JP2021105920A - Automatic transaction device and card processor - Google Patents

Abstract

To provide an automatic transaction device and a card processor capable of more reliably preventing leakage of confidential information held on a card.SOLUTION: An automatic transaction device includes a card processing unit 304 that processes a first-type card and a second-type card. Here, the card processing unit 304 determines, when a consultation ticket 100 (first type) is a type to be processed, whether or not a card to be processed is a credit card 200 (the second type card), and ends, based on a fact that the card to be processed is the credit card 200 (the second type card), processing of reading information for the card to be processed.SELECTED DRAWING: Figure 3

Description

The present invention relates to an automated teller machine that automatically performs transactions using cards and a card processing device used in the automated teller machine.

Conventionally, various transactions have been carried out using various cards. For example, medical institutions use medical examination tickets and credit cards to pay medical fees. An automated teller machine that automatically performs these processes is installed in a medical institution. As a result, the user can pay his / her medical expenses by having the automatic teller machine read his / her medical examination ticket and credit card.

In this case, the user may make a mistake in the card to be read by the automated teller machine. For example, a user may accidentally have an automated teller machine read his or her credit card when receiving a medical examination ticket. In such a case, there is a fear that the confidential information held on the credit card will be leaked to the outside.

In the following Patent Document 1, in order to avoid such a problem, when the user causes the device to read the credit card in the scene of reading the information from the medical examination ticket, the device side erases the read card information. Control is done. As a result, it is possible to prevent the confidential information held in the credit card from being leaked to the outside.

Japanese Patent No. 6534728

In the method of the above patent document, if the credit card is erroneously accepted, the card information is erased, but the confidential information itself is read. Therefore, the information is read until the read confidential information is erased. It is necessary to take measures to prevent the leakage to the outside.

In view of such a problem, an object of the present invention is to provide an automated teller machine and a card processing device capable of more safely preventing the leakage of confidential information held in a card.

The first aspect of the present invention relates to an automated teller machine. The automated teller machine according to this aspect includes a card processing unit that processes a first-type card and a second-type card. Here, the card processing unit determines whether or not the card to be processed is the card of the second type when the first type is the type to be processed, and the card to be processed is the second type. Based on the type of card, the process of reading information for the card to be processed is terminated.

According to the automated teller machine according to this aspect, when the second type card is mistakenly applied to the card processing unit in the state where the first type is the type to be processed, the information for the second type card is input. The reading process is completed. This makes it possible to prevent the confidential information from being read unexpectedly from the second type card. Therefore, the security of the confidential information held in the second type card can be surely guaranteed.

In the automated teller machine according to this aspect, when the first type is the type to be processed, the card processing unit acquires non-confidential information peculiar to the second type card with respect to the card to be processed. Is executed, and based on the acquisition of the non-confidential information, the process of reading the information for the card to be processed is terminated.

According to this configuration, when the second type card is mistakenly applied to the card processing unit in the state where the first type is the type to be processed, the second type card is used to determine the type. No information other than non-confidential information can be read. Therefore, it is possible to prevent the confidential information from being unexpectedly read from the second type card. Therefore, the security of the confidential information held in the second type card can be surely guaranteed.

In this configuration, the second type card can be distinguished from the first type card by having an integrated circuit capable of reading information by communication. In this case, the card processing unit may include a communication unit for reading information from the integrated circuit. Then, when the first type is the type to be processed, the card processing unit acquires the non-confidential information indicating the existence of the integrated circuit from the card to be processed by communication via the communication unit. Based on this, it may be configured to end the process of reading information for the card to be processed.

In this case, the non-confidential information indicating the existence of the integrated circuit may include connection information indicating that the communication between the communication unit and the integrated circuit has been activated.

According to this configuration, it is determined whether or not the card to be processed is a second type card depending on whether or not communication is possible in the communication unit. That is, it is possible to determine whether or not the card to be processed is a second type card without reading the confidential information from the card to be processed, and it is possible to determine whether or not the information can be read by the card to be processed according to the determination result. Therefore, if the second type card is mistakenly applied to the card processing unit, the security of the confidential information held in the second type card can be reliably ensured.

Alternatively, in this configuration, the card processing unit may include a detection unit that detects the presence or absence of the integrated circuit. In this case, the card processing unit performs the processing based on the detection by the detection unit that the integrated circuit exists in the card to be processed when the first type is the type to be processed. It may be configured to end the process of reading information on the card.

Even with this configuration, it is possible to determine whether or not the card to be processed is a second type card based on the detection result of the detection unit without reading confidential information from the card to be processed, and the card to be processed according to the determination result. It is possible to decide whether or not to read the information for. Therefore, if the second type card is mistakenly applied to the card processing unit, the security of the confidential information held in the second type card can be reliably ensured.

The automated teller machine according to this aspect may include a card insertion slot for inserting a card and a transport unit for transporting the card inserted into the card insertion slot. In this case, when the first type is the type to be processed, the card processing unit determines that the card to be processed is the second type card, and the transport unit causes the card processing unit to perform the processing. The card may be configured to be carried out to the card slot.

According to this configuration, when a second type card is erroneously carried in from the card insertion slot, the card is promptly ejected from the card insertion slot and returned to the user. Therefore, the security of the confidential information held in the second type card can be enhanced.

Further, the card processing unit notifies an error of the card type based on the determination that the card to be processed is the card of the second type when the first type is the type to be processed. It may be configured to perform the processing to do so.

According to this configuration, the user can grasp that the second type card is mistakenly used for the automatic teller machine, and can smoothly proceed with the subsequent response.

A second aspect of the present invention relates to an automated teller machine. The automated teller machine according to this aspect includes a first card processing unit that processes a first-type card and a second card processing unit that processes a second-type card. Here, the first card processing unit determines whether or not the card to be processed is the second type card, and based on the fact that the card to be processed is the second type card, the processing is performed. Ends the process of reading information for the card to be used.

According to the automated teller machine according to this aspect, when a second type card is erroneously applied to the first card processing unit, the information reading process for the second type card is terminated. This makes it possible to prevent the confidential information from being read unexpectedly from the second type card. Therefore, the security of the confidential information held in the second type card can be surely guaranteed.

