JP2017228110A - Automatic transaction device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a card from being invalidated when a legitimate user has inputted incorrect personal identification numbers and to prevent a card from being illegally used by malicious people.SOLUTION: An automatic transaction device comprising operation input means for receiving an input operation by a user and medium receiving/dispensing means for receiving/dispensing a transaction medium from/to a user has: determination means which determines whether or not the number of mismatches that have occurred between a first personal identification number controlled on the basis of account information previously recorded in the transaction medium and second personal identification numbers inputted via the operation input means has become equal to or greater than a predetermined number; and a notification means which, when the number of mismatches that have occurred between the first personal identification number and the second personal identification numbers has become equal to or greater than the predetermined number, notifies a staff member via a monitoring display in a store that use of the transaction medium has been suspended due to mismatches of identification numbers while it is held inside the automatic transaction device.SELECTED DRAWING: Figure 3

Description

  The present invention, for example, authenticates a person with a personal identification number entered by a user such as an automated teller machine (hereinafter referred to as “ATM”) installed in a financial institution and executes a transaction. The present invention relates to a customer-facing automatic transaction apparatus.

  In recent years, crimes for illegally withdrawing cash from an automatic transaction apparatus using fraudulent cards such as theft cards and counterfeit cards have been increasing, which has become a social problem. In financial institutions, as a means for preventing unauthorized withdrawal of cash, if a password entered by a user is erroneously repeated more than a predetermined number of times, the card is treated as invalid and cannot be used in an automatic transaction apparatus.

  On the other hand, with the advancement of the information society, personal authentication is required by entering a password or password in various situations where not only automatic transaction devices but also systems and services are used. The number of users who set passwords is increasing. In this case, the password or password may be confused and remembered, or some of the password or password may be forgotten. When such a user uses an automatic transaction apparatus, the card may be invalidated by mistakenly inputting a personal identification number in spite of being the card holder himself / herself. If the card is treated as invalid, the card must be reissued, and the automatic transaction apparatus cannot be used until the card is reissued.

  In order to prevent this situation, the wrong part or cause is displayed by displaying a part or all of the wrong password in the customer operation section after the wrong password is entered. Has been proposed (see Patent Documents 1 to 3). In addition, a method is also proposed in which a user can confirm that there is no input error by displaying a number already input by operating a key of a customer operation unit even during input of a password (see Patent Document 4). . In addition, for a card that has been treated as invalid, when the card is inserted into an automatic transaction apparatus, the card is displayed on the customer operation unit as an invalid card and used for biometric authentication. A method has been proposed in which the card can be reused when it is confirmed that the person is the person (see Patent Document 5).

Japanese Patent Laid-Open No. 3-174651 JP-A-8-263722 JP 11-25319 A Japanese Patent Application Laid-Open No. 2014-219817 Japanese Patent Laying-Open No. 2015-69356

  According to the conventional examples of Patent Documents 1 to 4, a part or all of the input password is displayed on the customer operation unit, but a user who forgets the password or is confused with another password, It is not always possible to derive the correct password just by looking at the displayed input contents. For this reason, it is impossible to reliably prevent a situation in which the wrong password is continuously input as a result and the card is treated as invalid. In addition, even if the wrong PIN is displayed, the PIN entered in the customer operation section is displayed, so that if an unauthorized person uses a fraudulent card such as a stolen card or counterfeit card, Therefore, there is a problem that the correct password is guessed from the displayed contents and illegally used.

  According to the conventional example of Patent Document 5, a card that has been treated as invalid can be reused by biometric authentication, but it does not prevent the card from being treated as invalid. It can be reusable only in the case of an automatic transaction apparatus with an authentication function and a card registered with biometric authentication.

  An object of the present invention is to provide an automatic transaction apparatus capable of preventing a card from being invalidated when a legitimate user inputs a personal identification number by mistake and preventing unauthorized use of the card by a malicious fraudster. There is to do.

  In order to solve the above-described problems and achieve the object, the present invention provides an automatic transaction apparatus including an operation input unit that receives an input operation by a user, and a medium transfer unit that transfers a transaction medium to and from the user. The number of mismatches between the first password managed based on the account information recorded in advance on the transaction medium and the second password entered from the operation input means is a predetermined number of times. In the case where the number of mismatches between the determination means for determining whether or not the first password and the second password are equal to or greater than a predetermined number, the transaction medium is placed in the automatic transaction apparatus. It is configured as an automatic transaction apparatus comprising notification means for notifying a staff member through a monitoring monitor in a store that the handling is stopped due to a mismatch of the passwords while being held.

