JP2011100383A - Pin input device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a user from inputting a PIN to an input part of a PIN input device which is covered by a counterfeit PIN input device, without noticing it. <P>SOLUTION: The PIN input device 100 is provided with an EPP 110 for emitting light from each input key 101. An arbitrary input key 101 emits light before a PIN is input to prompt a customer to depress the light-emitting input key 101, thereby ensuring authentication between the input operation of the customer and the genuine PIN input device 100. If an illegal device such as a counterfeit PIN input device is used, input of the PIN is regulated to prevent the PIN from being stolen. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a personal identification number input device that is provided, for example, on the customer service surface of an automatic transaction apparatus, and more particularly to a personal identification number input device that prevents a secret personal identification number from being stolen.

  In general, automatic transaction devices such as ATMs installed at automatic transaction corners, when using transactions, read the customer's card data at the start of the transaction, and authenticate the customer by entering the PIN with the PIN number input device. is doing. However, various crimes that attempt to steal the password from the outside have been confirmed when the password is entered.

  In the current personal identification number input device, the personal identification number is input by allowing the customer to select and input the key number of the numeric keypad. Furthermore, a CPU, a memory, and the like having confidential information are incorporated in the inside corresponding to the numeric keypad, and these are strictly protected from unauthorized access from the outside.

  For example, when the protective cover that covers the PIN code input device is illegally opened from the outside, or the protective cover is destroyed and attempted to be accessed illegally, the unauthorized access act is detected and automatically There are known devices having a security function (tamper function) for erasing confidential information. In this way, since the personal identification number input device is protected with a strict security function, it is very difficult to illegally obtain the input personal identification number.

  However, even with this mechanically strict security function, the security code cannot still be completely prevented from being stolen. For example, as shown in FIG. 7, the appearance shape approximated to the true code number input device 100 fixedly supported by the base 130 and the input key 701 at the same coordinate position as the input key 101 of the true code number input device 100. If the false PIN code input device 700 having the above is placed so as to cover the upper surface of the true PIN code input device 100, the customer has to enter the PIN code without noticing the false PIN code input device 700 because the appearance is the same. There has been a problem that the password entered by the customer through the fake PIN code input device 700 is electrically stolen.

  On the other hand, as an input example to prevent the security code from being stolen, a fake pointer that allows multiple input keys including the security code to be entered simultaneously is displayed on the keyboard so that the security code cannot be easily stolen from the outside. A password input device has been proposed (see, for example, Patent Document 1).

JP 2008-33924 A

  However, even if the input keys are input simultaneously, it is possible to see from the outside, and a fraudulent device that electrically reads the input position of the PIN code like the false PIN code input device is used. If the password is entered, the code number is included in the data input at the same time, so that the code number is easily specified, and the code number may be stolen.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a security code input device having a high security function capable of preventing the theft of an electrical security code as a security code theft prevention means.

  According to the present invention, a plurality of input keys that allow the input of a personal identification number, a plurality of light emitting means that individually emit the input keys, a guide means that outputs input guidance information to a user, and a light emission of the light emitting means A control unit that receives control and an input of the input key, and the control unit emits light to emit light of a part of the input keys and requests a pressing input of the input key emitted by the guide unit. Key pressing request processing, input determination processing for determining whether or not the input key pressed is correct, and password input guidance for guiding the input of the password by the guiding means when it is determined that the pressing input is correct It is a personal identification number input device that executes processing.

  According to the present invention, it is possible to prevent the theft of an electrical code number using an unauthorized device such as a false code number input device.

The external appearance perspective view of ATM. The control circuit block diagram of ATM. The top view of a PIN code input device. The principal part longitudinal cross-sectional view of a PIN code input device. The control circuit block diagram of a PIN code input device. The flowchart which shows the processing operation at the time of use of a PIN code input device. The block diagram which shows the use condition of the conventional false false PIN code input device.

  An embodiment of the personal identification number input device of the present invention will be described below with reference to the drawings.

  FIG. 1 shows an external view of an automatic transaction apparatus (hereinafter referred to as ATM) 200 provided with a personal identification number input device 100. ATM 200 has a display unit 220 provided with a touch panel unit 210 at the upper part of the front of the device having a vertically long box shape. And a statement slip discharge port 230, a card insertion port 240, and a banknote deposit / withdrawal port 250. In addition, an ATM control unit 260 for controlling the deposit / withdrawal process at the time of banknote transaction is built in the ATM 200. Further, the ATM 200 is controlled by the ATM control unit 260, and a display processing device 270, a card processing device 280, a banknote processing device 290, and a statement slip processing device 300, which are described in detail in FIG. Yes.