In the automated teller machine according to this aspect, the first card processing unit executes a non-confidential information acquisition operation peculiar to the second type card on the card to be processed, and acquires the non-confidential information. Based on the above, it may be configured to end the process of reading information for the card to be processed.

According to this configuration, when a second type card is mistakenly applied to the first card processing unit, information other than the non-confidential information used for determining the type can be read from the second type card. Can be prevented. Therefore, the security of the confidential information held in the second type card can be surely guaranteed.

In the automated teller machine according to this aspect, the second type card can be distinguished from the first type card in that it has an integrated circuit capable of reading information by communication. In this case, the first card processing unit may include a communication unit for communicating with the integrated circuit. Then, the first card processing unit obtains the non-confidential information indicating the existence of the integrated circuit from the card to be processed by communication via the communication unit, and based on the fact that the information for the card to be processed is obtained. It may be configured to end the read process.

In this case, the non-confidential information indicating the existence of the integrated circuit may include connection information indicating that the communication between the communication unit and the integrated circuit has been activated.

According to this configuration, it is determined whether or not the card to be processed is a second type card depending on whether or not communication is possible in the communication unit. That is, it is possible to determine whether or not the card to be processed is a second type card without reading the confidential information from the card to be processed, and it is possible to determine whether or not the information can be read by the card to be processed according to the determination result. Therefore, if the second type card is erroneously applied to the first card processing unit, the security of the confidential information held in the second type card can be reliably ensured.

Alternatively, in this configuration, the first card processing unit may include a detection unit that detects the presence or absence of the integrated circuit. In this case, the first card processing unit is configured to end the information reading process for the card to be processed based on the detection by the detection unit that the integrated circuit exists in the card to be processed. Can be done.

Even with this configuration, it is possible to determine whether or not the card to be processed is a second type card based on the detection result of the detection unit without reading confidential information from the card to be processed, and the card to be processed according to the determination result. It is possible to decide whether or not to read the information for. Therefore, if the second type card is erroneously applied to the first card processing unit, the security of the confidential information held in the second type card can be reliably ensured.

In the above configuration, the second type card is, for example, a credit card.

In this case, it is possible to prevent the confidential information about the payment of money held in the credit card from being read by mistake. Therefore, the security of the confidential information held in the credit card can be ensured.

A third aspect of the present invention relates to a card processing device for processing a first type card and a second type card. When the first type is the type to be processed, the card processing device according to this aspect executes a non-confidential information acquisition operation peculiar to the second type card for the card to be processed, and the non-confidential information is obtained. Based on the acquisition of the confidential information, the process of reading the information for the card to be processed is terminated.

According to the card processing apparatus according to this aspect, the same effect as that of the first aspect can be obtained.

A fourth aspect of the present invention relates to a card processing device that processes a first type of card. The card processing device according to this aspect executes a non-confidential information acquisition operation peculiar to a second type card different from the first type for the card to be processed, and acquires the non-confidential information. Based on this, the information reading process for the card to be processed is terminated.

According to the card processing apparatus according to this aspect, the same effect as that of the second aspect can be achieved.

As described above, according to the present invention, it is possible to provide an automated teller machine and a card processing device capable of more reliably preventing the leakage of confidential information held in a card.

The effects or significance of the present invention will be further clarified by the description of the embodiments shown below. However, the embodiments shown below are merely examples when the present invention is put into practice, and the present invention is not limited to those described in the following embodiments.

FIG. 1A is a perspective view showing the appearance of the automated teller machine according to the first embodiment. FIG. 1B is a front view showing the appearance of the medical examination ticket, which is the first type card according to the first embodiment. FIG. 1C is a front view showing the appearance of a credit card, which is a second type card according to the first embodiment. FIG. 2 is a block diagram showing a configuration of an automated teller machine according to the first embodiment. FIG. 3 is a diagram showing a configuration of a card processing unit according to the first embodiment. FIG. 4 is a flowchart showing control at the time of card insertion in the card processing unit according to the first embodiment. FIG. 5 is a block diagram showing a configuration of an automated teller machine according to the second embodiment. FIG. 6 is a diagram showing a configuration of a first card processing unit and a second card processing unit according to the second embodiment. FIG. 7 is a flowchart showing control at the time of card insertion in the first card processing unit according to the second embodiment. FIG. 8 is a flowchart showing control at the time of card insertion in the second card processing unit according to the second embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<Embodiment 1>
In the first embodiment, the card processing unit 304 corresponds to the "card processing unit" according to claims 1 to 7 and the "card processing device" according to claim 14. Further, the medical examination ticket 100 corresponds to the "first type card" described in the claims, and the credit card 200 corresponds to the "second type card" described in the claims. Further, the IC chip 201 corresponds to the "integrated circuit" described in the claims. In the first embodiment, the communication unit 403 corresponds to the “detection unit” together with the “communication unit” described in the claims.

However, the above description is intended only for the purpose of associating the configuration of the claims with the configuration of the first embodiment, and the invention described in the claims by the above association is the configuration of the embodiment. It is not limited to.

FIG. 1A is a perspective view showing the appearance of the automated teller machine 10 according to the first embodiment.

The automated teller machine 10 is installed in a medical institution. The automated teller machine 10 is connected to a medical system installed in a medical institution via a repeater and an internal communication network (LAN). Further, the automated teller machine 10 is connected to a card information processing center (server) that manages payments related to credit cards via a repeater and an external communication network. The connection by the external communication network is, for example, an inline connection by a dedicated line. Alternatively, the connection by the external communication network may be an Internet connection.

The automatic teller machine 10 accepts the medical examination ticket 100, which will be described later, and transmits the medical examination ticket information including the patient's ID information to the medical affairs system when the medical expenses are settled. As a result, the medical expense information associated with the ID information is transmitted from the medical affairs system to the automated teller machine 10, and the settlement process is performed in the automated teller machine 10.

