JP2020177606A - Simple remittance system - Google Patents

Abstract

To enable remittance with a simple authentication operation in Internet banking.SOLUTION: In a network banking system, a remittance system connects a reader/writer to a client computer, and an IC card of a customer includes a fingerprint sensor, a CPU, and memory. The memory stores a customer identification number, a log-in password, fingerprint data of the customer, account information, and confirmation data necessary for receiving authentication from a host computer. When a user mounts the IC card on the reader/writer and touches a fingerprint sensor with a predetermined finger, the IC card is collated with the fingerprint data, and sends out the account information and the confirmation data from the IC card through the reader/writer to the host computer only when a fingerprint is authenticated.SELECTED DRAWING: Figure 5

Description

The present invention relates to network banking.

The present invention utilizes the infrastructure provided by the existing network banking system as it is, and directly transfers payment at a store, for example, from one's own account to a designated account of the store using the network banking of the same financial institution. We will propose a system and provide a system that can reduce the cost of fees paid by retailers to card companies. It does not necessarily have to be the same financial institution

In recent years, it has become an electronic IC card instead of a magnetic card paid at retail stores. In the age of magnetic cards, credit companies played a central role and became available all over the world. You don't have to worry about the exchange rate (the exchange fee is taken. You need the exchange fee to convert the currency of the cardholder's country to the currency of another country). It has become convenient and users have benefited greatly from it.

However, since this is paid by borrowing money from the credit company, there are interest and insurance premiums, etc., and the commission that the credit company takes from the store is considerable. These money are ultimately the fees paid by the cardholder, which is 3-5%.

Credit companies also spend money to redeem points, but this is also ultimately borne by the cardholder. This cost is high and is actually a problem for the government. At present, magnetic cards have security problems, and at present, they have little memory, so they are no longer used in payment systems.

On the other hand, IC cards have spread to the market at an astonishing speed in the United States, which was the most delayed at the proposal of former US President Barack Obama. When the president went to the steakhouse with his wife and tried to pay with his magnetic credit card, he could not pay and was embarrassed when he explained the electronic money IC card. Therefore, he proposed to change the IC card so that it could be used in the United States immediately, and in about two years, all Americans had it.

Nowadays, IC cards, which were TYPE-A, TYPE-B, and TYPE-C in ISO, can be used by any reader / writer because they are unified by NFC and have the same physical layer.

However, for some reason, even prepaid cards and DEBIT cards that use their own money will be charged the same high fees at stores. The current situation is that fees are not cheaper for any of the existing payment groups.

The present invention proposes a system for making payments at a store, for example, directly transferring money from a customer's network bank account to a designated account at the store, and provides a system that can significantly reduce the so-called fee paid by the store to a card company. ..

The first feature is that in an IC card equipped with a fingerprint sensor, operations such as remittance are performed after mutual authentication with a reader / writer. This enhances the security of the IC card. That is, if you have a plurality of network bank cards or paymentable cards with a payment center, you can handle it with one IC card with a fingerprint sensor devised in this case. In addition, since the fingerprint sensor is mounted on the card, even if it is dropped, it cannot be used by others, so it can be used as a wallet in the future. In other words, since it is a card that does not currently have personal authentication, multiple cards can be inserted into one card in this case, and since it has a fingerprint authentication sensor, it is more secure and cannot be used by others even if it is dropped. You have to use an existing ATM to deposit money on the card, but you don't have to use an ATM after that.

By enhancing security, when using an IC card, the wallet will have no payment limit as in the past, up to the deposit account balance.

By using an IC chip for IC cards based on ISO14443 etc., this card has a security area that can be settled based on the world standard, and personal information required for multiple network banks, reader / writer and higher rank It is possible to enter programs and other necessary information necessary for communication with a PC, and if the identity can be confirmed with a fingerprint sensor, that information can also be retrieved.

The second feature is that by using the fingerprint sensor, the face photo data can be saved in the IC chip in advance, so the face photo can be displayed only to the permitted person, and if the appearance changes, addition or change is a specific place. Will be possible with.

