JP2011044018A - System and method for registering password - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system for registering a password. <P>SOLUTION: This system is provided with: an input part (22) for receiving serial numbers and a password applied to an application form from the terminal (10) of an applicant; a password registered code generation part (24) for generating a password registered code; a password temporary storage database (26) for storing the serial numbers, the password and the password registered code; an output part (22) for transmitting the password registered code to the terminal (10); an input part (32) for receiving the serial numbers and the password registered code in the application form from the terminal (12) operated by the registration operator; an ID generation part (34) for generating ID; a password acquisition part (36) for acquiring the password associated with the serial numbers and the password registered code from the password temporary storage database; and a contract information database (38) for storing the password and the ID in association with each other. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a system and method for registering a password.

  Conventionally, customers (applicants) fill out the required application forms in application procedures such as opening an account, applying for internet banking, applying for a credit card, and applying for a card loan at a financial institution such as a bank. It is necessary to submit it to a financial institution. Necessary items for application include a password used when conducting transactions using ATM (automated teller machine) or Internet banking, and the customer enters the password determined by the customer in the application form, Submit using postal mail. The financial institution receives this application form, registers the information entered in the application form, and opens an account or issues a cash card or credit card. Thereafter, the customer can make transactions using ATM (automated teller machine) or Internet banking.

  However, after leaving the customer, the application form may be seen by third parties such as delivery companies and inside financial institutions. That is, there is a risk that customer information including a password is leaked.

  In order to deal with such a risk, there is a method using a password film seal as an example. For example, by handing a seal for password coating together with an application form, the customer himself / herself hides the password entered in the application form with the seal so that the password is not exposed to a third party. With this measure, the password is not directly touched by third parties and the risk of leakage can be reduced. However, a registered operator who registers information entered in an application form at a financial institution needs to register by looking at the password.

  Another problem is that a registered operator may enter a wrong password.

  The present invention has been made in view of such problems, and an object of the present invention is to provide a system and method for registering a password without entering the password in an application form.

  In order to achieve such an object, a password registration system according to one aspect of the present invention includes first input means (22) for receiving a serial number and a password from a terminal (10) operated by an applicant (customer). And a password registered code generating means (24) for generating a password registered code, a serial number and password received by the first input means, and a password registered code generated by the password registered code generating means. A storage means (26) for storing in association, a first output means (22) for transmitting the password registered code generated by the password registered code generating means to the terminal (10) operated by the applicant, and a registered operator The second input means (32) for receiving the serial number and the password registered code from the terminal (12) operated by the user, and the applicant The ID generation means (34) for generating an ID for uniquely identifying the customer) and the first storage means are inquired and associated with the serial number and password registered code received from the terminal (12) operated by the registered operator. A password acquisition means (36) for acquiring the received password, a second storage means (38) for storing the password acquired by the password acquisition means in association with the ID generated by the ID generation means, and an ID generation Second output means (40) for outputting the ID generated by the means.

  In one embodiment, the first input means (22), the password registered code generation means (24), the first storage means (26), and the first output means (22) are password self-registered. Configure the system (20). The second input means (32), ID generation means (34), password acquisition means (36), second storage means (38), and second output means (40) are contracted. An information registration system (30) is configured.

  In one embodiment, the password registration system includes means for checking whether the same sequence number is already stored with the password before storing the received sequence number and password in the first storage means (26). Prepare.

  Another aspect of the present invention is a method for registering a password in the password registration system.

  Still another aspect of the present invention resides in a program for causing a computer to function as the password registration system. The program includes a computer having a processor and a memory, the first input unit (22), the password registered code generation unit (24), the first storage unit (26), and the first storage unit. Output means (22); second input means (32); ID generation means (34); password acquisition means (36) to be acquired; second storage means (38); It functions as the second output means (40).

  In one embodiment, the program further causes the computer to function as a means for checking whether the same serial number is already stored with the password.

  As described above, according to the present invention, it is possible to provide a system and method for registering a password without entering the password in the application form.

It is a block diagram which shows the password registration system concerning one Embodiment of this invention. It is a flowchart which shows the operation | movement flow of the password registration system concerning one Embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
This embodiment illustrates a password registration system for registering a password that is connected to an online banking system that provides an online banking service and that is used when a customer uses the online banking system. According to this embodiment, the applicant (customer) of the online banking system obtains an application form to which a serial number is assigned prior to a series of application procedures, and uses a serial number that uniquely identifies the application form. And pre-register the password you have determined. Thereafter, the customer submits an application form without entering a password, and obtains the ID of the online banking system. Thereby, the customer can use the online banking system by using the acquired ID and the pre-registered password.

