JP2018136769A - Information processing system, information processing method, information processing apparatus, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing system capable of accurately determining whether there is any possibility of a remittance fraud.SOLUTION: Provided is an information processing system including: a receiving unit configured to receive business form entry information including information on an entry time written in a form by a customer outside a store and first identification information associated with the entry; a time information acquisition unit configured to acquire the time related to a behavior of the customer performed after the entry time; an identification information acquisition unit configured to acquire second identification information corresponding to the first identification information; a collation unit configured to collate the first identification information with the second identification information; a comparison unit configured to compare a time difference between the entry time and a time related to the customer's behavior with a predetermined time; and a determination unit configured to determine the possibility of fraud on the basis of a collation result obtained by the collation unit and a comparison result obtained by the comparison unit.SELECTED DRAWING: Figure 9

Description

  The present invention relates to an information processing system, an information processing method, an information processing apparatus, and a program.

  In recent years, so-called transfer fraud, which tricks the other party using telephones and documents and requests money transfer, has become a social problem. Whether the financial institution is a customer who may be subject to a transfer fraud based on information such as the age of the customer who visited the sales office of the financial institution or the amount of the transfer to be made by the customer By determining whether or not and the bank employee is calling for a possible fraud, bank transfer fraud is prevented in advance. For example, in Patent Document 1 below, if there is a possibility of a fraudulent transfer from information such as the transfer amount, and if there is a possibility of fraud, it will be transferred to an approver who is a third party. A system for requesting determination of whether or not a transaction can be performed has been proposed.

Japanese Patent Laying-Open No. 2015-64621

  However, it is difficult to determine whether there is a possibility that the customer is in a bank transfer fraud only by information such as the transfer amount as in Patent Document 1. For example, even if the customer is actually a bank transfer scam, the above system may not determine that there is a possibility of a bank transfer scam because the transfer amount does not satisfy a predetermined condition. On the other hand, there is a case where it is judged that there is a possibility of transfer fraud in the above system because the transfer amount etc. satisfies the predetermined condition even though it is a customer who is not actually involved in the transfer fraud. is there. That is, the accuracy of the determination is limited in the above system that determines the possibility of a transfer fraud only by information such as the transfer amount. Accordingly, financial institutions and the like have sought a new system that can determine the possibility of wire fraud more accurately.

  Therefore, the present invention has been made in view of the above situation, and an object of the present invention is to provide a new and improved information processing that can accurately determine the possibility of a transfer fraud. A system, an information processing method, an information processing apparatus, and a program are provided.

  In order to solve the above-described problem, according to a certain aspect of the present invention, form entry information including entry time information entered in a form by a customer outside the store and first identification information associated with the entry. A time information acquisition unit that acquires a time related to the behavior of the customer after the entry time, an identification information acquisition unit that acquires second identification information corresponding to the first identification information, A collation unit that collates the first identification information with the second identification information, a comparison unit that compares a time difference between the entry time and a time related to the behavior of the customer, and a predetermined time; and the collation unit An information processing system is provided that includes a determination unit that determines whether or not there is a possibility of fraud on the basis of the comparison result and the comparison result of the comparison unit.

  The entry time may be an entry completion time when the customer has completed entry in the form.

  The time information acquisition unit acquires a store visit time when the customer visited the store as a time related to the behavior of the customer, and the determination unit corresponds to the first identification information and the second identification information. It may be determined that there is a possibility of fraud based on the collation result indicating that the time difference is present and the comparison result indicating that the time difference is equal to or less than a predetermined time.

  The said time information acquisition part may acquire the time which received the card-like medium or the booklet-like medium by the reception terminal installed in the said store as the said store visit time.

  The said time information acquisition part may acquire the time which received customer identification information by the attendance terminal installed in the window of the said store as said store visit time.

  The time information acquisition unit acquires a time when the customer starts moving after the entry time as a time related to the behavior of the customer, and the determination unit includes the first identification information and the second identification information. It may be determined that there is a possibility of fraud on the basis of the collation result indicating that the two correspond to each other and the comparison result indicating that the time difference is equal to or less than a predetermined time.

  The said time information acquisition part may acquire the time when the said customer started a movement after the said entry time from the smart phone and wearable terminal which the said customer carries.

  The information processing system may further include a storage unit that stores a correspondence relationship between the first identification information and the second identification information.

  The storage unit may store the attribute information of the customer, and the determination unit may determine that there is a possibility of fraud when the attribute information satisfies a predetermined condition.

  The form entry information includes entry position information indicating a place where the customer has entered the form, and the determination unit determines that there is a possibility of fraud if the entry position information satisfies a predetermined condition. May be.

  The form entry information may include transaction amount information entered in the form, and the determination unit may determine that there is a possibility of fraud when the transaction amount information satisfies a predetermined condition.

  The reception unit may receive at least a part of information included in the form entry information from a writing device used by the customer at the time of the entry.

  The information processing system may further include a notification unit that notifies a determination result of the determination unit to a clerk of the store.

  In order to solve the above-described problem, according to still another aspect of the present invention, information on entry time that a customer has entered in a form outside the store and first identification information associated with the entry is included. The form entry information is received, the time related to the behavior of the customer after the entry time is obtained, the second identification information corresponding to the first identification information is obtained, the first identification information and the second And comparing the predetermined time with the time difference between the entry time and the time related to the behavior of the customer, and based on the result of the comparison and the result of the comparison, whether or not there is a possibility of fraud An information processing method is provided.

  In order to solve the above-described problem, according to still another aspect of the present invention, information on entry time that a customer has entered in a form outside the store and first identification information associated with the entry is included. A receiving unit for receiving form entry information, a time information obtaining unit for obtaining a time related to the behavior of the customer after the entry time, and an identification information obtaining for obtaining second identification information corresponding to the first identification information A comparison unit that compares a predetermined time with a time difference between the entry time and the time related to the behavior of the customer, a verification unit that compares the first identification information and the second identification information, An information processing apparatus is provided that includes a determination unit that determines whether or not there is a possibility of fraud based on a verification result of the verification unit and a comparison result of the comparison unit.

  In order to solve the above-mentioned problem, according to still another aspect of the present invention, a computer is provided with information on entry time that a customer has entered in a form outside the store, and first identification information associated with the entry. A receiving unit that receives form entry information including: a time information acquisition unit that acquires a time related to the behavior of the customer after the entry time; and a second identification information corresponding to the first identification information. An identification information acquisition unit; a collation unit that collates the first identification information with the second identification information; and a comparison that compares a time difference between the entry time and the time related to the customer's behavior with a predetermined time. A program is provided for functioning as a determination unit that determines whether or not there is a possibility of fraud based on a comparison unit, a verification result of the verification unit, and a comparison result of the comparison unit.

  As described above, according to the present invention, it is possible to accurately determine the possibility of a transfer fraud.

It is explanatory drawing explaining the information processing system 1 which concerns on the 1st Embodiment of this invention. It is explanatory drawing explaining the structure of the writing device 10 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the functional structure of the writing device 10 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the functional structure of the beacon apparatus 20 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the functional structure of the GPS unit 30 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the functional structure of the server 40 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the function structure of the reception terminal 50 which concerns on the 1st Embodiment of this invention. It is a block diagram explaining the function structure of the attendant terminal 60 which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the information processing method which concerns on the 1st Embodiment of this invention. It is explanatory drawing explaining an example of the display of the screen 80 which concerns on the 1st Embodiment of this invention. It is a flowchart which shows the information processing method which concerns on the 2nd Embodiment of this invention. It is the block diagram which showed the hardware constitutions of the server 40 which concerns on embodiment of this invention.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol.

