JP2012155505A - Automatic transaction device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an automatic transaction device that automatically performs failure recovery processing and, when needed, quickly requests an attendant dispatch.SOLUTION: An automatic transaction device 12 is provided with failure detection means 44 that receives a failure occurence notification 30 or reads information of a pre-specified part to detect an occurence of a failure, information collection means 46 that collects status information 32 of the automatic transaction device 12 including an operation history before the failure occurence, a storage device 22 that stores a failure identification parameter 36 and a failure recovery procedure 38, information analysis means 48 that determines whether or not the status information 32 includes the failure identification parameter 36, recovery control means 50 that performs a recovery control procedure, dispatch request means 54 that transmits an attendant dispatch request message 41 via a network 16, and result reporting means 56.

Description

  The present invention relates to an automatic transaction apparatus having a function of automatically executing various processes for recovery when a failure occurs.

  Automatic transaction devices (ATMs) used in financial institutions have improved in performance and their reliability has improved remarkably with the spread. Many are driven unattended, and the frequency of faults is about once after thousands of transactions. Conventionally, when a failure occurs in an automatic transaction apparatus in an unmanned store, a notification is sent to the monitoring server through the network. On the monitoring server side, the received fault information is displayed on a terminal connected to the monitoring server. A full-time staff confirms the failure information displayed on the terminal and deals with the user by telephone. If possible, attempt recovery using remote operation. If not, send a staff member to the site. The clerk activates a diagnostic program or the like and executes recovery processing (see Patent Document 1) (see Patent Document 2).

JP 2009-104266 A JP 2003-296799 A

The known prior art has the following problems to be solved.
By improving the performance of automatic transaction equipment, simple troubles that can be recovered by remote operation are reduced, and rare troubles are often of a kind that requires staff to be dispatched to the site. When such a failure occurs, it is desired to quickly determine whether or not a dispatch request is necessary without causing the user to wait for a long time. Furthermore, since a monitoring server and terminals are installed, an investment in a monitoring system and a dedicated staff are required. A large-scale financial institution has a problem that a large amount of cost is required because a large number of monitoring servers are installed and a large number of full-time staff are allocated. Further, when communication between the automatic transaction apparatus and the monitoring server is interrupted due to a communication failure, there is a problem that failure handling by remote operation cannot be performed.
In order to solve the above problems, an object of the present invention is to provide the following automatic transaction apparatus.
(1) The automatic transaction apparatus automatically executes processing for failure recovery.
(2) Automatically request staff to dispatch as soon as necessary.
(3) The automatic restoration process will reduce the burden on full-time staff and reduce monitoring costs.

The following configurations are means for solving the above-described problems.
<Configuration 1>
A device used for cash deposit / withdrawal transactions in financial institutions, and a business application execution means for executing processing for deposit / withdrawal transaction business, and a monitoring application execution for executing failure monitoring and recovery processing A failure detection unit that receives a failure occurrence notification received from the business application execution unit or reads information on a part specified in advance to detect the occurrence of a failure, and an operation history before the occurrence of the failure Including information collection means for collecting device status information, a failure identification parameter for recognizing the type of failure that occurs in the device, a storage device for storing a failure recovery procedure for a corresponding type of failure, and the information Information for determining whether or not the failure information stored in the storage device is included in the status information collected by the collecting means When the analysis unit and the information analysis unit determine that the failure identification parameter is included in the state information, the corresponding recovery control procedure stored in the storage device is read and the procedure is executed. Recovery control means, and when the information analysis means determines that any failure identification parameter is not included in the status information, dispatch request means for transmitting a staff dispatch request message through the network, and recovery control means Alternatively, an automatic transaction apparatus comprising processing report means for transmitting the processing result report of the dispatch request means through a network.

<Configuration 2>
In the automatic transaction apparatus according to Configuration 1, when the corresponding failure recovery procedure by the recovery control unit cannot be normally executed, the information collecting unit collects status information again, and the information analyzing unit includes the status information in the status information. When it is determined that a new failure identification parameter is included, the recovery control means executes a corresponding recovery control procedure.

<Configuration 3>
In the automatic transaction apparatus according to Configuration 1 or 2, the recovery control unit requests the dispatch request unit to transmit a dispatch request message when the corresponding failure recovery procedure cannot be normally executed. Automatic transaction device.

<Configuration 4>
4. The automatic transaction apparatus according to any one of configurations 1 to 3, wherein a failure identification parameter indicating a failure unique to the automatic transaction apparatus and a failure recovery procedure thereof are stored in the storage device.

<Configuration 5>
In the automatic transaction apparatus according to any one of Configurations 1 to 4, when the failure detection unit detects a failure that needs to be recovered in an idle state that no one is using, the information collection unit collects state information. When the information analysis unit determines that the failure identification parameter is included in the state information, the recovery control unit executes a corresponding recovery control procedure.

<Configuration 6>
In the automatic transaction apparatus according to Configuration 5, a case where the resource (free space in the memory) is reduced to a predetermined value or less is included in the failure identification parameter, and the corresponding failure recovery procedure is to execute a reboot. An automatic transaction device characterized.

<Configuration 7>
In the automatic transaction apparatus according to Configuration 5, information indicating a warning level of a preset device including a decrease in the amount of medium to be used is included in the state information collected by the information collecting unit, and the information indicating the warning level Is included in the fault identification parameter, and the corresponding fault recovery procedure generates a dispatch request message including information indicating the alert level and requests the dispatch request means to transmit the dispatch request message. An automatic transaction apparatus characterized by that.

<Configuration 8>
In the automatic transaction apparatus according to any one of Configurations 5 to 7, when the automatic recovery control fails or when it is determined that an outgoing request message including information indicating the alert level is transmitted, the recovery control The means obtains the device operating state indicating whether all other automatic transaction devices arranged in close proximity are usable, unusable or at a warning level, and is not used including the own device. An automatic transaction apparatus that requests the dispatch request means to transmit a dispatch request message only when the total number of automatic transaction apparatuses in a possible state or a warning level exceeds a limit value.

<Configuration 9>
In the automatic transaction apparatus according to any one of Configurations 5 to 7, when the automatic recovery control has failed, or the recovery control unit is determined to transmit a dispatch request message including information indicating a warning level. In this case, referring to the scheduled traveling data stored in the storage device, the dispatch request means is requested to transmit the dispatch request message only when the time until the tour by the attendant is a predetermined value or more. An automatic transaction apparatus characterized by that.

