JP2013054536A - Remote prior operation device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for determining that a person operating a portable terminal is staying around and operating an ATM.SOLUTION: When transaction is input to a portable terminal, information indicating that the input of the button has been performed is stored in a data table for condition specification; when the button is depressed on the transaction terminal side after that, information indicating that the button has been depressed is further stored in the data table for condition specification; an elapsed time since the button of transaction content input has been depressed until a determination button is depressed is measured; it is confirmed that both button inputs have been performed in the data table for condition specification; when the elapsed time is within a predetermined time, the transaction continuation notification of transaction continuation is transmitted to a transaction server; and the processing is continued.

Description

  The present invention relates to a technique for performing a transaction operation in advance on a mobile terminal and taking over the transaction work to an appropriate transaction terminal.

  When multiple customers make transactions such as withdrawing cash at a transaction terminal such as an automated teller machine (ATM) or cash dispenser (CD), it takes time to enter the transaction details. There is a current situation that queues are formed and transactions are not smooth.

  Moreover, in patent document 1 (Unexamined-Japanese-Patent No. 2003-28181), when performing automatic transfer of cash with a transfer machine, transfer information is created by specifying a transfer destination and a transfer amount in advance with a mobile terminal, and transfer is made. A technique is disclosed in which a cash transfer is processed in the transfer machine based on the transfer information and the transaction time input operation is reduced in the transfer machine to shorten the transaction time.

JP 2003-281181 A

  In the above-described conventional technology, the transfer destination is input in advance with a portable terminal, and the transfer information is transmitted via the network, so that the ATM makes the work efficient by only depositing cash. However, there is no problem if the deposit is made, but it is not possible to determine whether or not there is a portable terminal operator in front of the ATM in the situation where there are a plurality of users around the ATM, especially in the case of withdrawal.

  For this reason, it is a problem to develop a method for determining that the person operating the mobile terminal is near the ATM and operating the ATM.

  Button information indicating whether or not the button for inputting transaction details from the user has been pressed on either the mobile terminal or the transaction terminal, and a determination input for determining the transaction and whether or not the determination button has been pressed The button information and the button elapsed time that starts counting elapsed time after the transaction content input button is pressed and stops counting elapsed time and confirms the elapsed time when the decision button is pressed. It is stored in the data table for identification, and when a button is pressed in transaction details input, it is detected that the button has been pressed. After that, when this button input is performed at the transaction terminal, When it is performed at the terminal, the transaction terminal detects that the enter button has been pressed, and when it has detected that the button has been pressed, it indicates that the button has been pressed. In the information, when it is detected that the determination button is pressed, update the button information and the determination button information in the condition specifying data table with the determination button on information indicating that the determination button is pressed, Receiving the elapsed time from when the transaction content input button is pressed until the decision button is pressed, update the button elapsed time in the condition specifying data table, and either the mobile terminal or the transaction terminal When both the button-on information and the decision button-on information are stored in the condition specifying data table and the determined elapsed time is within a predetermined time, the processing continuation is notified. A transaction execution notification is transmitted to the transaction processing server.

  Further, the condition specifying data table further receives an authentication phrase of a combination of character information from the portable terminal and stores it as a first authentication phrase, accepts an input of a second authentication phrase at the transaction terminal, When one authentication phrase and the second authentication phrase are compared and determined to be the same, a transaction execution notification for notifying processing continuation may be transmitted to the transaction processing server. The transaction execution notification may be transmitted from the mobile terminal, from the transaction terminal, or from the mobile terminal via the transaction terminal.

  Alternatively, the condition specifying data table further stores first location information indicating the current location of the mobile terminal and second location information indicating the current location of the transaction terminal, and first location information indicating the current location of the mobile terminal, The second position information indicating the current location of the transaction terminal is received, the condition specifying data table is updated, the first position information in the updated condition specifying table is compared with the second position information, and the first position information is compared. When the difference between the position information and the value of the second position information is within a predetermined range, a transaction execution notification for notifying the processing continuation may be transmitted to the transaction processing server. The transaction execution notification may be transmitted from the mobile terminal, from the transaction terminal, or from the mobile terminal via the transaction terminal. Either one or both of the conditions may be added, and both are not limited.

  There exists an effect which can determine that the user who is operating the portable terminal is in front of the transaction terminal.