In addition, the driver's license can be retained on the card for a valid period.

The third feature is that it has a function as a plurality of network bank cards. For example, in the case of Bank of Tokyo-Mitsubishi UFJ, if multiple financial institutions including Bank of Tokyo-Mitsubishi UFJ are registered in advance on the IC card, Bank of Tokyo-Mitsubishi UFJ will hold the IC card over the default reader / writer. Then, it will be possible to automatically select Bank of Tokyo-Mitsubishi UFJ from among the registered multiple banks. If you connect the card to your PC, you will know which bank your store account is, and your bank card will be automatically selected from multiple cards.

Furthermore, this makes it possible to receive unique services (discounts, point redemption, etc.) from retail stores, and it is also possible to fix the account used.

In addition, since the fingerprint card in this case has a fingerprint sensor, if a display function is added, it is possible to put in a credit number or other ID and view it when necessary.

Japanese Patent Application No. 2004-74026 Japanese Patent Application No. 10-144885

Currently, in order to make a payment using a card at a store, the card company pays the fee to the store. The amount is not a fixed amount, but about 3 to 5% of the purchase amount is the market price, which is a huge burden on the retailers.

In the past, credit cards (made in the era of magnetic cards) have become very convenient because they cover networks all over the world, but due to weak security and the small amount of information that is not suitable for the times, we are now shifting to IC cards. doing.

However, the relationship with retail stores, operating companies and banks is the same as in the magnetic card era, and prepaid cards have joined the association, and there is no change in the relationship, and the commission paid by retail stores is 3 to 5%.

None of the current cards have a personal authentication function, so from a security point of view, they cannot withstand the future.

Although the technology of mounting a fingerprint sensor on an IC card has been known for a long time, it does not have a high level of security such as mutual authentication with a reader / writer, merely a function of authenticating a user (Patent Document 1). ).

In addition, the IC card is equipped with an authentication sensor, which has the function of confirming the match between the legitimate IC card owner and the person who actually uses the IC card, but mutual authentication between the reader / writer and the IC card is possible. Since it has not been done, it cannot protect against spoofing (Patent Document 2).

In order to solve the above problems, the IC card used in the system of the present invention is provided with a mutual authentication function between a fingerprint sensor and a corresponding reader / writer / PC.

The IC card used in the system of the present invention is an IC card with a fingerprint sensor for the purpose of processing a plurality of cards and for protecting personal information. As a result, even if it is dropped, it cannot be used by others. In this sense, the IC card with a fingerprint sensor of the present invention becomes a wallet in the true sense.

Further, even when a function for generating a one-time password (OPT) or a random number table is used for a transaction, it is possible to deal with it by saving predetermined data in an IC card. Even in this case, the confirmation data requested from the host computer via the network can be sent to the network site if the identity is confirmed by the fingerprint sensor.

Further, by storing the user's photo data inside the IC card, the photo stored in the IC card can be shown to the person at the store, so that the system has a high security level. It is possible to incorporate the personal authentication method into the system of this case by using the personal authentication method in combination with face authentication or other authentication methods or by LINKing independently.

Layout diagram of IC card equipped with fingerprint sensor Block diagram of an IC card equipped with a fingerprint sensor Reader / writer example Data flow in traditional payment systems Data flow in the simple remittance system according to the present invention Bank of Tokyo-Mitsubishi UFJ Internet Banking Transfer Screen Screen to transfer to a new account Input screen for the name of the branch / branch office of the transfer destination "Please select the deposit type and account number of the transfer destination. "screen Transfer amount input screen confirmation screen One-time password entry screen Transfer reception screen Logout screen Multi-card image diagram of the present invention ATM type simple remittance system diagram

FIG. 1 is an external view of the IC card 1 used in the present invention. This IC card is an example of a non-contact type IC card, and a fingerprint sensor 2 is mounted on the surface of the card. 0 is a terminal plate for contact type, but even non-contact type may be used for power supply inside the card. In the case of non-contact, it is not necessary when power is supplied to the card by radio waves from the outside. When the Card is used as a contact type, information is input / output and power is supplied from the terminal board. You don't need a leader / writer. USB connection from the socket to the PC. )

FIG. 2 is a diagram in which a user places an IC card 1 on an antenna 4 of a reader ratter, and the user brings a predetermined finger into contact with the fingerprint sensor 2. The IC card chip 3 reads the user's fingerprint by the fingerprint sensor 2 and executes an authenticity determination program. Since it is possible to register two fingers, if you authenticate yourself only after you can authenticate two fingers, the possibility of finger copy problems will be reduced. Register one by one with another person and use only one of them. You can make it possible or prevent it from being used unless two people come.