<Configuration 10>
In a financial institution, a computer of a device used for cash deposit / withdrawal transactions, business application execution means for executing processing for deposit / withdrawal transaction business, and execution of monitoring application for executing failure monitoring and recovery processing A failure detection unit that receives a failure occurrence notification received from the business application execution unit or reads information on a part specified in advance to detect the occurrence of a failure, and an operation history before the occurrence of the failure Including information collection means for collecting device status information, a failure identification parameter for recognizing the type of failure that occurs in the device, a storage device for storing a failure recovery procedure for a corresponding type of failure, and the information Judgment is made as to whether or not the fault identification parameter stored in the storage device is included in the status information collected by the collecting means Information analysis means, and when the information analysis means determines that the failure identification parameter is included in the status information, the corresponding recovery control procedure stored in the storage device is read and the procedure is A recovery control means for executing, a dispatch request means for transmitting a staff dispatch request message through the network when the information analyzing means determines that any failure identification parameter is not included in the status information, and a recovery An automatic transaction apparatus control program that functions as a processing report means for transmitting a processing result report of a control means or a dispatch request means through a network.

<Configuration 11>
A computer-readable recording medium on which the automatic transaction apparatus control program according to Configuration 10 is recorded.

<Effect of Configuration 1>
Since the failure recovery processing is automatically performed according to the corresponding recovery control procedure stored in the storage device for the failure determined to be automatically recoverable by the failure identification parameter, the burden on the monitoring terminal side can be reduced. Furthermore, depending on the type of failure, recovery can be performed more quickly and accurately than a staff member can handle. In addition, it is possible to shorten the waiting time of the user by shortening the time from the diagnosis of the failure to the dispatch request of the staff.
<Effect of Configuration 2>
Failure recovery may fail during the disaster recovery procedure. At this time, state information can be collected again and automatic recovery can be attempted. If a new failure identification parameter is found, another failure recovery procedure can be performed.
<Effect of Configuration 3>
When automatic recovery control fails, a dispatch request message can be automatically sent to dispatch an attendant quickly.
<Effect of Configuration 4>
Since the monitoring application execution means is provided inside the automatic transaction apparatus, a unique failure can be automatically recovered for automatic transaction apparatuses of different models.
<Effect of Configuration 5>
When a failure that requires recovery is detected in an idle state that no one is using, recovery processing is automatically executed.
<Effect of Configuration 6>
If the resource decreases, the probability of a failure occurring thereafter is high. Therefore, it is determined that a failure has occurred, and automatic recovery is performed. Therefore, it is possible to prevent the occurrence of a failure during use.
<Effect of Configuration 7>
When information indicating a decrease in the amount of medium such as banknotes is referred to as information indicating a warning level, if this information is included in the state information, a dispatch request message including information indicating the warning level is generated. Thereafter, it automatically requests transmission of a dispatch request message at a predetermined timing.
<Effect of Configuration 8>
When a plurality of automatic transaction devices are arranged close to each other in an unmanned store or the like, for example, if only one device is used, there may be a case where it is not possible to use the device or remain in a warning level. At this time, it immediately waits without sending a dispatch request message. This can reduce the frequency of dispatch requests.
<Effect of Configuration 9>
In the event that there is a next visit soon, you can postpone the request for dispatch.

It is a general | schematic functional block diagram which shows the specific example of the automatic transaction apparatus of this invention. It is content example explanatory drawing of an automatic process table. It is explanatory drawing of the process which obtains a failure recovery procedure from a failure identification parameter. It is an example of automatic processing which returns a medium to a user when a failure occurs. It is a sequence chart when a failure recovery procedure is performed. It is a failure automatic recovery sequence chart after a user leaves. It is a sequence chart in the case of making a dispatch request. It is a sequence chart after a dispatch request message transmission. FIG. 10 is a specific example explanatory diagram of a display screen of a monitoring terminal 18. It is a screen which shows dispatch time and the recovery time from a failure. It is a main routine which shows a failure detection operation. It is a main routine showing a failure recovery operation. It is an operation | movement flowchart of a dispatch request process. It is a specific flowchart of a failure recovery processing operation. It is the first half process flowchart of a staff member's dispatch request. It is a latter half process flowchart of a staff member's dispatch request. 10 is an operation flowchart of the third embodiment. 10 is an operation flowchart of the fourth embodiment.

FIG. 1 is a schematic functional block diagram showing a specific example of the automatic transaction apparatus of the present invention.
In the example shown in the figure, four automatic transaction apparatuses 12 (ATMs) are arranged via an internal LAN 14 in an unmanned store with a financial institution. The function block of one of them is shown in the circle of the one-dot chain line on the right side of the figure. For example, four automatic transaction apparatuses 12 are connected to each other via an internal LAN 14. And all the automatic transaction apparatuses 12 shall be provided with the structure in the circle of the dashed-dotted line of a figure.

  The automatic transaction apparatus 12 is connected to the network 16 via a network interface. A monitoring terminal 18 is connected to the network 16 in order to remotely monitor the automatic transaction apparatus 12. The monitoring terminal 18 is operated by the monitoring person 60. The monitor 60 monitors the state of the automatic transaction apparatus 12 and executes failure recovery processing as necessary. A management data storage device 20 is connected to the monitoring terminal 18 in order to store information. Further, a staff member dispatched for failure recovery has a portable terminal 17. The mobile terminal 17 is configured to receive a dispatch request message 41 through the network 16.

  The automatic transaction apparatus 12 is used by the user 62. In order to operate the automatic transaction apparatus 12, a storage device 22 and an arithmetic processing device 24 are provided. The storage device 22 stores a failure occurrence notification 30, a processing result report 31, state information 32, failure information 34, a failure identification parameter 36, a failure recovery procedure 38, a scheduled trip data 40, a dispatch request message 41, a device operating state 42, and the like. . The arithmetic processing unit 24 has functional blocks such as a business application execution unit 26 and a monitoring application execution unit 28. The monitoring application execution unit 28 includes a failure detection unit 44, an information collection unit 46, an information analysis unit 48, a recovery control unit 50, an authentication processing unit 52, a dispatch request unit 54, a result report unit 56, and the like.

  In the present invention, various functions for automatic failure recovery are given to the automatic transaction apparatus 12 that is used in a financial institution or the like and used for cash deposit / withdrawal transactions. For this purpose, there is provided means for acquiring detailed information inside the automatic transaction apparatus 12 when a failure occurs and automatically executing a failure recovery process. After the automatic recovery, the processing result is notified to the remote monitoring terminal 18. Thereby, the confirmation work by the attendant can be performed on the remote monitoring terminal 18 side. That is, each automatic transaction apparatus 12 automatically detects the occurrence of a failure, and automatically activates and executes failure recovery processing.

(Fault detection)
The automatic transaction apparatus 12 includes business application execution means 26 for executing processing for deposit / withdrawal transaction business, and monitoring application execution means 28 for executing processing for fault monitoring and recovery. The business application execution means 26 executes a transaction business such as a deposit / withdrawal transaction in the automatic transaction apparatus 12. If a failure occurs during the control of the transaction business, a failure occurrence notification 30 is transmitted to the monitoring application execution means 28. At the same time, the failure information 34 obtained when the failure is detected is transmitted to the monitoring application execution means 28. And the notification from the monitoring application execution means 28 is waited for.