The description will be made in the following order.
1. 1. Background to the embodiment of the present invention 1. First embodiment 2.1 Configuration of information processing system 1 according to the first embodiment 2.2 Configuration of each device included in the information processing system 1 according to the first embodiment 2.3 First embodiment 2. Information processing method according to 2. Second Embodiment 3.1 Information Processing Method According to Second Embodiment Summary 5. Hardware configuration of server 40 according to the present embodiment 6. Supplement

<<<< 1. Background of the embodiment of the present invention >>
First, prior to the description of the embodiments of the present invention, the background of how the inventors have made the embodiments of the present invention will be described.

  As explained earlier, a system has already been proposed to determine the possibility of a transfer fraud from information such as the transfer amount, but to determine the possibility of a transfer fraud only from information such as the transfer amount. There were limits. More specifically, for example, even though the customer is actually a bank transfer scam, there is a possibility of a bank transfer scam in the above system because the transfer amount was smaller than the predetermined amount. May not be judged. In such a case, due to the wrong judgment of the system, the clerk cannot recognize that there is a possibility of the transfer fraud, so the customer is not called, and as a result, the transfer related to the transfer fraud Sometimes it cannot be prevented. On the other hand, since the customer's age is older than the predetermined age and the transfer amount is higher than the predetermined amount even though the customer is not actually involved in the transfer fraud, The system may determine that there is a possibility of wire fraud. In such a case, the customer may not be able to execute a desired transfer based on the above erroneous determination, and may be inconvenient.

  Therefore, in order to avoid the situation as described above, the present inventor has intensively studied on the construction of a new system that can determine the possibility of a transfer fraud more accurately. As a result of the study by the present inventor, it has been clarified that victims who suffered from bank transfer fraud tend to visit a financial institution immediately after completing a form at home or the like. In detail, many of the criminals of wire fraud currently rampant believe in victims that they needed money urgently because the victim's relatives, etc. used the company's money over the phone. I'll do it. The victim then comes to the store immediately after filling out a form at home or the like to save the relatives and transfers money to the account designated by the criminal. In this way, the criminal cheats money from the victim.

  Therefore, the present inventor accurately determines whether or not there is a possibility of a transfer fraud by using the fact that victims who were involved in the transfer fraud tend to visit a store of a financial institution immediately after filling out a form. He thought that he could do it, and came to create the information processing system 1 which concerns on embodiment of this invention. Specifically, in the information processing system 1 according to the embodiment of the present invention described below, when a form is pre-filled at home, the writing device 10 (to be described later) is used by a customer to fill in the form. The time can be grasped. Therefore, in the information processing system 1, after the entry time, the customer's visit time such as the visit time to the store or the movement start time when the customer started moving to visit the store is grasped, and the entry time By comparing the time difference between the time and the time related to the behavior of the customer, it is determined whether or not the customer has entered the store immediately after entering the form. Furthermore, when the information processing system 1 determines that the customer has arrived at the store immediately after filling out the form, the information processing system 1 comprehensively determines the possibility of a transfer fraud using other information. To do. That is, according to the information processing system 1 according to the embodiment of the present invention described below, whether or not the customer has come to the store immediately after filling out the form as well as information such as the age of the customer and the transfer amount. By using this information as well, it is possible to determine the possibility of a transfer fraud more accurately.

  Below, it is possible to more accurately determine the possibility of wire fraud by using the fact that victims of wire fraud tend to visit a financial institution store immediately after completing a form. Details of the information processing system 1 according to the embodiment of the present invention will be described.

<<< 2. First embodiment >>
<< 2.1 Configuration of Information Processing System 1 According to First Embodiment >>
First, the configuration of the information processing system 1 according to the first embodiment will be described with reference to FIG. FIG. 1 is an explanatory diagram illustrating an information processing system 1 according to the first embodiment. As shown in FIG. 1, the information processing system 1 according to the present embodiment includes a writing device 10, a beacon device 20, a GPS (Global Positioning System) unit 30, a server 40, a reception terminal 50, and a staff terminal 60. Including. The writing device 10 is used when a customer fills in a form 70 (for example, a transfer form used in a financial institution) at home or the like, and the beacon device 20 is installed at the customer's home or the like where the writing device 10 is used. Then, the movement of the writing device 10 is detected. Further, the GPS unit 30 is provided within a predetermined distance from the beacon device 20 and is used for acquiring position information of the writing device 10, and further receives information received from the writing device 10 via the beacon device 20. Send to. The server 40 is installed in a management center or the like managed by a financial institution or the like, and stores information on transactions performed at the financial institution or customer information regarding customers. Furthermore, the reception terminal 50 is provided at the entrance of a store such as a financial institution, and issues a number table indicating the order of reception at the window. The clerk terminal 60 accepts an operation by a clerk working at the store, Display transaction information to bank employees.

  As shown in FIG. 1, the writing device 10 and the beacon device 20, the beacon device 20 and the GPS unit 30, and the GPS unit 30 and the server 40 are connected to each other via a wireless communication line. Yes. The wireless communication line can be realized by communication such as infrared communication, ultrasonic communication, wireless LAN (Local Area Network), and LTE (Long Term Evolution). In the present embodiment, the connection between the beacon device 20 and the GPS unit 30 and the connection between the GPS unit 30 and the server 40 are not limited to connection via a wireless communication line, but are connected via a wired communication line. Also good. Further, the writing device 10 and the beacon device 20, the beacon device 20 and the GPS unit 30, and the GPS unit 30 and the server 40 may be connected by different communication methods.

  Further, as shown in FIG. 1, the server 40 and the reception terminal 50 and the server 40 and the employee terminal 60 are connected to each other through a wired communication line. For example, the wired communication line can be realized by communication such as a dedicated line, a LAN (Local Area Network), or a WAN (Wide Area Network). In addition, some security means (for example, Secure Sockets Layer (SSL)) may be applied to the dedicated line or the like. In the present embodiment, the connection between the server 40 and the reception terminal 50 and the connection between the server 40 and the employee terminal 60 are not limited to connection via a wired communication line, but are connected via a wireless communication line. May be. In addition, the server 40 and the reception terminal 50 and the server 40 and the employee terminal 60 may be connected by different communication methods.

<< 2.2 Configuration of Each Device Included in Information Processing System 1 According to First Embodiment >>
Below, the structure of each apparatus contained in the information processing system 1 which concerns on this embodiment is demonstrated.

<Writing device 10>
First, the writing device 10 according to the present embodiment will be described. The writing device 10 is a writing instrument that writes on a paper-like medium such as a form 70. In the present embodiment, it is assumed that the writing device 10 is used when the customer fills in the form 70 at home or the like. The writing device 10 is always present within a predetermined range (a range in which wireless communication can be performed with the beacon device 20) from the beacon device 20 described later, or is used in the predetermined range. Shall. The above-mentioned predetermined range is, for example, a range surrounded by a circle having a radius of about 1 to 3 m with the beacon device 20 as the center.

  A detailed configuration of the writing device 10 will be described with reference to FIGS. 2 and 3. FIG. 2 is an explanatory diagram illustrating the configuration of the writing device 10 according to the present embodiment, and FIG. 3 is a block diagram illustrating the functional configuration of the writing device 10 according to the present embodiment. As shown in FIGS. 2 and 3, the writing device 10 mainly includes a writing unit 100, a control unit 110, and a communication unit 120. Below, the detail of each part of the writing device 10 is demonstrated.

(Writing part 100)
The writing unit 100 has a function of writing on a paper-like medium such as a form 70. As shown in FIG. 2, the writing unit 100 is used for writing with a casing 102 for a customer to hold. And a pen core 104 containing the ink. For example, the pen core 104 is provided so as to pass through the center of the cylindrical housing 102, and one tip projects out of the housing 102 as a pen tip 104 a that writes in contact with the form 70. The pen core 104 can have the same configuration as the core of a writing instrument such as a ballpoint pen, a sign pen, a mechanical pen, or a pencil. Further, in the present embodiment, the pen tip 104 a of the writing device 10 is not necessarily limited to projecting outside the housing 102 at all times. For example, the writing device 10 may have a structure in which the pen tip 104 a can protrude to the outside of the housing 102 when the customer presses the knock unit 106 provided on the housing 102. Furthermore, in this case, when the customer presses the knock unit 106 again in a state where the pen tip 104 a protrudes outside the housing 102, the pen tip 104 a can be stored inside the housing 102. It may be a simple structure.