  FIG. 2 is a control circuit block diagram of the ATM 200. A password input device 100, a touch panel unit 210, a display processing device 270, a card processing device 280, a banknote processing device 290, and a statement slip processing device 300 are connected to the ATM control unit 260 that controls the ATM 200. Based on the command of the ATM control unit 260, the devices are driven and controlled to execute processing necessary for deposit / withdrawal transactions.

  The personal identification number input device 100 is used as an authentication information acquisition means for authenticating a customer, and confirms whether or not an appropriate personal identification number has been input together with the insertion of a cash card at the start of a transaction. For example, a numeric keypad can be arranged in the input unit (Encrypting Pin Pad, hereinafter referred to as EPP) 110 of the personal identification number input device 100.

  The touch panel unit 210 is provided with a panel surface having a touch sensor on a flat screen of the display unit 220, and has an input structure in which a customer touches the panel surface of the display unit 220 to input instructions. . The display unit 220 displays and guides transaction information for the customer to trade and input guidance information for instructing input.

  The display processing device 270 has a display processing function for displaying transaction information and input guidance information on the display unit 220 on the front surface of the device. In addition, clerk operation information is also displayed on a clerk panel (not shown) provided in the ATM 200.

  The card processing device 280 receives a card from the card insertion slot 240 and reads the data of the received card. Further, it has a card processing function for recording data indicating completion of the transaction on the card and releasing it from the card insertion port 240.

  The banknote handling apparatus 290 stores the banknotes inserted into the banknote deposit / withdrawal port 250 at the time of depositing in a storage unit inside the apparatus, and pays out banknotes of a denomination designated from the storage unit at the time of withdrawal to the banknote deposit / withdrawal port 250. It has a deposit / withdrawal processing function to withdraw money.

  The statement slip processing device 300 issues a statement slip describing the transaction contents from the statement slip outlet 230 at the end of the transaction in response to the customer's statement slip request.

  FIG. 3 shows an EPP 110 that is provided as a password receiving unit of the password input device 100. The EPP 110 is arranged on a planar upper surface, and includes a plurality of keys such as a numeric keypad, a CANCEL key, a CLEAR key, and an ENTER key. An input key 101 is arranged so that it can be pressed.

  Each of the input keys 101 has a rectangular shape that is suitable for being pressed by a fingertip, and each input key 101 is supported by a guide frame 120 having a lattice-like outer periphery. The periphery of the guide frame 120 is fixed to the base 130, and the base 130 is fixed to the upper center of the front surface of the ATM 200, so that the password input device 100 is integrated with the ATM 200.

  The input key 101 is formed of a transparent resin material such as acrylic that at least partially transmits light, and numbers, characters, symbols, and the like for identifying the input key 101 are written on the upper surface thereof. Further, the input key 101 may be entirely made of a transparent material, a part may be made of a transparent material, and the other may be made of a metal material. When a metal material is used in combination, it is preferable because high strength can be achieved. Since these input keys 101 are arranged with the same structure, one of the internal structures will be described below as an example.

  FIG. 4 shows the internal structure of the input key 101. The input key 101 is a stepped quadrangular prism that is provided by making the periphery of the quadrangular prism-shaped upper part slightly smaller, and has a convex shape when viewed from the side. The convex upper portion is provided as a sliding portion 102 and is slidably supported by being inserted into the opening portion 121 of the guide frame 120 opened in a lattice shape. In addition, the convex lower portion is secured to the lower surface of the guide frame 120 as the stepped locking portion 103. The guide frame 120 used here is made of an opaque material. For example, a metal material with high strength is preferable. A rubber plate 140 rich in electrical insulation is disposed as an intermediate layer below the input key 101, and a circuit board 150 is disposed below the rubber plate 140.

  The rubber plate 140 has a concave protrusion 141 protruding in a concave shape at the center of the upper surface. The peripheral edge of the concave protrusion 141 faces the lower surface of the input key 101 and supports the input key 101 from below. Further, the LED board 161 on which the LED 160 is mounted is disposed in the central recess 142 in which the center of the concave protrusion 141 is recessed, and the LED 160 has an arrangement configuration capable of emitting light toward the center of the lower surface of the input key 101.