  The monitoring application execution unit 28 constantly monitors the operation of the business application execution unit 26. When the failure occurrence notification 30 is received from the business application execution means 26, failure recovery processing is automatically started. For example, a failure occurs when the user 62 of the automatic transaction apparatus 12 encounters a bill feeding failure or a bill-out failure during the cash deposit / withdrawal process.

  Further, a failure may occur even in an idle state where no one is using the automatic transaction apparatus 12. For example, regarding the malfunction or stop of the business application execution means 26, the system resource shortage, the medium shortage, the conveyance belt deterioration, etc., the monitoring application execution means 28 reads information on a predetermined part and detects the occurrence of a failure. To do. The predetermined part to be monitored by the monitoring application execution means 28 is specified in advance. For example, the occurrence of a failure is detected by reading a storage area for storing an output signal of a sensor of each part of the apparatus or an output signal of a counter at regular intervals.

  The monitoring application execution unit 28 includes a failure detection unit 44 in order to execute the above-described processing for failure detection. When a failure is detected, information is collected by the information collecting means 46. Thereafter, a recovery procedure is selected by the information analysis means 48, and a recovery process is executed by the recovery control means 50 according to a preset automatic recovery procedure. In the case of a failure for which no automatic recovery procedure is set or when automatic recovery fails, a message is sent requesting the staff to be dispatched to the site. At the same time, the monitoring application execution means 28 notifies the business application that the dispatch request message has been transmitted to the staff.

(Information collection)
The business application execution unit 26 transmits predetermined failure information 34 to the monitoring application execution unit 28 together with the failure occurrence notification 30. Here, there are failures that can be automatically recovered by a preset procedure and failures that cannot be automatically recovered. The information collection means 46 provided in the monitoring application execution means 28 independently collects necessary information, and the information analysis means 48 uniquely analyzes the collected information to determine the type of failure.

For example, the information collecting unit 46 collects the state information 32 including the operation history before the occurrence of the failure. The state information 32 that can be collected inside the main body of the automatic transaction apparatus 12 includes the output signals of all sensors provided in the apparatus, all the operation histories of each part of the apparatus when various events such as card insertion and cash insertion occur, etc. There is. When collecting automatically, it is preferable to collect information as widely as possible. For example, the state information of each part of the apparatus at the time of failure detection and the state transition of the main medium sensor, for example, are acquired, and all the state information is aligned on the time axis and arranged. Since the automatic transaction apparatus itself collects information inside the apparatus, it is possible to acquire detailed and large amount of information. If the error code output from the business application is included in this, the fault that has occurred can be determined very accurately.
(Analysis of information)
It is not easy to design a program that analyzes all the collected information and determines the type of failure. Since the range of failures that can be reliably and fully recovered is limited, it is sufficient to have a function for determining only the failure within this range. If the faults that can be determined are limited to a certain range and other faults are handled as unknown types, the processing is simple and reliable. For this purpose, a list of failure identification parameters 36 that can identify a certain range of failures is prepared. Conventionally, an attendant has determined the type of failure by looking at a report from the business application execution means. There is no need to rewrite existing business applications for automatic fault detection. It is only necessary to set the state information to be collected and the failure identification parameter 36 to be sufficient.

  For detecting a failure, it is determined whether any failure identification parameter 36 is included in the acquired status information 32. It is preferable to collect state information automatically and uniformly. The state information 32 may include a lot of information unrelated to the failure. The failure identification parameter 36 includes, for example, an error code, an output or state transition of a sensor at a specific location, and a numerical value of a specific counter or register. That is, if the error code is “111”, the medium sensor on the medium outlet side changes to ON-OFF-ON, and the status information includes data that the output medium quantity is 5 and the discharge counter value is 0, It is determined that the corresponding medium stays at the medium outlet and the discharge is not completed. In that case, the failure can be recovered by ejecting five corresponding media. If the amount of information in the failure identification parameter 36 is large, the type of failure can be accurately determined. The automatic transaction apparatuses 12 subject to failure detection are not necessarily the same model and the same manufacturer. Even when each automatic transaction apparatus 12 has a failure pattern unique to each model, a failure identification parameter 36 that can distinguish them may be prepared. When the number of types of faults that can be automatically recovered increases, it is only necessary to add a list of fault identification parameters 36, so that the maintenance is very easy.

(Selection of disaster recovery procedure)
When any failure identification parameter 36 is included in the acquired state information 32, the corresponding failure recovery procedure 38 is selected and the recovery process is executed. For this control, the monitoring application execution unit 28 includes a recovery control unit 50. The recovery control means 50 refers to the automatic processing table in which the failure identification parameter 36 and the failure recovery procedure 38 are associated with each other.

FIG. 2 is an explanatory diagram of an example of the contents of the automatic processing table.
For example, as shown in the figure, if the transaction classification is a type such as deposit or withdrawal, whether or not a transaction is established on the automatic transaction apparatus side and the host computer 19 (FIG. 1) side of the financial institution, failure code, and type of residual medium in the apparatus The failure recovery procedure 38 is determined by the failure identification parameter 36 indicating whether or not the identity verification process has been performed. The failure recovery procedure 38 is specified by the processing pattern ID. The automatic processing table 39 is data that associates the failure identification parameter 36 with the failure recovery procedure 38 as described above. The failure recovery procedure 38 may be a set of commands or a description of a recovery processing program.

FIG. 3 is an explanatory diagram of processing for obtaining a failure recovery procedure from the failure identification parameter.
As shown in the figure, the automatic processing table 39 has data in which a failure identification parameter 36 and a failure recovery procedure 38 are associated with each other. That is all that can automatically perform the failure recovery process. Accordingly, all failure identification parameters 36 in the automatic processing table 39 are read in order, and it is determined whether any failure identification parameter 36 is included in the state information 32 collected from each part of the automatic transaction apparatus. In this way, the processing pattern ID is acquired. Command codes to be executed can be sequentially read out for each processing pattern ID from the processing pattern master on the right side of the figure. Refer to the command master in the figure for the contents of the command code. The failure recovery procedure 38 is thus extracted as a set of commands.

  The recovery control means 50 reads out the corresponding failure recovery procedure 38, transmits a command to each part of the apparatus in order, and executes a recovery process. The failure recovery procedure 38 may include a message output process for the user 62. It is preferable to output a guide to the user 62 such as the type of failure, the procedure for failure recovery, and the waiting time. Characters may be displayed on the screen, or may be output by voice.

  The failure recovery procedure 38 includes, for example, processing such as identity verification processing, sending a transaction result cancellation request to the account system, returning a medium such as a bank card remaining in the apparatus, and reporting completion of the failure recovery processing. All these processes are automatically executed. In addition, it is preferable that only faults that are surely executed and that do not cause a problem are included in the list of fault identification parameters 36.