FIG. 3 is an example of the appearance of a reader / writer. When the user places the IC card 1 in the antenna area 11 and presses the fingerprint sensor 2 of the IC card with a predetermined finger to complete mutual authentication between the IC card and the system, the result is displayed on the display 6. If fingerprint authentication is not authorized here, the net security button 10 can be used to select an authentication method other than fingerprint authentication, such as a confirmation number of a table arrangement.

The user can input a confirmation number or the like using the numeric keypad 5, and can transmit data by pressing the OK button 9 after inputting.

Depending on the program of the host computer, a plurality of modes may be used, and the mode can be selected by using the mode buttons 7 and 8.

FIG. 4 shows the flow of data in a conventional payment system. First, when the purchaser first indicates the purchase intention, the store system sends a purchase authentication request to the card operating company.

Third, the card operator requests a PIN, and fourth, the user enters the PIN. Fifth, the PIN is sent from the store to the card operating company, sixthly, the card operating company confirms whether the billing amount can be withdrawn to the bank, and seventh, the bank approves or rejects the billing. Secondly, the authentication result is sent to the store from there.

The first embodiment will be described with reference to FIGS. 6 to 14. An example of the system configuration of the present invention includes, for example, an IC card (with a fingerprint sensor), a reader / writer, and a personal computer. Here, Mitsubishi UFJ Direct, which is the home banking of Bank of Tokyo-Mitsubishi UFJ, will be taken as an example.

The personal computer to which the reader / writer is connected has a browser screen open, and is set to select the login screen as the default screen.
https://entry11. bk. mufg. jp / ibg / dfw / APLIN / login / login? _TRANID = AA000_001

FIG. 6 is a login screen of Bank of Tokyo-Mitsubishi UFJ. Here, since the screen is for entering the "contract number" or "store number / account number", fingerprint authentication is performed with the IC card, and then mutual authentication between the IC card and the reader / writer is completed. Next, the IC card and the reader / writer perform mutual authentication. The IC card recognizes that it is the site of Bank of Tokyo-Mitsubishi UFJ from the result of mutual authentication, and inputs the "contract number" or "store number / account number" required for registration, which is saved in advance, into the reader / writer.

Here, when the tab signal is transmitted from the IC card to the personal computer to which the reader / writer is connected six times in a row, the return signal is further transmitted, and the return signal is transmitted here, the transfer screen as shown in FIG. 6 is obtained. ..

When the tab signal is transmitted 13 times and then the return signal is transmitted on the transfer screen, "transfer to a new account" as shown in FIG. 6 is selected.

In FIG. 7, when the tab signal is transmitted 12 times and then the return signal is transmitted, "Bank of Tokyo-Mitsubishi UFJ" is selected and the return signal is transmitted.

FIG. 8 is an input screen for the name of the branch office and the name of the branch office of the transfer destination. When the tab signal is transmitted 55 times here, the input tab of the method 3 is selected, and a predetermined 3-digit store number is transmitted from the IC card.

After that, if you send the tab signal once and then send the return signal once, "Please select the deposit type / account number of the transfer destination" shown in Fig. 9. 』Move to the page.

In Fig. 9, "Please select the deposit type and account number of the transfer destination. ] Is shown on the page. On this page, if the tab signal is transmitted 11 times, the column moves to the "ordinary account" column, and if the blank signal is transmitted once, the ordinary account is selected.