(Control unit 110)
The control unit 110 uses the hardware such as a CPU (Central Processing Unit) and a RAM (Random Access Memory) built in the writing device 10 to control the writing device 10 such as communication control in the communication unit 120 described later. It has a function to control. For example, the control unit 110 uses the device identification information (first identification information) of each writing device 10 for identifying the writing device 10 as one of the form entry information to the server 40 described later (in detail, The communication unit 120 may be controlled to transmit (transmitted to the server 40 via the beacon device 20 and the GPS unit 30 described later). The device identification information is associated with customer identification information (second identification information) for identifying a predetermined customer in advance, and stored in the server 40 as one piece of customer information. Further, the device identification information may include the customer identification information (for example, the customer's account number), and further, attribute information (for example, customer's age and gender) and address information (for example, home address). Position information (longitude information, latitude information)) may be included.

(Communication unit 120)
The communication unit 120 can perform wireless communication with a beacon device 20 described later. For example, when the writing device 10 is within a predetermined range from the beacon device 20 (a range in which wireless communication with the beacon device 20 can be performed) from the beacon device 20, the communication unit 120 periodically starts from the beacon device 20. A radio signal (beacon signal) to be emitted is received and the presence of the beacon device 20 is recognized. Furthermore, the communication unit 120 can transmit the above-described device identification information and the like to the beacon device 20 by transmitting a predetermined signal to the beacon device 20 recognized in this way.

  The writing device 10 may have a sound collection device (not shown). For example, the sound collection device is realized by a microphone or the like, collects the voice of a customer who is writing using the writing device 10, and uses the collected voice information as one of the form entry information. 40 may be transmitted.

  Moreover, the writing device 10 may have a biosensor (not shown). The biosensor is a sensor that detects biometric information of a customer, and can include, for example, a sensor that measures a pulse rate, sweating, skin temperature, skin electrical resistance, and the like in contact with a customer's finger. In this case, the biometric sensor may collect biometric information of the customer who is filling in using the writing device 10 and transmit the collected biometric information to the server 40 as one of the form entry information. .

<Beacon device 20>
Next, beacon device 20 concerning this embodiment is explained. As described above, the beacon device 20 is installed at the customer's home or the like where the writing device 10 is used and is paired with the writing device 10 to detect the movement of the writing device 10. Note that a beacon is a radio device that periodically transmits a radio signal, and the radio signal transmitted by the beacon device 20 exists within a predetermined range from the beacon device 20 (in this embodiment, This means a communication system (system) in which the wireless device can recognize the presence of the beacon device 20 by receiving the writing device 10). The beacon device 20 is always present within a predetermined range (a range in which wireless communication with the GPS unit 30 can be performed) from a GPS unit 30 described later. Furthermore, in this embodiment, the beacon device 20 is not limited to being paired with the writing device 10 described above in a one-to-one relationship, and one beacon device 20 is paired with a plurality of writing devices 10. There is no particular limitation.

  With reference to FIG. 4, the beacon apparatus 20 which concerns on this embodiment is demonstrated. FIG. 4 is a block diagram of the beacon device 20 according to the present embodiment. As illustrated in FIG. 4, the beacon device 20 mainly includes a control unit 210 and a communication unit 220. Below, the detail of each part of the beacon apparatus 20 is demonstrated.

(Control unit 210)
The control unit 210 has a function of generally controlling the beacon device 20 such as control of communication in the communication unit 220 described later using hardware such as a CPU and a RAM built in the beacon device 20. For example, the control unit 210 has a built-in clock mechanism (not shown) that grasps an accurate time, and when the movement of the writing device 10 is detected, the customer enters the time when the writing device 10 starts to move in the form 70. As the entry start time started, the time when the writing device 10 stopped moving can be acquired as the entry completion time when the customer has completed the entry on the form 70. And the control part 110 can also control the communication part 220 mentioned later so that the information of the acquired time (information of entry start time and entry completion time) may be transmitted to the server 40 as one of the form entry information. .

  For example, the control unit 210 detects the current position of the writing device 10 with respect to the beacon device 20 due to a change in the reception direction of the wireless signal received from the writing device 10 received by the communication unit 220 described later, or a change in strength of the wireless signal. Information in which the relative position is changing can be acquired. Therefore, the control unit 210 can detect the movement of the writing device 10 by detecting the change in the relative position. In the present embodiment, the movement of the writing device 10 may be detected by other methods, details of which will be described later.

(Communication unit 220)
The communication unit 220 can perform wireless communication with the writing device 10 described above. Specifically, the communication unit 220 periodically emits a radio signal as described above, and the radio signal is received from the beacon device 20 by the writing device 10 existing within a predetermined range. Further, the communication unit 220 can receive the device identification information transmitted from the writing device 10. For example, by using the device identification information received by the communication unit 220, the control unit 210 described above moves. It is possible to specify the detected writing device 10.

  Further, the communication unit 220 can perform wireless communication with the GPS unit 30 described later, and can transmit the above-described form entry information to the GPS unit 30. For example, the communication unit 220 transmits, as the form entry information, device identification information of the corresponding writing device 10 and information of entry time (entry start time, entry completion time) by the writing device 10 to the GPS unit 30. .

<GPS unit 30>
Next, the GPS unit 30 according to the present embodiment will be described. The GPS unit 30 is provided within a predetermined range (a range in which wireless communication can be performed with the beacon device 20) from the beacon device 20, and position information (specifically, the writing device 10). Is used to acquire longitude information and latitude information), and further, the information received from the beacon device 20 is transmitted to the server 40. The above-mentioned predetermined range is, for example, a range surrounded by a circle having a radius of about several tens of meters around the beacon device 20. The GPS unit 30 according to the present embodiment will be described with reference to FIG. FIG. 5 is a block diagram of the GPS unit 30 according to the present embodiment. As shown in FIG. 5, the GPS unit 30 mainly includes a control unit 310 and a communication unit 320. Below, the detail of each part of the GPS unit 30 is demonstrated.

(Control unit 310)
The control unit 310 has a function of generally controlling the GPS unit 30 such as control of communication in the communication unit 320 to be described later using hardware such as a CPU and a RAM built in the GPS unit 30. For example, the control unit 310 controls the communication unit 320 to be described later so as to transmit the form entry information and the like transmitted from the beacon device 20 to the server 40. In addition, the control unit 310 controls the communication unit 320 to transmit the position information of the writing device 10 to the server 40 as entry position information having one form entry information.

(Communication unit 320)
The communication unit 320 receives the form entry information from the beacon device 20 described above, and transmits the received form entry information to the server 40 described later. Further, the communication unit 320 has a function as a positioning sensor. Specifically, the communication unit 320 as a positioning sensor cooperates with the above-described control unit 310 to receive a GPS signal from a GPS satellite (not shown), so that the position information (longitude information, Latitude information). In addition, the communication unit 320 cooperates with the control unit 310 described above to obtain information on the relative position of the beacon device 20 with respect to the GPS unit 30 based on the strength of the radio signal received from the beacon device 20 by the communication unit 320. Can be acquired. Since it is known in advance that the writing device 10 described above exists or is used within a predetermined range from the beacon device 20, the acquired relative position information of the beacon device 20 is written to the GPS unit 30. It can be read as information on the relative position of the device 10. Therefore, the communication unit 320 cooperates with the control unit 310 to use the above-described position information of the GPS unit 30 and the relative position information of the writing device 10 with respect to the GPS unit 30 to obtain the position information of the writing device 10. (Longitude information and latitude information, or longitude information and latitude information having a predetermined width) can be acquired as entry position information.

