JP2020017172A - Automatic teller machine - Google Patents

Abstract

To provide an automatic teller machine that can ensure security when unlocking an electronic lock.SOLUTION: An automatic teller machine 1 includes: a start control unit 101 that, in a case where an operation for instructing start of a code reader 13 is received, starts the code reader 13; a determination unit 102 that decrypts information on a code read by the code reader 13 on the basis of a predetermined encryption logic, and determines whether it is information on an authentic code; a transmission unit 103 that, in a case where it is determined as information on the authentic code, transmits the information on the code to an external server; and an electronic lock control unit 104 that, in a case where an authentication result for the information on the code returned from the external server indicates that it is normal, unlocks an electronic lock 14 for a door for working.SELECTED DRAWING: Figure 2

Description

  The present invention relates to an automatic teller machine.

  For example, as described in Patent Literature 1, a deposit and withdrawal service using an automatic teller machine has become widespread. Accordingly, the automatic teller machine is not limited to being installed in a store of a financial institution, but is also installed outside a financial institution such as a retail store or a public facility. When a trouble such as an obstacle occurs in such an automatic teller machine, a security company security officer is requested to be dispatched, and a security guard who runs to the site responds. The security guard copes with the trouble, for example, by opening a work door provided in the automatic teller machine.

JP 2005-242638 A

  However, in a conventional automatic teller machine, when a security guard opens a work door, the lock provided on the door is opened with a physical key before the door is opened. Since a physical key is provided for each automatic teller machine, it is difficult for a security guard to possess the physical keys of all the automatic teller machines, and it is common to store the physical keys in facilities. In this case, every time a trouble is dealt with, a physical key is required to be obtained from the facility, which is a heavy burden. In addition, the management of a large amount of physical keys in the facility imposes a heavy burden. In order to reduce such a burden, an electronic lock may be provided on the work door and the electronic lock may be unlocked by authenticating the code distributed to the mobile terminal possessed by the guard. It is necessary to consider a mechanism for ensuring security against unauthorized copying such as copying.

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide an automatic teller machine that can ensure security when unlocking an electronic lock.

  An automatic teller machine according to one embodiment of the present invention is configured such that, when an operation for instructing activation of a code reader is received, an activation control unit that activates the code reader, and information of the code read by the code reader are predetermined. A decryption unit that decrypts the information based on the encryption logic and determines whether the information is genuine code, and transmits the code information to an external server when it is determined that the information is genuine code And an electronic lock control unit that unlocks the electronic lock of the work door when it indicates that the authentication result for the code information returned from the external server is normal.

  According to this aspect, the authenticity of the code information read by the code reader is authenticated by using a predetermined encryption logic, and further, the authenticity of the code information is authenticated by the authentication result returned from the external server. The electronic lock of the work door can be unlocked.

  In the above aspect, when the code information cannot be transmitted to the external server, the electronic lock control unit displays the first part of the one-time password information included in the code information on the display, and thereafter, displays the first part of the one-time password information. When the input of the second part different from the first part is received, the electronic lock of the work door may be unlocked.

  According to this aspect, even if the code information cannot be transmitted to the external server due to, for example, a communication failure, the validity of the code information can be authenticated using the one-time password information included in the code information.

  In the above aspect, the electronic lock control unit displays an electronic lock operation screen for operating the electronic lock before unlocking the electronic lock of the work door, and displays the unlocking of the electronic lock on the electronic lock operation screen. When the operation for instructing the lock is input, the electronic lock of the work door may be unlocked.

  According to this aspect, the electronic lock of the work door can be unlocked on condition that an operation for instructing the unlocking of the electronic lock is input from the electronic lock operation screen.

  In the above aspect, the electronic lock control unit determines that the operation for instructing unlocking of the electronic lock is input on the electronic lock operation screen, and that the password input on the electronic lock operation screen is a valid password. In such a case, the electronic lock of the work door may be unlocked.

  According to this aspect, when the operation for instructing the unlocking of the electronic lock and the password are input from the electronic lock operation screen, and the input password is determined to be a valid password, the work door Can be unlocked.