  Further, the present invention is an automatic transaction apparatus comprising an operation input means for receiving an input operation by a user and a medium transfer means for transferring a transaction medium with the user, which is recorded in advance on the transaction medium. Determining means for determining whether or not the number of mismatches between the first personal identification number managed based on the account information and the second personal identification number input from the operation input means exceeds a predetermined number; When the number of mismatches between the first password and the second password is greater than or equal to a predetermined number, the transaction medium is suspended in the automatic transaction apparatus, and the handling is stopped due to the mismatch of the passwords. It is also grasped as an automatic transaction apparatus comprising notification means for notifying an operator of the fact through a monitoring terminal connected via a network.

  According to the present invention, an automatic transaction apparatus capable of preventing a card from being treated as invalid when a legitimate user inputs a password incorrectly, and preventing unauthorized use by a malicious fraudster. Can be provided.

The block diagram which shows the structure of an automatic transaction system. The block diagram which shows the internal structure of ATM. Security code input error processing flow diagram in the payment transaction at the time of operation. Example of transaction selection screen. Card insertion screen example. An example of a PIN number press screen. An example of an amount press screen. An example of a password re-press screen. An example of an ATM pause screen due to an incorrect PIN code input during operation. Card handling selection screen example. Account information printing example. Fig. 7 is a flow chart of a wrong password input process in a payment transaction during overtime operation. An example of an ATM pause screen due to an incorrect PIN code input during overtime operation.

An embodiment of the present invention will be described below with reference to the drawings.
First, the automatic transaction system 10 in a present Example is demonstrated using FIG.1 and FIG.2.

  1 shows a configuration diagram of the automatic transaction system 10, and FIG. 2 shows a block diagram of an internal configuration of the ATM 100 (automatic transaction apparatus).

  As shown in FIG. 1, the automatic transaction system 10 includes an ATM 100, a host computer 200 connected to the ATM 100 via a communication line 20, a branch monitoring monitor 300, a central monitoring server 400, and a central monitoring terminal 500.

  As shown in FIG. 1, the ATM 100 is an automatic transaction apparatus that is installed in a bank or the like and can deposit and withdraw money by a user's operation. A customer operation / display unit 101 (operation input unit), a bill deposit / withdrawal mechanism unit 103 (medium transfer unit), and a coin deposit / withdrawal mechanism unit 104 (medium transfer unit) are arranged on a horizontal operation surface at a height to perform horizontal operation. A passbook mechanism unit 105 (medium transfer unit) and a card / detail slip mechanism unit (medium transfer unit) are arranged on a vertical operation surface that is substantially vertical upward from the surface, and a clerk operation / display unit 102 (operation input) inside the housing Means).

  Specifically, as shown in FIG. 2, the ATM 100 includes a customer operation / display unit 101, a clerk operation / display unit 102, a banknote deposit / withdrawal mechanism unit 103, a coin deposit / withdrawal mechanism unit 104, a passbook mechanism unit 105, a card / The statement slip mechanism unit 106, a storage unit 107 (storage unit), a line connection unit 108, a control unit 109, and the like are included.

  The customer operation / display unit 101 is composed of a touch panel having both a function of accepting a customer's key input operation such as a password and an amount of money and a function of displaying various operation guides.

  The clerk operation / display unit 102 is used when a bank clerk performs processing necessary for operation. The clerk operation / display unit 102 is a touch panel that has a function of accepting key input operations of a clerk and a function of displaying various operation guides. It is composed. The clerk operation / display unit 102 is preferably arranged inside the lockable door inside the casing of the ATM 100 so that the customer cannot refer to or operate the display contents.

  The banknote deposit / withdrawal mechanism 103 includes a conveyor belt (not shown), a drive motor (not shown), various sensors (not shown), and the like, and a banknote (transaction medium) deposit / withdrawal function, an identification function, and a storage function. Etc.

  The coin deposit / withdrawal mechanism 104 includes a conveyor belt (not shown), a drive motor (not shown), various sensors (not shown), and the like, and a coin (transaction medium) deposit / withdrawal function, an identification function, and a storage function. Etc.

  The passbook mechanism unit 105 includes a conveyance roller (not shown), a drive motor (not shown), various sensors (not shown), a printing mechanism (not shown), and the like, and insertion / discharge of a customer passbook (transaction medium). And a function for reading and writing passbook information, and a printing function for printing transaction contents on the passbook.