  The concave protrusion 141 is formed to have a concave depth that provides an opposing space where the LED 160 disposed in the central recess 142 does not contact the input key 101 facing upward. Further, in order to secure a facing space between the input key 101 and the LED board 161, the LED board 161 may be disposed so as to be further lowered below the bottom surface of the concave central concave portion 142. Further, the upper surface of the LED substrate 161 may be covered with an insulating sheet so that the upper surface is insulated and protected.

  Further, a contact operating pusher 143 is provided vertically at the center of the lower surface of the rubber plate 140, and this pusher 143 is formed between the contact portions formed on the upper surface of the circuit board 150 facing below. It has a structure that opens and closes.

  The circuit board 150 has a key contact 151 on the upper surface facing the upper presser 143 and a leaf spring 153 having both ends connected to the leaf spring contact 152. The leaf spring 153 is urged into a dome shape with the center portion protruding upward, and is in contact with the lower surface of the pusher 143. The rubber plate 140 normally moves upward by the biasing force of the leaf spring 153. Further, the leaf spring 153 is not in contact with the key contact 151 facing downward. When the rubber plate 140 moves up and down in conjunction with the pressing operation of the input key 101, the leaf spring 153 is bent in the up and down direction and elastically displaced, and the leaf spring 153 contacts and separates from the key contact 151. have.

  Further, on the upper surface of the circuit board 150, a connector 154 that is connected to the LED board 161 by a wiring 155 is disposed. And it has the structure where LED160 light-emits by the light emission signal from the PIN code input device 100. FIG. All of the input keys 101 have such a light emitting structure.

  The input key 101 normally moves upward via a rubber plate 140 that receives an upward biasing force of the leaf spring 153, and the upper surface of the input key 101 that is moved upward is substantially flush with the upper surface of the guide frame 120. Is in a standby state where it can be pressed. When the input key 101 is pressed, the rubber plate 140 is moved downward, and the leaf spring 153 is bent and deformed downward by the pusher 143 of the rubber plate 140 moved downward, and comes into contact with the lower key contact 151. . As a result, the key contact 151 and the leaf spring contact 152 are conducted through the leaf spring 153, and it is detected that the input key 101 is pressed. Further, when the pressing force on the input key 101 is released, the input key 101 returns to the original upward movement position.

  FIG. 5 shows a control circuit block diagram of the EPP 110. The EPP controller 500 is connected to an LED 160, a light emission request accepting unit 510, an input detection unit 520, an encryption unit 530, and a signal output unit 540. These devices and the processing unit are controlled according to the program stored in.

  The light emission request accepting unit 510 accepts a light emission request signal that causes the specific input key 101 requested from the ATM control unit 260 to emit light. As a result, the EPP control unit 500 outputs a light emission signal to the specific input key 101 and causes the LED 160 of the input key 101 designated to emit light to emit light.

When the customer presses the input key 101, the input detection unit 520 detects the input key 101 of the EPP 110 pressed by the customer from the pressed coordinate position.
The encryption unit 530 encrypts the key information from the detection information of the input key 101 input by pressing.
The signal output unit 540 outputs the key information encrypted by the encryption unit 530 to the ATM control unit 260.

  The EPP control unit 500 performs display guidance on the display unit 220 so that the customer presses the lighted input key 101 and presses any input key 101 that is instructed to light by the customer separately from the password. It has a key press request processing function.

  Further, it has an input determination processing function that accepts a pressing input of the input key 101 and determines whether or not the input is correct by the pressing position of the input key 101 pressed by the customer. If it is determined that the pressing position is inappropriate at the time of the pressing input determination, since an unauthorized device is used or an erroneous operation is performed, it is possible to prevent the security code from being stolen by restricting the subsequent input of the security code.

  In addition, when it is determined that the pressing input is correct, there is no possibility of stealing the personal identification number, and thus a personal identification number input guidance processing function for guiding the personal identification number to the display unit 220 is provided.