It is an example of the whole block diagram of the transaction processing system which concerns on 1st Example. It is an example of the schematic block diagram of the portable terminal which concerns on 1st Example. It is an example of the schematic block diagram of ATM which concerns on 1st Example. It is an example of the schematic block diagram of the transaction processing server which concerns on 1st Example. In the example of the risk point data table 225 of FIG. 2, it is a data table showing the correspondence between transaction items and risk points. In the example of the risk point data table 225 of FIG. 2, it is a data table showing the correspondence between ATM environment information and risk points. In the example of the user authentication method selection data table 226 in FIG. 2, this is a data table showing the correspondence between the user authentication method and the security point. In the example of the account information data table 421 in FIG. 4, it is a data table showing the correspondence between IDs and account information. 4 is a data table showing the correspondence between IDs and user authentication information in the example of the user authentication information data table 422 of FIG. It is a flowchart figure for demonstrating the whole operation | movement of the transaction processing system which concerns on 1st Example. It is the flowchart figure which showed the phase 1 of FIG. It is the flowchart figure which showed the phase 2 of FIG. It is the flowchart figure which showed the phase 3 of FIG. It is the flowchart figure which showed the phase 4 of FIG. It is a flowchart figure in the case of inputting in a portable terminal and making a determination in ATM among the phases 5 of FIG. It is a flowchart figure in the case of inputting in ATM and making a decision in a portable terminal in phase 5 of FIG. It is the figure which showed the ATM selection screen of a portable terminal. It is the figure which showed the transaction item selection screen of a portable terminal. It is the figure which showed the user authentication method selection screen of a portable terminal. It is the figure which showed the user authentication screen of a portable terminal. It is the figure which showed the transaction content input screen of the portable terminal in the processing flow of FIG. It is the figure which showed the transaction confirmation screen of ATM in the processing flow of FIG. It is the figure which showed the transaction content input screen of ATM in the processing flow of FIG. It is the figure which showed the transaction confirmation screen of the portable terminal in the processing flow of FIG. In the example of the condition determination setting data table 227 of FIG. 2, it is a data table showing the correspondence between the condition determination setting items and their set values. In the example of the condition determination data table 228 of FIG. 2, it is a data table showing the relationship between the condition determination data items, the data set in them, and the determination results. It is the figure which showed the example of the processing flow of step 1511 of FIG.

  Hereinafter, examples will be described with reference to the drawings.

  In the present embodiment, an example of a transaction processing system that performs personal authentication and various transaction processes using a mobile terminal will be described. In the present embodiment, the notation is unified for portable terminals, but it is assumed that all terminals having a communication function are included. For example, a smartphone is also included.

  FIG. 1 is an overall configuration diagram of the present embodiment. It comprises an ATM 114 in the ATM installation area 102, a transaction processing server 116 in the data center 103, and a certificate authority 117. Further, it is assumed that there is a mobile terminal 112 or a smartphone 113 and a user 111 who operates the mobile terminal 112 or the smartphone 113 near the ATM, and a transaction process using the ATM 114 is performed using the mobile terminal 112 or the smartphone 113.

  The mobile terminal 112, the smartphone 113, and the ATM 114 all have a wireless communication function and a GPS receiver, and can communicate with each other wirelessly. Furthermore, position information can be acquired by receiving radio waves from the GPS satellite 101 by the GPS receiver. Here, GPS is used, but any information that can specify position information may be used, and the present invention is not limited to this. Since the position information does not change when the ATM 114 is fixedly installed, the position information can be recorded in advance in the disk of the ATM 114. In this case, the ATM 114 does not require a GPS receiver. .

  FIG. 2 is a schematic configuration diagram of the mobile terminal 112 or the smartphone 113. The apparatus includes a CPU 204 that controls each hardware in the apparatus and executes a program, a terminal input / output control apparatus 205 that controls input / output, a bus 203, a memory 201, a disk 202, a display 206 that displays an input / output screen, an input It comprises a key for setting information and a touch panel 207, communication hardware (wireless) 208 for wireless communication with other devices, and a GPS receiving unit 209 for receiving radio waves from GPS satellites.

  Here, in the memory 201, a location information acquisition processing unit 211, a location determination processing unit 212, a use ATM selection processing unit 213, a device authentication processing unit 214, a communication encryption key exchange processing unit 215, a user authentication method selection processing unit 216, A user authentication processing unit 217, a transaction availability determination processing unit 218, and a transaction execution processing unit 219 are stored.

  Further, the disk 202 includes a public key certificate (mobile terminal) 221 including a public key (mobile terminal), a private key (mobile terminal) 222 paired with the public key (mobile terminal), a public key (ATM). 223, user authentication information 224 registered in advance for personal authentication, risk point data table 225, user authentication method selection data table 226, condition determination setting data table 227, condition determination data table 228, portable terminal execution program 229 Consists of.

  FIG. 3 is a schematic configuration diagram of the ATM 114. The apparatus includes a CPU 304 that controls each hardware in the apparatus and executes a program, a terminal input / output control apparatus 305 that controls input / output, a bus 303, a memory 301, a disk 302, a display 306 that displays an input / output screen, an input Keys for setting information and touch panel 307, communication hardware (wired / wireless) 308 for wired and wireless communication with other devices, GPS receiver 309 for receiving radio waves from GPS satellites, stored in ATM It comprises a deposit / withdrawal device 310 for withdrawing / withdrawing cash.

  Here, the memory 301 includes a location information acquisition processing unit 311, an ATM unique ID determination processing unit 312, a device authentication processing unit 313, a communication encryption key exchange processing unit 314, an environment information acquisition processing unit 315, and a user authentication information transmission processing unit. 316, a transaction availability determination processing unit 317, and a transaction execution processing unit 318 are stored.

Further, the disc 302 includes a public key certificate (ATM) 321 including a public key (ATM), a secret key (ATM) 322 paired with the public key (ATM), a public key (portable terminal) 323, and the like. It consists of an ATM execution program 324. The condition determination setting data table 320 may be on the ATM side or on the portable side, and is not limited.

  FIG. 4 is a schematic configuration diagram of the transaction processing server 116. This apparatus includes a CPU 404 that controls each hardware in the apparatus and executes a program, a terminal input / output control device 405 that controls input / output, a bus 403, a memory 401, a disk 402, a display 406 that displays an input / output screen, an input It comprises a keyboard 407 for setting information and communication hardware 408 for communicating with other devices.