(Type of failure and recovery method)
The types of failures include a failure detected in an idle state before the start of trading and a failure that occurs after the start of trading. The faults detected in the idle state include not only those that are already in an unusable state but also those that are in a state to be notified of the occurrence of the fault. Problems after the start of transactions include problems that occurred before bank cards and cash were taken in, and problems that occurred after bank cards and cash were taken. In the former case, it is only necessary to reset to a state where the transaction can be started from the beginning. On the other hand, in the latter case, it is confirmed where the started transaction is interrupted, and a response is made to return to the state before the transaction.

  The identity verification by the biometric authentication or the personal identification number is executed, and then the card or the deposited banknote is returned to the user 62. The statement slip (receipt) and the withdrawal banknote are collected in the automatic transaction apparatus 12, and finally reset to recover the failure. After the processing is completed, the result reporting unit 56 generates a processing result report 31 and transmits it to the monitoring terminal 18.

(Request for dispatch of staff)
If the process does not end normally during the failure recovery process, it is determined that automatic recovery is difficult, and an attendant dispatch request message 41 is transmitted. When the corresponding failure recovery procedure 38 by the recovery control means 50 cannot be executed normally, the information collecting means 46 may collect the status information 32 again. This is a case where a so-called secondary failure occurs. If it is determined that the new failure identification parameter 36 is included in the status information 32, a new recovery control procedure 38 may be executed. When it is determined that none of the failure identification parameters 36 prepared in advance is included in the state information 32 acquired by the information collecting means 46, a staff dispatch request process is performed as an unexpected failure. That is, the dispatch request means 54 generates the dispatch request message 41 and transmits it to the portable terminal 17.

  In an idle state that no one is using, the failure detection means 44 may detect a failure that requires recovery. For example, when the deterioration of the conveyor belt or the like, sensor abnormality or the like is detected. At this time, the information collecting unit 46 collects the state information 32. When the information analysis unit 48 determines that the failure identification parameter 36 is included in the state information 32, the recovery control unit 50 executes the corresponding recovery control procedure 38.

  The dispatch request message 41 may include the collected status information 32. The dispatch request message 41 is automatically generated and transmitted to the corresponding destination. It is preferable to use transmission means such as telephone, FAX, and mail. When executing a dispatch request process for an attendant due to a failure after the start of a transaction by the user 62, a standby request message is displayed on the display of the automatic transaction apparatus 12, or a voice message such as "Please wait for a while because an attendant will be coming soon". I will guide you. In the above processing, since it is only determined whether or not the acquired failure information parameter 36 is included in the acquired status information 32, the staff dispatch request processing can be executed very quickly. Therefore, there is an effect that the user 62 does not wait for a long time.

  In an idle state that no one is using, it does not immediately become unusable, but a state that eventually leads to a failure may be detected. For example, this is the case when the resource (free memory area) has decreased below a certain value. In this case, when the reboot is executed, the mode can be automatically set to a healthy state. Therefore, a state in which the resource has decreased below a certain value is included in the failure identification parameter. Then, a command for executing reboot is set in the corresponding failure recovery procedure. As a result, it is possible to prevent the occurrence of a failure during use.

  On the other hand, there is a state in which the amount of a medium to be used, for example, the amount of banknotes is reduced and the state becomes a near-end state. This state is also a state in which a transaction is still possible and it does not immediately become unusable, but eventually leads to a failure. Such a state is set in advance and is used as information indicating the alert level of the apparatus. The information collecting means 46 also collects information indicating the warning level in the state information 32.

  At the same time, information indicating the alert level is included in the failure identification parameter. As a general rule, treat alert levels like disabilities. The corresponding failure recovery procedure generates a dispatch request message 41 including information indicating a warning level, and the recovery control unit 50 requests the dispatch request unit 54 to transmit the dispatch request message 41. . This processing may also be a broad meaning failure recovery procedure.

  When it is determined that an outgoing request message including information indicating a warning level is transmitted in the idle state, the dispatcher's outgoing request is not immediately executed, and the states of the remaining devices are compared. The storage device 22 stores device operating states 42 of the own device and other peripheral automatic transaction devices. The device operating state 42 includes at least information such as whether each device is in a state where it can be traded, in a state where it cannot be traded during maintenance or due to a failure, or in a warning level state.

  For example, even if a failure occurs in one automatic transaction apparatus 12 in an unmanned store where five automatic transaction apparatuses 12 are installed, the remaining four apparatuses may be able to operate normally. At this time, the attendant dispatch request process is postponed, and the apparatus in which the failure is detected cannot be used and is put on standby.

  When another failure that requires a dispatch request occurs, a staff dispatch request process is executed. If the time until the next inspection schedule is below a certain value, the staff dispatch request is postponed. Thereby, the number of dispatch of an attendant can be reduced. That is, only when the total number of the automatic transaction apparatuses including the own machine in an unusable state or a warning level exceeds the limit value, the dispatch request means 54 is requested to transmit the dispatch request message. . The dispatch request message includes information on an automatic transaction apparatus that cannot be used or an automatic transaction apparatus that is in a warning level.

  Conventionally, based on the error code transmitted from the business application to the monitoring terminal, the type of failure is known, and the monitoring person sends a command to the automatic transaction apparatus to perform a recovery operation. At this time, if necessary, other information is also acquired from the automatic transaction apparatus, and the recovery operation policy is determined. There are many cases where various types of automatic transaction apparatuses are mixed as monitoring targets. Therefore, a manual for the recovery operation is prepared for each model.

  On the other hand, in the present invention, each automatic transaction apparatus automatically performs a recovery process independently. That is, an automatic recovery program is installed in all automatic transaction apparatuses. When automatic transaction apparatuses of different models coexist, the procedure for automatic recovery may be different. However, if a separate automatic recovery program is created for each model, the program creation cost and the management cost are enormous.

  Therefore, in the present invention, as described above, when a failure is detected, control is performed so that the status information of each part of the apparatus is unconditionally acquired. Then, it is determined whether or not a failure identification parameter exists in the collected state information. The failure identification parameter and the failure recovery procedure are set in detail for each model. However, each program for controlling failure recovery can be shared by almost all models. Therefore, an automatic recovery program can be developed and managed at a low cost in an environment where different types of automatic transaction apparatuses are mixed. The above is a schematic description of the present invention. Hereinafter, embodiments of the present invention will be described in detail for each example.

  Here, after the basic functions of the functional blocks shown in FIG. 1 are organized, a specific operation will be described. The business application execution means 26 is a device used for cash deposit / withdrawal transactions in a financial institution and has a function of executing processing for deposit / withdrawal transaction operations. The monitoring application execution means 28 has a function of executing processing for fault monitoring and recovery.