  The card / detail slip mechanism unit 106 includes a conveyance roller (not shown), a drive motor (not shown), various sensors (not shown), a printing mechanism (not shown), etc., and a customer cash card (transaction medium). Card mechanism having a function for inserting and ejecting cash cards, a function for reading and writing cash card information, a printing function for printing transaction contents on a statement slip (transaction medium), and a statement for discharging a printed statement slip The vote mechanism is configured as a single unit.

  The storage unit 107 is configured by a hard disk or the like and has a function of writing and reading various information.

  The line connection unit 108 is configured by a LAN card or the like, and has a function of connecting to the communication line 20 and a function of transmitting and receiving various types of information to and from the host computer 200, the branch monitoring monitor 300, the centralized monitoring server 400, and the like via the communication line 20. have.

  The control unit 109 includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and various processing functions such as a transaction operation in which a customer operates the ATM 100 to perform a transaction, a predetermined path, and the like. It has a control function which controls operation of each part connected via.

  The host computer 200 is installed in the same store as the ATM 100 or in a remote head office or office center, and also exchanges various information related to transactions with a plurality of ATMs 100 via the communication line 20.

  Specifically, as shown in FIG. 2, the host computer 200 includes a storage unit 201, an account information file control unit 202, a line connection unit 203, a control unit 204, and the like.

  The storage unit 201 includes a hard disk or the like, and has a function of writing and reading various information. The storage unit 201 of the host computer 200 stores an account information file storing customer account information, various files storing various information other than customer account information, and the like.

  The account information file control unit 202 has a function of controlling input / output of information stored in the account information file and various files of the storage unit 201 in accordance with instructions from the control unit 204.

  The line connection unit 203 is configured by a LAN card or the like, and has a function of connecting to the communication line 20 and a function of transmitting / receiving various information to / from the ATM 100 via the communication line 20.

  The control unit 204 is configured with a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and various processing functions related to the exchange of various information with the ATM 100 via the communication line 20, It has a control function for controlling the operation of each unit connected through a path.

  The branch monitor 300 is a device that monitors the operation of a plurality of ATMs 100 installed in the same store. The ATM 100 is installed in the same store, and various information necessary for operation is exchanged with a plurality of ATMs 100 installed in the same store via the communication line 20.

  Specifically, as shown in FIG. 2, the branch monitoring monitor 300 includes an operation / display unit 301, a line connection unit 302, a control unit 303, and the like.

  The operation / display unit 301 is configured by a touch panel having both a function of displaying an operation state of the ATM 100 received via the communication line 20 of the ATM 100 and a function of accepting a key input operation.

  The line connection unit 302 is configured by a LAN card or the like, and transmits a function for connecting to the communication line 20, reception of an operation state from the ATM 100 via the communication line 20, and an instruction to the ATM 100 received by the operation / display unit 301. It has a function to do.

  The control unit 303 includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and various processing functions for passing various information to and from the ATM 100 via the communication line 20, It has a control function for controlling the operation of each unit connected through a path. In addition, when there is a change in the operating state of the ATM 100, it also has a function of sounding a buzzer for notifying the staff of the change.

  The centralized monitoring server 400 is a device that centrally collects and manages operations of the ATM 100 installed across a plurality of stores. The ATM 100 is installed in the same store as the ATM 100 or in a remote head office or office center, and various information necessary for operation is exchanged with the plurality of ATMs 100 and the centralized monitoring terminal 500 via the communication line 20.

  Specifically, as shown in FIG. 2, the centralized monitoring server 400 includes a storage unit 401, a display unit 402, an input operation unit 403, a line connection unit 404, a control unit 405, and the like.

  The storage unit 401 is composed of a hard disk or the like and has a function of writing and reading various information.

  The display unit 402 is composed of a display such as a liquid crystal panel and has a function of displaying various information necessary for the operation of the ATM 100 exchanged via the communication line 20 and the input contents received by the input operation unit 403 on the screen. doing.

  The input operation unit 403 includes a mouse, a keyboard, and the like, and has a function of accepting an input operation.

  The line connection unit 404 is configured by a LAN card or the like, and has a function of connecting to the communication line 20, reception of the operation state from the ATM 100 via the communication line 20, transmission of the ATM 100 operation state to the centralized monitoring terminal 500, and centralized monitoring. It has a function of receiving a command for the ATM 100 from the terminal 500 and transmitting a command for the ATM 100.

  The control unit 405 includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and various types of information related to the exchange of various information with the ATM 100 and the centralized monitoring terminal 500 via the communication line 20. It has a processing function and a control function for controlling the operation of each unit connected via a predetermined path.

