where the device 1 is currently placed, and obtains the measured position information and the installation information of the device 1 registered in advance. As a result of the comparison, if the position information where the device 1 is currently located does not match the registered installation information, the operation function for the credit card 3 is stopped.

FIG. 3 shows a functional block diagram of the control unit 201. The control unit 201 includes a registration unit 300, a comparison unit 301, a function stop unit 302, and a registration confirmation unit 303.
The registration unit 300 registers information on the installation position where the device 1 is installed. The registration unit 300 registers information on the installation position where the device 1 is installed when the operation of the device 1 is started. Specifically, the registration unit 300 receives the position where the device 1 measured by the GPS circuit 205 is currently located at the time of start-up (setup) when starting the operation of the device 1, and determines the position. It is registered as position information where the device 1 is installed. This registered position information is registered in the position information storage unit 204, for example.

  The comparison unit 301 compares the position information of the device 1 currently measured by the GPS circuit 205 with the registered installation information registered in the position information storage unit 204, and the device 1 is installed at the current time. A comparison result is obtained as to whether or not the registered position information matches the registered installation information.

  If the comparison result by the comparison unit 301 indicates that the position information of the device 1 is currently different from the registered installation information, the function stop unit 302 operates the function for the credit card 3, that is, the data for the credit card 3. Stop the reading function. Specifically, the function stop unit 302 stops or erases a password input program for reading data from the credit card 3. Further, the function stopping unit 302 disables the operation function such as data reading with respect to the credit card 3 and disables the return of the operation function such as data reading with respect to the credit card 3.

  The registration confirmation unit 303 determines whether there is registration of registered installation information in which the device 1 is installed in the position information storage unit 201 in advance by the registration unit 300. If the registration installation information is not registered, The stop means 302 makes it impossible to restore the operation function such as reading data from the credit card 3.

  An apparatus substrate 400 as shown in FIG. 4 is incorporated in the main body 10 of the apparatus 1. An LSI 401 having a GPS function and a memory 402 such as an S-RAM for registering registered installation information as the position information storage unit 204 are mounted on the device substrate 400. The LSI 401 may be replaced with a module having the functions of the registration unit 300, the comparison unit 301, the function stop unit 302, and the registration confirmation unit 303.

Next, an operation for inputting a personal identification number in the apparatus configured as described above will be described with reference to a personal identification number input flowchart shown in FIG.
First, the control unit 201 determines whether or not the power is turned on in step S1. If the result of this determination is that the power is on, the control unit 201 moves to step S2 and determines whether or not setup has been completed. If the result of this determination is that setup has not been completed, the control unit 201 moves to step S3 and starts setup. At this time, the device 1 is in operation.

Next, when the setup starts, the control unit 201 performs setup processing such as time setting in step S4.
Next, when the setup process is completed, the control unit 201 issues a position information measurement command to the GPS circuit 205 in step S5, and causes the device 1 to measure the position information currently set. However, the GPS circuit 205 inputs each signal according to the radio waves from the plurality of geostationary satellites received by the antenna 206, and measures the position where the device 1 is currently located based on these signals.

  Next, in step S6, the registration means 300 receives the position where the device 1 is measured at the current time measured by the GPS circuit 205, and uses this position as registered position information where the device 1 is installed. Register in the storage unit 204.

  On the other hand, if the apparatus 1 has been set up, the control unit 201 proceeds from step S2 to step S7, and determines whether or not the registered position information where the apparatus 1 is installed is registered in the position information storage unit 204. to decide. As a result of the determination, if the registered position information where the device 1 is installed is registered in the position information storage unit 204, the control unit 201 proceeds to step S8 and instructs the GPS circuit 205 to measure the position information. Is issued, and the measurement of the position information where the apparatus 1 is currently placed is executed. However, as described above, the GPS circuit 205 inputs each signal corresponding to the radio waves from the plurality of geostationary satellites received by the antenna 206, and based on these signals, determines the position where the device 1 is currently located. taking measurement.

  Next, in step S9, the comparison unit 301 reads the registered installation information registered in the position information storage unit 204, and the position information and the position information on which the device 1 is currently measured measured by the GPS circuit 205 are read. The registered installation information registered in the storage unit 204 is compared, and in step S10, a comparison result is obtained as to whether or not the location information of the device 1 currently located matches the registered installation information.

As a result of the comparison, if the position information where the device 1 is currently located matches the registered installation information, the control unit 201 determines that the device 1 is installed in the registered installation information. .
Next, in step S11, the control unit 201 compares the position information where the device 1 is currently located with the registered installation information registered in the position information storage unit 204 for a certain period, for example, 1 Determine whether time has passed. As a result of this determination, when a certain period, for example, 1 hour elapses, the control unit 201 returns to step S8, issues a position information measurement command to the GPS circuit 205, and the position where the device 1 is currently located. Perform information measurement. As a result, the GPS circuit 205 periodically repeats the measurement of the position where the device 1 is placed, for example, every hour, and repeats the above steps S8 to S11 so that the device 1 Is compared with the registered installation information registered in the position information storage unit 204.

  By the way, if the position information where the apparatus 1 is currently located and the registered installation information do not match, the function stopping unit 302 moves from step S10 to S12, and the operation function for the credit card 3, that is, the data for the credit card 3 is displayed. Stop the reading function. Specifically, the function stop unit 302 stops or erases a password input program for reading data from the credit card 3. Further, the function stopping unit 302 disables an operation function such as data reading from the credit card 3 and disables an operation function such as data reading from the credit card 3 from being restored.

