JP2018073279A - Financial system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a high-security financial system performing simple operation in an automatic teller machine.SOLUTION: Using a financial system which has: a user portable terminal device having middle-range radio communication means and biometric authentication means with registered biometric data; a host server of a financial institution; and an automatic teller machine performing communication with the middle-range radio communication means of the user portable terminal device to perform automatic transaction, the user portable terminal device performs user authentication with the biometric authentication means and then performs cryptographic communication with the host server to thereby transmit cash refund reservation information, receive cash refund reservation signature data from the host server, and store the data, and the user portable terminal device performs user authentication with the biometric authentication means and then performs cryptographic communication with the automatic teller machine to thereby transmit the cash refund reservation signature data and receive cash refund processing from the automatic teller machine.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a financial system using an automatic teller machine and a user portable terminal device.

  Currently, cash refund function units have become widespread, and cash transfer processing and cash refund reservation processing have become possible using user portable terminal devices.

  In the cash refund reservation process, in the technique of Patent Document 1, a user reserves a cash refund by sending cash refund information from a user portable terminal device having biometric authentication means to a host server of a financial institution, and cash automatic A technique is disclosed in which a cash withdrawal information is sent from a user portable terminal device to a place where a depositing device (ATM) is installed by wireless communication or the like, and an automatic cash depositing device is promptly processed. It was.

  In the technique of Patent Document 2, the user portable terminal device communicates with the cash deposit communication website control means of the host server of the financial institution to perform financial transaction processing and receive transaction processing information. Next, the user portable terminal device creates two-dimensional barcode data obtained by encrypting the transaction processing information.

  Next, the user goes to the place where the automatic teller machine (ATM) is installed, displays a two-dimensional barcode in which transaction processing information is encrypted on the user portable terminal device, and displays the automatic teller machine (ATM). ). Thereby, a technique has been disclosed in which an automatic teller machine (ATM) promptly performs a cash refund process.

JP 2005-115860 A JP 2008-134733 A

  However, in the technique of Patent Document 1, when a user mobile terminal device performs a cash refund reservation process by communicating with a host server of a financial institution, the reservation information of the cash refund is stolen because communication is intercepted. Security problems, such as being used by malicious third parties.

  Moreover, in the technique of patent document 2, there existed a problem which requires a trouble in the operation | work which makes an automatic teller machine (ATM) read a two-dimensional barcode. Moreover, in order to make an automatic teller machine (ATM) read the two-dimensional barcode of a user portable terminal device, there is a possibility that the two-dimensional barcode is stolen and used other than the user himself / herself of the user portable terminal device. There was a security problem.

  Therefore, an object of the present invention is to obtain a financial system that is easy to work with an automatic teller machine (ATM) and has high security.

In order to solve the above problems, the present invention provides a medium-range wireless communication unit, a user portable terminal device having a biometric authentication unit that registers biometric data, a host server of a financial institution, and the user portable terminal device A cash system having an automatic teller machine that performs automatic transaction operations by communicating with a medium-range wireless communication means,
The user portable terminal device authenticates the user with the biometric authentication means, and then performs cryptographic communication with the host server to transmit cash withdrawal reservation information and receive cash withdrawal reservation signature data from the host server. Remember,
The user portable terminal device authenticates the user with the biometric authentication means, and then performs cryptographic communication with the automatic teller machine to transmit the cash withdrawal refund reservation signature data. It is a financial system characterized by receiving a refund process.

  With this configuration, the present invention can increase the security of the communication of the cash-back reservation process of the user portable terminal device with the host server of the financial institution and the cash-back request process with the automatic teller machine. And there exists an effect which can simplify the operation | work with an automatic teller machine (ATM).

The present invention is the above financial system, wherein the user portable terminal device receives a cash deposit reservation application software from the host server and installs it, thereby forming a financial transaction processing program, and the biometric authentication The means is a fingerprint authentication means, the signature information is given to the user portable terminal device from the branch device connected to the host server of the financial institution, the signature information is registered in the host server,
The automatic teller machine receives the signature information encrypted with the public key of the automatic teller machine and the cash withdrawal refund reservation signature data from the user portable terminal device via the medium distance wireless communication means. A financial system characterized by receiving and decrypting with the secret key of the automatic teller machine.

