JP2023101676A - Financial institution server and method achieved by financial institution server - Google Patents

Abstract

To allow more financial institutions to provide service using an account processing instruction device.SOLUTION: An authentication proxy server owned by a financial institution A includes an authentication proxy processing unit 33 that receives authentication proxy management data 5 that associates and manages an account of the financial institution A, an account of a financial institution B, and a personal identification number set to the account of the financial institution B, and first account data for specifying a first account, which is a user's account in the financial institution A, lets the user input the personal identification number of a second account, which is the associated account of the financial institution B, when the first account is associated with the account of the financial institution B, determines whether authentication data input by the user coincides with the personal identification number set to the second account managed in association with the first account, generates instruction data corresponding to an instruction on account processing to the second account received from the user when they coincide with each other, and transmits the generated instruction data to a processing server of the financial institution B.SELECTED DRAWING: Figure 1

Description

The present invention relates to a technique for performing account processing for an account opened in a financial institution using an account processing instruction device such as an ATM (automated teller machine), and more particularly to an authentication technology for account processing.

For example, there is known a technique of withdrawing money from an account at a financial institution and charging an electronic money medium such as an IC card or a mobile phone with electronic money equivalent to the amount of money withdrawn (for example, Patent Document 1).

Japanese Patent Application Laid-Open No. 2009-48308

By the way, in order for a financial institution to provide users with services using an account processing instruction device (a device for instructing account processing such as deposit processing and withdrawal processing for an account of a financial institution in response to a user's request, for example, an ATM (automated teller machine)), the financial institution usually needs to install an account processing instruction device and issue a cash card. However, installing an account processing instruction device and issuing a cash card are costly. For this reason, there are financial institutions that are unable to provide services using the account processing instruction device even though they would like to provide such services.

SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to enable more financial institutions to provide services using an account processing instruction device.

An authentication surrogate server according to one embodiment of the present invention is a server owned by a first financial institution, and is an authentication surrogate server that performs authentication for account processing for an account of a second financial institution different from the first financial institution, the second financial institution has a processing server that performs account processing for the account of the second financial institution according to instruction data for instructing account processing, and associates the account of the first financial institution, the account of the second financial institution, and the authentication data set for the account of the second financial institution. account data receiving means for receiving first account data specifying a first account that is a user's account at the first financial institution; authentication data input instruction means for causing the user to enter authentication data relating to a second account that is an account at the second financial institution associated with the first account when the first account specified by the received first account data is associated with the account at the second financial institution; and receiving authentication data relating to the second account entered by the user. authentication data receiving means, authentication means for determining whether or not the received authentication data matches authentication data set in the second account managed in association with the first account, account processing instruction receiving means for receiving from the user an instruction for account processing for the second account when the determination result indicates that the data matches, and instruction data transmitting means for generating instruction data according to the received instruction for account processing and transmitting the generated instruction data to a processing server of the second financial institution. , provided.

According to the above configuration, the authentication surrogate server can perform authentication for account processing for the account of the second financial institution on behalf of the user, and can transmit the instruction data according to the instruction of the second account received from the user to the processing server of the second financial institution. As a result, even if the second financial institution, for example, does not install an account processing instruction device (e.g. ATM) or issue a recording medium (e.g. cash card), it is possible to provide users with services using the account processing instruction device.

In a preferred embodiment of the present invention, an account processing instruction device having an input/output means is connected to the authentication surrogate server, the first financial institution issues a recording medium recording account data specifying the account of the account opener to an account opener of the first financial institution, the account data receiving means receives account data read from the recording medium issued to the user by the account processing instruction device as the first account data, and the authentication data input instruction means receives, as the first account data, the account processing instruction device. The screen for inputting the authentication data regarding the second account is displayed on the input/output means of the account processing instruction device, the authentication data receiving means receives the authentication data input by the user via the input/output means from the account processing instruction device, and the account processing instruction receiving means causes the input/output means of the account processing instruction device to display the screen for instructing the account processing for the second account, and then receives notification data for notifying the account processing instructed by the user via the input/output means from the account processing instruction device. You may