  The failure detection unit 44 has a function of receiving the failure occurrence notification 30 received from the business application execution unit 26 or reading information on a part specified in advance to detect the occurrence of a failure. The information collecting unit 46 has a function of collecting apparatus status information 32 including an operation history before the occurrence of a failure. The failure identification parameter stored in the storage device 22 is for recognizing the type of failure that occurs in the device.

  The information analysis unit 48 has a function of determining whether or not the failure identification parameter 36 stored in the storage device 22 is included in the state information 32 collected by the information collection unit 46. When the information analyzing unit 48 determines that the failure identification parameter is included in the state information 32, the recovery control unit 50 reads the corresponding recovery control procedure stored in the storage device 22 and executes the procedure. Has a function to execute.

  The dispatch request means 54 has a function of transmitting a staff dispatch request message 41 through the network 16 when the information analysis means 48 determines that any failure identification parameter is not included in the status information 32. The processing report unit 56 has a function of transmitting the processing result report 31 of the recovery control unit 50 or the dispatch request unit 54 through the network 16.

  The above devices automatically perform failure recovery processing according to the corresponding recovery control procedure stored in the storage device 22 for failures determined to be automatically recoverable by the failure identification parameter, thus reducing the burden on the monitoring terminal 18 side. it can. In addition, only those that can be automatically recovered are limited, and if the situation is not applicable, a staff member is requested immediately. Therefore, the time from failure diagnosis to staff member dispatch request is shortened, and the waiting time of the user 62 is reduced. it can. Furthermore, when there is a failure unique to each automatic transaction apparatus, the automatic recovery procedure can also be stored.

  Note that if the automatic recovery process fails in the middle, it is preferable to determine again whether a new failure identification parameter 36 is included. For example, when a card or bill being conveyed for return is not successfully conveyed, if the corresponding failure identification parameter is prepared, the corresponding recovery procedure can be executed to complete automatic recovery.

4 to 8 are sequence charts of failure recovery processing.
Here, the business application execution unit 26 and the monitoring application execution unit 28 cooperate to execute a failure recovery process. The middleware 58 has a function corresponding to an interface for the business application execution means 26 to control the screen of the automatic transaction apparatus 12. The middleware 58 is also an interface that controls the hardware and sensors of each part of the automatic transaction apparatus 12 and the business application execution means 26. Operates close to the driver. APL is an abbreviation for application execution means.

  4 to 8 all assume that time elapses from top to bottom. Hereinafter, the operation of each unit will be described as time passes. First, the middleware 58 acquires a sensor and other signals, and a failure is detected from the contents. In FIG. 4, the middleware 58 notifies the business application execution means 26 of the occurrence of a failure and transmits it to the monitoring application execution means 28. The content of the transmission information in this part is arbitrary. A notification that a failure has occurred may be transmitted to the monitoring application execution unit 28. This is received by the failure detection means 44 of the monitoring application execution means 28.

FIG. 4 is a failure automatic recovery sequence chart for returning a medium.
For example, when the deposit transaction is stopped, the business application execution means 26 is notified of information such as forgetting to remove a part of the returned banknote and the banknote remaining. The business application execution unit 26 sends a failure notification to the monitoring application execution unit 28.

  Next, the information collecting unit 46 of the monitoring application executing unit 28 starts collecting information. In the example of FIG. 4, a part of information collection is requested to the business application execution means 26. The business application execution means 26 acquires the account data, confirms the transaction status, and determines whether the processing on the transaction apparatus side has been completed normally, or the processing on the account host computer 19 (FIG. 1) side is established. Gather information about whether or not The recovery control means 50 of the monitoring application execution means 28 executes a process of changing the contents of the device operating state 42 because the own device has become unable to trade due to a failure.

  Next, the authentication processing means 52 performs an authentication process for the user 62 waiting in front of the automatic transaction apparatus 12 after the failure occurs. The processing content is exactly the same as the authentication processing at the start of the transaction. Accordingly, the recovery control unit 50 also requests the business application execution unit 26 for this processing. That is, a password input screen is displayed, and input of a password is accepted. Then, the password confirmation process is executed using the afterglow message. When the authentication process ends normally, a message or the like (failure screen) indicating that a failure has occurred and recovery processing is in progress is displayed on the screen of the automatic transaction apparatus 12.

  After the authentication process is normally completed, the result is notified from the business application execution means 26 to the monitoring application execution means 28. At the same time, a request for automatic processing and the acquired failure information are transmitted from the business application execution means 26 to the monitoring application execution means 28. In the lower right part of FIG. 4, the information analysis unit 48 of the monitoring application execution unit 28 acquires the failure recovery procedure 38 using the automatic processing table 39 already described.

FIG. 5 is a sequence chart when the failure recovery procedure is executed.
Next, the process proceeds to the process of FIG. The recovery control means 50 of the monitoring application execution means 28 issues the acquired commands in order. For example, in this figure, the command which returns a banknote is issued first. At the same time, the business application execution means 26 is instructed to display a message such as “Please pick up banknotes” on the screen of the automatic transaction apparatus 12. The command is transferred from the monitoring application execution means 28 to the middleware 58 via the business application execution means 26. The middleware 58 opens the bill insertion slot and returns the bill to the user. A command response that the command has been executed normally is returned to the monitoring application execution means 28.

  Next, the monitoring application execution means 28 issues a command to collect the detailed slip (receipt) on which the result of the transaction is printed. Also for the statement slip collection, a command response indicating that the statement slip has been normally executed is returned to the monitoring application execution means 28. Furthermore, the monitoring application execution means 28 issues a command for resetting. A command response indicating that the reset has been normally executed is returned to the monitoring application execution means 28.

  Following the processing as described above, the recovery control means 50 of the monitoring application execution means 28 determines that the automatic failure recovery processing has been completed, and the apparatus operating state 42 can be operated normally. To correct. Thereafter, an automatic process response is made to return control to the business application execution means 26. The business application execution means 26 displays the screen of the automatic transaction apparatus 12 as a normal transaction screen. In addition, the processing report unit of the monitoring application execution unit 28 transmits a processing result report 31 to the monitoring terminal 18. In the figure, the display screen update notification of the monitoring terminal 18 is notified. An example of this screen will be described with reference to FIG.

FIG. 6 is a failure automatic recovery sequence chart in which the medium after the user leaves is not returned.
Until the middle transaction status confirmation process, the same process as in FIG. 4 is performed. In the example of FIG. 4, an update notification for updating the monitoring screen is transmitted to the monitoring terminal 18. However, in the case of FIG. 6, the update notification is not transmitted because it is determined that the monitoring application does not need to update the monitoring terminal. When the screen update button is pressed at an arbitrary timing on the operation screen of the monitoring terminal 18, the screen is updated. In this case, the transaction is successful, but the withdrawal of the full amount of withdrawal has occurred. Therefore, first, a process for canceling the transaction account is executed.