  Here, in the memory 401, an ID related information extraction processing unit 411, a user authentication information collation processing unit 412 and a transaction execution processing unit 413 are stored.

  The disk 402 includes an account information data table 421, a user authentication information data table 422, and a server execution program 423.

  FIG. 5 is a data structure example of the risk point data table 225 on the disk 202 of the mobile terminal 112. This data table shows the correspondence between transaction items and risk points. A column 501 indicates an identifier of data, a column 502 indicates a transaction item, and a column 503 indicates a risk point. Data in the same row expresses a correspondence relationship. For example, data having an identifier “1” indicates that “balance inquiry” of the transaction item is associated with “1” of the risk point. The same applies to the subsequent FIGS.

  FIG. 6 shows an example of the data structure of the risk point data table 225, similar to FIG. This data table shows the correspondence between ATM installation status and risk points. Column 601 indicates data identifiers, column 602 indicates ATM installation status, and column 603 indicates risk points.

  FIG. 7 shows an example of the data structure of the user authentication information data table 226 on the disk 202 of the mobile terminal 112. This data table shows the correspondence between user authentication information and security points. A column 701 indicates a data identifier, a column 702 indicates user authentication information, and a column 703 indicates a security point.

  FIG. 8 shows an example of the data structure of the account information data table 421 in the disk 402 of the transaction processing server 116. This data table shows the correspondence between IDs and account information (account number, name, age, gender). Column 801 indicates an ID, column 802 indicates an account number, column 803 indicates a name, column 804 indicates age, and column 805 indicates gender.

  FIG. 9 shows an example of the data structure of the user authentication information data table 422 on the disk 402 of the transaction processing server 116. This data table shows the correspondence between IDs and user authentication information (password, fingerprint information, vein information). Column 901 indicates an ID, column 902 indicates a password, column 903 indicates fingerprint information, and column 903 indicates vein information.

FIG. 25 shows an example of the data structure of the condition determination setting data table 227 in the disk 202 of the mobile terminal 112. This data table shows the correspondence between the condition determination setting items and their set values. A column 2501 indicates condition determination setting items, and a column 2502 indicates setting values. The condition determination setting items include latitude tolerance range: X ₀ , longitude tolerance range: Y ₀ , and elapsed time tolerance range: T ₀ . In this embodiment, the unit of T ₀ is second.

  FIG. 26 shows an example of the data structure of the condition determination data table 228 on the disk 202 of the mobile terminal 112. This data table shows the condition determination data items, the corresponding portable terminal and ATM input data, and the result of the condition determination based on these input data. Column 2601 indicates the item number, column 2602 indicates the condition determination data item, column 2603 indicates the input data of the portable terminal, column 2604 indicates the input data of ATM, and column 2605 indicates the determination result. The data items for condition judgment include “input / decision button pressed status” for storing whether or not the input button or enter button has been pressed, “latitude” and “longitude” for storing latitude and longitude as position information, and measurement There are “elapsed time” for storing the elapsed time and “authentication phrase” for storing the generated or entered authentication phrase.

  In the item No. 1, “input / decision button pressing status”, information indicating whether the button is pressed or not is stored. Information about whether this button is pressed or not is stored for each device of the portable terminal and the ATM. For example, 0 is stored when the button is not pressed, 1 is stored when the input button is pressed, and 2 is stored when the enter button is pressed. However, the order of storing 1 and 2 is always the order of 1 and 2. If 1 is not input, 2 is not stored even if the enter button is pressed.

  That is, when viewing the mobile terminal and the ATM, if 1 is not stored in one of the buttons, information on the button is not stored even if the other determination button is pressed. If the combination of 1 and 2 or 2 and 1 is set in the columns 2603 and 2604 of the item number 1, OK is stored in the determination result 2605, and NG is stored in other cases.

In “Latitude” and “Longitude” of item numbers 2 and 3, the mobile terminal stores the position information (latitude and longitude) acquired from the GPS satellite in the column 2603 and the ATM in the column 2604, respectively. For example, the value converted into the decimal system is stored in the column 2603 for the portable terminal and the column 2604 for the ATM. As for latitude, the absolute value of the difference between latitudes in the portable terminal and the ATM is calculated. If it is within X ₀ (allowable latitude), OK is stored in column 2605, otherwise NG is stored. . Similarly, the absolute value of the difference is calculated for longitude, and if it is within Y ₀ (acceptable range of longitude), OK is stored in column 2605, and NG is stored otherwise. In some cases, such as underground, position information cannot be acquired from GPS satellites. In this case, “−” is stored in the column 2605 in the sense that determination is impossible. The information is not limited to “−” as long as the information indicates that the determination is impossible.

Item 4 “Elapsed time” stores the measured elapsed time. However, “-” is stored when measurement is not started. If either the mobile terminal or the elapsed time of the ATM is other than “-” and is within T ₀ (allowable range of elapsed time), OK is stored in the column 2605, otherwise NG is stored.

  The “authentication phrase” of item number 5 stores values generated / input by the mobile terminal and the ATM, respectively. For example, when the authentication phrase is automatically generated by the portable terminal, it is stored in the column 2603 of the row of item number 5. On the other hand, when the user inputs an authentication phrase to the ATM, it is stored in the column 2604 of the row of item number 5. The values in columns 2603 and 2604 of the row of item number 5 are compared. If they are the same, OK is stored in column 2605, and NG is stored otherwise.