  The centralized monitoring terminal 500 is a device that concentrates and monitors the operation of the ATM 100 installed across a plurality of stores in a remote place. The ATM 100 is installed at a remote headquarters or office center, or at a monitoring center established elsewhere, and various information necessary for the operation of the centralized monitoring server 400 and the ATM 100 via the communication line 20 Give and receive.

  Specifically, as shown in FIG. 2, the centralized monitoring terminal 500 includes a display unit 501, an input operation unit 502, a line connection unit 503, a control unit 504, and the like.

  The display unit 501 is composed of a display such as a liquid crystal panel, and displays various information necessary for the operation of the ATM 100 received from the central monitoring server 400 via the communication line 20 and the input contents received by the input operation unit 502 on the screen. It has a function to display.

  The input operation unit 502 includes a mouse, a keyboard, and the like, and has a function of accepting an input operation.

  The line connection unit 503 is composed of a LAN card or the like, and receives the function of connecting to the communication line 20 and the operation state of the ATM 100 from the centralized monitoring server 400 via the communication line 20, and the ATM 100 received by the input operation unit 502. It has a function of transmitting a command to the centralized monitoring server 400.

  The control unit 504 is configured with a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and various processing functions for passing various information to and from the centralized monitoring terminal 500 via the communication line 20. And a control function for controlling the operation of each unit connected via a predetermined path. In addition, when there is a change in the operating state of the ATM 100, it also has a function of sounding a buzzer for notifying the staff of the change. The buzzer is connected to the centralized monitoring terminal 500 and the branch monitoring monitor 300.

  Here, although the centralized monitoring server 400 and the centralized monitoring terminal 500 are separate devices, the functions of both devices may be mounted on one terminal, and various information of the centralized monitoring server 400 and the ATM 100 is provided. It is also possible to adopt a configuration in which data is exchanged via the host computer 200 or the branch monitoring monitor 300.

  In the automatic transaction system 10 having such a configuration, an operation when a wrong password is entered will be described in detail with reference to FIGS.

  Note that FIG. 3 shows a processing flow diagram when a wrong PIN number is input during operation within hours, taking payment transactions as an example, and FIGS. 4 to 8 show examples of customer guidance screens provided by the ATM 100. . Also, FIG. 9 shows an example of an ATM suspension screen due to an incorrect input of a password at the time of operation, FIG. 10 shows an example of a card handling selection screen by operating a clerk key, and FIG. 11 shows a statement of account information of the card used. A print example is shown. Furthermore, FIG. 12 shows a processing flow diagram when a wrong PIN number is input during an off-hours operation, taking a payment transaction as an example, and FIG. 13 shows an example of an ATM pause screen due to an incorrect PIN number input during an overtime operation. ing.

  First, an explanation will be given of an operation when a wrong PIN number is input during operation during an operation that can be handled by a clerk stationed in a store where the ATM 100 is installed, using a payment transaction as an example with reference to FIG. .

  When “withdrawal” is selected on the transaction selection screen (FIG. 4) displayed on the customer operation / display unit 101 (S0301), the card / detail slip mechanism unit 106 prepares for card reception, and the control unit 109 A card insertion screen is displayed on the customer operation / display unit 101 (FIG. 5). As shown in FIG. 4, a button for starting various transactions that can be traded is displayed on the trade selection screen including the “drawer” selected by the user. As shown in FIG. 5, the card insertion screen displays a message for prompting the user who has selected “withdrawal” to insert a card.

  When the card is inserted by the user (S0302), the card / detail slip mechanism unit 106 reads the card information. If the reading of the card information is normal, the control unit 109 displays a password pressing screen (FIG. 6) on the customer operation / display unit 101. As shown in FIG. 6, a message for prompting the user to input a password and a key for inputting the password are displayed on the password pressing screen.

  When the user presses a predetermined number of digits as the password on the password number pressing screen (FIG. 6) displayed on the customer operation / display unit 101 (S0303), the control unit 109 displays the amount of money. A push screen (FIG. 7) is displayed on the customer operation / display unit 101. As shown in FIG. 7, a message for prompting the user to input an amount and a key for inputting the amount are displayed on the amount pressing screen.

  When the user depresses the amount to be withdrawn from the ATM 100 on the amount depressing screen (FIG. 7) displayed on the customer operation / display unit 101 (S0304), the control unit 109 transmits the host computer via the communication line 20. 200 is notified of the password number and amount information received by the customer operation / display unit 101, and inquires about the validity of the received password number and whether the received amount can be withdrawn (S0305).