  In addition, the function of the GPS unit 30 may be provided in the beacon device 20 described above, and by doing so, the configuration of the information processing system 1 according to the present embodiment can be simplified. In this case, the beacon device 20 is installed at a position where the beacon device 20 can always receive a GPS signal from a GPS satellite while the beacon device 20 is capable of positioning.

<Server 40>
Next, the server 40 according to the present embodiment will be described. The server 40 is installed in a management center or the like managed by a financial institution or the like, and stores information on transactions performed at the financial institution or the like and customer information regarding customers. Further, the server 40 uses the form entry information transmitted from the GPS unit 30 to determine the possibility of a transfer fraud. A server 40 according to the present embodiment will be described with reference to FIG. FIG. 7 is a block diagram of the server 40 according to the present embodiment. As shown in FIG. 6, the server 40 mainly includes a storage unit 400, a control unit 410, and a communication unit (reception unit) 420. Below, the detail of each part of the server 40 is demonstrated.

(Storage unit 400)
The storage unit 400 is realized by hardware such as an HDD (Hard Disk Drive) built in the server 40 and stores customer information and the like. More specifically, the storage unit 400 stores the above-described device identification information in association with customer identification information such as an account number. In addition to the account number, the storage unit 400 stores customer home location information (longitude information, latitude information), customer age and gender attribute information, customer face image information, and the like as customer information. May be.

(Control unit 410)
The control unit 410 has a function of generally controlling the server 40, such as control of communication in the communication unit 420 described later, using hardware such as a CPU and a RAM built in the server 40. Specifically, the control unit 410 acquires customer identification information of the customer from the attendance terminal 60 and the like, and the acquired customer identification information is included in the device identification information included in the form entry information received via the communication unit 420 described later. It can function as a collation unit (identification information acquisition unit and collation unit) 412 for collation. In addition, the control unit 410 acquires time (visit time etc.) related to the customer's behavior from the receiving terminal 50 or the like described later, and the acquired time and the entry time included in the form entry information received via the communication unit 420. It can function as a comparison unit (time information acquisition unit and comparison unit) 414 that calculates a time difference between information and compares the calculated time difference with a predetermined time. Furthermore, the control unit 410 can also function as a determination unit 416 that determines the possibility of wire fraud based on the comparison result of the verification unit 412, the comparison result of the comparison unit 414, and the like. It can also function as a notification unit 418 that notifies a store employee of the result.

-Verification unit 412
The collation unit 412 refers to the customer information stored in the storage unit 400, device identification information included in the form entry information received from the writing device 10 via the beacon device 20 and the GPS unit 30, and a staff terminal described later Whether or not the customer identification information received from 60 corresponds.

-Comparison part 414-
For example, the comparison unit 414 includes the entry time (entry start time or entry completion time) included in the form entry information received from the beacon device 20 via the GPS unit 30, and the customer visit time acquired from the reception terminal 50 or the like. The time difference is calculated. Further, the comparison unit 414 compares the calculated time difference with a predetermined time. The predetermined time is, for example, a time obtained by adding a time of about 30 minutes to the time required for movement between the customer's home and the corresponding store. If the calculated time difference is equal to or less than a predetermined time based on the comparison by the comparison unit 414, it is estimated that the customer has entered the store immediately after entering the form 70. On the other hand, if the calculated time difference is longer than the predetermined time based on the comparison by the comparison unit 414, it is estimated that the customer has not entered the store immediately after entering the form 70. In addition, the comparison unit 414 may calculate a time difference between the entry time and the movement start time when the customer can acquire the movement start time after the entry time. In this case, For example, a time of about several tens of minutes can be set.

-Judgment part 416-
The determination unit 416 uses information such as the entry position information included in the form entry information, the attribute information stored in the storage unit 400 described above, and the transfer amount (transaction amount) acquired from the banking terminal 60 described later, Determine the possibility of wire fraud. For example, the determination unit 416 refers to the customer's age stored in the attribute information and compares it with a predetermined age. Further, the determination unit 416 compares the entry position information with the position information of the customer's home stored in the storage unit 400 to determine whether the entry position is the customer's home (specifically, the determination unit 416 The customer's home location information stored in the storage unit 400 is compared with the information on the entry location. If the entry location is included in a predetermined range based on the location information of the home, the entry location Estimated to be home). In addition, the determination unit 416 compares the transfer amount acquired from the clerk terminal 60 with a predetermined amount. Then, the determination unit 416 performs such a comparison, the customer's age is older than the predetermined age, the entry position is estimated to be the customer's home, and the transfer amount is higher than the predetermined amount. If so, determine that there is a possibility of wire fraud.

-Notification unit 418-
The notification unit 418 notifies the bank employee of the determination result of the determination unit 416 described above. For example, when the determination unit 416 determines that there is a possibility of wire fraud, the notification unit 418 alerts the clerk to call the customer on the display unit 640 of the clerk terminal 60 described later. The clerk terminal 60 is controlled to display the screen 80 for performing (see FIG. 10). Note that, in the present embodiment, the notification unit 418 is not limited to control to perform screen display, and the notification unit 418 controls to output a predetermined voice to the staff terminal 60. There is no particular limitation on the alerting method and control as long as it can alert the clerk.

(Communication unit 420)
The communication unit 420 communicates with the GPS unit 30, the reception terminal 50, and the employee terminal 60. Specifically, as shown in FIG. 7, the communication unit 420 performs wired communication between the wireless communication unit 422 that performs wireless communication with the GPS unit 30, and the reception terminal 50 and the employee terminal 60. Part 424.

-Wireless communication unit 422
The wireless communication unit 422 performs wireless communication with the GPS unit 30 and receives form entry information including device identification information, entry time information (entry start time, entry completion time), and entry position information. In addition, the wireless communication unit 422 receives the entry time from a mobile terminal (for example, a smart phone) (not shown) carried by the customer or a wearable terminal (for example, a smart watch) (not shown) attached to the customer's body. Thereafter, information on the movement start time at which the customer started moving may be acquired. In this case, when the current position of the mobile terminal or the like has changed by a predetermined distance or more in a predetermined time width, the mobile terminal or the like determines that the customer has started moving, acquires the movement start time, 40.

-Wired communication unit 424
The wired communication unit 424 performs wired communication between the reception terminal 50 and the clerk terminal 60, receives information on the customer visit time from the reception terminal 50, and receives information such as the transfer amount from the clerk terminal 60. The wired communication unit 424 may receive the customer visit time from the clerk terminal 60. In this case, the wire communication unit 424 indicates the time when customer identification information (for example, an account number) for identifying the customer is input at the clerk terminal 60. The customer visit time. Further, the wired communication unit 424 transmits a control signal for notification by the above-described notification unit 418 to the staff terminal 60.

<Reception terminal 50>
Next, the reception terminal 50 according to the present embodiment will be described. As described above, the reception terminal 50 is provided at the entrance of a store such as a financial institution, receives an operation of a customer who has visited the store, and guides it to an appropriate window according to the transaction desired by the customer. Information for the customer is displayed, the waiting time is displayed, and a number table indicating the order of reception at the window is issued. In addition, the reception terminal 50 according to the present embodiment acquires the store visit time when the customer visits the store, and transmits it to the server 40 described above. With reference to FIG. 7, the reception terminal 50 according to the present embodiment will be described. FIG. 7 is a block diagram of the reception terminal 50 according to the present embodiment. As shown in FIG. 7, the reception terminal 50 mainly includes a control unit 510, a communication unit 520, an operation unit 530, a display unit 540, a card / passbook reception unit 550, and a ticket issuing unit 560. Below, the detail of each part of the reception terminal 50 is demonstrated.