  2 to 4 show only the condition determination setting data table of FIG. 25 and the condition determination data table of FIG. 26 only in FIG. 2, these two data tables are transaction data. What is necessary is just to store in the place which performs condition determination of the propriety of implementation. For example, when the condition determination is performed on the portable terminal, the condition is stored on the disk of the portable terminal as shown in FIG. Further, when the condition is judged by ATM, it is stored in the ATM disk shown in FIG.

  The above is the outline of the system configuration and data structure in the present embodiment.

  Next, the operation of this system and the input interface will be described.

  FIG. 10 is a flowchart of the entire system. This system operates by the cooperation of the mobile terminal execution program 229, the ATM execution program 324, and the server execution program 423, and FIG. 10 describes an outline of the flow of the entire system. This flow chart shows Phase 1 (automatic activation of the operation interface of the mobile terminal), Phase 2 (acceptance of use ATM), Phase 3 (Device authentication of ATM and mobile terminal), Phase 4 (User authentication), Phase 5 (Execution of transaction) Are executed in order from the top. Details of each phase are described in FIGS. 11 to 16 and will be described in detail later. Phase 5 describes two types of examples depending on the processing method (FIGS. 15 and 16). In each figure, processing in elements such as a portable terminal is described in a box, and data transmission / reception between elements and input operations by a user are represented by arrows.

  First, before explaining FIGS. 11 to 16, preparation work to be performed in advance will be described.

A mobile phone execution program is installed on the mobile phone and started in the background. In addition, the wireless communication function of the mobile phone is turned on so that external communication can be received. In addition, a key pair of a private key (mobile terminal) and a public key (mobile terminal) is generated for phase 3 device authentication. Then, the generated public key (mobile terminal) is registered in the certificate authority, and a public key certificate (mobile terminal) with the public key (mobile terminal) signed is issued. The mobile terminal stores a private key (mobile terminal) and a public key certificate (mobile terminal). Further, specified values (permissible latitude: X ₀ , permissible range of longitude: Y ₀ , permissible range of elapsed time: T ₀ ) used for determining whether or not processing can be executed are set and stored. The set data is stored in a column 2502 in FIG.

  Next, similarly to the portable terminal, the private key (ATM) generated by the ATM and the public key certificate (ATM) issued by the certificate authority are also stored in the ATM. Furthermore, in ATM, a unique ID unique to ATM is set and stored.

  Further, the mobile terminal obtains a public key certificate (ATM) from the ATM, obtains the public key (ATM) by accessing the certificate authority, and stores it inside. Similarly, in ATM, a public key certificate (mobile terminal) is obtained from a mobile terminal, and the public key (mobile terminal) is obtained by accessing the certificate authority and stored therein. This process may be performed in advance, or may be performed when communication is performed between the portable terminal and the ATM in any of the phases 1 to 3.

  In the transaction processing server, user authentication information (password, fingerprint pattern information, vein pattern information, etc.) is registered in advance for user authentication. Registration may be performed at a bank window or via the Internet with an encrypted communication path.

  Phase 1 will be described with reference to FIG. Elements of this phase are users, mobile terminals, and ATMs. This phase is mainly composed of two parts: position information acquisition and position determination.

  First, position information acquisition will be described. An ATM location information acquisition processing unit 311 acquires location information (ATM) from a GPS satellite. This position information is acquired by latitude and longitude, and thereafter, in order to calculate the difference between the latitude and longitude of the ATM, each value is converted into a decimal system (step 1101). ATM information including the location information (ATM), ATM unique ID and ATM related information (business hours, address, etc.) is transmitted to the outside at regular intervals. The portable terminal receives these pieces of information by starting the portable terminal execution program in the background and keeping wireless communication in a reception state (step 1102). The acquired ATM latitude is stored in the column 2604 of item number 2 in the condition determination data table in FIG. 26, and the longitude is stored in the column 2604 of item number 3 in the condition determination data table in FIG. Thereafter, the position information acquisition processing unit 211 of the mobile terminal acquires position information (mobile terminal) from the GPS satellite. This value is also converted into a decimal system as in the case of ATM position information (step 1103). The obtained latitude of the mobile terminal is stored in column 2603 of item number 2 in FIG. 26, and the longitude is stored in column 2603 of item number 3 in FIG.

Next, position determination will be described. The position determination processing unit 212 of the portable terminal calculates the values of the position information (mobile terminal) and the position information (ATM), and checks whether the difference is within an allowable range (step 1104). Specifically, if the latitude of the location information (mobile terminal) is “X _a ”, the longitude is “Y _a ”, the latitude of the location information (ATM) is “X _b ”, and the longitude is “Y _b ”, the difference Are calculated to be equal to or less than the prescribed values (latitude: X ₀ , longitude: Y ₀ ).

That is, it is determined whether | X _a −X _b | ≦ X ₀ and | Y _a −Y _b | ≦ Y ₀ are satisfied. Explaining using the data table, the absolute value of the difference is calculated for the values in columns 2603 and 2604 of item number 2 in FIG. The absolute value is compared with the value of the latitude allowable range X _{0 in} FIG. 25, and if X ₀ or less, OK is stored in the column 2605 of item number 2 in FIG.