Further, the automated teller machine 10 accepts the credit card 200, which will be described later, at the time of the settlement process, and transmits payment information including the credit card number to the card information processing center. The payment information is encrypted and sent to the card information processing center. In addition to the credit card number, the payment information may include a security code, the name of the cardholder's alphabet and the expiration date of the credit card. By transmitting the payment information, payment processing such as medical expenses is performed using a credit card. In addition, the automated teller machine 10 accepts cash payments and processes banknotes and coins at the time of payment processing.

The automated teller machine 10 has a rectangular parallelepiped shape as high as the height of an adult. The automatic teller machine 10 includes an operation display unit 11, a numeric keypad 12, a bar code reader 13, a first printing unit 14, a second printing unit 15, a card insertion slot 16, a bill depositing section 17, and a bill issuing. A gold unit 18, a coin deposit / withdrawal unit 19, and a foreign matter return unit 20 are provided.

The operation display unit 11 displays predetermined information and accepts operations from the user. The operation display unit 11 is composed of, for example, a touch panel provided with a liquid crystal display. The numeric keypad 12 is used for inputting a personal identification number and the like. For example, when paying with the credit card 200, the user inputs the personal identification number of the credit card using the numeric keypad 12.

The barcode reader 13 reads the barcode printed on the paper for reimbursing medical expenses. For example, a bar code for payment is printed on a numbered ticket issued by a reception machine for accepting medical examinations. The user can use this barcode to settle medical expenses. The first printing unit 14 sends out a user copy when payment is made by a credit card 200 or the like. The second printing unit 15 sends out a receipt when the medical treatment fee is paid, and also sends out the medical treatment statement when the operation display unit 11 is operated to issue the medical treatment statement. ..

The card insertion slot 16 is an insertion slot for the medical examination ticket 100 and the credit card 200. In the first embodiment, a common card insertion slot 16 is provided for both the medical examination ticket 100 and the credit card 200.

The banknote deposit unit 17 accepts the insertion of banknotes when paying medical expenses in cash. The banknote withdrawal unit 18 carries out the banknotes to be refunded when paying the medical expenses in cash. The coin deposit / withdrawal unit 19 accepts the insertion of coins when paying medical expenses in cash, and also carries out the coins to be returned. The foreign matter return unit 20 carries out the foreign matter when a foreign matter other than coins is inserted into the coin deposit / withdrawal unit 19.

The user performs an operation such as payment of medical expenses on the operation display unit 11 according to the screen displayed on the operation display unit 11. The medical fee is paid by inserting the medical examination ticket 100 into the card insertion slot 16 or having the barcode reader 13 read the barcode printed on the payment form.

When the medical examination ticket 100 is inserted into the card insertion slot 16, the medical examination ticket information read from the medical examination ticket 100 is transmitted to the medical examination ticket system, and the medical examination fee information linked to the medical examination ticket information is automatically converted from the medical examination ticket information. It is transmitted to the trading device 10. Alternatively, when the barcode printed on the payment form is pointed at the barcode reader 13, the barcode information read by the barcode reader 13 is transmitted to the medical affairs system and linked to the barcode information. The medical fee information is transmitted from the medical affairs system to the automatic transaction device 10.

The automatic teller machine 10 displays a screen for settling the amount of money according to the received medical fee information on the operation display unit 11, and prompts the user to select payment by cash or credit card 200. In addition, debit card payment options may be available. The automated teller machine 10 executes a payment process using the credit card 200 and a cash payment process in response to an operation on the operation display unit 11. When payment using the credit card 200 is selected, the automated teller machine 10 accepts the insertion of the credit card 200 through the card insertion slot 16. If the medical examination ticket 100 is carried in through the card insertion slot 16 at the start of the payment process, the automated teller machine 10 accepts the insertion of the credit card 200 after discharging the medical examination ticket 100. As a result, the payment is made by the credit card 200.

FIG. 1B is a front view showing the appearance of the medical examination ticket 100. FIG. 1C is a front view showing the appearance of the credit card 200.

With reference to FIG. 1 (b), the medical examination ticket 100 has a rectangular shape with rounded corners in a plan view. The medical examination ticket 100 is made of a material having some flexibility such as resin. The medical examination ticket 100 is provided with a magnetic stripe 101 that holds the above-mentioned medical examination ticket information. The medical examination ticket information is held on the magnetic stripe 101 in a predetermined format. For example, the medical examination ticket information is held in the magnetic stripe 101 in a format having a header area (header information holding area) configured in a predetermined signal format and a data area (medical examination ticket information holding area) following the header area. Will be done. By operating the magnetic stripe 101 with the magnetic head, the medical examination ticket information can be read.

In addition, the medical examination ticket 100 is provided with a mark 102 indicating that it is a medical examination ticket and ID information 103. The ID information 103 may be the same as the patient's ID information held in the medical examination ticket information, or may be unique ID information set for each medical examination ticket 100. Alternatively, the ID information of the medical examination ticket 100 uniquely set for each medical examination ticket 100 may be included in the medical examination ticket information as the ID information of the patient. For convenience, FIG. 1 (b) omits the illustration of other information such as the name and address of the medical institution.

With reference to FIG. 1 (c), the credit card 200 has a rectangular shape with rounded corners in a plan view. The credit card 200 is made of a material that is somewhat flexible, such as resin. The shape of the credit card 200 is substantially the same as that of the medical examination ticket 100.

An IC chip 201 is arranged on the surface of the credit card 200. The IC chip 201 is an integrated circuit capable of contacting or non-contact communication. The IC chip 201 holds the card number of the credit card 200, member information (ID information, alphabetic name, expiration date, etc.), and card information such as an application for performing credit processing.

A magnetic stripe 202 is arranged on the back surface of the credit card 200. The magnetic stripe 202 holds card information similar to a part of the information held in the IC chip 201. The card information is held on the magnetic stripe 202 in a predetermined format. By operating the magnetic stripe 202 with a magnetic reader (magnetic head), the medical examination ticket information can be read. The data size of the card information held in the IC chip 201 is larger than the data size of the card information held in the magnetic stripe 202.

Further, the credit card 200 is engraved with the card number 203. For convenience, FIG. 1 (b) omits the illustration of other information such as the name of the credit company and the security code, expiration date and alphabetical marking of the cardholder.