  According to the present invention, it is possible to increase the security of communication of a cash refund reservation process between a user portable terminal device and a host server of a financial institution and a cash refund request process with an automatic teller machine, and cash There exists an effect which can perform the operation | work with an automatic teller machine (ATM) simply.

It is a block diagram of the financial system of the embodiment of the present invention. It is a block diagram of a user portable terminal device used in an embodiment of the present invention. It is a block diagram of the host server used by embodiment of this invention. It is a block diagram of the branch apparatus of the financial institution used by embodiment of this invention. It is a block diagram of the automatic teller machine used in the embodiment of the present invention. It is a flowchart (the 1) which shows the operation | movement procedure of the financial system of embodiment of this invention. It is a flowchart (the 2) which shows the operation | movement procedure of the financial system of embodiment of this invention. It is a flowchart (the 3) which shows the operation | movement procedure of the financial system of embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. However, the present invention is not limited to these embodiments.

<First Embodiment>
In the first embodiment of the present invention, as shown in FIG. 1, a financial system includes a user portable terminal device 100 connected to a communication network 10, a host server 200, and an automatic teller machine connected to a dedicated line 20 ( ATM) 300 and a branch apparatus 400 of a financial institution.

(User portable terminal device 100)
The user portable terminal device 100 is an information processing device such as a mobile phone or a smartphone. As shown in FIG. 2, the user portable terminal device 100 includes a biometric authentication unit 110, a memory 120 including an encryption key storage unit 121, a display unit 130, a long-distance communication unit (cellular phone communication unit) 140, a medium range Wireless communication means 150 is included.

  In the user portable terminal device 100, the cash deposit reservation application software APR provided by the cash deposit reservation application providing means 220 of the host server 200 is installed by the branch device 400 of the financial institution, and other data such as an encryption key. Is stored in the memory 120.

  The cash deposit reservation application software APR of the user portable terminal device 100 can be directly installed from the host server 200 to the user portable terminal device 100 without using the branch device 400 of the financial institution.

(Biometric authentication means 110)
The biometric authentication unit 110 includes a fingerprint sensor 111 that reads an individual's fingerprint and a fingerprint collation unit 112. The fingerprint collation unit 112 of the biometric authentication unit 110 collates the fingerprint data read by the fingerprint sensor 111 with the registered fingerprint data (biometric data) to perform personal authentication.

(Encryption key storage means 121)
The user portable terminal device 100 stores the server-side public key CK1 and the automatic teller machine public key CK2 in the encryption key storage unit 121 of the memory 120. Further, the user portable terminal device ID number ID1, the signature information CVW, the terminal certificate CV1, and the cash deposit reservation signature data CVWP are stored in another secure storage unit of the memory 120.

(Medium distance wireless communication means 150)
The medium distance wireless communication means 150 of the user portable terminal device 100 uses a medium distance wireless communication means having a frequency of 2.4 GHz, for example, a medium distance wireless communication means such as Bluetooth (registered trademark). That is, the user portable terminal device 100 transmits / receives information to / from the automatic teller machine (ATM) 300 using encrypted communication using the medium-range wireless communication unit 150.

  In the encrypted communication, the user portable terminal device 100 encrypts the encrypted data, which is encrypted using the automatic teller machine side public key CK2, and can be decrypted only by the automatic teller machine 300, into the automatic teller machine 300. Send. The user portable terminal device 100 transmits the signature information CVW, the terminal certificate CV1, and the cash deposit reservation signature data CVWP to the automatic teller machine 300 through the encrypted communication.

(Host server 200)
As shown in FIG. 3, the host server 200 includes an encryption key creating unit 210, a cash deposit reservation application providing unit 220, a terminal certificate creating unit 230, a cash deposit communication website control unit 240, and a user authentication database. 250 and a cash deposit information database 260.