  The storage unit 201 of the host computer 200 stores a personal identification number, balance information, and the like as customer account information. In addition, the storage unit 201 stores the allowable number of consecutive mistakes in inputting a personal identification number. The control unit 204 compares the password entered by the user notified from the ATM 100 with the password stored in the storage unit 201, and the withdrawal amount input by the user notified from the ATM 100 and the storage unit 201 The balance information stored is compared, and the result is notified to the ATM 100.

  At this time, if it is determined by the comparison of the personal identification number by the control unit 204 of the host computer 200 that the personal identification number has been input incorrectly, the control unit 204 exceeds the allowable number of consecutive input mistakes for the personal identification number stored in the storage unit 201. If the allowable number of times is exceeded, information that the card is treated as invalid is stored in the storage unit 201.

  As a result of the inquiry to the host computer 200, the control unit 109 of the ATM 100 determines whether or not a wrong password is generated (S0306). If the control unit 109 determines that the wrong PIN has not occurred (S0306; No), it continues the payment transaction process. Taking the case where the accepted amount can be withdrawn as an example, the banknote depositing / dispensing mechanism unit 103 delivers the banknote corresponding to the accepted amount, and the coin depositing / withdrawing mechanism unit 104 delivers the coin corresponding to the accepted amount. Thereafter, the card / detail slip mechanism unit 106 ejects the card and the detail slip (S0307). When the card and statement slip are extracted from the card / detail slip mechanism unit 106 by the user, the bill deposit / withdrawal mechanism unit 103 ejects the bills, and the coin deposit / withdrawal mechanism unit 104 ejects the coins (S0308). When a banknote is extracted from the banknote deposit / withdrawal mechanism 103 and a coin is withdrawn from the coin deposit / withdrawal mechanism 104 by the user, the ATM 100 returns to standby and the control unit 109 displays a transaction selection screen (FIG. 4) ( S0309).

  In the determination of whether or not a PIN code error has occurred by the control unit 109 of the ATM 100 (S0306), if it is determined that a PIN code input error has occurred (S0306; Yes), the control unit 109 stores it in the storage unit 107 of the ATM 100. It is determined whether or not the prescribed number of consecutive input mistakes for the current personal identification number has been exceeded (S0310). By setting the number of times less than the allowable number of consecutive mistakes in entering the personal identification number in the host computer 200, it is possible to prevent the host computer 200 from treating the card as an invalid card. That is, the threshold value set as the specified number of times in the ATM 100 is set to a value smaller than the threshold value used when the host computer 200 determines. Thus, by making the allowable number of times on the ATM 100 side smaller than the allowable number of times on the host computer 200 side, it is possible to reduce the number of times that the host computer 200 side executes the process of invalidating the card.

  When it is determined that the specified number of times has not been exceeded in the control unit 109 of the ATM 100 (S0310; No), the control unit 109 displays a password re-press screen (FIG. 8) on the customer operation / display unit 101. To do. As shown in FIG. 8, a message for prompting the user to re-enter the password and a key for re-entering the password are displayed on the password re-press screen.

  When the user presses a predetermined number of digits as the password (S0311), the control unit 109 again sends the customer operation / display unit 101 to the host computer 200 via the communication line 20. Is notified of the password number and amount information received in step S5305, and inquires about the validity of the received password number and whether the received amount can be withdrawn (S0305).

  When it is determined that the specified number of times has been exceeded in the control unit 109 of the ATM 100 (S0310; Yes), the control unit 109 has detected that a wrong password has been entered in the branch monitoring monitor 300 via the communication line 20. Is notified (S0312). As a result, in the branch monitoring monitor 300, the control unit 303 sounds a buzzer and displays on the operation / display unit 301 that a wrong password has been entered to notify the attendant that an abnormality has occurred. At this time, in the ATM 100, the control unit 109 displays the ATM pause screen (FIG. 9) on the customer operation / display unit 101 (S0313), and stops handling the ATM 100 (S0314). As shown in FIG. 9, a message that the ATM 100 is suspended and a staff member is dispatched is displayed on the ATM suspension screen in response to an input error of the password. In this state, the card inserted in S0302 remains held inside the ATM 100, but is returned to the user through the following processing and confirmation of the staff.

  Here, the validity check of the personal identification number input by the user is performed by the host computer 200, but the personal identification number information stored in the storage unit 201 of the host computer 200 is transmitted via the communication line 20. It is also possible to use a method in which the validity of the password is checked by the ATM 100. Further, instead of storing information to be treated as an invalid card by the host computer 200, information to be treated as an invalid card may be recorded in the card information. Further, instead of notifying the branch monitoring monitor 300 that a wrong password has been entered, another notification method using another device such as turning on a patrol lamp may be used.