An authentication undertaking system according to one embodiment of the present invention is a server owned by a first financial institution, and includes an authentication undertaking server that performs authentication for account processing for an account of a second financial institution that is different from the first financial institution, and an account processing instruction device connected to the authentication undertaking server, wherein the first financial institution issues a recording medium on which account data specifying the account of the account holder is recorded to an account holder of the first financial institution, and the second financial institution provides an account. a processing server for performing account processing on the account of the second financial institution according to instruction data instructing processing, the account processing instruction device having input/output means, the authentication surrogate server managing means for managing the account of the first financial institution, the account of the second financial institution, and authentication data set in the account of the second financial institution in association with each other; account data receiving means for receiving the account data from the account processing instruction device; authentication data input instruction means for displaying, on the input/output means of the account processing instruction device, a screen for prompting the user to input authentication data relating to the second account, which is the account of the second financial institution associated with the first account, when the first account specified by the received first account data is associated with the account of the second financial institution; authentication data receiving means for receiving from the account processing instruction device; authentication means for determining whether or not the received authentication data matches the authentication data set in the second account which is managed in association with the first account; and when the result of the determination is that the authentication data matches, the screen for instructing the account processing for the second account is displayed on the input/output means of the account processing instruction device, and then notification data for notifying the account processing instructed by the user via the input/output means. Account processing instruction reception means for receiving from the account processing instruction device; and instruction data transmission means for generating instruction data corresponding to the notified account processing and transmitting the generated instruction data to the processing server of the second financial institution.

1 is a diagram showing a configuration example of a computer system including an authentication undertaking server according to this embodiment; FIG. FIG. 5 is a diagram showing an example of authentication proxy management data; 9 is a flowchart for explaining authentication proxy processing; 3 is a diagram showing an example of a service menu screen of financial institution A; FIG. It is a figure which shows an example of an authentication screen. 3 is a diagram showing an example of a service menu screen of financial institution B; FIG. It is a figure which shows an example of a result screen.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a diagram showing a configuration example of a computer system provided with an authentication undertaking server according to this embodiment.

There are a plurality of financial institutions (in this embodiment, two, financial institution A and financial institution B). A financial institution A has installed one or more ATMs (Automated Teller Machines) 1 on its premises or in a convenience store or the like. Financial institution A issues an ATM card to a person who opened an account at financial institution A (a person who opened an account at financial institution A). Here, the ATM card is a card (for example, a cash card) that allows the owner of the ATM card to use the ATM 1 to instruct various processes (for example, deposit processing, withdrawal processing, balance inquiry processing, etc., hereinafter referred to as "account processing") for the account of the ATM card owner. On the other hand, financial institution B does not install ATM1. In addition, financial institution B does not issue ATM cards to persons who have opened accounts at financial institution B (those who have opened accounts at financial institution B).

Financial institution A has financial institution A server 3 . Financial institution B also has a financial institution B server 4 . The financial institution A server 3 is a server machine used by the financial institution A to manage its accounts (accounts opened at the financial institution A). On the other hand, the financial institution B server 4 is a server machine used by the financial institution B to manage its accounts (accounts opened in the financial institution B). Financial institution A server 3 and financial institution B server 4 are each connected to a communication network (hereinafter referred to as “ATM network”) 2 for communicating with ATM 1 . One or more ATMs 1 are connected to the ATM network 2 . ATM1 shown in FIG. 1 is an ATM installed by financial institution A, for example. In the following description, financial institution A server 3 and financial institution B server 4 are collectively referred to as "financial institution server".

The financial institution servers 3 and 4 include, for example, ATM message processors 31 and 41 and memories 32 and 42 . The functions of the ATM message processors 31 and 41 are realized by, for example, CPUs (not shown) of the financial institution servers 3 and 4 executing predetermined programs stored in the memories 32 and 42, respectively.

The ATM electronic message processing units 31 and 41 are processing units that perform account processing for a designated account according to the received ATM electronic message. Here, the ATM electronic message means instruction data transmitted to the financial institution servers 3 and 4 to instruct the ATM 1 to process a specific account. For example, when the financial institution A server 3 receives an ATM telegram instructing withdrawal processing (hereinafter referred to as a "withdrawal instruction telegram") from the ATM 1, the ATM telegram processing unit 31 of the financial institution A server 3 performs withdrawal processing to the designated account of the financial institution A (the account of the operator of the ATM 1) according to the received withdrawal instruction telegram (that is, the designated amount is withdrawn from the account of the operator of the ATM 1).