  The host server 200 provides a cash deposit function providing screen of a website provided by the cash deposit communication website control unit 240 of the host server 200 to the user portable terminal device 100 of the user via the open communication network 10 of the Internet. Is displayed, and a cash refund reservation process is executed.

(Encryption key creation means 210)
The encryption key creation unit 210 of the host server 200 creates and holds an encryption key set composed of the server side secret key KY1 and the server side public key CK1. The host server 200 transmits the server-side public key CK1 to the branch device 400 and the automatic teller machine 300 of each financial institution.

  The encryption key creation unit 210 of the host server 200 creates and holds an encryption key set including the automatic teller machine side secret key KY2 and the automatic teller machine side public key CK2. The host server 200 transmits the automatic teller machine side secret key KY2 to the automatic teller machine 300 for storage, and transmits the automatic teller machine side public key CK2 to the branch device 400 for storage. Keep it.

(Cash deposit reservation application providing means 220)
The cash deposit reservation application providing means 220 of the host server 200 provides cash deposit reservation application software APR (hereinafter referred to as a reservation application APR) stored in the user portable terminal device 100. The cash deposit reservation application providing means 220 transmits the reservation application APR to the branch device 400 of the financial institution, and the branch device 400 of the financial institution installs the reservation application APR in the user portable terminal device 100.

(Terminal certificate creation means 230)
The host server 200 receives user portable terminal device information including the ID number ID1 for user portable terminal device and the signature information CVW for the user portable terminal device 100 from the branch device 400 of the financial institution. Next, the terminal certificate creating means 230 creates a terminal certificate CV1 using the user portable terminal device ID number ID1 and the signature information CVW for the user portable terminal device 100, and sends it back to the branch device 400.

  The terminal certificate CV1 is a digital certificate in which server information representing the host server 200, expiration date information, and encrypted data obtained by encrypting the signature information CVW with the server-side secret key KY1 are added.

(User authentication database 250)
The host server 200 stores the user portable terminal device information received from the branch device 400 of the financial institution in the user authentication database 250.

(Cash Deposit Communication Website Control Unit 240)
The cash deposit communication website control means 240 of the host server 200 provides a website and communicates with the user portable terminal device 100 via the website. Then, the website of the cash deposit communication website control means 240 displays the cash deposit function providing screen of the website on the user portable terminal device 100 via the communication network 10.

  When a user intends to start communication with the host server 200 using the user portable terminal device 100, the website provided by the cash deposit communication website control means 240 is encrypted using the server-side public key CK1. The encrypted data that can be decrypted only is transmitted to the host server 200. Using the encrypted communication as a seed, a session key for encrypted communication such as Secure Socket Layer (SSL) is established, and encrypted communication is performed between the host server 200 and the user portable terminal device 100. Do.

  The host server 200 uses encrypted communication via the website controlled by the cash deposit communication website control means 240, the user portable terminal device ID number ID1, the signature information CVW, and the user portable terminal device 100. User information including the terminal certificate CV1 and the user's cash refund reservation information is received.

  The host server 200 that has received the user information reads the user portable terminal device information in which the user portable terminal device ID number ID1 is recorded from the user authentication database 250. Then, the user is authenticated by comparing the signature information CVW recorded in the user portable terminal device information and the terminal certificate CV1 with the information received from the user portable terminal device 100.

(Cash Deposit Information Database 260)
The host server 200 stores the financial transaction information such as the user's cash withdrawal reservation information received from the user portable terminal device 100 in the cash deposit information database 260. Then, the host server 200 encrypts the user's cash withdrawal reservation information and the like with the server-side secret key KY1, creates cash deposit reservation signature data CVWP, and transmits it to the user portable terminal device 100.

(Cash deposit reservation signature data CVWP)
The cash deposit reservation signature data CVWP is encrypted data obtained by encrypting financial transaction information such as cash withdrawal reservation information of the user with the server side secret key KY1, and can be decrypted by a device having the server side public key CK1. The signature information is intended to prove that the data 200 is created data.