  Specifically, these processing functions will be described. When a customer uses a transaction at the ATM 200, the ATM control unit 260 determines whether or not an unauthorized device is attached to the EPP 110 prior to the password input mode in which the password is input. It has a determination function for executing the suitability determination mode. In this EPP suitability determination mode, a light emission request signal to the input key 101 designated for the EPP 110 of the personal identification number input device 100 is output. Thus, the EPP control unit 500 receives the light emission request signal output from the ATM control unit 260 and causes the input key 101 designated by the ATM control unit 260 to emit light. The display unit 220 displays and guides the user to press the lighted input key 101 and presses the lighted input key 101 to confirm that the EPP 110 of the personal identification number input device 100 is properly input. Detect and confirm that it is in a standby state. Therefore, when entering the personal identification number, it is possible to input the personal identification number after confirming in advance whether the EPP 110 is appropriate, that is, that there is no fraudulent device such as the false personal identification number input device 700 (see FIG. 7).

  By the way, when the upper surface of the EPP 110 is covered with an unauthorized device, even if the input key 101 is made to emit light, the emitted light is shielded by the unauthorized device and cannot be seen, so the input key 101 designated by the ATM control unit 260 is not displayed. I can't enter it. For example, if there is no input for a predetermined time or a different input key 101 is input, it can be detected that the EPP 110 is in an unauthorized state before the password is input. In this case, since the input state is inappropriate, the customer is prompted to press the CANCEL key or the like to interrupt the password input operation. If the CANCEL key is pressed, it can be determined that the state is invalid.

  In this way, it is possible to easily determine whether or not the EPP 110 is in a normal state by a new input mode in which an arbitrary input key 101 of the EPP 110 is appropriately caused to emit light when inputting a personal identification number. For this reason, when a fraudulent device is used, the input of a personal identification number can be regulated beforehand.

  For example, as shown in FIG. 7, when a false PIN code input device 700 is placed on the upper surface of the true PIN code input device 100, a proper input cannot be performed because the light emission key cannot be seen, and the false PIN code number cannot be input. It can be easily identified that the input device 700 is placed.

  In addition, when instructing to emit light to each input key 101, it is possible to instruct to emit light by pressing any input key 101 and pressing it down. Once entered, the password cannot be specified from the outside, and unauthorized stealing of the password can be restricted. For this reason, it is possible to accurately prevent the theft of the electrical code number.

  Further, as a means for preventing the security code from being stolen, when the guide frame 120 or the base 130 of the security code input device 100 is illegally opened from the outside or destroyed, It has a strict management configuration with a security function (not shown) that detects unauthorized access to the personal identification number input device 100 and automatically deletes confidential information.

The password number stealing prevention operation of the password number input device 100 configured as described above will be described with reference to the flowchart of FIG.
When the customer inserts a card into the card insertion slot 240 of the ATM 200 at the start of use of the ATM 200 (step 601), the EPP control unit 500 receives any light emission instruction from the ATM control unit 260 and the arbitrary input key 101 provided in the EPP 110. Is emitted (step 602). Then, the ATM control unit 260 displays “Please press the key that emits light” on the display unit 220 of the ATM 200 (step 603).

  At this time, the message “Please press the“ CANCEL key ”when there is no key emitting light” is also displayed (the CANCEL key should not emit light).

  When the customer presses one of the input keys 101 (step 604), the ATM control unit 260 determines whether the pressed input key 101 is the input key 101 that has emitted light (step 605). When the input key 101 is pressed, light emission can be confirmed between the customer and the EPP 110. For this reason, it is understood that the EPP 110 has been pressed down under an appropriate input state, and the mode shifts to the password input mode (step 606).

  After shifting to the password input mode, the ATM control unit 260 guides the display on the screen of the display unit 220 so as to input the password to the customer (step 607), and the customer inputs the password according to the display guidance (step 607). 608). At this time, not only the personal identification number but also another number may be mixed to enter the digit number additional input mode to increase the number of digits so that the personal identification number cannot be specified. In this case, the security code can be further prevented from being stolen (step 609). After entering the personal identification number, the normal operation for transaction use at the ATM 200 is performed.

  In step 605, if an unauthorized device such as the false PIN code input device 700 (see FIG. 7) is placed on the upper surface of the EPP 110, the emitted light is blocked and which input key 101 emits light. I do n’t know. In such a non-light-emitting state, the customer presses the CANCEL key according to the guidance displayed on the display unit 220. When the CANCEL key is pressed, or when the pressed input key 101 is different from the input key 101 that has been made to emit light, the ATM control unit 260 guides the display to the display unit 220 to call an attendant (step 610). Thereby, the false PIN code input device 700 can be detected. Thereafter, the card is returned to the customer (step 611) and the transaction is terminated.