(Control unit 510)
The control unit 510 has a function of generally controlling the reception terminal 50, such as control of communication in the communication unit 520 described later, using hardware such as a CPU and a RAM built in the reception terminal 50. For example, when the card / passbook accepting unit 550 described later accepts a card-like medium such as a cash card or a booklet-like medium such as a passbook from a customer, the control unit 510 reads the card form read by the card / passbook accepting unit 550. The communication unit 520 described later is controlled so that the customer identification information written in the medium or the like is transmitted to the server 40. Further, the control unit 510 has a built-in clock mechanism (not shown) that grasps an accurate time, and when receiving a card-like medium or the like from a customer, obtains the reception time of the card-like medium or the like as the customer's visit time. To do. Then, control unit 510 controls communication unit 520, which will be described later, so as to transmit the acquired reception time information to server 40. Control unit 510 controls ticket issuing unit 560 to issue a number table indicating the order of reception at the counter when a customer operation on operation unit 530 described later is received.

(Communication unit 520)
The communication unit 520 performs wired communication with the server 40.

(Operation unit 530)
The operation unit 530 is provided outside the reception terminal 50, and serves as an interface between the customer and the reception terminal 50. Various input operations by the customer (for example, operations for inputting information on the contents of transactions desired by the customer, (Operation for inputting customer identification information for identifying). For example, the operation unit 530 is realized by a touch panel stacked on a display unit 540 to be described later, and receives an input operation using a customer's fingertip contact, an electronic pen, or the like. The operation unit 530 may be realized by a keyboard or the like.

(Display unit 540)
The display unit 540 is provided so as to face the customer and serves as an interface between the customer and the reception terminal 50. Specifically, the display unit 540 has a function as a display unit that displays to a customer, and is realized by, for example, a liquid crystal display (LCD) device, an organic light emitting diode (OLED) device, or the like. Is done. For example, the display unit 540 displays information for guiding to an appropriate window according to a transaction desired by the customer (for example, information on a corresponding window number), a waiting time, and the like for the customer.

(Card / passbook accepting section 550)
The card / passbook accepting unit 550 is a device having a reading function. The card / passbook accepting unit 550 is a medium information (for example, a card) written on a magnetic stripe and an IC (Integrated Circuit) chip from a card-like medium such as a cash card inserted by a customer or a booklet-like medium such as a passbook. (Customer identification information such as an account number) for identifying the customer who owns the customer.

(Ticketing department 560)
The ticket issuing unit 560 prints a number table indicating the order of reception at the counter in accordance with the control of the control unit 510 described above, and issues a ticket to the customer.

  In the present embodiment, the reception terminal 50 is not limited to acquiring customer identification information from a card-like medium or the like inserted into the customer. For example, the reception terminal 50 includes the operation unit 530 by the customer. Customer identification information input by an input operation may be acquired.

  Further, in the present embodiment, the reception terminal 50 is not limited to a terminal having the above-described configuration, and various types such as an image sensor and a lens for controlling the formation of a subject image on the image sensor. It may be an imaging device (not shown) that images a customer's face using a member. In this case, the imaging device is provided at the entrance of a store such as a financial institution, and images the face of a customer who has visited the store. For example, the server 40 can identify the customer who visited the store by comparing the face image acquired by the imaging device with the face image of each customer stored in the storage unit 400. Furthermore, when the customer is identified in this way, the time at which the customer's face image was acquired can be used as the store visit time.

<Sacrament terminal 60>
Next, the staff terminal 60 according to the present embodiment will be described. As described above, the employee terminal 60 has a function of receiving an operation by a employee working at a store and displaying information related to the transaction to the employee, and is realized by, for example, a personal computer. With reference to FIG. 8, a clerk terminal 60 according to the present embodiment will be described. FIG. 8 is a block diagram of the clerk terminal 60 according to the present embodiment. As shown in FIG. 8, the staff terminal 60 mainly includes a control unit 610, a communication unit 620, an operation unit 630, and a display unit 640. Below, the detail of each part of the staff terminal 60 is demonstrated.

(Control unit 610)
The control unit 610 has a function of generally controlling the clerk terminal 60, such as control of communication in the communication unit 620 described later, using hardware such as a CPU and a RAM built in the clerk terminal 60. For example, the control unit 610 receives the form 70 from the customer, and when the information related to the transaction (for example, information on the transfer amount) is input to the clerk terminal 60 in accordance with the description of the form 70 or the like, the input transaction The communication unit 620, which will be described later, is controlled so as to transmit the information related to the server 40 to the server 40.

(Communication unit 620)
The communication unit 620 performs wired communication with the server 40.

(Operation unit 630)
The operation unit 630 serves as an interface between the clerk and the clerk terminal 60 for various input operations by the clerk (for example, an operation for inputting information on the contents of a transaction desired by the customer and customer identification information for identifying the customer. Input operation). For example, the operation unit 630 is realized by a keyboard or the like.

(Display unit 640)
The display unit 640 is provided so as to face the clerk and serves as an interface between the clerk and the clerk terminal 60. Specifically, the display unit 640 has a function as a display unit that performs display for a clerk, and is realized by, for example, an LCD device, an OLED device, or the like. Specifically, the display unit 640 displays a screen 80 (see FIG. 10) that alerts the clerk so as to call out to the customer.

  In the present embodiment, the store visit time is not limited to the time acquired by the reception terminal 50 described above, and the employee who is acquired by the employee terminal 60 describes the form 70, etc. In accordance with the transaction information (for example, account number and transfer amount information) is input to the clerk terminal 60 (input operation performed by the clerk on the operation unit 630 or OCR provided by the clerk with the form 70 in the clerk terminal 60) (Optical Character Recognition).

  In addition, the information processing system 1 according to the present embodiment further includes a mobile terminal (for example, a smartphone) carried by the customer (not shown) or a wearable terminal (for example, a smart watch) attached to the customer's body (not shown). (Omitted) may be included. In this case, the mobile terminal or the like is provided with a motion sensor (an accelerometer, a gyro sensor, or the like) that detects the movement of the mobile terminal, and the information processing system 1 receives the information from the mobile terminal or the like after the entry time. Information on the movement start time at which the movement is started may be acquired, or information on a route traveled by the customer after the entry time may be acquired.

<< 2.3 Information Processing Method According to First Embodiment >>
The configuration of the information processing system 1 according to the present embodiment and each device included in the information processing system 1 has been described above. Next, the information processing method according to the present embodiment will be described with reference to FIGS. FIG. 9 is a flowchart showing the information processing method according to the present embodiment. Furthermore, FIG. 10 is an explanatory diagram illustrating an example of display of the screen 80 according to the present embodiment. As shown in FIG. 9, the information processing method according to the present embodiment includes a plurality of steps from step S101 to step S115. Details of each step of the information processing method according to the present embodiment will be described below.

  In the information processing method described below, the customer is a regular customer of a certain financial institution, and an unfilled form 70 used in the transaction of the financial institution is stored at home, and the form 70 is used as necessary. It is assumed that the customer visits the store of the financial institution after filling in at home. Furthermore, in the information processing method described below, it is assumed that the customer fills in the form 70 by using the writing device 10 described above. Further, it is assumed that the form 70 and the writing device 10 are distributed from a financial institution to regular customers.

(Step S101)
At home, the customer fills in the form 70 using the writing device 10. The server 40, through the beacon device 20 and the GPS unit 30 from the writing device 10, fills in the form including the device identification information related to the writing device 10 used in the entry, and the entry time and entry position information relating to the entry. Get information. As described above, the entry time can be either the entry start time or the entry completion time. However, in this embodiment, the entry completed by the customer as the entry time is completed. Preferably, the completion time is used.

(Step S103)
The customer brings the completed form 70 and visits the store of the financial institution. Furthermore, the customer inputs the contents of the desired transaction to the reception terminal 50 installed at the entrance of the store, and inserts the cash card brought with the form 70 into the reception terminal 50. The server 40 acquires cash card reception time information from the reception terminal 50 as the customer visit time information. At that time, the server 40 also acquires customer identification information read from the cash card from the reception terminal 50.