  Next, the operation of the ATM 100 by the operation of a staff member who has been notified that a wrong password has been entered after the ATM 100 has been canceled will be described. In the ATM pause screen (FIG. 9), the key for performing the operation is not displayed so that the user cannot eject the card and take it home without permission. The operation after the ATM 100 is canceled can be performed only when the control unit 109 detects that the clerk key is inserted from the clerk key insertion port of the ATM 100 so that only the clerk can operate. When the insertion of the clerk key is detected (S0315), the control unit 109 displays a card handling selection screen (FIG. 10) on the customer operation / display unit 101 (S0316). As shown in FIG. 10, on the card handling selection screen, “account information printing” (printing a message for prompting the designation of handling for a card with a wrong input of a password and account information corresponding to the card) (First selection process), stop handling the card and collect it "collect card as unusable" (second selection process), return the card to the user "return card" (third Three keys of (selection process) are displayed. The control unit 109 determines which key is pressed among these keys (S0317), and executes processing corresponding to the pressed key.

  By displaying the above-mentioned screen, the staff can continue the processing after confirming the situation at that time, for example, whether the user is present or absent. In these processes, the control unit 109 authenticates that the operator is a staff member as a security measure so that the user cannot execute it without permission (S0318, S0322, S0326). For example, you can enter a password that can only be known by an attendant and allow it only when the passwords match, only allow you to insert an attendant operation card, or only if you are authenticated by biometric authentication There are methods to allow.

  First, in order to confirm that the user is the cardholder himself / herself, the clerk performs processing by pressing the “account information printing” key on the card handling selection screen (FIG. 10). If the “account information printing” key is pressed and the person in charge is authenticated, the control unit 109 inquires of the host computer 200 via the communication line 20 about the card holder's account information (S0319). The inquiry of the cardholder's account information is, for example, recorded in the card and associated with these information using the information for identifying the user such as the card number and account number read at the time of insertion as a key. Transaction information such as stored account information and customer information may be extracted. Here, the card / details slip mechanism unit 106 prints the account information of the cardholder exchanged from the host computer 200 on the statement slip (S0320), and the card / details slip mechanism unit 106 ejects the printed detail slip. Then, the display returns to the card handling selection screen (S0315). Here, instead of discharging the statement slip, a method may be used in which the statement slip collecting unit of the card / detail slip mechanism unit 106 collects the statement slip.

FIG. 11 shows an example of printing account information on a statement slip. As shown in FIG. 11, on the statement slip printed by the above processing, the date and time of the transaction, the store where the transaction was made and the ATM for identifying the ATM, the machine number and serial number, and the finance which handles the ATM The bank number and branch number indicating the institution and the account number of the user are displayed, indicating that the transaction is an account inquiry. The clerk confirms whether the user is the card holder based on the account information printed on the statement slip.
When customer information is inquired to the host computer 200 together with the account information, as shown in the lower part of FIG. 11, the customer information of the user stored in the host computer 200 in advance in association with the account information. (For example, name, date of birth, telephone number, and address) may be printed on the above-mentioned slip.

  If the user cannot confirm the identity of the card holder, or if the user has left when the ATM is suspended, the control unit 109 of the ATM 100 displays “Card” on the card handling selection screen (FIG. 10). The process by pressing the “collect as unusable” key is executed. When the “collect card cannot be handled” key is pressed and it is authenticated that the person is an attendant, a process of invalidating the card is executed (S0323). As processing for invalidating a card, a method for requesting the host computer 200 to invalidate the card via the communication line 20 and information indicating that the card is treated as invalid card are recorded in the card information. There are methods. The invalid card is collected in the card collection unit of the card / detail slip mechanism unit 106 (S0324) and returned to the standby state (S0325).

  On the other hand, when it is confirmed that the user is the card holder himself / herself, the control unit 109 of the ATM 100 executes processing by pressing the “return card” key on the card handling selection screen (FIG. 10). When the “return card” key is pressed and the person is authenticated, the card / detail slip mechanism unit 106 ejects the card (S 0327) and returns to standby (S 0325). The discharged card is returned by hand from the staff to the user. Here, instead of discharging the card, the card / detail slip mechanism unit 106 may collect the card in the card collection unit.

  Here, the operation by the clerk is performed by the customer operation / display unit 101, but the configuration may be performed by the clerk operation / display unit 102.