Also, the absolute value of the difference is calculated for the values in columns 2603 and 2604 of item number 3 in FIG. The absolute value is compared with the value of the longitude allowable range Y _{0 in} FIG. 25, and if it is Y ₀ or less, OK is stored in the column 2605 of item number 3 in FIG. If both the column numbers 2605 of item numbers 2 and 3 in the data table of FIG. 26 are OK, the position determination is determined to be OK. If it is determined to be OK, the use ATM selection processing unit 213 displays the ATM selection screen of FIG. 17 (step 1105). The ATM information (ATM unique ID and ATM related information) received in step 1102 is displayed on the ATM screen. When ATM information is received from a plurality of ATMs, the unique IDs of the plurality of ATMs are displayed as in an ATM list 1702 in FIG. On the other hand, if the position determination is not OK, no further processing is performed.

  Phase 2 will be described with reference to FIG. Elements of this phase are users, mobile terminals, and ATMs.

  In the ATM selection screen of FIG. 17, the user selects an ATM to be used from the ATM candidate list 1702 and presses a selection button 1705 (step 1201). The portable terminal accepts it and transmits the unique ID of the selected ATM to the ATM (step 1202). The ATM receives it, and the ATM unique ID determination processing unit 312 confirms whether or not the unique ID of the ATM and the unique ID originally held by the ATM match (step 1203). If they match, the following processing is performed.

  Phase 3 will be described with reference to FIG. Elements of this phase are users, mobile terminals, and ATMs. This phase consists of three parts: device authentication (ATM), device authentication (mobile terminal), and key exchange for encryption communication.

  First, device authentication (ATM) will be described. The ATM device authentication processing unit 313 converts the ATM information into a hash value, and creates signature data using a secret key (ATM) (step 1301). The signature data is transmitted to the portable terminal (step 1302). The device authentication processing unit 214 of the portable terminal decrypts the received signature data using a public key (ATM). Also, the already received ATM information is hashed to check whether or not it matches the decrypted data (step 1303). If they match, it is proved that the ATM is a legitimate device, and the subsequent processing is continued.

  Next, device authentication (mobile terminal) will be described. The device authentication processing unit 214 of the mobile terminal converts related information (model name, owner name, etc.) of the mobile terminal into a hash value, and creates signature data using the secret key (mobile terminal) (step 1304). ). The signature data and the related information of the original mobile terminal are transmitted to the mobile terminal (step 1305). The ATM device authentication processing unit 313 decrypts the received signature data using the public key (mobile terminal). Further, the related information of the portable terminal is hashed to check whether or not it matches the decrypted data (step 1306). If they match, it is proved that the mobile terminal is a legitimate device, and the subsequent processing is continued.

  The encryption communication key exchange will be described. The key exchange processing unit 314 for ATM encryption generates a common key for encryption communication and encrypts it with the public key (portable terminal) (step 1307). The encrypted common key is transmitted to the portable terminal (step 1308). The encryption communication key exchange processing unit 215 of the mobile terminal decrypts the received data with the secret key (mobile terminal), and obtains a common key for encryption communication (step 1309). By using this common key for the subsequent processing, all wireless communication between the portable terminal and the ATM can be encrypted.

  Phase 4 will be described with reference to FIG. Elements of this phase are users, mobile terminals, ATMs, and transaction processing servers. This phase consists of user authentication method selection and user authentication.

  First, user authentication method selection will be described. The user authentication method selection processing unit 216 of the portable terminal displays the transaction item selection screen of FIG. 18 (step 1401). The user selects one transaction item from the transaction item list 1802 and presses a selection button 1803 (step 1402). The portable terminal accepts it and acquires environmental information from an external interface such as a GPS receiver (step 1403).

  In addition, after performing step 1402, the portable terminal requests environmental information from the ATM (step 1403). In response, the ATM environment information acquisition processing unit 315 acquires environment information from an external interface such as a GPS reception unit (step 1405). The ATM transmits the acquired environment information to the portable terminal (step 1406). In this embodiment, an example of “ATM installation status” is shown as environmental information in ATM. The ATM installation status indicates the status of ATM installation, and "ATM corner (with bank counter)", "Open space in station", etc. are listed as options. In a portable terminal, risk points corresponding to each are derived using a risk point data table based on transaction items and environmental information, and a total value thereof is calculated.

  Those having security points larger than the total value of the risk points are selected as user authentication method selection candidates. For example, when the transaction item is “drawer” and the ATM installation status is “ATM corner (ATM exclusive area)”, the risk point of the transaction item is “5” from FIG. 5, and the risk point of the ATM installation status is “ 2 ”, so the total is“ 7 ”. Therefore, a user authentication method having seven or more security points is a selection candidate. From FIG. 7, it can be derived that there are four user authentication methods having 7 or more security points: “fingerprint authentication”, “vein authentication”, “password + fingerprint authentication”, and “password + vein authentication” (step 1407). Based on the result, these user authentication method selection candidates are displayed on the user authentication method selection screen of FIG. 19 (step 1408). The user selects one from the user authentication method candidate list 1802 on the screen and presses a selection button 1803 (step 1409).