Next, if you send the tab signal once, it will move to the account number column, so if you send the specified account number data as half-width number data and send the tab data twice, the "next" tab will be selected. Send a return signal to move to the next screen.

Next, since the transition to the transfer amount input screen shown in FIG. 10 is performed, the tab signal is transmitted 13 times, the amount data is input from the numeric keypad of the reader / writer or the personal computer to which the reader / writer is connected, and the tab signal is transmitted 4 times. After transmitting, the return signal is transmitted.

Next, the screen transitions to the confirmation screen shown in FIG. 11, the tab signal is transmitted 12 times, and the return signal is transmitted, the transition to the one-time password input screen as shown in FIG. 12 occurs.

After transitioning to the one-time password input screen shown in FIG. 12, the tab signal is transmitted once, and then the one-time password generated inside the IC card is transmitted with 6 single-byte numbers.

When the tab signal is sent three times and the return signal is sent once, the screen transitions to the transfer acceptance screen shown in FIG. 13. When the tab signal is sent 16 times, the "Register transfer destination and transfer amount" tab is selected. Therefore, a return signal is sent.

After that, the tab signal is sent 7 times to log out.

FIG. 14 is a logout screen.

Here, the following data can be stored in the IC card 1. These data are stored in the security area of the IC card as information necessary for using this system.
▲ 1 ▼ Identity verification information ▲ 2 ▼ Membership number ▲ 3 ▼ Password for login ▲ 4 ▼ Random table data ▲ 5 ▼ Number conversion value of table columns and rows from the site ▲ 6 ▼ When fingerprint authentication is not authenticated 6-digit or more password In this case, face photo verification requires approval of, for example, two or more people.
▲ 7 ▼ Face photo information ▲ 8 ▼ QR code information

The IC card either performs conversion so that the column line characters of the random number table can be entered with the 10 keys, or stores the conversion table data in the card.

Depending on the operation method, the transfer destination information may be stored in the security area inside the card or in the personal computer and reader / writer.

The QR code information is stored on the card from the personal computer to which the reader / writer is connected. The reader / writer may be paired with the card or paired with the personal computer, so correspond to them.

FIG. 15 is a conceptual diagram of the IC card 1 having a multi-function according to the present invention. Account holder information issued by a plurality of financial institutions is stored in the IC card 1 equipped with this fingerprint sensor, and the IC card is authenticated using the user's password linked to the account information of each financial institution. It functions as a server, sends random data as a challenge to the request of the server of the financial institution via a reader / writer, and sends the response data calculated by this server to the password registered by the CPU of the IC card. And the challenge, the response is calculated by the same calculation as the server, collated with the response sent from the server, and specified if the response calculated by itself and the response sent from the server match. Certified as a financial institution and continue operations by the customer.

The IC card 1 stores, for example, personal information of four network cards, a random number table necessary for protecting net security, and information necessary for options in a safe area of the lC chip. The reader / writer is equipped with a program necessary for transactions with the site, and is set to automatically input the part that can be automatically input, which is convenient. In addition, when multiple cards become possible, the information loading of overseas net cards will become a brain. The above has been explained with the non-contact type of ISO14443, but it can also be used for the contact type that does not require a reader / writer and the method of connecting the IC card and the PC by USB etc. .. In the case of the contact type, it can be used for inputting / outputting information by contacting the terminal plate on the card (Fig. 1-0) with a pin connector and for supplying power to the inside of the card.

FIG. 16 is an external view of the ATM type simple remittance system according to the present invention. The card is placed on a reader writer, and when the fingerprint sensor is touched, personal authentication is executed, and when mutual authentication between the IC card 1 and the system of the financial institution is completed, a predetermined program is executed. As an example of using the ATM type, it can be used, for example, when purchasing a ticket as a ticket vending machine.

Use the IC card of this case to transfer the payment of products purchased at home etc. using the Internet and the payment at the store directly to the store account using the current NETBANKING. Since the fingerprint sensor is confirmed on the card, the security level is high and it will be introduced to the market in the future. In addition, since the card can store information from multiple net cards, it can be used even when going abroad if you make a contract with an overseas card.