  If the user's financial transaction information, which is the original information for creating the cash deposit reservation signature data CVWP, is the cash refund reservation information, the user's financial institution transaction account number, account PIN, refund amount, and refund Configure with expiration date.

(Financial institution branch device 400)
As shown in FIG. 4, the branch apparatus 400 of the financial institution includes an encryption key storage unit 410, a signature information creation unit 420, and a cash deposit reservation application storage unit 430. The user portable terminal device 100 includes a reservation application and an encryption key. The user portable terminal device 100 is authenticated by the host server 200 and the automatic teller machine 300 by setting to store the signature information CVW and the terminal certificate CV1.

  For this purpose, the branch device 400 of the financial institution stores the server side public key CK1, the automatic teller machine side public key CK2, the signature information CVW, and the terminal certificate CV1 in the user portable terminal device 100.

(Encryption key storage means 410)
The encryption key storage unit 410 of the branch apparatus 400 of the financial institution receives the server side public key CK1 and the automatic teller machine side public key CK2 from the host server 200 and stores them.

(Registration process of user's biometric information to user portable terminal device 100)
A user goes to a financial institution to register the user portable terminal device 100 at the financial institution. Then, the user at the financial institution performs biometric authentication with the user portable terminal device 100 and causes the financial institution to confirm the result. The user's biometric information for the user portable terminal device 100 to perform biometric authentication may be stored in the user portable terminal device 100 in advance by the user.

(Signature information creation means 420)
When the financial institution confirms the result of the biometric authentication of the user by the user portable terminal device 100, the financial institution creates signature information CVW for the user portable terminal device 100 using the signature information creating means 420 of the branch device 400 of the financial institution.

  Next, the branch device 400 of the financial institution transmits the created signature information CVW together with the user portable terminal device ID number ID1 to the host server 200, and the digital data for the user portable terminal device 100 is transmitted from the host server 200. The terminal certificate CV1, which is a certificate, is received.

  Next, the cash deposit reservation application storage unit 430 of the branch apparatus 400 of the financial institution installs the reservation application APR in the user portable terminal device 100, and the signature information creating unit 420 creates it in the user portable terminal device 100. The signature information CVW, the terminal certificate CV1 received from the host server 200, the server side public key CK1, and the automatic teller machine side public key CK2 are stored.

(Automatic teller machine 300)
An automated teller machine (ATM) 300 is a device for depositing and paying cash to a user. As shown in FIG. 5, a middle-range wireless communication means 310 that communicates with the user portable terminal device 100 and a customer operation display. Means 320 and encryption key storage means 330 are provided.

(Medium distance wireless communication means 310)
The medium-range wireless communication means 310 is a medium-range wireless communication means such as Bluetooth (registered trademark) that uses a 2.4 GHz band frequency.

(Encryption key storage means 330)
The encryption key storage means 330 of the automatic teller machine 300 stores the server-side public key CK1 and the automatic teller machine secret key KY2.

  When the user tries to start communication with the automatic teller machine 300 using the user portable terminal device 100, the user portable terminal device 100 is connected to the automatic teller machine side in order to communicate information by medium-range wireless communication. The encrypted data that is encrypted using the public key CK2 and can be decrypted only by the automatic teller machine 300 is transmitted to the automatic teller machine 300.

  That is, the automatic teller machine 300 uses the middle-range wireless communication means 310 to sign the signature information CVW and the terminal certificate encrypted from the user portable terminal device 100 using the automatic teller machine public key CK2. The encrypted data of the document CV1 and the cash deposit reservation signature data CVWP is received. Then, the automatic teller machine 300 decrypts the received encrypted data using the automatic teller machine secret key KY2.

  The automatic teller machine 300 further decrypts the encrypted data included in the decrypted terminal certificate CV1 using the server-side public key CK1 to obtain the signature information CVW before encryption. The automatic teller machine 300 compares the signature information CVW with the signature information CVW received directly from the user portable terminal device 100, and authenticates the user portable terminal device 100 when the signature information CVW matches.