  In the above aspect, when an operation for instructing locking of the electronic lock is input on the electronic lock operation screen, the electronic lock control unit locks the electronic lock of the work door, and the work end displayed thereafter. When the operation to instruct the end of the work is input on the menu screen for the system, the end of the work is notified to the external center, and when the normal response is received from the external center, the end of the work is permitted. Is also good.

  According to this aspect, at the time of ending the work, it is possible to notify the external center of the fact and to permit the end of the work on condition that a normal response is received from the external center.

  In the above aspect, the encryption logic is a common key encryption method, and further includes a key management unit that manages a plurality of common keys, and the key management unit updates a specific program stored in the own device. One common key among a plurality of common keys may be exchanged with a common key that is sometimes distributed.

  According to this aspect, when exchanging one common key among a plurality of common keys, a common key other than the common key to be exchanged is exchanged until the common key is exchanged in all the ATMs. Authentication can be performed by using this.

  A method according to another aspect of the present invention is a method executed by a processor, comprising: a start control step of starting a code reader when an operation for instructing start of a code reader is received; and A step of decoding the read code information based on a predetermined encryption logic to determine whether the information is genuine code information, and, if it is determined that the information is genuine code, A transmission step of transmitting information to the external server, and an electronic lock control step of unlocking the electronic lock of the work door when the authentication result for the information of the code returned from the external server indicates that it is normal, including.

  According to this aspect, the authenticity of the code information read by the code reader is authenticated by using a predetermined encryption logic, and further, the authenticity of the code information is authenticated by the authentication result returned from the external server. The electronic lock of the work door can be unlocked.

  A program according to another aspect of the present invention is a program that, when receiving an operation for instructing activation of a code reader, a start control unit that activates the code reader, and stores information on a code read by the code reader. A determination unit that decrypts based on the encryption logic of the information and determines whether the information is genuine code, and a transmission unit that transmits the information of the code to the external server when it is determined that the information is genuine code In the case where the authentication result for the code information returned from the external server indicates that it is normal, the electronic lock control unit unlocks the electronic lock of the work door.

  According to this aspect, the authenticity of the code information read by the code reader is authenticated by using a predetermined encryption logic, and further, the authenticity of the code information is authenticated by the authentication result returned from the external server. The electronic lock of the work door can be unlocked.

  ADVANTAGE OF THE INVENTION According to this invention, the automatic teller machine which can ensure the security at the time of unlocking an electronic lock can be provided.

It is a block diagram showing an example of composition of an ATM system including an automatic teller machine concerning an embodiment. It is a block diagram showing an example of composition of an automatic teller machine concerning an embodiment. 2 is a flowchart for explaining an example of the operation of the ATM system shown in FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that the same components are denoted by the same reference numerals, and redundant description will be omitted. The various dimensional ratios in the drawings are not limited to the illustrated ratios.

  FIG. 1 is a block diagram illustrating a configuration of an ATM system including an automatic teller machine (hereinafter, also referred to as “ATM”) according to the embodiment. The ATM system 100 includes one or more ATMs 1, one or more mobile terminals 2, and a security company server 3. The ATM 1 and the security company server 3, and the mobile terminal 2 and the security company server 3 are configured to be able to communicate via networks Na and Nb, respectively.

  The networks Na and Nb are, for example, any of the Internet, a LAN, a dedicated line, a telephone line, an in-house network, a mobile communication network, Bluetooth (registered trademark), WiFi (Wireless Fidelity), other communication lines, and combinations thereof And it does not matter whether it is wired or wireless.

  The ATM 1 is a device operated by a user when withdrawing a deposit from a financial institution account, depositing cash into an account, transferring money between accounts, or the like using a cash card or the like.

  The mobile terminal 2 is a terminal used by security personnel of a security company. As the mobile terminal 2, for example, a smartphone, a tablet terminal, a personal digital assistant (PDA), or another terminal device can be used as appropriate.

  The security company server 3 is a server device managed by the security company, and has, for example, a function of generating a QR code (registered trademark), a function of performing QR code authentication, and a function of performing password authentication. The functions of the security company server 3 will be described below. In the present embodiment, a description will be given using a QR code, but another two-dimensional code or a barcode may be used instead of the QR code.