  FIG. 1 is a configuration diagram showing a password registration system according to an embodiment of the present invention. The password registration system is a system for registering a password, and includes a password self-registration system 20 and a contract information registration system 30.

  The password self-registration system 20 is a system for pre-registering a password before a customer submits an application form to a financial institution. 26. The password self-registration system 20 can also include an application form issuing unit (not shown) that generates an application form assigned with a serial number. The components of the password self-registration system 20 can be configured as a software module, a hardware module, or a module combining software and hardware. The serial number assigned to the application form by the financial institution is stored in a database inside and outside the password self-registration system 20 that can be referred to by the input / output unit 22.

  The input / output unit 22 is connected to the terminal 10 operated by the online banking applicant (customer) via a network such as the Internet and has a function of interacting with the customer. For example, the input / output unit 22 generates a screen for prompting input of the serial number given to the application form and the password determined by the customer, transmits the screen to the terminal 10, and receives the serial number and the password. Further, when receiving the serial number and password, the input / output unit 22 stores the serial number and password generated by the password registered code generation unit 24 and received together with the password registered code in the temporary password storage database 26 and associates them. Further, the input / output unit 22 transmits a password registered code associated with the received password to the terminal 10.

  In addition, the input / output unit 22 refers to the database inside and outside the password self-registration system 20 before the received serial number and password are stored in the temporary password storage database 26. It can be configured to check whether it is a regular serial number assigned to the. Thereby, it is possible to prevent registration of a password by an unauthorized application form. Furthermore, the input / output unit 22 is configured to check whether the same serial number is already stored with the password before storing the received serial number and password in the temporary password storage database 26. Can do. This can prevent unauthorized password registration by a third party.

  The password registered code generation unit 24 generates a password registered code associated with the serial number and password received by the input / output unit 22. The password registered code may be a character, a symbol, a number such as a random number, or a combination of these that can be identified by the computer. The password registered code is transmitted to the terminal 10 via the input / output unit 22. The customer transcribes the password-registered code to the application form with the transmitted serial number and submits it to the financial institution.

  The password temporary storage database 26 stores the serial number and password received by the input / output unit 22 in association with the password registered code generated by the password registered code generating unit 24. The temporary password storage database 26 can be a storage location of a serial number assigned to an application form by a financial institution. In this case, the temporary password storage database 26 associates the password received by the input / output unit 22 and the password registered code generated by the password registered code generation unit 24 later with the previously stored serial number.

  The contract information registration system 30 is a system for registering the contents of an application form submitted by a customer from a registered operator of a financial institution, and includes an input unit 32, an ID generation unit 34, a password acquisition unit 36, and contract information. A database 38 and an output unit 40 are provided. The components of the contract information registration system 30 can be configured as a software module, a hardware module, or a module combining software and hardware.

  The input unit 32 is connected to the terminal 12 operated by a registered operator of a financial institution via a network such as a LAN (not shown) and has a function of interacting with the registered operator. For example, the input unit 32 generates a screen for prompting input of the serial number and password registered code, name, address, and the like given to the application form, transmits the screen to the terminal 12, and receives the serial number and password registered code. . The input unit 32 instructs the password acquisition unit 36 to acquire a password associated with the received serial number and password registered code. Further, the input unit 32 stores and associates the password acquired by the password acquisition unit 36 and the ID generated by the ID generation unit 34 in the contract information database 38. The received serial number and password registered code together with the password and ID may be stored in the contract information database 38 and associated therewith. The received customer name and contact information such as address, telephone number, fax number, and e-mail address are also registered in association with each other.

  The ID generation unit 34 generates an ID that uniquely identifies an online banking customer. The ID may be a letter, symbol, number, or combination thereof that can be identified by the computer.

  The password acquisition unit 36 refers to the temporary password storage database 26 and acquires the password associated with the serial number and password registered code received by the input unit 32.

  The contract information database 38 stores the password acquired by the password acquisition unit 36 and the ID generated by the ID generation unit 34 in association with each other. Further, the contract information database 38 receives the contact number information such as the serial number, password registered code, customer name and address, telephone number, fax number, and e-mail address received by the input unit 32, the password and Store in association with the ID.