0 Terminal board 1 IC card 2 Fingerprint sensor 3 Microcomputer 4 Antenna 5 Numeric keypad 6 Display 7 Mode button 1
8 mode button 2
9 OK button 10 Net security button 11 Antenna area

Layout diagram of IC card equipped with fingerprint sensor Block diagram of an IC card equipped with a fingerprint sensor Reader / writer example Data flow in traditional payment systems Data flow in the simple remittance system according to the present invention Bank of Tokyo-Mitsubishi UFJ Internet Banking Transfer Screen Screen to transfer to a new account Input screen for the name of the branch / branch office of the transfer destination "Please select the deposit type and account number of the transfer destination. "screen Transfer amount input screen confirmation screen One-time password entry screen Transfer reception screen Logout screen

The present invention uses the infrastructure provided by the existing network banking system as it is, and directly transfers payment at a store, for example, from one's own account to a designated account of the store using the network banking of the same financial institution. We propose a system and provide a system that can significantly reduce costs because the system is different from about 3-5% of the commission price paid by the retailer to the card company. In addition, you can transfer money even if you are not at the same bank, but since it costs a fee, you can store multiple card information on this card, so it will automatically select from the cards that are stored to match the bank account of the store. You can also fix your own account or store account.

Currently, in order to make a payment using a card at a store, the card company pays the fee to the store. The amount is not a fixed amount, but about 3 to 5% of the purchase amount is the market price, which is a heavy burden on the retail store.

In order to solve the above problems, the IC card used in the system of the present invention is provided with a fingerprint sensor and a mutual authentication function between the corresponding reader / writer or, in the case of a contact card, the fingerprint sensor and the PC. ..

Claims (3)

A general-purpose network banking system consisting of a host computer of a financial institution and one or more client computers connected to the host computer via a network. A money transfer system in which a reader / writer is additionally connected to the client computer, and is a predetermined IC. The card can be read and written, and the predetermined IC card is equipped with a fingerprint sensor, a CPU, and a memory, in which the customer's identification number and login password and the fingerprint data pre-registered by the customer are stored in the memory. Then, the account information of the user and the confirmation data necessary for receiving the authentication of the host computer are saved, and the user places the IC card in a predetermined position on the reader / writer and puts the IC card on the fingerprint sensor. When a predetermined finger is touched, the IC card collates with the fingerprint data, and only when the fingerprint is authenticated, the IC card sends the account information and the confirmation data to the host computer via the reader / writer. A simple money transfer system that features that. The above is described with a non-contact type such as ISO14443, but the same can be considered for a contact type. You can also use your own PC to send money using this system even when purchasing tickets from your home. The simple money transfer system according to claim 1, wherein the IC card is equipped with an IC chip having a memory, and the user's facial photograph data whose fingerprint is authenticated by the fingerprint sensor can be stored in the IC chip. A simple money transfer system featuring. It can also be LINKed with other personal authentication systems. In order to improve security, for example, when dividing a photo into 6 parts and putting them in an area with a different key to output a photo, use the composite key of 6 keys to make one photo. The simple money transfer system according to claim 1, wherein account holder information issued by a plurality of financial institutions is stored in the IC card, and the user's account information linked to the account information of each financial institution is linked. The IC card functions as an authentication server using a password, sends random data to the server of the financial institution via a reader / writer as a challenge, and the CPU of the IC card itself sends the response data calculated by this server. Using the password registered in the above and the challenge, the response is calculated by the same calculation as the server, collated with the response sent from the server, and the response calculated by itself and the response sent from the server are described. A simple remittance system characterized by certifying as a specific financial institution if the responses match and continuing the operation by the customer. Up to now, we have explained the contactless type such as ISO14443, but the contact type such as ISO14443 is also possible, and there is no above reader / writer, and the IC card with the necessary commands and programs such as HPML of the site is included in the IC card. It is necessary for the contact type. As a result, personal information required for requests from the site can be automatically sent from the card, and remittances can be made without the manual input of Net Bank (almost no banks). The Card can also be used for other purposes that require personal authentication.