  Next, user authentication will be described. After the user authentication method is selected in 1409, the user authentication processing unit 217 of the portable terminal displays the user authentication screen of FIG. 20 (step 1410). The user inputs an ID and user authentication information on the user authentication screen (step 1411). In this example, a screen when password authentication and fingerprint authentication are selected is displayed. After the input, when the transmission button 2005 is pressed, the ID and user authentication information are transmitted to the ATM (step 1412). Upon receiving the ID and user authentication information, the ATM user authentication information transmission processing unit 316 transmits it to the transaction processing server (step 1413). The ID related information extraction processing unit 411 of the transaction processing server derives account information (account number, name, age, sex) associated with the ID using the account information data table of FIG. Furthermore, user authentication information associated with the ID is also derived using the user authentication information data table of FIG. 9 (step 1414). Next, the user authentication information collation processing unit 413 of the transaction processing server collates the derived user authentication information with the user authentication information received from the ATM, and confirms whether or not they match (step 1415). If they match, the processing is continued and the authentication result is transmitted to the ATM (step 1416). Further, the ATM transmits the received authentication result to the portable terminal (step 1417).

  Phase 5 will be described with reference to FIGS. 15 and 16. Elements of this phase are users, mobile terminals, ATMs, and transaction processing servers. This phase is composed of two parts, a transaction feasibility judgment and a transaction execution.

  In this phase, whether or not the transaction is possible is determined, and the feature of this embodiment is that the input and determination operations are performed separately for the portable terminal and the ATM. Since the processing flow is slightly different depending on which of the two operations is performed, FIG. 15 and FIG. 16 separately describe them. FIG. 15 shows a pattern in which the input is made by the portable terminal and the decision is made by ATM. FIG. 16 shows a pattern in which the input is made by the ATM and the decision is made by the portable terminal.

  Of the phase 5, the flow of FIG. 15 will be described first.

  First, the transaction availability determination will be described. The transaction allowance determination processing unit 218 of the mobile terminal displays the transaction content input screen of FIG. 21 (step 1501). On the other hand, in ATM, the transaction confirmation screen of FIG. 22 is displayed (step 1502). On the transaction content input screen, the user inputs the transaction content and presses an input button (step 1503). At the timing of pressing the input button, “1” is stored in column 2603 of item number 1 in FIG. After accepting the input button press, the portable terminal automatically issues an authentication phrase (step 1504). This authentication phrase may be arbitrarily input by the user, and is not limited to automatic issue. The authentication phrase is used as one of the conditions for determining whether or not the transaction is possible, and automatically generates a phrase that meets preset conditions (such as a combination of alphabets and numbers, the number of digits, and a combination of character information). The generated authentication phrase is stored in column 2603 of item number 5 in the condition determination data table 228 of FIG.

  Next, the counting of the elapsed time T is started when the authentication phrase is generated (step 1505). By the way, this authentication phrase may be entered and set freely on the screen by the user before the input button is pressed. The start of counting the elapsed time T is not limited to this, and can be arbitrarily set such as the timing of receiving an input button. In this case, the counting of the elapsed time T is started when the input button is pressed. On the other hand, on the ATM side, from step 1502, a transaction confirmation screen for inputting an authentication phrase is displayed, and the input of the authentication phrase by the user and the pressing of the enter button are always accepted (step 1506). When this determination button is pressed, the ATM obtains position information (ATM) from the GPS satellite and converts it into a decimal system (step 1507).

  Thereafter, the authentication phrase, the location information (ATM), and the notification that the enter button has been pressed are transmitted from the ATM to the portable terminal (step 1508). The received authentication phrase is stored in column 2604 of item number 5 in the condition determination data table 228 of FIG. Of the received position information (ATM), latitude is stored in column 2604 of item number 2 in FIG. 26, and longitude is stored in column 2604 of item number 3 in FIG. For the notification that the enter button has been pressed, “2” is stored in the column 2604 of item number 1 in FIG. The portable terminal stops counting the elapsed time T at the timing when these pieces of information are received (step 1509). The elapsed time is stored in column 2603 of item number 4 in FIG. Further, the portable terminal acquires position information (portable terminal) from the GPS satellite and converts it into a decimal system (step 1510). Of the position information (mobile terminal), latitude is stored in column 2603 of item number 2 in FIG. 26 and longitude is stored in column 2603 of item number 3 in FIG. On the mobile terminal side, (Condition 1) The enter button is pressed on the mobile terminal after the input button is pressed, and (Condition 2) Location information (portable terminal) and location information (ATM) are within the specified range. (Condition 3) The elapsed time T is within the specified range (if T is not measured, the condition is not satisfied), (Condition 4) the authentication phrase generated by the mobile terminal and the authentication phrase received from the ATM It is confirmed that all the conditions of phrase matching are satisfied, and the process is continued only when all the conditions are satisfied (step 1511).

  Conditions 1 to 4 will be described with reference to the condition determination data table 228 in FIG. First, condition 1 corresponds to item number 1, and when “1” is set in column 2603 of the row of item number 1 and “2” is set in column 2604, OK is stored in column 2605 and condition 1 is satisfied. It is determined that

Condition 2 corresponds to item numbers 2 and 3, and if the absolute value of the difference between the values of column 2603 and column 2604 of item number 2 is within X ₀ (latitude tolerance), OK is stored in column 2605. If the absolute value of the difference between the values of column 2603 and column 2604 of item number 3 is within Y ₀ (acceptable range of longitude), OK is stored in column 2605. If both the column numbers 2605 of the item numbers 2 and 3 are OK, it is determined that the condition 2 is satisfied.

Condition 3 corresponds to item number 4, and if the value in column 2603 of item number 4 is within T ₀ (allowable range of elapsed time), OK is stored in column 2605 and it is determined that condition 3 is satisfied. . In terms of the calculation formula, it is determined that the condition 3 is satisfied when the elapsed time T is “T ≦ T ₀ ”.