  The output unit 40 has a function of notifying the customer of the ID. For example, the output unit 40 obtains the ID from the contract information database 38 together with the customer's address, etc., and supplies the ID to a printer or a telegram system (not shown) so that the ID can be sent by mail or telegram. It is configured to output with. Alternatively, the output unit 40 obtains the ID from the contract information database 38 together with the telephone number or facsimile number of the customer and supplies it to the automatic dial system (not shown) to send the ID by voice or facsimile. You may comprise so that it may output in a suitable form. As a further alternative, the output unit 40 may be configured to obtain the ID from the contract information database 38 together with the customer's email address and output the ID in the form of an email.

  The online banking system 50 is a system for performing various transactions by accessing using an ID notified by a customer and a pre-registered password, and includes an input / output unit 52, an authentication unit 54, transaction processing Part 56. The components of the online banking system 50 can be configured as a software module, a hardware module, or a module combining software and hardware.

  The input / output unit 52 is connected to the terminal 10 via the network 14 and has a function of receiving an ID, a password, or a transaction instruction, and outputting an authentication result or a transaction result to the terminal 10.

  The authentication unit 54 has a function of authenticating the customer by receiving the ID and password input from the terminal 10 via the input / output unit 52 and inquiring to the contract information database 38.

  The transaction processing unit 56 has a function of executing a transaction instruction input from the terminal 10 via the input / output unit 52. The transaction processor 56 can be configured to cooperate with other systems, such as billing systems, to process transactions.

  FIG. 2 is a flowchart showing the operation flow of the password registration system and the operation flow of the online banking system according to the embodiment of the present invention.

(Pre-registration of password)
The applicant (customer) of the online banking system accesses the password self-registration system 20 from the terminal 10 in a state where the application form assigned with the serial number is acquired prior to the series of application procedures, and the password. Pre-registration. The customer can obtain the application form by hand or mail at a financial institution, etc., or operate the terminal 10 to give a serial number to the application form issuing section (not shown) of the password self-registration system 20 The application form can be obtained by requesting the generated application form data and obtaining and printing the application form data.

  In step S102, the input / output unit 22 receives the serial number (NUM) and the password (xxx) input by the customer from the terminal 10 operated by the customer.

  In step S104, the password registered code generating unit 24 generates a password registered code (yyy).

  In step S106, the input / output unit 22 confirms whether or not the received serial number is a regular serial number given to the application form by the financial institution, and the same serial number as the received serial number is already included with the password. After confirming whether the password is temporarily stored in the password temporary storage database 26, the received serial number (NUM) and password (xxx) are generated by the password registered code generation unit 24 and the password registered code (yyy). The password temporary storage database 26 is stored. The password temporary storage database 26 stores the serial number (NUM) and password (xxx) received by the input / output unit 22 and the password registered code (yyy) generated by the password registered code generation unit 24 in association with each other. To do.

  In step S <b> 108, the input / output unit 22 transmits a password registered code (yyy) associated with the received password (xxx) to the terminal 10.

  As shown in FIG. 1, the applicant (customer) transcribes the password registered code transmitted from the password self-registration system 20 to the application form assigned with the serial number transmitted in step S102, and further, the name and address Fill out the prescribed items and submit it to a financial institution.

(Registration of application contents)
The registered operator of the financial institution receiving the application forms accesses the contract information registration system 30 from the terminal 12 and registers the contents of the application form.

  In step S110, the input unit 32 receives the serial number (NUM) and the password registered code (yyy) from the terminal 12 operated by the registered operator.

  In step S112, the password acquisition unit 36 queries the password temporary storage database 26 of the password self-registration system 20, and is associated with the serial number (NUM) and the password registered code (yyy) received by the input unit 32. Get the password (xxx).

  In step S114, the ID generation unit 34 generates an ID (USR).

  In step S116, the input unit 32 uses the received serial number (NUM) and password registered code (yyy) as the password (xxx) acquired by the password acquisition unit 36 and the ID (USR) generated by the ID generation unit 34. At the same time, it is stored in the contract information database 38. The contract information database 38 is generated by the serial number (NUM) and password registered code (yyy) received by the input unit 32, the password (xxx) acquired by the password acquisition unit 36, and the ID generation unit 34. The ID (USR) is stored in association with each other.

  In step S118, the output unit 40 outputs the ID (USR) generated by the ID generation unit 34 and notifies the customer.

(Access to online banking system)
The customer accesses the online banking system using the notified ID and pre-registered password.