  The function of generating a QR code is a function of generating a QR code based on a QR code request message transmitted from the mobile terminal 2 and transmitting the generated QR code to the mobile terminal 2. The QR code request message is transmitted from the mobile terminal 2 possessed by the guard who has arrived at the ATM 1 where the failure or the like has occurred.

  The QR code includes, for example, a version of a common key used for encryption, a one-time password, and data encrypted with a common key used in a common key encryption method. There are the following two types of data encrypted with the common key. These are data encrypted with a common key used for authentication in the ATM 1 and data encrypted with a common key used for authentication in the security company server 3. An abnormal time code and a release code can be set in the one-time password. The abnormal time code and the release code are arbitrarily provided in the character string constituting the one-time password, and are respectively stored in the respective portions. Details of the abnormal code and the release code will be described later.

  The function of performing QR code authentication is to authenticate the QR code based on the received QR code information when the QR code information authenticated by the common key used for the authentication in the ATM 1 is received from the ATM 1. This function transmits the result to ATM1. When the decrypted QR code information matches the information at the time of generating the QR code, the security company server 3 determines that the QR code is a genuine QR code and transmits a normal response to the ATM 1. When the decrypted QR code information does not match the information when the QR code was generated, the security company server 3 determines that the QR code is an invalid QR code and transmits an error response to the ATM 1.

  The function of performing password authentication is a function of, when a password input at the ATM 1 is received from the ATM 1, authenticating whether the password is a valid password, and transmitting the authentication result to the ATM 1. When the password received from the ATM 1 matches the password managed in the DB, the security company server 3 determines that the password is valid, and transmits a normal response to the ATM 1. When the password received from the ATM 1 does not match the password managed in the DB, the security company server 3 determines that the password is improper and transmits an error response to the ATM 1.

  The configuration of the ATM 1 will be described with reference to FIG. The ATM 1 includes, for example, a control unit 10, an input unit 11, a display unit 12, a code reader 13, an electronic lock 14, a communication unit 15, and a storage unit 16.

  The control unit 10 is, for example, a processor, and includes an arithmetic and logic operation unit that processes arithmetic and logical operations and the like, and various registers. The control unit 10 realizes various functions by executing a program stored in the storage unit 16. The various functions include, for example, an activation control unit 101, a determination unit 102, a transmission unit 103, an electronic lock control unit 104, and a key management unit 105. Details of various functions will be described later.

  The input unit 11 is, for example, a touch panel or a numeric keypad, and is a device that receives an input from a user. The input unit 11 is not limited to a touch panel or numeric keys, but may be, for example, a keyboard. Further, the ten keys may be displayed in the touch panel. The display unit 12 is, for example, a display, and is a device that displays operation guidance, messages, and the like. The input unit 11 and the display unit 12 may be integrated as a touch panel display.

  The code reader 13 is, for example, a QR (quick response) code reader, and is a device that reads a QR code. In the present embodiment, a QR code reader will be described as the code reader 13, but the code reader 13 is not limited to the QR code reader, and may be another two-dimensional code reader or a barcode reader. Further, a reader for reading a code written in the IC card may be included.

  The electronic lock 14 is a lock which is attached to a work door of the ATM 1 and is electrically locked and unlocked. The work door can be provided at an arbitrary position such as an upper or lower portion of the ATM, such as an upper door or a lower door. The communication unit 15 is a device that connects to the networks Na and Nb and communicates with other terminals and the like on the networks Na and Nb.

  The storage unit 16 is a computer-readable recording medium such as a disk drive or a semiconductor memory, for example, and stores various programs, data necessary for executing the various programs, and the like. The various data includes, for example, a common key 161.

  The common key 161 is a common key used in the common key cryptosystem, and is managed by the ATM 1 and the security company server 3. As described above, the security company server 3 manages a common key used for authentication in the ATM 1 and a common key used for authentication in the security company server 3. The ATM 1 manages the common key 161 used by the key management unit 105 of the control unit 10 for authentication in the ATM 1.

  The key management unit 105 manages a plurality of common keys 161 having different versions. The QR code information received from the mobile terminal 2 includes the version of the common key 161. Therefore, the ATM 1 decrypts the QR code information using the common key 161 that matches the version included in the QR code information.