  Condition 4 corresponds to item number 5, and the values of column 2603 and column 2604 of item number 5 are compared. If they are the same, OK is stored in column 2605 and it is determined that condition 4 is satisfied. In the present embodiment, all four conditions are required to be satisfied. However, the conditions 2, 3, and 4 can be excluded from the conditions as necessary.

  In the above description, in the step 1511, the conditions 1 to 4 are set as parallel conditions, and the following steps are executed when all the conditions are satisfied or when the specific conditions are satisfied. However, the present invention is not limited to this, and it is also assumed that conditions 1 to 4 are processed in cooperation. An example is shown in FIG. In this example, whether or not the transaction is possible is determined only by conditions 1 and 2, but depending on the location, the position information from the GPS satellite may not be acquired. In such a case, the condition determination process is performed using conditions 3 and 4. Complement.

  First, the condition 1 is checked, it is confirmed that the input button is pressed on the portable terminal, and the decision button is further pressed on the ATM. If both are pressed, the process proceeds (step 2701). In step 2701, as described with reference to FIG. 26, item number 1 is checked, and if “1” is set in column 2603 and “2” is set in column 2604, OK is stored in column 2605. It is determined that Condition 1 is satisfied.

Next, Condition 2 is checked, and it is determined that the absolute value of the difference between the position information of the portable terminal and the ATM is within a specified range (Step 2702). This step 2701 stores OK in the column 2605 when the absolute value of the difference between the column numbers 2603 and 2604 of the item number 2 is within X ₀ (latitude tolerance), as described with reference to FIG. If the absolute value of the difference between the values of column 2603 and column 2604 of item number 3 is within Y ₀ (acceptable range of longitude), OK is stored in column 2605. If both the column numbers 2605 of the item numbers 2 and 3 are OK, it is determined that the condition 2 is satisfied. However, there is a case where the position information cannot be acquired from the GPS satellite for some reason. In this case, “-” is stored in the column 2605.

  Next, based on the determination result of condition 2, if both the column numbers 2605 of item numbers 2 and 3 in FIG. 26 are OK, the transaction approval / disapproval determination is determined as “transaction possible”, and step 1512 and subsequent steps are executed (step 2706). On the other hand, if either is NG (except when either one is “−”), the transaction is determined to be “impossible” and the transaction is stopped (step 2707). Further, if either one is “−”, the next step 2704 is executed.

In step 2704, conditions 3 and 4 are checked. Condition 3 corresponds to item number 4 and stores OK in column 2605 when the value in column 2603 of item number 4 is within T ₀ (allowable range of elapsed time). Condition 4 corresponds to item number 5 and the values of column 2603 and column 2604 of item number 5 are compared. If they are the same, OK is stored in column 2605. If both the column numbers 2605 of the item numbers 4 and 5 are OK, it is determined that “transaction is possible” (step 2708). On the other hand, if either one is NG, it is determined that “dealing is impossible” (step 2709). The order of determination of condition 1 or conditions 2, 3 and 4 of the condition determination is not limited, and conditions 4 and 3 may be performed first and may be combined in various combinations. .

  Further, this condition determination may be performed on the ATM side, on the mobile terminal side, or on an external device that can be connected to the ATM or the mobile phone, and limits the place processed in this embodiment. It is not a thing.

  Next, transaction execution will be described. The transaction execution processing unit 219 of the mobile terminal transmits a transaction execution notification instructing execution of the transaction to the ATM. (Step 1512) The transaction execution notification may include transaction details. Further, the ATM transmits the transaction execution notification to the transaction processing server (step 1513). The transaction processing server executes the transaction according to the received transaction content (step 1514). The transaction processing server transmits the transaction result to the ATM after the transaction processing is completed (step 1515). Further, the ATM transmits the received transaction result to the mobile terminal (step 1516). In the portable terminal, the transaction result is displayed on the screen, and the transaction result is recorded (step 1517). On the other hand, the transaction result is displayed on the screen even at ATM (step 1518).

  Next, another processing flow (FIG. 16) of phase 5 will be described.

  First, the transaction availability determination will be described. The ATM transaction availability determination processing unit 317 displays the transaction content input screen of FIG. 23 (step 1601). On the other hand, the mobile terminal displays the transaction confirmation screen of FIG. 24 (step 1602). On the transaction content input screen, the user inputs the transaction content and presses an input button (step 1603). The ATM starts counting elapsed time T when the input button is pressed (step 1604). On the other hand, on the portable terminal side, a transaction confirmation screen is displayed from step 1602, and the user always accepts pressing of the decision button (step 1605). When this determination button is pressed, the mobile terminal acquires position information (mobile terminal) from the GPS satellite and converts it into decimal notation (step 1606). Here, although not expressed in FIG. 16, the ATM may automatically issue an authentication phrase after accepting the input button press. The authentication phrase may be arbitrarily input by the user and is not limited to automatic issue. The authentication phrase is used as one of the conditions for determining whether or not the transaction is possible, and generates a phrase that meets a preset condition (a combination of alphabets and numbers, the number of digits, a combination of character information, etc.). The generated authentication phrase is stored in column 2604 of item number 5 in the condition determination data table 228.