  In step S <b> 120, the input / output unit 52 receives an ID (USR) and a password (xxx) from the terminal 10.

  In step S122, the authentication unit 54 refers to the contract information database 38 to authenticate the customer with the received ID (USR) and password (xxx).

  In step S124, the transaction processing unit 56 interacts with the customer authenticated by the authentication unit 54 and other systems, and executes transaction processing.

  As described above, according to the present invention, it is possible to provide a system and method for registering a password without entering the password in the application form. Since there is no need to enter the password in the application form, there is no risk of the password being leaked after the application form leaves the customer. Furthermore, since it is not necessary to hand over or mail the password film seal and the application form, the application form can be easily obtained online.

10, 12 terminal 14 network 20 password self-registration system 22 input / output unit 24 password registered code generation unit 26 password temporary storage database 30 contract information registration system 32 input unit 34 ID generation unit 36 password acquisition unit 38 contract information database 40 Output unit 50 Online banking system 52 Input / output unit 54 Authentication unit 56 Transaction processing unit

Claims (6)

A password registration system,
An input means for receiving a serial number assigned to an unsubmitted application form obtained in advance by the applicant and a password determined by the applicant from a terminal operated by the applicant;
A password registered code generating means for generating a password registered code;
First storage means for storing the serial number and the password received by the first input means in association with the password registered code generated by the password registered code generating means;
First output means for transmitting the password registered code generated by the password registered code generating means and associated with the password to a terminal operated by the applicant;
Receiving the serial number and the password-registered code described in the application form from a terminal operated by a registered operator who registers the contents of the application form to which the serial number is provided and submitted by the applicant; Input means,
ID generating means for generating an ID for uniquely identifying the applicant;
Password acquisition means for inquiring the first storage means and acquiring the password associated with the serial number and the password registered code;
Second storage means for storing the password acquired by the password acquisition means in association with the ID generated by the ID generation means;
And a second output means for outputting the ID generated by the ID generation means.   Means for confirming whether the same serial number is already stored with the password before storing the serial number and the password received by the first input means in the first storage means; The password registration system according to claim 1, wherein: A computer with a processor and memory,
An input means for receiving a serial number assigned to an unsubmitted application form obtained in advance by the applicant and a password determined by the applicant from a terminal operated by the applicant;
A password registered code generating means for generating a password registered code;
First storage means for storing the serial number and the password received by the first input means in association with the password registered code generated by the password registered code generating means;
First output means for transmitting the password registered code generated by the password registered code generating means and associated with the password to a terminal operated by the applicant;
Receiving the serial number and the password-registered code described in the application form from a terminal operated by a registered operator who registers the contents of the application form to which the serial number is provided and submitted by the applicant; Input means,
ID generating means for generating an ID for uniquely identifying the applicant;
Password acquisition means for querying the password temporary storage database and acquiring the password associated with the serial number and the password registered code;
Second storage means for storing the password acquired by the password acquisition means in association with the ID generated by the ID generation means;
A program that functions as a second output unit that outputs the ID generated by the ID generation unit.   Before storing the serial number and the password received by the first input means in the temporary password storage database, the computer checks whether the same serial number is already stored with the password. The program according to claim 3, further causing the program to function as a means. A method for registering a password in a password registration system,
A first input means, from a terminal operated by the applicant, receiving a serial number obtained in advance by the applicant and assigned to an unsubmitted application and a password determined by the applicant;
A password registered code generating means for generating a password registered code;
A first storage means for storing the serial number and the password received by the first input means in association with the password registered code generated by the password registered code generating means;
A first output means transmitting the password registered code generated by the password registered code generating means and associated with the password to a terminal operated by the applicant;
The second input means, from the terminal operated by the registration operator who registers the contents of the application form with the serial number submitted by the applicant, the password registration described in the serial number and the application form Receiving a completed code;
A password acquisition means inquires of the first storage means to acquire the password associated with the serial number and the password registered code;
An ID generating means generating an ID for uniquely identifying the applicant;
A second storage means stores the password acquired by the password acquisition means in association with the ID generated by the ID generation means;
And a second output means outputting the ID generated by the ID generation means. The first storage means stores the serial number and the password received by the first input means in association with the password registered code generated by the password registered code generating means,
If the same serial number as the serial number received by the first input means is not already stored with the password, the serial number and the password received by the first input means are 6. The method according to claim 5, wherein the method is stored in a storage means.

Images