(Step S105)
The customer brings the form 70 or the like to the window designated by the reception terminal 50. The employee in charge of the counter receives the form 70 and the cash card from the customer, and inputs information (for example, information such as the customer's account number and transfer amount) to the employee terminal 60 for performing the transaction. The server 40 acquires information such as an account number and a transfer amount input by the bank employee from the bank terminal 60.

(Step S107)
The server 40 refers to the customer information stored in the server 40 and checks whether the device identification information included in the form entry information acquired in step S101 corresponds to the customer identification information acquired in step S105. To do. When it corresponds, it progresses to step S109, and when it does not correspond, it progresses to step S115.

(Step S109)
The server 40 calculates a time difference between the entry time included in the form entry information acquired in step S101 and the store visit time acquired in step S103, and compares the calculated time difference with a predetermined time. As described above, the predetermined time is, for example, a time obtained by adding about 30 minutes to the time required for the movement between the customer's home and the corresponding store. If the calculated time difference is less than or equal to the predetermined time, it is estimated that the customer has entered the store immediately after filling out the form 70, and the process proceeds to step S111. If the calculated time difference is longer than the predetermined time, It is estimated that the customer has not visited the store immediately after filling out the form 70, and the process proceeds to step S115.

(Step S111)
In the server 40, the customer age information stored in the storage unit 400, the entry position information included in the form entry information acquired in step S101, and the transfer amount information acquired in step S105 satisfy a predetermined condition. Judgment is made. In detail, the server 40 is estimated that the customer's age is older than a predetermined age (for example, 60 years old), the entry position is the customer's home, and the transfer amount is a predetermined amount (for example, 500,000 yen). ), It is determined that there is a possibility of transfer fraud, assuming that the predetermined condition is satisfied. If it is determined that there is a possibility of a transfer fraud satisfying the predetermined condition in this way, the process proceeds to step S113. On the other hand, since at least one of the above conditions is not satisfied, there is a possibility of a transfer fraud. If it is determined that there is not, the process proceeds to step S115.

(Step S113)
Based on the determination that there is a possibility of wire fraud in step S111, the server 40 notifies the bank employee of an alert. For example, the server 40 displays on the display unit 640 of the staff terminal 60 a screen 80 for alerting the staff as shown in FIG. The screen 80 for alerting shown in FIG. 10 includes, for example, a display indicating that the customer may be fraudulent, and further prompts the bank staff to perform confirmation work (speak to the customer). Including a display for. By checking the screen 80, the bank clerk can recognize that the customer is a customer who may be in a bank transfer fraud, and can speak to the customer. Thereafter, the information processing according to the present embodiment is terminated.

(Step S115)
The server 40 proceeds to normal transaction processing based on determining that there is no possibility of wire fraud in step S111. Thereafter, the information processing according to the present embodiment is terminated.

  Note that the contents of the conditions (entry position, age, transfer amount, etc.) shown in step S111 described above are merely examples, and other conditions may be used in the present embodiment. For example, the place of entry may be the customer's company instead of the customer's home. In this case, the customer information stored in the server 40 includes customer company location information.

  As described above, according to the information processing system 1 according to the present embodiment, by using not only the age of the customer and the transfer amount, but also information indicating whether the customer has entered the store immediately after entering the form, It is possible to determine the possibility of a transfer fraud with higher accuracy. In addition, according to the present embodiment, since the financial institution side can grasp that the writing device 10 has been used, it is recognized that the customer has a high probability of coming to the store by the grasping. Advance preparations for customer visits can be made. Therefore, when a customer visits the store, it is possible to provide an appropriate service to the customer promptly, leading to an improvement in the quality of service for the regular customer.

  In the present embodiment, entry position information may be used instead of device identification information. In this case, the server 40 can also identify the corresponding customer by comparing the customer's home location information included in the customer information stored in the storage unit 400 with the acquired entry location information. .

  Further, in the present embodiment, the voice information of the customer who is recording using the writing device 10 and is recorded by the sound collecting device (not shown) provided in the writing device 10 is stored in the server 40. May be sent to. For example, the server 40 analyzes the transmitted voice information, and if a specific word (for example, “how to” or “severe”) is extracted from the voice information, there is a possibility of a transfer fraud. You may judge. By using such voice information as well, it is possible to improve the accuracy of determining whether or not there is a possibility of transfer fraud in the present embodiment.

  In the present embodiment, the biometric information of the customer who is filling in using the writing device 10 detected by the biometric sensor (not shown) provided in the writing device 10 is transmitted to the server 40. May be. For example, the server 40 analyzes the transmitted biological information, and if a pulse rate or sweating amount that is equal to or greater than a predetermined value is detected, the server 40 is presumed to be upset and detect a high pulse rate or sweating amount. However, it may be determined that there is a possibility of wire fraud. By using such biometric information together, the accuracy of determining whether or not there is a possibility of wire fraud in the present embodiment can be improved.

  Further, in the present embodiment, the movement of the writing device 10 is not limited to detection by a change in the relative position with respect to the beacon device 20 as described above. For example, the motion built in the writing device 10 It may be detected by a sensor (not shown). More specifically, the motion sensor can include, for example, an acceleration sensor or a gyro sensor, and a writing device can be detected by detecting a change in acceleration, angular velocity, or the like that occurs when the customer moves the writing device 10. 10 motions are detected.

  In the present embodiment, the movement of the writing device 10 may be detected by a writing table (not shown) placed under the form 70 when the form 70 is described. Specifically, the writing stand detects the movement of the writing device 10 by detecting the pressing of the writing device 10 by the pen tip 104a and the proximity of the pen tip 104a. In this case, a part of the function of the beacon device 20 (for example, a function such as information transmission to the GPS unit 30) may be assigned to the writing stand.

  Moreover, in this embodiment, it is not limited to acquiring entry start time and entry completion time based on the movement of the writing device 10, for example, the control part 110 of the writing device 10 is the knock part mentioned above. The entry start time and entry completion time may be acquired by detecting an operation by the customer on 106. For example, if the customer can push the knock unit 106 provided on the housing 102 to cause the pen tip 104 a to protrude outside the housing 102, the control unit 110 presses the knock unit 106. Based on the detection, it is determined that the customer has started entry using the writing device 10, and the entry start time is acquired.

  In the present embodiment, the entry start time and entry completion time may be acquired based on detection by an imaging device (not shown) incorporated in the writing device 10. Specifically, the imaging apparatus can be an imaging apparatus such as a CCD (Charge-Coupled Device) camera provided on the pen tip 104 a side of the casing 102 of the writing device 10. The lens unit (not shown) of the imaging device is exposed from the housing 102 in the vicinity of the pen tip 104a, and can photograph an object facing the pen tip 104a. Furthermore, a plurality of dots are thinly printed on the form 70, for example, in a matrix, and the control unit 110 determines that the pen tip 104a of the writing device 10 is connected to the form 70 based on the dot image captured by the imaging device. It is possible to detect that they are facing each other. When the control unit 110 detects that the pen tip 104a faces the form 70, the control unit 110 can determine that the customer has started the entry using the writing device 10, and can obtain the entry start time. it can.

  Furthermore, in this embodiment, the server 40 recognizes the movement trajectory of the writing device 10 from the change in the movement of the writing device 10 and analyzes the trajectory, thereby filling in the contents entered using the writing device 10. (For example, the account number of the transfer destination, the transfer amount, etc.) may be acquired as one of the form entry information. In this case, since the server 40 analyzes the acquired entry content and can grasp the transaction content desired by the customer before the customer visits the store, the store employee visits the customer. Preparations can be made in preparation. In addition, the server 40 according to the present embodiment may determine the possibility of a transfer fraud using the entry content grasped as described above. For example, the server 40 may determine that there is a possibility of a transfer fraud when the transfer amount included in the entry content is higher than a predetermined amount.