  Thereafter, a failure recovery procedure is output according to the corresponding failure identification parameter 36 included in the automatic processing table. The banknotes are stored in a safe, returned, a statement slip (receipt) is collected, and a command to reset the apparatus is transmitted in order. The flow is as described in FIG. Here, detailed illustration is omitted.

  In this example, the business application execution means 26 executes a transaction cancellation process before the automatic recovery process is started. This uses the existing function of the business application execution means 26 as it is. After the monitoring application execution unit 28 receives the failure notification from the business application execution unit 26, it collects the status information, immediately searches the failure identification parameter 36 using the automatic processing table, and includes a command for canceling the transaction. You may get the recovery procedure. Since the subsequent processing in FIG. 6 is the same as the subsequent processing in FIG. 5, a part of the processing is omitted and a specific description is also omitted.

FIG. 7 is a sequence chart when a dispatch request is made.
The process is the same as in the example of FIG. 6 until the failure recovery procedure is acquired using the automatic processing table and the recovery control means 50 of the monitoring application execution means 28 sends the corresponding command. Here, it is assumed that when the middleware 58 receives the command, the process for any command fails for some reason.

  In this example, banknote storage, statement slip (receipt) collection or reset processing has failed in the automatic recovery process. At this time, the middleware 58 transmits a command response indicating that the failure recovery processing has failed to the monitoring application execution means 28. In this case, a failure recovery failure response is sent from the monitoring application execution means 28 to the business application execution means 26. At the same time, an outgoing request message 41 is transmitted from the outgoing request unit 54 of the monitoring application execution unit 28 to the portable terminal 17 through the network 16.

FIG. 8 is a sequence chart after the transmission request message is transmitted.
A screen update notification is sent from the monitoring application execution means 28 to the monitoring terminal 18. The monitoring terminal 18 updates the monitoring screen. Further, the business application execution means 26 displays a guidance display indicating that the dispatch is being requested on the screen of the automatic transaction apparatus. This is to inform the user that he / she is in a state where he / she cannot recover from the failure. When the dispatch request message 41 is transmitted, the estimated arrival time is notified by a reply from the staff. This is transmitted from the monitoring application execution means 28 to the business application execution means 26. The business application execution means 26 displays the scheduled arrival time of the attendant on the screen of the automatic transaction apparatus.

  That is, a screen showing the scheduled time of the staff is displayed. At the same time, the monitoring application execution means 28 notifies the monitoring terminal 18 of the scheduled arrival time of the attendant, and the monitoring screen of the monitoring terminal 18 is updated. When the attendant arrives at the site, the automatic transaction apparatus is put into the inspection mode. At this timing, the middleware 58 detects the attendance of a staff member, and a store entry notification is automatically transmitted to the business application execution means 26.

  The store entry notification is transmitted from the business application execution unit 26 to the monitoring application execution unit 28, and further transmitted from the monitoring application execution unit 28 to the monitoring terminal 18. Thereby, the monitoring screen of the monitoring terminal 18 is updated. That is, the monitoring terminal 18 displays a screen indicating that the staff is currently in the process of recovering from the failure. Thereafter, when the obstacle is removed and the attendant switches the automatic transaction apparatus from the inspection mode to the normal mode, the middleware 58 detects the store exit at that timing. The store exit notification is transmitted to the monitoring application execution unit 28 via the business application execution unit 26 and is transferred to the monitoring terminal 18 to update the monitoring screen. Moreover, the screen of the automatic transaction apparatus returns to the normal transaction screen.

FIG. 9 is an explanatory diagram of a specific example of the display screen of the monitoring terminal 18.
On the monitoring terminal 18 shown in FIG. 1, for example, a screen as shown in FIG. 9 is displayed. By monitoring this, the supervisor 60 can constantly check the automatic transaction apparatus in which the failure has occurred and the state of the automatic recovery process in an unmanned store or the like. That is, for each store where the automatic transaction apparatus is installed, the time of occurrence of the failure, the time of request for dispatch to the staff, and the like are displayed.

  This content is updated every moment according to the state change of the automatic transaction apparatus to be monitored, as already described with reference to the sequence charts of FIGS. Conventionally, when a failure occurs, a staff member responds to a notification from the automatic transaction apparatus. In the present invention, a list of the states in which each device automatically recovers from a failure or automatically requests a staff member on a screen as shown in FIG.

FIG. 10 is a screen showing the time when each dispatched state occurs and the recovery time from the failure.
This is also displayed on the monitoring terminal 18. As shown in the figure, for the automatic transaction apparatus in which a failure has occurred, the scheduled time of arrival of the attendant, the entry time, the exit time, the time when the automatic transaction apparatus is ready for transaction after the failure recovery process is completed, etc. It is displayed in a list. As a result, even when the number of monitoring targets increases, the staff on the monitoring terminal 18 side only needs to deal with those that cannot be automatically restored, so the load is reduced. In addition, since it can be quickly determined whether or not automatic recovery can be performed, a staff member can be requested immediately, and the service can be improved without causing the customer to wait for a long time.

FIG. 11 and the following are specific operation flowcharts of the apparatus.
11 and 12 are main routines showing the failure detection operation. The operations of the business application execution unit 26 and the monitoring application execution unit 28 will be described without particular distinction. The sequence of processing between these is as described with reference to FIG. First, in step S11, the apparatus is in a standby state for receiving a failure notification from each part of the apparatus. When the failure detection means 44 receives the failure occurrence notification in step S12, the transaction apparatus screen is switched in step S13.

  Next, the information collecting means 46 collects information from the host computer in step S14. That is, information on success or failure of the transaction is acquired from the host computer. The failure information can be received simultaneously with the reception of the failure notification. Further, it is not necessary to determine what information should be collected. Information in a predetermined range may be collected. The information analysis unit 48 determines whether the collected information includes information that matches the failure identification parameter 36.

  Next, the authentication processing means 52 starts an authentication process. In step S15, a password input screen is displayed, and in step S16, a password input is waited. When the password input is detected in step S17, the password is confirmed with the host computer based on the input data in step S18. When authentication for identity verification is completed, a message to automatically recover from the failure is displayed on the screen of the automatic transaction apparatus in step S19. From here, the failure recovery processing by the recovery control means 50 is started.

  In step S20, it is determined whether the identity verification has been completed normally. If the identity verification is normally completed, the process proceeds to step S21. Otherwise, the process proceeds to step S31. In step S21, a correction process is executed on the success or failure of the transaction in the host computer based on the failure recovery procedure. Furthermore, from step S22, correction processing is executed by a command for recovery. If the transaction correction process cannot be performed, the process proceeds to step S31.