  As a result of the determination in step S7, if the registered position information where the apparatus 1 is installed is not registered in the position information storage unit 204, the registration confirmation unit 303 uses the function stop unit 302 as described above. It is impossible to restore the operation function such as reading data from the credit card 3.

  As described above, according to the embodiment, the position where the device 1 is currently placed is sequentially measured, and the position information thus measured and the installation information of the device 1 registered in advance are sequentially compared. As a result of the comparison, if the position information where the apparatus 1 is currently located and the registered installation information do not match, the operation function such as data reading for the credit card 3 is stopped, that is, the data reading for the credit card 3 is stopped. Stop or erase the program for inputting the password for performing the operation or disable the operation function such as reading data from the credit card 3 and disable the return of the operation function such as reading data from the credit card 3 To do.

  Accordingly, in order to incorporate the skimming device into the device 1, for example, the device 1 is stolen from a store, the operation of the tamper switch is avoided, the device main body is disassembled, and the skimming device is assembled into the device main body. Even if a return case occurs, the position information where the device 1 is currently located does not match the registered installation information, and at this time, the operation function such as reading of data from the credit card 3 is stopped, that is, the credit card. 3 stops or erases the password input program for reading data for 3 or disables the operation function such as data reading for the credit card 3, and the operation function such as data reading for the credit card 3 Return can be impossible. As a result, the device 1 can never be used again, and it is possible to prevent the skimming device from being installed and returning to the store. Even if the main body of the device 1 is stolen and the skimming device is incorporated, it can be determined that the skimming device is intended to be incorporated.

  Further, since the device 1 compares the position information of the device 1 at the present time with the registered installation information every certain period of time, there is a possibility that the device 1 is always stolen from a store and a skimming device is incorporated. You can monitor what you have.

  If the registered location information where the device 1 is installed is not registered in the location information storage unit 204, the registration confirmation unit 303 reads the data from the credit card 3 by the function stop unit 302 as described above. Since the operation function cannot be restored, for example, even when the registered installation information registered in the position information storage unit 204 is erased by fraud or the like, an operation function such as reading data from the credit card 3 is provided. Stop, that is, stop or erase the PIN code input program for reading data from the credit card 3, or disable the operation function such as reading data from the credit card 3, and It is possible to disable the return of the operation function such as reading.

  For example, when the installation position of the device 1 installed in the store is changed in the store, an allowable range may be set in the registered installation information registered in the position information storage unit 204. This allowable range can be variably set according to the size of the store space. Thereby, even if the installation position of the said apparatus 1 is changed in a shop, operation functions, such as reading of the data with respect to the credit card 3, do not stop.

  If the power consumption of the LSI having the GPS function is reduced or the battery power is increased, the position where the device 1 is always located by the GPS circuit 205 at all times using the battery for data backup. Can be measured. Accordingly, when the device 1 moves from the registration position, the operation function such as data reading with respect to the credit card 3 of the device 1 can be stopped, so that it is possible to prevent the skimming device from being incorporated.

Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.
For example, the device 1 provided with a password input device is used in a credit settlement system, but is not limited to this, a device that prohibits movement from a registered position to another position, or a device that is moved from a registered position and modified. The present invention can be applied to an apparatus that is easily performed.

Hereinafter, other features of the present invention will be described.
The password input device according to claim 1, wherein the registration means of the present invention registers the information of the installation position at the start of operation of the device.
5. The personal identification number input device according to claim 4, wherein the function stop means of the present invention stops or deletes a program for performing an operation function on the IC card.
5. The personal identification number input device according to claim 4, wherein the function stop means of the present invention disables the operation function for the IC card to be disabled.

The present invention relates to a password input method that enables an operation function for an IC card corresponding to an input password.
Successively measure the position where the device is currently located,
The measured position information and the installation information of the device registered in advance are sequentially compared,
As a result of these comparisons, if the position information where the device is currently located and the registered installation information are different, the operation function for the IC card is stopped.
This is a PIN code input method.

  1: card processing device, 2: POS (Point Of Sales) terminal, 3: credit card, 4: transmission cable, 10: main body, 11: keyboard, 12: display unit, 13: card reader, 14: card slot, 200 : Contact electrode, 201: control unit, 202: storage unit, 203: communication unit, 204: position information storage unit, 205: GPS circuit, 206: antenna, 300: registration unit, 301: comparison unit, 302: function stop unit 303: Registration confirmation means.

JP 2007-183783 A

Claims (4)

In a password input device that enables an operation function for an IC card corresponding to an input password,
Registration means for registering information of the installation position where the device is installed;
Position measuring means for measuring the position where the device is placed;
Comparison means for comparing the position information measured by the position measurement means with the installation information registered in the position information registration means;
If the comparison result by the comparison means is different from the position information measured by the position measurement means and the installation information registered in the position information registration means, a function stop means for stopping the operation function for the IC card;
A personal identification number input device comprising:   2. The password input device according to claim 1, wherein the position measuring means measures a position where the device is placed at the time of activation.   2. The password input device according to claim 1, wherein the position measuring means periodically measures a position where the device is placed.   It is determined whether or not there is registration of information on the installation position where the apparatus is installed in the registration means, and if there is no registration of information on the installation position, an operation function for the IC card is performed by the function stop means. 2. The password input device according to claim 1, further comprising registration confirmation means for stopping.

Images