  Here, when the single common key 161 is managed, when exchanging the common key 161, a period from the start of the exchange in any of the ATMs 1 to the completion of the exchange in all the ATMs 1 is as follows. The common key 161 managed by each ATM 1 is in an unified state. In this case, it is necessary to manage the exchange status and the available common key for each ATM1. On the other hand, when managing a plurality of common keys 161 having different versions, the common keys can be exchanged as follows.

  When exchanging the common key 161 in each ATM 1, the designated version of the common key 161 is exchanged for a new version of the common key 161. The timing for exchanging the common key 161 may be, for example, the timing for updating a specific program. Specifically, when a specific program is updated, a new version of the common key 161 may be distributed. The version to be exchanged can be arbitrarily specified, for example, the oldest version can be specified. Until the exchange is completed in all ATMs 1, authentication is performed by specifying a common key 161 other than the exchange target version.

  The activation control unit 101 activates the code reader 13 when receiving an operation for instructing activation of the code reader 13. As an operation for instructing activation of the code reader 13, for example, an input operation for instructing activation to be performed on the input unit 11 or an activation instruction issued to an ATM from an external center provided outside. For transmitting a command to the ATM from the external center to the ATM. The activation of the code reader 13 includes, for example, activating the function of the code reader 13 from a sleep state (power is on) to an on state, and activating the code reader 13 from an off state to an on state.

  The determination unit 102 decrypts the information of the QR code read by the code reader 13 using the common key 161 corresponding to the version of the common key included in the QR code, and determines whether the QR code is a genuine QR code. . Here, the conditions when the determination unit 102 determines whether the QR code is genuine are different from the conditions when the security company server 3 determines whether the QR code is genuine. The security company server 3 determines that the QR code is a genuine QR code when the decrypted QR code information matches the information at the time of generating the QR code. When decoding using 161 is possible, it is determined that the QR code is a genuine QR code.

  In the present embodiment, a case will be described in which encryption and decryption are performed using a common key cryptosystem using a common key. However, the encryption system used for encryption and decryption is not limited to the common key cryptosystem. For example, another encryption method such as a public key encryption method using a public key and a secret key may be used.

  The transmitting unit 103 transmits the QR code information decrypted by the determining unit 102 to the security company server 3 when it is determined that the QR code is a genuine QR code.

  The electronic lock control unit 104 causes the display to display an electronic lock operation screen for operating the electronic lock 14 when the authentication result for the QR code information returned from the security company server 3 indicates that the authentication result is normal. The electronic lock control unit 104 transmits the input password to the security company server 3 when an operation for instructing unlocking of the electronic lock 14 is input on the electronic lock operation screen and a password is input on the electronic lock operation screen. I do. The electronic lock control unit 104 unlocks the electronic lock 14 when it indicates that the authentication result for the password returned from the security company server 3 is normal.

  When the authentication result for the information of the QR code indicates that it is normal, the electronic lock 14 may be unlocked without displaying the electronic lock operation screen. Further, when the electronic lock operation screen is displayed, the electronic lock 14 may be unlocked without performing authentication using a password.

  The electronic lock control unit 104 locks the electronic lock 14 when an operation to instruct locking of the electronic lock 14 is input on the electronic lock operation screen. After the electronic lock operation screen is displayed when the electronic lock 14 is unlocked, the electronic lock operation screen is continuously displayed as it is.

  The electronic lock control unit 104, which is displayed after the electronic lock 14 is locked, notifies the external center of the end of the operation when an operation for instructing the end of the operation is input on the menu screen for ending the operation. The external center transmits a normal response to the ATM 1 when certifying the end of the work, and transmits an error response to the ATM 1 when not certifying the end of the work. When receiving a normal response from the external center, the electronic lock control unit 104 permits the end of the work. In the above description, the electronic lock is locked before displaying the menu screen for ending the work, but the electronic lock may be locked after the end of the work is permitted.

  Here, for example, when a communication failure or the like occurs in a communication line with the security company server 3 and the QR code information cannot be transmitted to the security company server 3, the electronic lock control unit 104 Instead of performing the authentication for the QR code information, the QR code information may be authenticated by the following procedures (1) to (5).