  In steps S23 to S25, a command for recovery instruction is transmitted, a response is waited, and a response is detected whether the command has been processed normally. In step S26, it is determined whether or not the response is normal. If the response is normal, it is determined that the failure recovery processing is completed, and the process proceeds to step S27. In step S27, the screen of the automatic transaction apparatus is switched to return to the normal transaction screen.

  If the identity verification fails in step S20, the transaction cannot be corrected in step S22, and if there is a command response indicating that the processing has failed in step S26, the process proceeds to step S31. Steps S <b> 31 and after are staff dispatch request processing by the dispatch request means 54.

FIG. 13 is an operation flowchart of the dispatch request process.
In step S32, the dispatch request means 54 waits for the input of the scheduled staff arrival time from the security terminal or from the staff or the center. When the input of the estimated arrival time is detected in step S33, the estimated arrival time is displayed on the ATM screen in step S34. In step S35, an attendant's notification of entering the store is awaited. If entry is detected in step S36, the result is acquired in step S37. In step S38, a screen indicating that an attendant has entered the monitoring terminal 18 is displayed.

  In step S39, the staff waits for a notice of leaving the store, and if the exit is detected in step S40, the result is obtained in step S41. In step S42, a screen indicating that the staff has left the store is displayed on the monitoring terminal 18. Now that the automatic transaction apparatus has been recovered, in step S42, the automatic transaction apparatus is returned to a screen in which the transaction is possible.

FIG. 14 is a specific flowchart of the failure recovery processing operation.
In step S51, it waits for a request for automatic recovery processing. When detecting the request for the automatic recovery process in step S52, the recovery control means 50 notifies the monitoring terminal 18 of the state. In step S54, the contents of the apparatus operating state 42 are updated. Here, the information collecting means 46 collects necessary information, and in step S55, the information analyzing means 48 searches the corresponding failure recovery procedure 38 using the failure identification parameter 36. In step S57, a command for recovery processing is generated from the acquired failure recovery procedure 38.

  In step S58, the corresponding command is transmitted to the middleware 58. In step S59, a response from the middleware 58 is waited. When a response is detected in step S60, the determination in step S61 is made. When a normal response is returned to the transmitted command, the next command is transmitted. In step S62, it is determined whether transmission of all commands has been completed. If there are remaining commands, the processing from step S58 to step S60 is repeated.

FIG. 15 is a flowchart of the first half of the staff dispatch request.
The recovery control means 50 requests the dispatch request means 54 to transmit the dispatch request message 41 when the corresponding fault recovery procedure 38 cannot normally execute the fault recovery procedure 38. That is, if the response of any command is not normal, the process proceeds from step S61 to step S70, and the process proceeds to the staff dispatch request process. When all the commands are transmitted and the response is made normally, in step S63, the monitoring application execution means 28 notifies the business application execution means 26 that the recovery processing has been completed normally. Thereafter, in step S64, the state of the automatic transaction apparatus is updated and recorded in the apparatus operating state 42.

  If it is determined in step S70 that the command processing of the automatic process has failed, the status of the automatic transaction apparatus is updated in step S71, and the apparatus operating state 42 is updated in step S72. In step S73, the dispatch request means 54 transmits a dispatch request message and waits for notification of the scheduled arrival time of the attendant in step S74. In steps S75 and 76, the apparatus operating state 42 is updated. When notification of the estimated arrival time is detected in step S77, the apparatus operating state 42 is updated in steps S78 and 79. This will enter the state of waiting for an attendant to enter the store.

FIG. 16 is a second half process flowchart of the staff dispatch request.
In step S80, the scheduled arrival time of the attendant is notified from the monitoring application execution means 28 to the business application execution means 26. In step S81, the business application execution unit 26 waits for a staff attendance notification from the monitoring application execution unit 28. When a store entry notification is detected in step S82, the monitoring terminal 18 is notified in step S83 that the device operating state is updated. In step S84, the apparatus operating state 42 is updated, and the process proceeds to step S85.

  In step S85, a store entry notification is accepted, and in step S86, a store exit notification is awaited. When the store exit notification is received in step S87, the store exit notification is transmitted to the security center in step S87. This is used for the business management of the staff in the security center. In step S89, a notification for updating the apparatus operating state is transmitted to the monitoring terminal 18. In step S90, the apparatus operating state 42 is updated. Thus, the automatic transaction apparatus is restored to a state where it can be traded.

FIG. 17 is an operation flowchart of the third embodiment.
During the user's transaction or immediately after the transaction ends, a failure as in the above embodiment is detected. On the other hand, as already described, a fault can be detected in an idle state. For example, the failure detection unit 44 diagnoses the state of the own device at regular time intervals in step S111. In step S112, the result is recorded in the apparatus operating state 42. In step S113, it is determined whether a failure is detected in the idle state. If no failure is detected, the processing from step S111 to step S113 is repeated.

  If a failure is detected in the idle state, the process proceeds from step S113 to step S114. In step S114, it is determined whether warning level information is included in the state information. Here, it is determined whether or not the failure can be automatically recovered. When the alert level information is included in the state information, the process proceeds to step S117, and a dispatch request message is transmitted. Information indicating the alert level is included in the dispatch request message. This has already been explained.

  If it is determined in step S114 that the failure can be automatically recovered, the process proceeds to step S115, and the corresponding failure recovery procedure is executed. In step S116, it is determined whether the failure has been recovered. If the failure has been recovered, the process is terminated. If not recovered, the process proceeds to step S117, and a dispatch request message is transmitted.

FIG. 18 is an operation flowchart of the fourth embodiment.
If it is determined in step S116 of the third embodiment that the automatic recovery control has failed, a dispatch request message is transmitted. When it is determined in step S114 of FIG. 17 that the alert level information is included in the state information, a dispatch request message including information indicating the alert level is transmitted. However, there is a case where it is not necessary to dispatch a staff member immediately. If there is a case where the same unmanned store is dispatched twice in a short time, it is useless. In addition, staff members regularly visit unmanned stores for maintenance and inspection. That should also be considered.

  Therefore, when it is determined in step S121 in FIG. 18 that the dispatch request message is transmitted in the idle state, the processing from step S122 is performed. In step S122, data indicating whether all other automatic transaction devices arranged in close proximity are usable, unusable, or in a warning level is acquired. The device operating state 42 of the storage device 22 may be referred to. In step S123, the total number of unusable devices including the own device and the automatic transaction device of the alert level is counted.

  When a plurality of automatic transaction devices are arranged in close proximity at an unmanned store or the like, for example, if only one device is used, it may be left unusable or left at a warning level for a while. There is a case. At this time, it immediately stands by without transmitting the dispatch request message 41. This can reduce the frequency of dispatch requests. In step S123, for example, when two or more of the five units become unusable, a dispatch request is made.