FIG. 2 is a block diagram showing the configuration of the automated teller machine 10.

In addition to the operation display unit 11, the numeric keypad 12, the bar code reader 13, the first printing unit 14 and the second printing unit 15, the automatic teller machine 10 includes a control unit 301 and a bill processing unit. It includes a 302, a coin processing unit 303, a card processing unit 304, an audio output unit 305, and a communication unit 306.

The control unit 301 includes an arithmetic processing circuit such as a CPU (Central Processing Unit) and a memory such as a ROM (Read Only Memory) and a RAM (Random Access Memory), and controls each unit according to a program stored in the memory. The banknote processing unit 302 includes a banknote storage unit for storing banknotes of each denomination and a transport unit for transporting banknotes, and is controlled by the control unit 301 to store the banknotes, the banknote deposit unit 17, and the banknote withdrawal unit. The banknotes are transported to and from 18. The coin processing unit 303 includes a coin accommodating unit for accommodating coins of each denomination and a transport unit for transporting coins, and is controlled by the control unit 301 between the coin accommodating unit and the coin deposit / withdrawal unit 19. Transport coins.

The card processing unit 304 processes the cards (medical examination ticket 100, credit card 200) inserted from the card insertion slot 16 of FIG. 1 (a). The configuration of the card processing unit 304 will be described later with reference to FIG.

The audio output unit 305 includes audio output means such as a speaker, and outputs a predetermined audio according to the control from the control unit 301. The communication unit 306 is a communication interface for communicating with the medical system and the card information processing center described above.

FIG. 3 is a diagram showing the configuration of the card processing unit 304.

The card processing unit 304 includes a transport unit 401, sensors 402a to 402c, a communication unit 403, a magnetic reader 404, a communication signal processing unit 405, a magnetic signal processing unit 406, a card control unit 407, and an encryption process. A unit 408 and a communication unit 409 are provided.

The transport unit 401 includes a transport belt and a motor for driving the transport belt, and transports the cards (medical examination ticket 100, credit card 200) inserted from the card insertion slot 16 along the transport path 401a. The transport path 401a is formed in a straight line. As long as the card can be transported, the transport path 401a may be bent. The transport unit 401 is configured so that the inlet of the transport path 401a faces the card insertion slot 16.

The sensors 402a to 402c each detect the arrival of the card. The sensors 402a to 402c are, for example, reflective optical sensors. The sensors 402a to 402c may be transmissive optical sensors, or may be other types of sensors as long as the arrival of the card can be detected. The number of sensors arranged in the transport unit 401 is not limited to three.

The sensor 402a detects that the card has been inserted into the card insertion slot 16. The sensor 402b detects that the IC chip 201 of the credit card 200 has reached a position facing the communication unit 403 when the credit card 200 is carried in by the transport unit 401. The sensor 402c indicates that the magnetic stripe 101 of the medical examination ticket 100 or the magnetic stripe 202 of the credit card 200 has reached the position facing the magnetic reader 404 when the medical examination ticket 100 or the credit card 200 is carried in by the transport unit 401. To detect.

The communication unit 403 includes a configuration for performing short-range communication with the IC chip 201 of the credit card 200. For example, when the communication unit 403 is configured to perform short-range wireless communication without contacting the IC chip 201, the communication unit 403 includes a coil for supplying power and communicating with the coil on the IC chip 201 side. Alternatively, when the communication unit 403 contacts the IC chip 201 for communication, the communication unit 403 has a configuration for contacting and communicating with the IC chip 201, for example, a contact that contacts the IC chip 201 and reads data. Be prepared.

The magnetic reader 404 includes a configuration for reading information held on the magnetic stripe 101 of the medical examination ticket 100 or the magnetic stripe 202 of the credit card 200. For example, the magnetic reader 404 includes a magnetic head. The magnetic reader 404 may have a writing function.

The communication signal processing unit 405 supplies a transmission signal to the communication unit 403 under the control of the card control unit 407, and processes the reception signal received by the communication unit 403 to supply the card control unit 407. The magnetic signal processing unit 406 processes the signal read by the magnetic reader 404 and supplies it to the card control unit 407.

The card control unit 407 includes an arithmetic processing circuit such as a CPU and a memory such as a ROM and RAM, and controls each unit of the card processing unit 304 according to a program stored in the memory. The encryption processing unit 408 encrypts the payment information (card number, etc.) used for payment among the information read from the credit card 200. Information other than payment information may also be encrypted. The communication unit 409 transmits various information to the control unit 301 of FIG. 2 under the control of the card control unit 407.

In the settlement of medical expenses, the user first inserts the medical examination ticket 100 into the card insertion slot 16. The card control unit 407 reads the medical examination ticket information (including ID information) from the inserted medical examination ticket 100 via the magnetic reader 404, and discharges the medical examination ticket 100 from the card insertion slot 16. The card control unit 407 transmits the read medical examination ticket information to the control unit 301 in FIG. 2 via the communication unit 409. The control unit 301 transmits the received medical examination ticket information to the medical affairs system via the communication unit 306 of FIG. As a result, the medical affairs system transmits the medical expense information associated with the medical examination ticket information to the control unit 301. The control unit 301 causes the operation display unit 11 to display a screen prompting the display of medical expenses and selection of a payment method on the operation display unit 11.

When the user selects payment by the credit card 200 as the payment method, the control unit 301 transmits an acceptance instruction of the credit card 200 to the card control unit 407 of FIG. The card control unit 407 waits for the credit card 200 to be inserted into the card insertion slot 16.

When the user inserts the credit card 200 into the card insertion slot 16, the card control unit 407 first performs a process of acquiring card information from the IC chip 201 of the credit card 200 via the communication unit 403. When the card information cannot be acquired from the IC chip 201, the card control unit 407 acquires the card information from the magnetic stripe 202 of the credit card 200 via the magnetic reader 404. Then, the card control unit 407 encrypts the payment information included in the card information by the encryption processing unit 408 and transmits it to the control unit 301 of FIG. 2 via the communication unit 409. The control unit 301 transmits the received encrypted payment information to the card information processing center via the communication unit 306. As a result, the medical expenses are paid by the credit card 200.