  Furthermore, in order to improve security, a plurality of input keys 101 to emit light may be emitted simultaneously, or a plurality of lights may be emitted in order, and all the keys may be pressed down before entering the PIN code input mode. Alternatively, any input key 101 may be caused to emit light and be pressed again after the password is input. In this case, since it is unclear which part of the input code is the password, it is possible to make it more difficult to steal the password. In particular, if the number of input keys 101 that emit light is varied, the password can be made more unknown.

  The ATM control unit 260 determines whether or not the EPP control unit 500 is in the EPP suitability determination mode for confirming that the input key 101 that has been emitted has been pressed as a countermeasure for preventing the EPP control unit 500 from stealing the code number. It is set to shift to the PIN code input mode for inputting.

  In this way, it is possible to confirm whether or not a fraudulent device such as the fake password input device 700 (see FIG. 7) is attached before the password is input. In addition, when inputting a personal identification number, the input keys 101 of arbitrary numbers can be mixed and input.

  In this case, an arbitrary number is mixed in the personal identification number. For this reason, when data as a personal identification number is input, the personal identification number and an arbitrary number are included and the number of digits is large, and it is difficult to specify the personal identification number from the outside.

  Furthermore, it is possible to set to input a specific input key 101 based on a non-light emission instruction in an arbitrary number input mode in which the input key 101 is instructed and input by light emission.

  For example, if a non-password key such as a CANCEL key, a CLEAR key, or an ENTER key, which is not adopted as a password, is input, it is possible to prevent the password from being stolen by making it difficult to control and distinguish.

  Further, the EPP control unit 500 may have a light emission control function as a light emission variable unit that changes the light emission form of the input key 101. For example, if the total number of light emitting keys of the input key 101 is randomly changed for each light key pressing request process, the number of digits at the time of input of the personal identification number is not specified, which is effective for invalidating the illegal acquisition of the personal identification number. Become.

  Further, if the input key 101 is displayed in a blinking manner or by changing the light emission luminance or light emission color, the input key 101 instructed to emit light can be displayed with more emphasis, so that it can be clearly distinguished from other non-light-emitting input keys 101. Can be different. In addition, the light emission key and all other input keys 101 may emit light in different colors, and the light emission color of the input key 101 to be pressed on the display unit 220 may be specified and distinguished. Furthermore, when the plurality of input keys 101 are caused to emit light simultaneously, an input form in which the plurality of input keys 101 are simultaneously input can be obtained.

  As described above, it is possible to accurately confirm whether or not the personal identification number input device is in an appropriate input state by causing the customer to press and input the lighted input key. Therefore, since it is found that the input state of the designated light emission input key cannot be confirmed, it is found that the input state is inappropriate, and therefore the input of the personal identification number can be immediately invalidated. For this reason, it is possible to accurately prevent the electronic password from being stolen.

  The present invention is not limited to the configuration described in the above-described embodiment, and can be applied based on the technical idea described in the claims. For example, although the case where the PIN code input device 100 is applied to the ATM 200 that allows the deposit / withdrawal transaction of banknotes is shown in the above-described embodiment, the present invention can also be applied to other automatic transaction devices. It can also be applied to automatic transaction devices dedicated to deposits and withdrawals.

  The present invention can be applied to all devices to which a password input device is attached.

DESCRIPTION OF SYMBOLS 100 ... PIN code input device 101 ... Input key 110 ... EPP
160 ... LED
220 ... Display unit 260 ... ATM control unit 500 ... EPP control unit

Claims (3)

A plurality of input keys that allow the input of a PIN number;
A plurality of light emitting means for individually emitting the input keys;
Guidance means for outputting input guidance information to the user;
Control means for receiving light emission control of the light emitting means and input of the input key,
The control means includes
A light emission key press request process for requesting a press input of an input key emitted by the guide means by causing some of the input key light emission means to emit light;
An input determination process for determining whether or not the input key pressed is correct;
A personal identification number input device configured to execute a personal identification number input guidance process for guiding the input of a personal identification number by the guidance means when it is determined that the pressing input is correct. The control means includes
2. The personal identification number input device according to claim 1, wherein the number of input keys to be lighted is changed for each light key press request process. The control means includes
The personal identification number input device according to claim 1 or 2, wherein, during the light emission key press request process, an input key to be pressed when a light-emitting input key is unknown is designated.

Images