  (1) The electronic lock control unit 104 decrypts the information of the QR code using the common key 161 corresponding to the version of the common key included in the QR code, and uses the first part of the one-time password information as an abnormal time code. It is displayed on the display unit 12.

  (2) The guard notifies the external center of the abnormal time code displayed on the display unit 12.

  (3) The external center specifies the one-time password information corresponding to the abnormal time code, and notifies the security officer of a second part different from the first part of the one-time password information as a release code.

  (4) The guard inputs the release code on the screen displayed on the display unit 12.

  (5) The electronic lock control unit 104 displays an electronic lock operation screen when a valid release code is input.

  Next, an example of the operation in the ATM system will be described with reference to FIG. In this operation example, the external center that has received the notification that a failure has occurred in a certain ATM 1 transmits a message to that effect to the security company server 3, and the security company server 3 transmits the message to a mobile station owned by a specific security officer. The description will be made on the assumption that the dispatch instruction has been transmitted to the terminal 2.

  First, when the guard who has been the target of the dispatch instruction arrives at the ATM 1, the mobile terminal 2 transmits a QR code request message to the security company server 3 according to the operation instruction of the guard (step S101).

  Subsequently, the security company server 3 generates a QR code based on the QR code request message (Step S102), and transmits the generated QR code to the mobile terminal 2 (Step S103).

  Subsequently, the activation control unit 101 of the ATM 1 activates the code reader 13 according to the operation instruction of the guard (step S104).

  Subsequently, the code reader 13 of the ATM 1 reads the QR code displayed on the display of the mobile terminal 2 according to the operation of the guard (step S105).

  Subsequently, the determination unit 102 of the ATM 1 decrypts the information of the QR code read in step S105 using the common key 161 corresponding to the version of the common key included in the QR code, and is a genuine QR code. It is determined whether or not (step S106). If this determination is NO (step S106; NO), an error is displayed on the display (step S110).

  If it is determined in step S106 that the QR code is a genuine QR code (step S106; YES), the transmitting unit 103 of the ATM 1 guards a part of the information of the QR code decoded in step S106. The data is transmitted to the company server 3 (step S107).

  Subsequently, the security company server 3 checks a part of the information of the QR code received from the ATM 1 and determines whether the information is genuine information (step S108). If this determination is NO (step S108; NO), the security company server 3 transmits an error response to the ATM 1 (step S109), and the ATM 1 displays an error on the display (step S110).

  If it is determined in step S108 that the QR code is a genuine QR code (step S108; YES), the security company server 3 transmits a normal response to the ATM 1 (step S111).

  Subsequently, the electronic lock control unit 104 of the ATM 1 displays an electronic lock operation screen on the display (Step S112).

  Subsequently, when an operation for instructing unlocking of the electronic lock 14 is input on the electronic lock operation screen and a password is input, the input password is transmitted to the security company server 3 via the ATM 1 (step S113). It is transmitted (step S114).

  Subsequently, the security company server 3 determines whether the password received from the ATM 1 is a valid password (Step S115). If this determination is NO (step S115; NO), the security company server 3 transmits an error response to the ATM 1 (step S116), and the ATM 1 displays an error on the display (step S117).

  If it is determined in step S115 that the password is valid (step S115; YES), the security company server 3 transmits a normal response to the ATM 1 (step S118).

  Subsequently, the electronic lock control unit 104 of the ATM 1 unlocks the electronic lock 14 (Step S119).

  As described above, according to the ATM 1 in the embodiment, the code reader 13 is activated based on the activation instruction of the code reader 13, and the information of the QR code read by the code reader 13 is decrypted using the common key 161. If the QR code is authentic, the information of the QR code is transmitted to the security company server 3, and if the QR code authentication result returned from the security company server 3 is normal, the work door Can be unlocked.

  Accordingly, the security of authenticating the validity of the information of the QR code read by the code reader 13 using the common key 161 and further authenticating the QR code using a part of the information of the decrypted QR code. Based on the authentication result returned from the company server 3, the validity of the QR code information can be authenticated, and then the electronic lock 14 of the work door can be unlocked.