  Recently, the criminal has sent the transfer form pre-filled with necessary information (account number of the bank account to be transferred) to the victim's home, and makes the victim transfer using the transfer form. There are also types of wire fraud. Therefore, as a countermeasure against such a type of fraud, the server 40 may acquire the entry contents entered using the writing device 10 and the customer does not enter the account number of the transfer destination from the entry contents. If it can be detected, it may be determined that there is a possibility of the type of fraud as described above.

<<< 3. Second embodiment >>
In the first embodiment described above, the possibility of a transfer fraud is determined using the time difference between the entry time (entry completion time) and the visit time. However, in this embodiment, it is not limited to using such a time difference, and a time difference according to another time can also be used. For example, as described above, victims who have been transferred fraud tend to visit the store of a financial institution immediately after filling out the form 70, so the customer visits the store after the entry time. Therefore, the above-described determination can also be made by using the movement start time at which the movement is started. Hereinafter, this embodiment will be described.

  The configuration of the information processing system 1 according to the present embodiment and each device included in the information processing system 1 is the same as that of the first embodiment. Therefore, the description of the configuration of the information processing system 1 according to the present embodiment and each device included in the information processing system 1 is omitted here.

<< 3.1 Information Processing Method According to Second Embodiment >>
The information processing method according to this embodiment will be described below with reference to FIG. FIG. 11 is a flowchart showing the information processing method according to the present embodiment. As shown in FIG. 11, the flowchart of the information processing method according to the present embodiment includes a plurality of steps from step S201 to step S215. Details of each step of the information processing method according to the present embodiment will be described below.

  In this embodiment as well, the customer keeps an unfilled form 70 used in the transaction of the financial institution at home, and fills the form 70 at home with the writing device 10 as needed, and then the financial The premise is to visit an institutional store. Furthermore, the customer carries a mobile terminal (for example, a smart phone) (not shown) having a motion sensor (such as an accelerometer or a gyro sensor) for detecting the movement of the mobile terminal, or a wearable terminal (for example, a smart watch). Etc.) (not shown) is worn on the body.

(Step S201)
Since this is the same as step S101 of the first embodiment shown in FIG. 9, the description thereof is omitted here.

(Step S203)
The customer brings the completed form 70 and starts moving to the financial institution store (specifically, the customer leaves home). The server 40 acquires information on the movement start time when the customer started moving after the entry time from a mobile terminal (not shown) carried by the customer or a wearable terminal (not shown) attached to the customer's body.

(Step S205 to Step S207)
Since this is the same as step S105 to step S107 of the first embodiment shown in FIG. 9, the description thereof is omitted here.

(Step S209)
The server 40 calculates a time difference between the entry time included in the form entry information acquired in step S201 and the movement start time acquired in step S203, and compares the calculated time difference with a predetermined time. The predetermined time is, for example, about 30 minutes. If the calculated time difference is equal to or shorter than the predetermined time, it is estimated that the customer has entered the store immediately after filling out the form 70, and the process proceeds to step S211. If the calculated time difference is longer than the predetermined time, It is estimated that the customer has not visited the store immediately after filling out the form 70, and the process proceeds to step S215.

(Step S211 to Step S215)
Since this is the same as step S111 to step S115 of the first embodiment shown in FIG. 9, the description thereof is omitted here.

  As described above, according to the information processing system 1 according to the present embodiment, not only the age of the customer and the transfer amount, but also information on whether the customer has moved to the store immediately after entering the form. By using it, it is possible to more accurately determine the possibility of a transfer fraud.

  In the present embodiment, the customer visit time is further acquired as in the first embodiment, and the time difference from when the customer starts to move (movement start time) to the visit to the store (visit time) is calculated. May be. In this case, if the time difference between the movement start time and the visit time is significantly longer than the time required for movement between the customer's home and the corresponding store, for example, the customer is rushed to make the transfer quickly. It may be determined that there is a possibility of wire fraud.

  Moreover, in this embodiment, the server 40 may acquire route information on which the customer has moved after the entry time from the above-described mobile terminal or the like. In this case, if the server 40 detects from the acquired route information that, for example, the customer has detoured to another store such as a convenience store before coming to the store of the financial institution, the customer is particularly impatient. It may be determined that there is no possibility of wire fraud.

<<< 4. Summary >>
As described above, according to the information processing system 1 according to the first and second embodiments, not only the customer's age and transfer amount, but also whether the customer has visited the store immediately after entering the form. By using this information as well, it is possible to determine the possibility of a transfer fraud more accurately. In addition, according to these embodiments, since the financial institution side can grasp that the writing device 10 has been used, it is recognized that the customer has a high probability of coming to the store by the grasping. Advance preparations for customer visits can be made. Therefore, when a customer visits the store, it is possible to provide an appropriate service to the customer promptly, leading to an improvement in the quality of service for the regular customer.

  In the above-described embodiment, an automatic transaction apparatus (ATM) installed in a store or the like may be used. In that case, the functions of the reception terminal 50 and the attendant terminal 60 described above are performed by the automatic transaction apparatus. Will be.

  Moreover, in embodiment mentioned above, it is not limited to judging using the time difference of entry time, store visit time, etc. For example, the said writing device 10 is used for the entry of the form 70 also in a store. The server 40 may obtain the entry start time and the entry completion time, and may determine the possibility of a transfer fraud using the time difference between these times (ie, entry time). In this case, the server 40 compares the time difference with a predetermined time, and when a comparison result is obtained that the time difference is much shorter than the predetermined time, the server 40 rushes to fill in the transfer. Therefore, it may be estimated that the entry time has been shortened and that there is a possibility of wire fraud.

  Furthermore, in the above-described embodiment, acquisition of entry position information is not limited to being performed by a method using a GPS signal from a GPS satellite as described above. For example, the position of the beacon device 20 is fixed, and the position information of the fixed position of the beacon device 20 and the device identification information for identifying the beacon device 20 are stored in the storage unit 400 of the server 40 in advance. And when the server 40 acquires the device identification information of the beacon device 20, the server 40 collates the acquired device identification information with the stored information, and acquires the position information of the beacon device 20 as entry position information. Good.

<<< 5. Hardware configuration of server 40 according to the present embodiment >>
The information processing method according to the embodiment of the present invention has been described above. Next, the hardware configuration of the server 40 according to the present embodiment will be described with reference to FIG. FIG. 12 is a block diagram showing a hardware configuration of the server 40 according to the embodiment of the present invention.

  As illustrated in FIG. 12, the server 40 includes a CPU 950, ROM 952, RAM 954, internal bus 956, input / output interface 958, input device 960, output device 962, HDD 964, network interface 966, drive 970, and connection port 974.

(CPU950)
The CPU 950 is configured by a processor such as a microprocessor, and controls the overall operation in the server 40 according to various programs as an arithmetic processing unit and a control unit. CPU950 implement | achieves the function as the above-mentioned collation part 412, the comparison part 414, the judgment part 416, the notification part 418, etc., for example.

(ROM952, RAM954)
The ROM 952 stores programs used by the CPU 950, calculation parameters, and the like. The RAM 954 temporarily stores programs used in the execution of the CPU 950, parameters that change as appropriate during the execution, and the like. The ROM 952 and the RAM 954 realize the function as the storage unit 400 described above.

(Internal bus 956)
The internal bus 956 is constituted by a CPU bus or the like. The internal bus 956 connects the CPU 950, the ROM 952, and the RAM 954 to each other.

(I / O interface 958)
The input / output interface 958 connects the HDD 964 and the network interface 966 to the internal bus 956. For example, the HDD 964 exchanges data with the RAM 954 and the like via the input / output interface 958 and the internal bus 956.

(Input device 960)
The input device 960 is configured as an example of the operation unit 630 of the staff terminal 60. The input device 960 is realized by a keyboard, a touch panel, or the like, for example.

(Output device 962)
The output device 962 is configured as an example of the display unit 640 of the attendant terminal 60. The output device 962 includes a display device such as a liquid crystal display device or an OLED device as a display unit. This display device displays an image or the like generated by the CPU 950.