  Further, the automatic teller machine 300 decrypts the cash deposit reservation signature data CVWP received from the user portable terminal device 100 using the server-side public key CK1 to obtain the cash withdrawal reservation information of the user before encryption. . By being able to decrypt using the server-side public key CK1, it is possible to authenticate that the cash deposit reservation signature data CVWP has been created by the host server 200.

  Next, the automatic teller machine 300 transmits the terminal certificate CV1 and the cash deposit reservation signature data CVWP received from the user portable terminal device 100 to the host server 200 via the dedicated line 20, and sends them to the host server 200. The user's cash refund reservation information is authenticated.

  The automatic teller machine 300 promptly executes a cash refund process according to the authenticated user's cash refund reservation information, and delivers cash to the user.

(Operational procedure of financial system)
Hereinafter, the operation procedure of the financial system of the first embodiment will be described with reference to the flowcharts of FIGS.

(Cash deposit reservation process using the user portable terminal device 100)
As shown in FIG. 3, the user performs cash deposit reservation processing by communicating with the host server 200 from the user portable terminal device 100 via the communication network 10 according to the following procedure.

(Step S11)
The user activates the reservation application APR of the user portable terminal device 100.

(Step S12)
The reservation application APR notifies the user of an input request for biometric information from the biometric authentication unit 110, and causes the user to read the fingerprint with the fingerprint sensor 111 of the biometric authentication unit 110 of the user portable terminal device 100.

(Step S13)
The biometric authentication unit 110 uses the fingerprint collation unit 112 to collate the registered fingerprint data with the read fingerprint data and perform identity verification. And the reservation application APR of the user portable terminal device 100 ends the process of the reservation application APR when the authentication is not successful.

(Step S14)
On the other hand, if the authentication is successful, the reservation application APR of the user portable terminal device 100 connects to the website provided by the cash deposit communication website control means 240 of the host server 200 via the communication network 10.

  That is, the user portable terminal device 100 displays the cash deposit function providing screen of the website provided by the cash deposit communication website control unit 240 of the host server 200.

  Then, the reservation application APR of the user portable terminal device 100 transmits to the host server 200 encrypted data that can be decrypted only by the host server 200 and encrypted using the server-side public key CK1. Using the encrypted communication as a seed, a session key for encrypted communication such as Secure Socket Layer (SSL) is established, and encrypted communication is performed between the host server 200 and the user portable terminal device 100. Do.

  The reservation application APR of the user portable terminal device 100 transmits the user portable terminal device ID number ID1, the signature information CVW, and the terminal certificate CV1 to the host server 200.

(Step S15)
The host server 200 searches the user authentication database 250 for user portable terminal device information in which the user portable terminal device ID number ID1 is recorded. Then, the signature information CVW recorded in the user portable terminal device information is collated with the signature information CVW received from the user portable terminal device 100, and the encrypted data included in the terminal certificate CV1 is used using the server-side secret key KY1. The user portable terminal device 100 is authenticated by collating with the decrypted signature information CVW.

The cash deposit communication website control unit 240 of the host server 200 that has authenticated the user portable terminal device 100 transmits a biometric information input request command for requesting the user to confirm the identity by fingerprint verification, to the user portable terminal device 100.

(Step S16)
The user portable terminal device 100 that has received the biometric information input request command causes the fingerprint sensor 111 of the biometric authentication unit 110 to read the user's fingerprint. The biometric authentication unit 110 uses the fingerprint collation unit 112 to collate the registered fingerprint data with the read fingerprint data and perform identity verification.

  The reservation application APR of the user portable terminal device 100 creates encrypted data obtained by encrypting information on the result of success or failure of the personal authentication by biometric authentication using the server-side public key CK1. Then, the encrypted data is transmitted to the host server 200.