When the processing with the card information processing center is completed, the control unit 301 causes the operation display unit 11 to display a screen notifying the completion of payment. At this time, at the same time, the card control unit 407 ejects the accepted credit card 200 from the card insertion slot 16. The user confirms the completion of payment by referring to the screen displayed on the operation display unit 11, and removes the credit card 200 from the card insertion slot 16. This completes a series of payment steps.

By the way, in the above step, when the medical examination ticket 100 is inserted into the card insertion slot 16, the user may mistakenly insert the credit card 200 into the card insertion slot 16. In this case, the card information is read from the magnetic stripe 202 of the inserted credit card 200, and the read card information is temporarily held in the card control unit 407. Since the card information contains information related to payment, it needs to be extremely confidential. Therefore, it is preferable to avoid the state in which the card information erroneously acquired in this way is temporarily held in the card control unit 407 as much as possible.

Therefore, in the first embodiment, the card processing unit 304 performs a process for ensuring the confidentiality of the card information. This process will be described below.

FIG. 4 is a flowchart showing control at the time of card insertion in the card processing unit 304.

When the current card acceptance mode is the acceptance mode of the medical examination ticket 100 (S101: YES) and the card control unit 407 detects that the card has been inserted into the card insertion slot 16 (S102: YES), the card control unit 407 inserts the card. The card is conveyed to the reading position of the IC chip 201, that is, the position where the IC chip 201 faces the communication unit 403 (S103). Then, the card control unit 407 controls the communication unit 403 to determine whether or not the activation of short-range communication with the card is successful (S104).

Here, activation of short-range communication means that a communication path by short-range communication has been established. In contact-type or non-contact-type short-range communication with an IC chip, a communication path is established by a communication protocol based on an international standard prior to transmission / reception of actual information. Specifically, various signals are transmitted and received by short-range communication, and finally, connection information is transmitted and received to confirm the establishment of a communication path. This state is the state in which short-range communication is activated.

Here, in the acceptance mode of the medical examination ticket 100, when the medical examination ticket 100 is correctly inserted, since the medical examination ticket 100 does not have an IC chip (an integrated circuit capable of short-range communication), the short-range communication is performed in step S104. Activation is never successful. Therefore, if the activation of the short-range communication is not successful (S104: NO), the card control unit 407 executes the reading operation of the magnetic stripe 101, assuming that the medical examination ticket 100 is correctly inserted (S107).

On the other hand, when the activation of short-range communication is successful (S104: YES), the card control unit 407 immediately inserts the credit card 200 without performing the information reading operation on the credit card 200, assuming that the credit card 200 is inserted by mistake. The card is ejected from the card insertion slot 16 (S105), and an error notification for notifying that an erroneous card has been inserted is transmitted to the control unit 301 of FIG. 2 (S106).

The control unit 301 causes the operation display unit 11 to display a screen notifying that an erroneous card has been inserted in response to the reception of the error notification. At this time, the control unit 301 may further output a voice notifying that the wrong card has been inserted from the voice output unit 305. In response to these notifications, the user can take measures to remove the credit card 200 from the card insertion slot 16 and insert the medical examination ticket 100 into the card insertion slot 16.

When the activation of short-range communication is not successful (S104: NO), in step S107, the card control unit 407 conveys the medical examination ticket 100 to the reading position of the magnetic stripe 101, and further, when the medical examination ticket 100 is read. The magnetic reader 404 is made to read the magnetic stripe 101. As a result, when the medical examination ticket information is properly read from the magnetic stripe 101 (S108: YES), the card control unit 407 transmits the read medical examination ticket information to the control unit 301 of FIG. 2 (S109). As a result, as described above, the control unit 301 performs the process of acquiring the medical expense information from the medical affairs system.

On the other hand, when the medical examination ticket information is not properly read from the magnetic stripe 101 (S108: NO), the card control unit 407 ejects the card from the card insertion slot 16 (S105), and the medical examination ticket information is properly read. An error notification for notifying that there was no error is transmitted to the control unit 301. As a result, a screen for notifying that the information could not be properly read from the medical examination ticket 100 is displayed on the operation display unit 11. In this case, the user brings the barcode printed on the numbered ticket or the like close to the barcode reader 13 to execute the settlement process.

When the current acceptance mode is the standby mode of the credit card 200 (S101: NO) and it is detected that the card has been inserted into the card insertion slot 16 (S110: YES), the card control unit 407 describes the above. As described above, the control for reading the card information from the IC chip 201 or the magnetic stripe 202 is executed (S111). When the card information can be read from either the IC chip 201 or the magnetic stripe 202 (S112: YES), the card control unit 407 extracts payment information required for payment from the read card information. Then, the card control unit 407 encrypts the extracted payment information (S113), and transmits the encrypted payment information to the control unit 301 of FIG. 2 (S114). As a result, the payment information is transmitted to the card information processing center, and the payment process by the credit card 200 is performed.

On the other hand, when the card information cannot be read from either the IC chip 201 or the magnetic stripe 202 (S112: NO), the card control unit 407 ejects the card from the card insertion slot 16 (S105), and the card information is properly read. An error notification for notifying that the information has not been read is transmitted to the control unit 301 (S106). As a result, a screen for notifying that the information could not be properly read from the credit card 200 is displayed on the operation display unit 11. In this case, the user selects, for example, a process for making a payment in cash, and pays the medical treatment fee.

<Effect of Embodiment 1>
According to the first embodiment, the following effects can be achieved.

If the credit card 200 (second type card) is mistakenly applied to the card processing unit 304 in a state where the medical examination ticket 100 (first type) is the type to be processed, the credit card 200 (second type) The process of reading information on the card) is completed. As a result, it is possible to prevent the confidential information from being unexpectedly read from the credit card 200 (the second type card). Therefore, the security of the confidential information held in the credit card 200 (second type card) can be ensured.