  In the above example, the case where the ATM 100 is operated during business hours and an attendant can handle it has been described. However, there is a case where a wrong password is entered at a time when the clerk is not available, such as outside business hours. Therefore, in the following, with regard to the operation when an incorrect PIN number input occurs during off-hours operation that is difficult to handle by the staff stationed in the store where the ATM 100 is installed, FIG. It explains using. In the process shown in FIG. 12, the processes from S1201 to S1211 are the same as the processes from S0301 to S0311 shown in FIG. 3, so the description thereof will be omitted individually, and the processes after S1212 will be described.

  When the control unit 109 of the ATM 100 determines that the specified number has been exceeded in S1210 (S0310; Yes), the control unit 109 transmits the centralized monitoring server 400 and the centralized monitoring terminal 500 via the communication line 20. Is notified that a wrong password has been entered (S1212). As a result, in the centralized monitoring terminal 500, the control unit 504 sounds a buzzer, and the display unit 501 displays that a wrong password has been entered and displays the account number of the user who entered the wrong password, The operator residing in the monitoring center where the centralized monitoring terminal is installed is notified that an abnormality has occurred (S1215). At this time, in the ATM 100, the control unit 109 displays the ATM pause screen (FIG. 13) on the customer operation / display unit 101 (S1213), and stops handling the ATM 100 (S1214). As shown in FIG. 13, a message is displayed on the ATM pause screen indicating that there is an input error of the security code and prompting the interphone to inquire about the response.

  Here, the validity check of the personal identification number input by the user is performed by the host computer 200, but the personal identification number information stored in the storage unit 201 of the host computer 200 is transmitted via the communication line 20. It is also possible to use a method in which the validity of the password is checked by the ATM 100. Further, instead of storing information to be treated as an invalid card by the host computer 200, information to be treated as an invalid card may be recorded in the card information.

  Next, after the ATM 100 is discontinued, the operation of the ATM 100 by the operation of an operator stationed at the monitoring center that has been notified that a wrong password has been entered will be described. In the ATM pause screen (FIG. 13), the key for performing the operation is not displayed so that the user cannot eject the card and take it home without permission.

  When the buzzer of the centralized monitoring terminal 500 sounds, the operator stationed at the monitoring center confirms whether or not a wrong password has been entered in the ATM 100 based on the information displayed on the display unit 501. If a wrong password is entered, the account information of the user who entered the wrong password is obtained from the account number displayed on the display 501 (S1216). The account information may be acquired and operated on a centralized monitoring terminal or may be acquired using another system such as a sales office system.

  The operator stationed at the monitoring center has a conversation with the user of the ATM 100 through the interphone and confirms whether the user is the cardholder himself (S1217). The interphone may start a call from a user who viewed the ATM pause screen (FIG. 13), or may start a call from an operator stationed at the monitoring center. Identity verification not only confirms the user's hearing through conversation on the intercom, but also improves the accuracy of identity verification by performing confirmation using video and image information using a security camera etc. To do.

  The control unit 504 of the centralized monitoring terminal 500 displays on the display unit 501 a menu of commands for the ATM 100 in which a wrong password has been entered. As the command menu, there are two command menus of “card return” and “card handling impossible / collection”. The operator stationed at the monitoring center selects either the “card return” or “card handling disabled / collected” menu on the operation unit 502 according to the result of the identity verification, and the control unit 504 of the centralized monitoring terminal 500 that accepts the selection. Transmits a command to the monitoring server 400 and the ATM 100 via the communication line 20 (S1218). Specifically, if the user cannot confirm that the user is the card holder, or if the user has left and cannot talk on the interphone, the control unit 504 will indicate that the card cannot be handled / collected. When the user can confirm that the user is the card holder himself, the user selects “card return” and transmits the information to the ATM 100.

  The control unit 109 of the ATM 100 that has received the command from the monitoring terminal 500 and the monitoring server 400 via the communication line 20 determines the content of the command (S1219) and performs processing corresponding to the command content.

  The ATM 100 that has received the “card handling disabled / collected” command executes a process in which the control unit 109 treats the card as invalid as in the case of the second selection process shown in FIG. 3 (S1220). As processing for invalidating a card, a method for requesting the host computer 200 to invalidate the card via the communication line 20 and information indicating that the card is treated as invalid card are recorded in the card information. There are methods. The invalid card is collected in the card collection unit of the card / detail slip mechanism unit 106 (S1221) and returned to the standby state (S1222).

  On the other hand, the ATM 100 that has received the “card return” command causes the card / detail slip mechanism unit 106 to eject the card (S1223) and returns to the standby state, as in the case of the third selection process shown in FIG. (S1222).