  Thereafter, the mobile terminal transmits position information (mobile terminal) and notification that the enter button has been pressed to the ATM (step 1607). The ATM stops counting the elapsed time T at the timing when the information is received (step 1608). Further, the ATM acquires position information (ATM) from the GPS satellite and converts it into decimal system (step 1609). On the mobile terminal side, (Condition 1) The enter button is pressed on the mobile terminal after the input button is pressed on ATM. (Condition 2) The location information (portable terminal) and the location information (ATM) are within the specified range. (Condition 3) Confirm that all the conditions of the elapsed time T are within the specified range (if T is not measured, the condition is not satisfied) and that all the conditions are satisfied The process is continued only when there is (step 1610). Note that, similarly to the case described with reference to FIG. 15, the processing is not limited to the case where the conditions 1 to 3 are checked as parallel conditions, and it is also assumed that the processing is performed in cooperation with the conditions 1 to 3. An example of the processing flow is the same as in FIG. However, since there is no condition 4 in FIG. 16, this is deleted, but when the ATM issues an authentication phrase, the user further inputs the authentication phrase on the portable terminal, and the condition determination data table 228 Stored in column 2603 of item number 5, and as condition 4, the values of column 2603 and column 2604 of item number 5 of the condition determination data table are compared, and if they are the same, information indicating OK is stored in column 2605 , It is determined that the condition 4 is satisfied.

  In this example, whether or not the transaction is possible is determined only by conditions 1 and 2, but position information from a GPS satellite may not be obtained depending on the location. In such a case, the condition determination process is supplemented using condition 3 ing. If condition 4 is present, the determination can be made using condition 4 to improve the accuracy.

  Next, transaction execution will be described. The ATM transaction execution processing unit 219 transmits a transaction execution notification instructing execution of the transaction to the transaction processing server. (Step 1611) The transaction execution notification may include transaction details. The transaction processing server executes a transaction according to the received transaction content (step 1612). The transaction processing server transmits the transaction result to the ATM after the transaction processing ends (step 1613). Further, the ATM transmits the received transaction result to the mobile terminal (step 1614). The mobile terminal displays the transaction result on the screen and records the transaction result (step 1615). On the other hand, the transaction result is also displayed on the screen in ATM (step 1616).

101 GPS Satellite 102 ATM Installation Area 103 Data Center 111 User 112 Mobile Terminal 113 Smartphone 114 ATM
115 Network 116 Transaction Processing Server 117 Certificate Authority

Claims (7)

A remote advance operation method using a mobile terminal and a transaction terminal,
Button information indicating whether or not a transaction content input button from the user has been pressed, decision input for determining a transaction, whether or not the determination button has been pressed, and the transaction content input Storing elapsed time in the condition specifying data table, starting counting elapsed time after the button is pressed, and stopping counting elapsed time and confirming elapsed time when the decision button is pressed; ,
A first step of detecting that the button is pressed when the button is pressed in the transaction content input;
Thereafter, when the first step of detecting is performed at the transaction terminal, the mobile terminal detects that the determination button is pressed at the transaction terminal when the first step is performed at the mobile terminal. The second step to
Button-on information indicating that the button has been pressed when it is detected that the button has been pressed in the first step of detecting that the decision button has been pressed in the second step of detecting. A first step of updating each of the button information and the decision button information in the condition specifying data table with decision button on information indicating that the decision button has been pressed when detected;
A second step of accepting an elapsed time from when the transaction content input button is pressed until the decision button is pressed, and updating the button elapsed time in the condition specifying data table;
When both the button-on information and the decision button-on information are stored in the condition specifying data table and the determined elapsed time is within a predetermined time, the processing continuation is notified. And a step of transmitting a transaction execution notification to a transaction processing server. The remote pre-operation method according to claim 1,
A remote preliminary operation method in which the storing step, the updating first step, the updating second step, and the transmitting step are performed by the portable terminal. The remote pre-operation method according to claim 1,
The remote prior operation method in which the storing step, the updating first step, the updating second step, and the transmitting step are performed by the transaction terminal.   The remote pre-operation method according to any one of claims 1 to 3, wherein the transaction input is made at the mobile terminal, and the decision input is made at the transaction terminal.   The remote pre-operation method according to any one of claims 1 to 3, wherein the transaction input is made at the transaction terminal and the decision input is made at the portable terminal. The remote preliminary operation method according to any one of claims 1 to 5,
In addition to the condition specifying data table,
Receiving an authentication phrase of a combination of character information from the mobile terminal or the transaction terminal and storing it as a first authentication phrase;
When receiving the authentication phrase from the mobile terminal at the transaction terminal, when receiving the authentication phrase from the transaction terminal at the mobile terminal, accepting an input of the second authentication phrase;
When the first authentication phrase and the second authentication phrase are compared and determined to be the same, a transaction execution notification for notifying the processing continuation is transmitted to the transaction processing server. Remote pre-operation method to do. A remote pre-operation method according to any one of claims 1 to 6,
In addition to the condition specifying data table,
Storing first location information indicating a current location of the mobile terminal and second location information indicating a current location of the transaction terminal;
Receiving the first location information indicating the current location of the mobile terminal and the second location information indicating the current location of the transaction terminal and updating the condition specifying data table;
Processing is performed when the first position information and the second position information in the updated condition specifying table are compared, and the difference between the values of the first position information and the second position information is within a predetermined range. And a step of transmitting a transaction execution notification notifying the continuation to the transaction processing server.

Images