  In other words, when the information of the QR code encrypted with the common key is authenticated using the common key 161 of the ATM 1 and the security company server 3, respectively, the electronic lock 14 of the work door is unlocked. Can be. Therefore, security when unlocking the electronic lock 14 can be ensured.

[Modification]
Note that the present invention is not limited to the above-described embodiment, and can be implemented in other various forms without departing from the gist of the present invention. Therefore, the above-described embodiment is merely an example in all aspects, and is not to be construed as limiting. For example, the above-described processing steps can be arbitrarily changed in order or performed in parallel within a range that does not cause inconsistency in the processing contents.

  In the above-described embodiment, the security company server 3 has a function of performing password authentication, but the ATM 1 may have a function of performing password authentication. On the other hand, some of the functions of the ATM 1 in the above-described embodiment may be omitted. For example, a function of authenticating the validity of the QR code read by the code reader 13 can be omitted. In this case, the validity of the QR code is determined based on the authentication result of the security company server 3.

  DESCRIPTION OF SYMBOLS 1 ... Automatic teller machine (ATM), 2 ... Mobile terminal, 3 ... Security company server, 10 ... Control part, 11 ... Input part, 12 ... Display part, 13 ... Code reader, 14 ... Electronic lock, 15 ... Communication part , 16 storage unit, 100 ATM system, 101 activation control unit, 102 determination unit, 103 transmission unit, 104 electronic lock control unit, 105 key management unit, 161 common key, Na, Nb network

Claims (8)

An activation control unit that activates the code reader when an operation for instructing activation of the code reader is received;
A determination unit that decrypts the information of the code read by the code reader based on a predetermined encryption logic and determines whether the information is genuine code information,
When it is determined that the information of the genuine code, the transmission unit that transmits the information of the code to an external server,
An electronic lock control unit that unlocks the electronic lock of the work door when indicating that the authentication result for the information of the code returned from the external server is normal;
Automatic teller machine equipped with. When the electronic lock control unit cannot transmit the code information to the external server, the electronic lock control unit causes the display to display a first portion of the one-time password information included in the code information. When an input of a second part different from the first part is received, the electronic lock of the work door is unlocked,
The automatic teller machine according to claim 1. The electronic lock control unit displays an electronic lock operation screen for operating the electronic lock before unlocking the electronic lock of the work door, and instructs unlocking of the electronic lock on the electronic lock operation screen. When the operation for inputting is input, the electronic lock of the work door is unlocked,
The automatic teller machine according to claim 1 or 2. The electronic lock control unit is configured to input an operation for instructing unlocking of the electronic lock on the electronic lock operation screen, and determine that the password input on the electronic lock operation screen is a valid password. At first, we unlock electronic lock of work door,
An automatic teller machine according to claim 3. The electronic lock control unit locks the electronic lock of the work door when an operation for instructing the lock of the electronic lock is input on the electronic lock operation screen, and displays the work lock displayed thereafter. When an operation for instructing the end of the work is input on the menu screen, the end of the work is notified to the external center, and the end of the work is permitted when a normal response is received from the external center.
The automatic teller machine according to claim 3 or 4. The encryption logic is a common key encryption method,
A key management unit that manages a plurality of common keys,
The key management unit exchanges one of a plurality of common keys with a common key distributed when a specific program stored in the own device is updated,
An automatic teller machine according to any one of claims 1 to 5. A method performed by a processor, the method comprising:
A start control step of activating the code reader when an operation for instructing activation of the code reader is received;
A determining step of decrypting the information of the code read by the code reader based on a predetermined encryption logic and determining whether or not the information is a genuine code;
When it is determined that the information of the genuine code, the transmitting step of transmitting the information of the code to an external server,
An electronic lock control step of unlocking the electronic lock of the work door when indicating that the authentication result for the information of the code returned from the external server is normal;
A method that includes Computer
An activation control unit that activates the code reader when an operation for instructing activation of the code reader is received;
A determining unit that decrypts information of a code read by a code reader based on a predetermined encryption logic and determines whether the information is genuine code information,
When it is determined that the information of the genuine code, the transmission unit that transmits the information of the code to an external server,
An electronic lock control unit that unlocks the electronic lock of the work door when indicating that the authentication result for the information of the code returned from the external server is normal;
Program to function as.

Images