  That is, when it is determined in step S124 that this number has exceeded a limit value, for example, two, the dispatch request message 41 is transmitted in step S26. However, for example, even if the tour schedule is approaching in a short time, there is no need to make a request for dispatch immediately. Therefore, in step S125, it is determined whether the next tour is recent, for example, whether there is always a tour during the day. If this determination is NO, a dispatch request message 41 is transmitted. The dispatch request message 41 may include the device operating states 42 of the own device and peripheral devices. In other cases, the aircraft is made unusable and waits.

  As described above, the state of the store where some of the automatic transaction apparatuses are disabled can be confirmed on the screen of the monitoring terminal as already described with reference to FIG. Therefore, the staff in charge of the patrol starts the failure recovery process of the corresponding automatic transaction apparatus as soon as it arrives at the store. This can reduce the burden on the dispatched staff. Therefore, there is an effect that a large-scale monitoring center is not required. Moreover, since each automatic transaction apparatus collects detailed status information, if it transfers to the monitoring terminal side as needed, it can aim at the subsequent failure recovery rate by grasping detailed information.

  Note that the computer program executed by the arithmetic processing unit may be modularized in units illustrated in functional blocks, or may be integrated by combining a plurality of functional blocks. Further, the above computer program may be used by being incorporated into an existing application program. A computer program for implementing the present invention can be recorded on a computer-readable recording medium such as a CD-ROM, and can be installed and used.

12 Automatic transaction equipment 14 Internal LAN
16 network 17 mobile terminal 18 monitoring terminal 19 host computer 20 management data storage device 22 storage device 24 arithmetic processing unit 26 business application execution unit 28 monitoring application execution unit 30 fault occurrence notification 31 processing result report 32 status information 34 fault information 36 fault identification Parameter 38 Failure recovery procedure 39 Automatic processing table 40 Travel schedule data 41 Dispatch request message 42 Device operating state 44 Failure detection means 46 Information collection means 48 Information analysis means 50 Recovery control means 52 Authentication processing means 54 Dispatch request means 56 Result report means 58 Middleware 60 Monitor 62 User

Claims (11)

In a financial institution, a device used for cash deposit and withdrawal transactions,
Business application execution means for executing processing for deposit / withdrawal transaction business;
A monitoring application execution means for executing processing for fault monitoring and recovery,
A failure detection unit that receives a failure occurrence notification received from the business application execution unit or reads information on a part specified in advance to detect the occurrence of a failure;
Information collecting means for collecting device status information including operation history before failure occurrence;
A failure identification parameter for recognizing the type of failure that occurs in the device, a storage device that stores a failure recovery procedure for the failure of the corresponding type, and
Information analysis means for determining whether or not a failure identification parameter stored in the storage device is included in the state information collected by the information collection means;
When the information analysis unit determines that the failure identification parameter is included in the state information, the recovery control unit reads out the corresponding recovery control procedure stored in the storage device and executes the procedure. When,
When the information analysis means determines that any failure identification parameter is not included in the state information, a dispatch request means for transmitting a staff dispatch request message through the network;
An automatic transaction apparatus comprising processing report means for transmitting a processing result report of a recovery control means or dispatch request means through a network. The automatic transaction apparatus according to claim 1,
When the corresponding failure recovery procedure by the recovery control means cannot be executed normally, the information collecting means collects status information again, and the information analyzing means includes a new fault identification parameter in the status information. When it is determined, the automatic transaction apparatus, wherein the recovery control means executes a corresponding recovery control procedure. In the automatic transaction apparatus according to claim 1 or 2,
The automatic transaction apparatus, wherein the recovery control means requests the dispatch request means to transmit a dispatch request message when the corresponding failure recovery procedure cannot be executed normally. The automatic transaction apparatus according to any one of claims 1 to 3,
An automatic transaction apparatus, wherein a failure identification parameter indicating a failure unique to the automatic transaction apparatus and a failure recovery procedure thereof are stored in the storage device. The automatic transaction apparatus according to any one of claims 1 to 4,
When the failure detection means detects a failure that needs to be recovered in an idle state that no one is using, the information collection means collects state information, and the information analysis means identifies the failure identification in the state information. When it is determined that a parameter is included, the recovery control means executes a corresponding recovery control procedure. In the automatic transaction apparatus according to claim 5,
An automatic transaction apparatus characterized in that a case where a resource (free area of memory) is reduced to a predetermined value or less is included in the failure identification parameter, and the corresponding failure recovery procedure is to execute a reboot. In the automatic transaction apparatus according to claim 5,
Information indicating the preset warning level of the device, including a decrease in the amount of medium to be used, is included in the status information collected by the information collecting unit, and the information indicating the warning level is included in the failure identification parameter, An automatic transaction apparatus characterized in that, in the corresponding failure recovery procedure, a dispatch request message including information indicating the alert level is generated and the dispatch request means is requested to transmit the dispatch request message. In the automatic transaction apparatus in any one of Claims 5 thru | or 7,
When automatic recovery control fails, or when it is determined to send a dispatch request message including information indicating the alert level,
The recovery control means acquires an apparatus operating state indicating whether all other automatic transaction apparatuses arranged in close proximity are usable, unusable, or at a warning level,
Only when the total number of the automatic transaction apparatuses including the own machine in an unusable state or a warning level exceeds the limit value, requests the dispatch request means to transmit the dispatch request message. An automatic transaction device characterized. In the automatic transaction apparatus in any one of Claims 5 thru | or 7,
When automatic recovery control has failed, or when the recovery control means determines that an outgoing request message including information indicating a warning level is to be transmitted,
By referring to the scheduled tour data stored in the storage device, the dispatch request means is requested to transmit the dispatch request message only when the time until the tour by the attendant is a predetermined value or more. Automatic transaction equipment. In a financial institution, the computer of the device used for cash deposit and withdrawal transactions,
Business application execution means for executing processing for deposit / withdrawal transaction business;
A monitoring application execution means for executing processing for fault monitoring and recovery,
A failure detection unit that receives a failure occurrence notification received from the business application execution unit or reads information on a part specified in advance to detect the occurrence of a failure;
Information collecting means for collecting device status information including operation history before failure occurrence;
A failure identification parameter for recognizing the type of failure that occurs in the device, a storage device that stores a failure recovery procedure for the failure of the corresponding type, and
Information analysis means for determining whether or not a failure identification parameter stored in the storage device is included in the state information collected by the information collection means;
When the information analysis unit determines that the failure identification parameter is included in the state information, the recovery control unit reads out the corresponding recovery control procedure stored in the storage device and executes the procedure. When,
When the information analysis means determines that any failure identification parameter is not included in the state information, a dispatch request means for transmitting a staff dispatch request message through the network;
Processing report means for transmitting the processing result report of the recovery control means or dispatch request means through the network;
Automatic transaction device control program to function as.   The computer-readable recording medium which recorded the automatic transaction apparatus control program of Claim 10.

Images