Specifically, when the medical examination ticket 100 (first type) is the type to be processed, the card processing unit 304 has a non-specificity to the credit card 200 (to the second type card) with respect to the card to be processed. Executes the acquisition operation of confidential information (connection information transmitted / received when activating short-range communication with the IC chip 201), and ends the information reading process for the card to be processed based on the acquisition of this non-confidential information. do. As a result, when the credit card 200 (second type card) is mistakenly applied to the card processing unit 304 in the state where the medical examination ticket 100 (first type) is the type to be processed, the credit card 200 is used. , Information other than the non-confidential information (connection information sent and received at the time of activation) used for determining the type is not read. Therefore, it is possible to prevent the confidential information from being read from the credit card 200 unexpectedly. Therefore, the security of the confidential information held in the credit card 200 can be ensured.

Further, in the control of FIG. 4, the card processing unit 304 (card control unit 407) processes the credit card 200 when the medical examination ticket 100 (first type) is the type to be processed (S102: YES). In response to the determination that the card is (second type card) (S104: YES), the transport unit 401 ejects the card from the card insertion slot 16 (S105). As a result, if the credit card 200 (second type card) is erroneously carried in from the card insertion slot 16, the credit card 200 is promptly ejected from the card insertion slot 16 and returned to the user. Is done. Therefore, the security of the confidential information held in the credit card 200 can be enhanced.

Further, in the control of FIG. 4, the card processing unit 304 (card control unit 407) processes the credit card 200 when the medical examination ticket 100 (first type) is the type to be processed (S102: YES). Based on the determination that the card is (second type card) (S104: YES), the process for notifying the error of the card type (transmission of the error notification in S106) is executed. As a result, the user can grasp that the credit card 200 has been mistakenly used for the automatic teller machine 10, and can smoothly proceed with the subsequent response.

<Embodiment 2>
In the first embodiment, one card processing unit 304 is configured to process both the medical examination ticket 100 and the credit card 200. On the other hand, in the second embodiment, the first card processing unit for processing the medical examination ticket 100 (first type card) and the second card processing for processing the credit card 200 (second type card). The units are individually arranged in the automated teller machine 10.

In the second embodiment, the first card processing unit 311 corresponds to the "first card processing unit" according to claims 8 to 12 and the "card processing device" according to claim 15, and the second card processing is performed. The unit 312 corresponds to the "second card processing unit" according to claims 8 to 12.

However, the above description is intended only for the purpose of associating the configuration of the claims with the configuration of the first embodiment, and the invention described in the claims by the above association is the configuration of the embodiment. It is not limited to.

FIG. 5 is a block diagram showing the configuration of the automated teller machine 10 according to the second embodiment.

As shown in FIG. 5, the automated teller machine 10 includes a first card processing unit 311 and a second card processing unit 312. As described above, the first card processing unit 311 is a card processing unit for receiving and processing the medical examination ticket 100, and the second card processing unit 312 is a card processing unit for receiving and processing the credit card 200. be. Here, the second card processing unit 312 is connected to the control unit 301 via the communication unit 306. For example, the second card processing unit 312 constitutes an independent unit and is connected to the communication unit 306 by a communication line such as USB. However, the present invention is not limited to this, and the second card processing unit 312 may be included in the automated teller machine 10 in the same manner as the first card processing unit 311. In the configuration of FIG. 5, the configuration of each unit other than the first card processing unit 311 and the second card processing unit 312 is the same as that of the first embodiment.

FIG. 6 is a diagram showing the configuration of the first card processing unit 311 and the second card processing unit 312.

The first card processing unit 311 communicates with the transport unit 501, the sensors 502a to 502c, the communication unit 503, the magnetic reader 504, the communication signal processing unit 505, the magnetic signal processing unit 506, and the card control unit 507. A unit 508 is provided. The first card processing unit 311 has a configuration in which the encryption processing unit 408 is omitted from the configuration of the card processing unit 304 shown in FIG. The transport unit 501, the sensors 502a to 502c, the communication unit 503, the magnetic reader 504, the communication signal processing unit 505, the magnetic signal processing unit 506, and the communication unit 508 are the transport unit 401, the sensors 402a to 402c, and the communication unit, respectively, of FIG. It has the same configuration as the 403, the magnetic reader 404, the communication signal processing unit 405, the magnetic signal processing unit 406, and the communication unit 409. The control process in the card control unit 507 is different from the control process in the card control unit 407 in the first embodiment. This will be described later with reference to FIG.

The second card processing unit 312 includes a transport unit 601, sensors 602a to 602c, a communication unit 603, a magnetic reader 604, a communication signal processing unit 605, a magnetic signal processing unit 606, a card control unit 607, and a cipher. It includes a conversion processing unit 608 and a communication unit 609. The second card processing unit 312 has the same configuration as the card processing unit 304 shown in FIG. However, the control process in the card control unit 607 is different from the control process in the card control unit 407 in the first embodiment. This will be described later with reference to FIG.

In the second embodiment, since the first card processing unit 311 and the second card processing unit 312 are individually provided as described above, two card insertion ports 16a and 16b are provided corresponding to each card processing unit. Be done. The first card processing unit 311 carries in the card inserted from the card insertion slot 16a through the transport path 501a and processes it. The second card processing unit 312 carries in the card inserted from the card insertion slot 16b through the transport path 601a and processes it.

FIG. 7 is a flowchart showing control at the time of card insertion in the first card processing unit 311.

When the card control unit 507 detects that a card has been inserted into the card insertion slot 16a based on the output from the sensor 502a in the waiting state for receiving the medical examination ticket 100 (S201: YES), the card control unit 507 inserts the inserted card into the IC chip. It is conveyed to the reading position of 201 (S202), the activation of short-range communication is tried, and it is determined whether or not the activation is successful (S203). Here, when the activation of short-range communication is successful (S203: YES), the card control unit 507 assumes that the credit card 200 has been inserted by mistake and ejects the card from the card insertion slot 16a (S204). Further, the card control unit 507 transmits an error notification for notifying that the credit card 200 has been inserted by mistake to the control unit 301 of FIG. 5 (S205), and ends the process.