(Step S17)
The host server 200 provides the financial service reservation process to the user of the user portable terminal device 100 who has been authenticated in this way and succeeded in the personal authentication by biometric authentication as follows. First, the user transmits the user's cash withdrawal reservation information from the user portable terminal device 100 to the host server 200.

(Step S18)
The host server 200 stores the received cash withdrawal reservation information of the user in the cash deposit information database 260.

(Step S19)
Then, the host server 200 creates cash deposit reservation signature data CVWP created by encrypting the user's cash withdrawal reservation information with the server-side secret key KY1, and transmits it to the user portable terminal device 100.

  At this time, the host server 200 sets a withdrawal expiration date for the cash deposit reservation signature data CVWP, and includes the withdrawal expiration date information in the cash deposit reservation signature data CVWP and transmits it to the user portable terminal device 100. Is desirable. By doing so, the user can confirm that the cash deposit reservation signature data CVWP can be converted into cash within the refund expiration date.

(Automatic transaction processing in the automatic teller machine 300)
The user brings the user portable terminal device 100 within the refund expiration date and goes to the place where the automatic teller machine 300 is installed. Hereinafter, a process in which the user withdraws cash from the automatic teller machine 300 using the user portable terminal device 100 will be described with reference to the flowcharts of FIGS. 7 and 8.

(Step S21)
A user who brings the user portable terminal device 100 to the automatic teller machine 300 activates the reservation application APR of the user portable terminal device 100.

  Then, the reservation application APR of the user portable terminal device 100 displays the user's cash withdrawal reservation information stored in the memory 120 and a guidance screen for holding the user portable terminal device 100 over the automatic teller machine 300 on the display unit 130. indicate.

(Step S22)
Then, the user selects “middle-range wireless communication activation” on the automatic teller machine 300, and the middle-range wireless communication unit 150 of the user portable terminal device 100 is changed to the middle-range wireless communication unit 310 of the automatic teller machine 300. Communicate with.

(Step S23)
The reservation application APR of the user portable terminal device 100 first encrypts the signature information CVW, the terminal certificate CV1, and the cash deposit reservation signature data CVWP using the automatic teller machine public key CK2, and uses the encrypted data as the encrypted data. It transmits to the automatic teller machine 300.

(Step S24)
When receiving the encrypted data, the automatic teller machine 300 decrypts the encrypted data using the automatic teller machine side secret key KY2, and encrypts the signature information CVW, the encrypted data of the terminal certificate CV1, and the cash deposit. Payment reservation signature data CVWP is obtained.

(Step S25)
Next, the automatic teller machine 300 displays on the customer operation display means 320 a biometric information input instruction screen that asks the user for identity verification by fingerprint verification.

(Step S26)
Here, the user causes the fingerprint sensor 111 of the biometric authentication unit 110 of the user portable terminal device 100 to read his / her fingerprint. The biometric authentication unit 110 uses the fingerprint collation unit 112 to collate the registered fingerprint data with the read fingerprint data and perform identity verification.

(Step S27)
The reservation application APR of the user portable terminal device 100 creates encrypted data obtained by encrypting information on the result of success or failure of the personal authentication by biometric authentication using the automatic teller device public key CK2. Then, the encrypted data is transmitted to the automatic teller machine 300.

(Step S28)
The automatic teller machine 300 decrypts the encrypted data using the automatic teller machine side secret key KY2, and the information obtained by decrypting reports the success of the personal authentication by biometric authentication. Performs the following processing.

  That is, the automatic teller machine 300 decrypts the encrypted data included in the terminal certificate CV1 previously received from the user portable terminal device 100 using the public key of the host server 200, and the signature before encryption. Information CVW is obtained. Then, the automatic teller machine 300 compares the signature information CVW obtained by decryption with the signature information CVW received directly from the user portable terminal device 100, and when both the signature information CVW match, the user portable terminal The device 100 is authenticated.

(Step S29)
The automatic teller machine 300 obtains the user's cash withdrawal reservation information by decrypting the cash deposit reservation signature data CVWP obtained previously by decryption using the server-side public key CK1.