  In this way, in the present embodiment, the processing as described above is executed, so that it is possible to notify the attendant that the wrong input of the PIN has occurred continuously before the card is invalidated. In the case of a user, the clerk can take action so that the card is not treated as invalid. In addition, if a malicious fraudster is using it, the illegal use can be attempted unsuccessfully. Furthermore, since the personal identification number input in the customer operation unit is not displayed, the input content is not leaked to a malicious unauthorized person. In addition, although the Example and its modification were demonstrated above, you may perform combining some or all of these components suitably according to the usage environment of ATM.

DESCRIPTION OF SYMBOLS 100 ... Automatic transaction apparatus 101 ... Customer operation / display part 102 ... Staff operation / display part 103 ... Banknote depositing / withdrawing mechanism part 104 ... Coin depositing / withdrawing mechanism part 105 ... Passbook mechanism part 106 ... Card and statement slip mechanism part 107 ... Memory | storage part DESCRIPTION OF SYMBOLS 108 ... Line connection part 109 ... Control part 200 ... Host computer 201 ... Memory | storage part 202 ... Account information file control part 203 ... Line connection part 204 ... Control part 300 ... Branch monitoring monitor 301 ... Operation / display part 302 ... Line connection part 303 ... Control unit 400 ... Centralized monitoring server 401 ... Storage unit 402 ... Display unit 403 ... Input operation unit 404 ... Line connection unit 405 ... Control unit 500 ... Centralized monitoring terminal 501 ... Display unit 502 ... Input operation unit 503 ... Line connection unit 504 ... control unit.

Claims (7)

An automatic transaction apparatus comprising operation input means for receiving an input operation by a user and medium transfer means for transferring a transaction medium with the user,
Whether the number of mismatches between the first password managed based on the account information recorded in advance in the transaction medium and the second password entered from the operation input means has become a predetermined number or more Determining means for determining whether or not;
When the number of inconsistencies between the first personal identification number and the second personal identification number exceeds a predetermined number, the transaction medium is suspended in the automatic transaction apparatus, and the handling is stopped due to a personal identification number mismatch. Notification means for notifying the staff via the monitoring monitor in the store,
An automatic transaction apparatus comprising: The determination means performs a first selection process of printing account information and handling of the medium for a medium in which the second password has been input incorrectly when the notification means notifies the cancellation. A medium handling selection screen for accepting the selection of either the second selection process for stopping and collecting, or the third selection process for returning the medium to the user is displayed on the operation input means, and the selected process is performed. Run,
The automatic transaction apparatus according to claim 1. The operation input means accepts input of authentication information from the staff,
The determination means determines whether or not the authentication information is the authentication information of the attendant registered in advance, and when the input authentication information is determined to be the authentication information of the attendant, the transaction medium Based on the identification information of the user recorded in the above, the transaction information of the user is acquired from a host computer, and the first selection process of printing the acquired transaction information on a printing medium is executed.
The automatic transaction apparatus according to claim 2. The operation input means accepts input of authentication information from the staff,
The determination means determines whether or not the authentication information is the authentication information of the attendant registered in advance, and when the input authentication information is determined to be the authentication information of the attendant, the transaction medium Executing the second selection process for invalidating
The automatic transaction apparatus according to claim 2. The operation input means accepts input of authentication information from the staff,
The determination means determines whether the authentication information is authentication information of the attendant registered in advance when the user is confirmed by the transaction information printed on the printing medium, When it is determined that the input authentication information is the authentication information of the attendant, the third selection process for returning the transaction medium is executed.
The automatic transaction apparatus according to claim 3. An automatic transaction apparatus comprising operation input means for receiving an input operation by a user and medium transfer means for transferring a transaction medium with the user,
Whether the number of mismatches between the first password managed based on the account information recorded in advance in the transaction medium and the second password entered from the operation input means has become a predetermined number or more Determining means for determining whether or not;
When the number of inconsistencies between the first personal identification number and the second personal identification number exceeds a predetermined number, the transaction medium is suspended in the automatic transaction apparatus, and the handling is stopped due to a personal identification number mismatch. Notification means for notifying the operator via a monitoring terminal connected via a network;
An automatic transaction apparatus comprising: The determination means is based on an execution instruction received from the monitoring terminal, one of a first selection process for stopping and collecting the medium and a second selection process for returning the medium to a user. Performing the first selection process for invalidating the transaction medium or the second selection process for returning the transaction medium,
The automatic transaction apparatus according to claim 6.

Images