(HDD964)
The HDD 964 is a data storage device that implements the functions of the storage unit 400 and the like described above. The HDD 964 can also store programs executed by the CPU 950 and various data.

(Network interface 966)
The network interface 966 is a communication interface configured with a communication device or the like for performing communication with the GPS unit 30 or the like. The network interface 966 functions as the communication unit 420 described above.

(Drive 970)
The drive 970 is a reader / writer for a removable recording medium 972 such as a magnetic disk, an optical disk, or a semiconductor memory, and is built in or externally attached to the server 40. The drive 970 can write information into the attached removable recording medium 972. Further, the drive 970 can read information recorded on the attached removable recording medium 972 and output the information to the RAM 954.

(Connection port 974)
The connection port 974 is a port for directly connecting an external device (not shown) to the server 40. The connection port 974 is, for example, a USB (Universal Serial Bus) port, an IEEE 1394 port, a SCSI (Small Computer System Interface) port, or the like. The connection port 974 can exchange various data between the server 40 and the external device by connecting the external device to the connection port 974.

  Heretofore, an example of the hardware configuration of the server 40 according to the present embodiment has been shown. Each component described above may be configured using a general-purpose member, or may be configured by hardware specialized for the function of each component. Such a configuration can be appropriately changed according to the technical level at the time of implementation.

<<< 6. Supplement >>
The preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, but the present invention is not limited to such examples. It is obvious that a person having ordinary knowledge in the technical field to which the present invention pertains can come up with various changes or modifications within the scope of the technical idea described in the claims. Of course, it is understood that these also belong to the technical scope of the present invention.

  Moreover, each step in the process of each embodiment mentioned above does not necessarily need to be processed along the order described. For example, the steps may be processed by changing the order as appropriate. Each step may be processed in parallel or individually instead of being processed in time series. Furthermore, the processing method of each step does not necessarily have to be processed according to the described method, and may be processed by other methods by other functional units or devices, for example.

  Furthermore, at least a part of the information processing according to the above-described embodiment can be configured by software as an information processing program for causing a computer to function. When configured by software, at least a part of these methods May be stored in a recording medium such as a flexible disk or a CD (Compact Disc) -ROM, and read and executed by the server 40 or the like or another device connected to the server 40. . The recording medium is not limited to a removable medium such as a magnetic disk or an optical disk, but may be a fixed recording medium such as a hard disk device or a memory. Furthermore, a program for realizing at least a part of these methods may be distributed via a communication line (including wireless communication) such as the Internet. Further, the program may be distributed in a state where the program is encrypted, modulated or compressed, and stored in a recording medium via a wired line such as the Internet or a wireless line.

DESCRIPTION OF SYMBOLS 1 Information processing system 10 Writing device 20 Beacon apparatus 30 GPS unit 40 Server 50 Reception terminal 60 Staff terminal 70 Form 80 Screen 100 Writing part 102 Case 104 Pen core 104a Nib 106 Knock part 110,210,310,410,510, 610 Control unit 120, 220, 320, 420, 520, 620 Communication unit 400 Storage unit 412 Verification unit 414 Comparison unit 416 Determination unit 418 Notification unit 422 Wireless communication unit 424 Wired communication unit 530, 630 Operation unit 540, 640 Display unit 550 Card / passbook receiving part 560 ticketing part 950 CPU
952 ROM
954 RAM
956 Internal bus 958 I / O interface 960 Input device 962 Output device 964 HDD
966 Network interface 970 Drive 972 Removable recording medium 974 Connection port

Claims (16)

A receiving unit for receiving form entry information including information on an entry time entered by the customer outside the store in the form and first identification information associated with the entry;
A time information acquisition unit for acquiring a time related to the behavior of the customer after the entry time;
An identification information acquisition unit that acquires second identification information corresponding to the first identification information;
A collation unit for collating the first identification information and the second identification information;
A comparison unit that compares a time difference between the entry time and the time related to the behavior of the customer with a predetermined time;
Based on the collation result of the collation unit and the comparison result of the comparison unit, a determination unit that determines the possibility of fraud;
An information processing system comprising:   The information processing system according to claim 1, wherein the entry time is an entry completion time when the customer has completed entry in the form. The time information acquisition unit acquires the time when the customer visited the store as the time related to the behavior of the customer,
The determination unit is based on the collation result indicating that the first identification information and the second identification information correspond to each other and the comparison result indicating that the time difference is equal to or less than a predetermined time. The information processing system according to claim 1, wherein the information processing system determines that there is a possibility of fraud.   The information processing system according to claim 3, wherein the time information acquisition unit acquires a time when a card-like medium or a booklet-like medium is received by a reception terminal installed in the store as the store visit time.   The information processing system according to claim 3, wherein the time information acquisition unit acquires a time when customer identification information is received by a clerk terminal installed at a store window as the store visit time. The time information acquisition unit acquires the time when the customer started moving after the entry time as the time related to the customer's behavior,
The determination unit is based on the collation result indicating that the first identification information and the second identification information correspond to each other and the comparison result indicating that the time difference is equal to or less than a predetermined time. The information processing system according to claim 1, wherein the information processing system determines that there is a possibility of fraud.   The information processing system according to claim 6 with which said time information acquisition part acquires the time when said customer started movement after said entry time from the smart phone and wearable terminal which said customer carries.   The information processing system according to any one of claims 1 to 7, further comprising a storage unit that stores a correspondence relationship between the first identification information and the second identification information. The storage unit stores the attribute information of the customer,
The information processing system according to claim 8, wherein the determination unit determines that there is a possibility of fraud when the attribute information satisfies a predetermined condition. The form entry information includes entry position information indicating a place where the customer has entered the form,
The information processing system according to claim 1, wherein the determination unit determines that there is a possibility of fraud when the entry position information satisfies a predetermined condition. The form entry information includes transaction amount information entered in the form,
The information processing system according to any one of claims 1 to 10, wherein the determination unit determines that there is a possibility of fraud when the transaction amount information satisfies a predetermined condition.   The information processing system according to any one of claims 1 to 11, wherein the reception unit receives at least a part of information included in the form entry information from a writing device used by the customer at the time of the entry. .   The information processing system according to claim 1, further comprising a notification unit that notifies a determination result of the determination unit to a clerk of the store. Receiving form entry information including information on the entry time that the customer entered in the form outside the store and the first identification information associated with the entry;
Obtain the time related to the customer's behavior after the entry time,
Obtaining second identification information corresponding to the first identification information;
Collating the first identification information with the second identification information;
Compare the time difference between the entry time and the time related to the customer's behavior with a predetermined time,
Based on the result of the comparison and the result of the comparison, it is determined whether or not there is a possibility of fraud.
An information processing method. A receiving unit for receiving form entry information including information on an entry time entered by the customer outside the store in the form and first identification information associated with the entry;
A time information acquisition unit for acquiring a time related to the behavior of the customer after the entry time;
An identification information acquisition unit that acquires second identification information corresponding to the first identification information;
A collation unit for collating the first identification information and the second identification information;
A comparison unit that compares a time difference between the entry time and the time related to the behavior of the customer with a predetermined time;
Based on the collation result of the collation unit and the comparison result of the comparison unit, a determination unit that determines the possibility of fraud;
An information processing apparatus comprising: Computer
A receiving unit for receiving form entry information including information on an entry time entered by the customer outside the store in the form and first identification information associated with the entry;
A time information acquisition unit for acquiring a time related to the behavior of the customer after the entry time;
An identification information acquisition unit that acquires second identification information corresponding to the first identification information;
A collation unit for collating the first identification information and the second identification information;
A comparison unit that compares a time difference between the entry time and the time related to the behavior of the customer with a predetermined time;
Based on the collation result of the collation unit and the comparison result of the comparison unit, a determination unit that determines the possibility of fraud;
Program to make it function.

Images