(Step S30)
Next, the automatic teller machine 300 transmits the terminal certificate CV1 and the cash deposit reservation signature data CVWP to the host server 200 via the dedicated line 20.

(Step S31)
The host server 200 decrypts the terminal certificate CV1 with the server-side public key CK1 to obtain the user portable terminal device ID number ID1 and the signature information CVW. Then, the user portable terminal device 100 is authenticated by searching the user authentication database 250 using the user portable terminal device ID number ID1 as a key.

  Next, the host server 200 decrypts the cash deposit reservation signature data CVWP with the server side public key CK1 to obtain the user's cash withdrawal reservation information. Then, the host server 200 searches the cash deposit information database 260 and authenticates the user's cash withdrawal reservation information.

(Step S32)
The host server 200 transmits the authentication result to the automatic teller machine 300. In accordance with the result, the automatic teller machine 300 executes a cash refund process according to the user's cash refund reservation information, and delivers the cash to the user.

(Step S33)
The automatic teller machine 300 transmits cash deposit processing result information such as cash refund to the user to the host server 200 and stores it in the host server 200.

  In this way, the user uses the user portable terminal device 100 having a biometric authentication function, registers the user's cash withdrawal reservation information in the host server 200 by encrypted communication, and then encrypts the cash automatic depositing apparatus 300 and the encryption. By performing cash communication processing such as cash communication and withdrawing cash, it is possible to reduce the burden of time given to the user and improve convenience, and to perform financial transactions with high security.

DESCRIPTION OF SYMBOLS 10 ... Communication network 20 ... Dedicated line 100 ... User portable terminal device 110 ... Biometric authentication means 111 ... Fingerprint sensor 112 ... Fingerprint collation means 120 ... Memory 121 ... Encryption Key storage means 130 ... display unit 140 ... long-distance communication means 150 ... medium-range wireless communication means 200 ... host server 210 ... encryption key creation means 220 ... cash deposit reservation application provided Means 230 ... Terminal certificate creation means 240 ... Cash deposit communication website control means 250 ... User authentication database 260 ... Cash deposit information database 300 ... Automatic teller machine (ATM)
310 ... Medium-distance wireless communication means 320 ... Customer operation display means 330 ... Encryption key storage means 400 ... Financial institution branch device 410 ... Encryption key storage means 420 ... Signature information creation means 430 ... Cash deposit reservation application storage means APR ... Cash deposit reservation application software (reservation application)
CK1 ... Server side public key CK2 ... Automatic teller machine side public key CV1 ... Terminal certificate CVW ... Signature information CVWP ... Cash deposit reservation signature data ID1 ... User portable terminal Device ID number KY1 ... Server side secret key KY2 ... Automatic teller machine side secret key

Claims (2)

A middle-range wireless communication means, a user portable terminal device having a biometric authentication means for registering biometric data, a host server of a financial institution, and the middle-range wireless communication means of the user portable terminal device communicate with the automatic transaction operation. A financial system having an automatic teller machine to perform,
The user portable terminal device authenticates the user with the biometric authentication means, and then performs cryptographic communication with the host server to transmit cash withdrawal reservation information and receive cash withdrawal reservation signature data from the host server. Remember,
The user portable terminal device authenticates the user with the biometric authentication means, and then performs cryptographic communication with the automatic teller machine to transmit the cash withdrawal refund reservation signature data. A financial system characterized by receiving a refund process. The financial system according to claim 1,
The user portable terminal device receives and installs cash deposit reservation application software from the host server to constitute a financial transaction processing program, and the biometric authentication means is a fingerprint authentication means,
Signature information is given to the user portable terminal device from a branch device connected to the host server of the financial institution, and the signature information is registered in the host server,
The automatic teller machine receives the signature information encrypted with the public key of the automatic teller machine and the cash withdrawal refund reservation signature data from the user portable terminal device via the medium distance wireless communication means. A financial system characterized by receiving and decrypting with a secret key of the automatic teller machine.

Images