On the other hand, when the activation of short-range communication is not successful (S203: NO), the card control unit 507 executes the reading operation of the magnetic stripe 101 on the assumption that the medical examination ticket 100 is correctly inserted (S206). As a result, when the medical examination ticket information is properly read from the magnetic stripe 101 (S207: YES), the card control unit 507 transmits the read medical examination ticket information to the control unit 301 (S208). At the same time, the card control unit 507 ejects the processed card (medical examination ticket 100) from the card insertion slot 16a. As a result, the card control unit 507 ends the process.

When the medical examination ticket information could not be read properly from the magnetic stripe 101 (S207: NO), the card control unit 507 ejected the card from the card insertion slot 16a (S204), and the medical examination ticket information could not be read properly. Is transmitted to the control unit 301 (S205). As a result, the card control unit 507 ends the process shown in FIG. 7.

FIG. 8 is a flowchart showing control at the time of card insertion in the second card processing unit 312.

When the card control unit 607 detects that a card has been inserted into the card insertion slot 16b based on the output from the sensor 602a in the waiting state for accepting the credit card 200 (S301: NO), the card information from the inserted card Is executed (S302). Here, as in the first embodiment, the IC chip 201 or the magnetic stripe 202 is read. When the card information is properly read from either the IC chip 201 or the magnetic stripe 202 (S303: YES), the card control unit 607 extracts the payment information (including the card number) necessary for payment from the read card information. Then, the extracted payment information is encrypted (S304). Then, the card control unit 607 transmits the encrypted payment information to the control unit 301, and ends the process.

On the other hand, when the card information cannot be properly read from either the IC chip 201 or the magnetic stripe 202 (S303: NO), the card control unit 607 ejects the received card from the card insertion slot 16b (S306), and the card is ejected. An error notification for notifying that the information could not be read properly is transmitted to the control unit 301 (S307). As a result, the card control unit 607 ends the process shown in FIG.

The process performed when the control unit 301 receives various information transmitted in steps S205 and S208 of FIG. 7 and steps S305 and S307 of FIG. 8 is the same as that of the first embodiment. In this way, as in the first embodiment, the user can settle the medical expenses using the medical examination ticket 100 and the credit card 200.

<Effect of Embodiment 2>
Also in the second embodiment, as in the first embodiment, when the credit card 200 (second type card) is mistakenly applied to the first card processing unit 311 for processing the medical examination ticket 100, the credit card 200 (the second type card) is used. The information reading process for the second type card) is completed. As a result, it is possible to prevent the confidential information from being unexpectedly read from the credit card 200 (the second type card). Therefore, the security of the confidential information held in the credit card 200 (second type card) can be ensured.

Further, also in the second embodiment, as in the first embodiment, the erroneous insertion of the credit card 200 is determined by the presence or absence of the IC chip 201 (integrated circuit). Therefore, also in the second embodiment, as in the first embodiment, it is possible to reliably prevent the card information (confidential information) from being read from the erroneously inserted credit card 200. In addition, the same effect as that of the first embodiment is achieved by performing various notifications based on the error notification. Further, the security of the credit card 200 can be ensured as in the first embodiment by the process of immediately discharging the erroneously inserted credit card 200.

<Change example>
Although the embodiments of the present invention have been described above, the present invention is not limited to the above embodiments, and the embodiments of the present invention can be modified in various ways other than the above.

For example, in the above embodiments 1 and 2, the credit card 200 and the medical examination ticket 100 are identified by the presence or absence of the IC chip 201, but the method of distinguishing the credit card 200 and the medical examination ticket 100 is not limited to this. do not have.

For example, the format of the signal held on the magnetic stripe 101 of the consultation ticket 100, for example, the signal format of the header information that is first read prior to the data information (1,0 signal array or high / low period array). , When different from the credit card 200, in the reading operation of the magnetic stripe, first, only the header information (non-confidential information) is read, and the signal format of the read header information (non-confidential information) is the header information of the medical examination ticket 100. If the signal format of the header information (non-confidential information) read matches the signal format of the header information of the credit card 200, the card to be processed is identified as the credit card 200. The method may be used. In this case, if it is determined by the signal format that the credit card 200 has been erroneously inserted, control is performed so that the data area following the header area is not read.

Alternatively, the photodetector detects the intensity of the reflected light when the area corresponding to the IC chip 201 is irradiated with light, and when the intensity of the reflected light is equal to or higher than a predetermined threshold value, the credit card 200 is used as the processing card. A method of identifying as present may be used. In this case, the intensity of the reflected light is acquired as non-confidential information of the credit card 200 and used for determining the card type. Further, a light emitter for irradiating light and a photodetector for receiving reflected light constitute a detection unit for detecting the presence or absence of an IC chip (integrated circuit).

Alternatively, the area corresponding to the IC chip 201 may be imaged with a line sensor or the like, and the presence / absence of the IC chip 201 and the type of the card may be identified based on the captured image. In this case, the captured image is acquired as non-confidential information of the credit card 200 and used for determining the card type. In addition, the line sensor constitutes a detection unit that detects the presence or absence of an IC chip (integrated circuit).

In addition, as the identification method of the credit card 200, various methods can be used as long as the non-confidential information that can be obtained from the credit card 200 is used.

Further, when the information unique to the first type card (medical examination ticket 100) cannot be obtained from the card to be processed, the card to be processed may be identified as the second type card (credit card 200). For example, when the first type card (medical examination ticket 100) has a unique shape feature such as a notch, the shape feature (non-confidential information) acquired from the card to be processed is the first type card (medical examination ticket 100). ), The card to be processed may be identified as a second type card (credit card 200) other than the first type card (medical examination ticket 100).

Further, in the above-described first and second embodiments, the medical examination ticket 100 is shown as the first type card and the credit card 200 is shown as the second type card, but the first type card and the second type card are It is not limited to this. For example, the second type card may include a card used for payment processing other than the credit card 200, or another card in which highly confidential information can be read in the same manner as the first type card. May be included in the second type of card. Further, the card of the first type may include a card other than the medical examination ticket 100.

Further, in the above-described first and second embodiments, it is assumed that the automated teller machine 10 is installed in a medical institution, but the automated teller machine 10 may be installed in a facility other than the medical institution such as a gas station. In this case, the membership card used at the facility may be a first-class card.

Further, in the second embodiment, the first card processing unit 311 and the second card processing unit 312 are provided with the card control units 507 and 607, respectively, but they are common to the first card processing unit 311 and the second card processing unit 312. One card control unit may be provided. In this case, the card control unit may control the first card processing unit 311 in FIG. 7 and the second card processing unit 312 in FIG. 8.

Further, the configuration of the automated teller machine 10 is not limited to the configuration shown in FIG. 1A, and various changes can be made. For example, a motion sensor for detecting the arrival of a user may be arranged in the automatic teller machine 10, and the automatic teller machine 10 may start a transaction operation in response to the arrival of the user. Further, the card may be accepted in a form other than inserting the card into the card insertion slot. Further, the automated teller machine 10 may have a function other than the function for settlement. For example, the automated teller machine 10 may have a function of accepting a medical examination with a medical examination ticket 100 and registering it in the medical affairs system.

Further, the configurations of the first type card and the second type card are not limited to the configurations shown in FIGS. 1 (b) and 1 (c). For example, a bar code for holding medical examination ticket information such as ID information may be further arranged on the first type card. Further, when the second type card can be identified by non-confidential information other than the IC chip 201, the second type card does not necessarily have to include the IC chip 201.

In addition, the embodiments of the present invention can be appropriately modified within the scope of the claims.

10 Automatic teller machine 16 Card insertion slot 100 Medical examination ticket (first type card)
101 Magnetic Stripe 200 Credit Card (Type 2 Card)
201 IC chip (integrated circuit)
202 Magnetic stripe 304 Card processing unit (card processing unit, card processing device)
401, 501 Transport unit 403, 503 Communication unit 407 Card control unit 311 First card processing unit (first card processing unit, card processing device)
312 2nd card processing unit

Claims (15)

Equipped with a card processing unit that processes first-type cards and second-type cards
The card processing unit
When the first type is the type to be processed, it is determined whether or not the card to be processed is the second type card.
An automated teller machine characterized in that the process of reading information on the card to be processed is completed based on the card to be processed being the second type card. In the automated teller machine according to claim 1.
The card processing unit
When the first type is the type to be processed, the non-confidential information acquisition operation peculiar to the second type card is executed for the card to be processed.
An automated teller machine characterized in that the process of reading information on the card to be processed is terminated based on the acquisition of the non-confidential information. In the automated teller machine according to claim 2.
The second type card is distinguished from the first type card in that it has an integrated circuit capable of reading information by communication.
The card processing unit includes a communication unit for reading information from the integrated circuit.
When the first type is the type to be processed, the card processing unit acquires the non-confidential information indicating the existence of the integrated circuit from the card to be processed by communication via the communication unit. Based on this, an automated teller machine that ends the process of reading information on the card to be processed. In the automated teller machine according to claim 3.
An automated teller machine, wherein the non-confidential information indicating the existence of the integrated circuit includes connection information indicating that communication between the communication unit and the integrated circuit has been activated. In the automated teller machine according to claim 1.
The second type card is distinguished from the first type card in that it has an integrated circuit capable of reading information by communication.
The card processing unit includes a detection unit that detects the presence or absence of the integrated circuit.
The card processing unit refers to the card to be processed based on the detection by the detection unit that the integrated circuit exists in the card to be processed when the first type is the type to be processed. An automated teller machine characterized by ending the information reading process. In the automated teller machine according to any one of claims 1 to 5.
A card slot for inserting cards and
A transport unit for transporting the card inserted into the card insertion slot is provided.
When the first type is the type to be processed, the card processing unit determines that the card to be processed is the second type card, and the transport unit causes the card to be processed. An automated teller machine that allows you to carry it out to the card slot. In the automated teller machine according to any one of claims 1 to 6.
The card processing unit notifies an error of the card type based on the determination that the card to be processed is the card of the second type when the first type is the type to be processed. An automated teller machine characterized by performing the processing of. The first card processing unit that processes the first type of card,
It is equipped with a second card processing unit that processes the second type of card.
The first card processing unit determines whether or not the card to be processed is the second type card, and determines whether or not the card to be processed is the second type card.
An automated teller machine characterized in that the process of reading information on the card to be processed is completed based on the card to be processed being the second type card. In the automated teller machine according to claim 8.
The first card processing unit
The non-confidential information acquisition operation peculiar to the second type card is executed for the card to be processed, and the operation is performed.
An automated teller machine characterized in that the process of reading information on the card to be processed is terminated based on the acquisition of the non-confidential information. In the automated teller machine according to claim 9.
The second type card is distinguished from the first type card in that it has an integrated circuit capable of reading information by communication.
The first card processing unit includes a communication unit for communicating with the integrated circuit.
The first card processing unit acquires information indicating the existence of the integrated circuit from the card to be processed by communication via the communication unit, and based on the acquisition of the non-confidential information indicating the existence of the integrated circuit, the first card processing unit reads information on the card to be processed. An automated teller machine characterized by the termination of. In the automated teller machine according to claim 10.
An automated teller machine, wherein the non-confidential information indicating the existence of the integrated circuit includes connection information indicating that communication between the communication unit and the integrated circuit has been activated. In the automated teller machine according to claim 8.
The second type card is distinguished from the first type card in that it has an integrated circuit capable of reading information by communication.
The first card processing unit includes a detection unit for detecting the presence or absence of the integrated circuit.
The first card processing unit terminates the information reading process for the card to be processed based on the detection of the presence of the integrated circuit in the card to be processed via the detection unit. An automated teller machine that features. In the automated teller machine according to any one of claims 1 to 12.
The second type of card is an automated teller machine, characterized in that it is a credit card. A card processing device that processes first-type cards and second-type cards.
When the first type is the type to be processed, the non-confidential information acquisition operation peculiar to the second type card is executed for the card to be processed.
A card processing apparatus characterized in that the reading process of information for the card to be processed is terminated based on the acquisition of the non-confidential information. A card processing device that processes the first type of card.
For the card to be processed, the non-confidential information acquisition operation peculiar to the second type card different from the first type is executed.
A card processing apparatus characterized in that the reading process of information for the card to be processed is terminated based on the acquisition of the non-confidential information.

Images