When account processing is performed according to the ATM electronic message, it is verified whether or not the operator of the ATM 1 who instructed the account processing is a valid person (account opener of the designated account). For example, when the financial institution A server 3 performs account processing according to the received ATM instruction message, it is authenticated whether or not the operator of the ATM 1 who instructed the account processing is a valid account holder of the financial institution A (hereinafter referred to as "account holder authentication of the financial institution A"). The account opening person authentication of the financial institution A is performed by the ATM message processing unit 31 of the financial institution A server 3, for example. The ATM message processing unit 31 of the financial institution A server 3, for example, performs the account opener authentication of the financial institution A based on the data recorded in the ATM card (issued by the financial institution A) inserted in the ATM 1 (hereinafter referred to as "recorded data") and the personal identification number entered by the operator of the ATM 1 into the ATM 1 (the personal identification number set for the designated account (account of the financial institution A)).

The financial institution A server 3 corresponds to the authentication surrogate server according to this embodiment. The financial institution A server 3, in addition to the processing performed by the ATM message processing unit 31 (that is, account processing for the account of the financial institution A in accordance with the received ATM message), performs processing for enabling an account opener of a financial institution other than the financial institution A (for example, a financial institution B, hereinafter referred to as "another financial institution") to use the ATM 1 to instruct account processing for his/her own account at the other financial institution. Specifically, the financial institution A server 3 authenticates whether or not a person who operates the ATM 1 to instruct account processing for an account of another financial institution (or a person who instructs) is a valid account holder of the other financial institution (hereinafter referred to as "other financial institution account holder authentication"). Then, when the financial institution A server 3 succeeds in the authentication of the account holder of the other financial institution, it performs processing of transmitting an ATM electronic message instructing the account processing designated by the operator of the ATM 1 to the financial institution server 4 of the other financial institution. Hereinafter, the process performed by the financial institution A server 3 (the process for enabling the account holder of the other financial institution to use the ATM 1 to instruct the account processing) will be referred to as "authentication proxy process".

Normally, an account opener of a financial institution which does not install an ATM 1 or issue an ATM card, such as a financial institution B, cannot instruct account processing for the account by using the ATM 1, but by performing authentication surrogate processing, even such a financial institution can instruct the account processing by using the ATM 1.例文帳に追加

The authentication of the account holder of the other financial institution in the authentication proxy processing is performed based on the recorded data of the ATM card (issued by the financial institution A) inserted into the ATM 1 and the personal identification number (the personal identification number set for the designated account (account of the other financial institution)) input to the ATM 1 by the operator of the ATM 1. That is, the ATM card issued by the financial institution A is used for the authentication of the account holder of the other financial institution. Therefore, in the present embodiment, a person who can use the function provided by the financial institution A server 3 (a function realized by authentication proxy processing, hereinafter referred to as "authentication proxy function") to instruct account processing for an account of another financial institution is a person who has an account at the other financial institution and financial institution A. Details of the authentication proxy processing will be described later with reference to FIG.

The financial institution A server 3 is provided with an authentication proxy processing unit 33 that performs the authentication proxy processing, in addition to the ATM electronic message processing unit 31 and the memory 32 . Also, the authentication undertaking management data 5 is stored in the memory 32 of the financial institution A server 3 . The functions of the authentication proxy processing unit 33 are realized by executing a predetermined program stored in the memory 32 by the CPU provided in the financial institution A server 3, similarly to the ATM electronic message processing unit 31. FIG.

FIG. 2 is a diagram showing an example of the authentication proxy management data 5. As shown in FIG.

The authentication proxy management data 5 is data that the authentication proxy processing unit 33 refers to when performing authentication proxy processing. As shown in FIG. 2, the authentication agency management data 5 includes data 51 regarding accounts of financial institution A (hereinafter referred to as "account data of financial institution A") and data 52 regarding accounts of other financial institutions (hereinafter referred to as "account data of other financial institutions"). The account data 51 of financial institution A includes, for example, data for specifying an account opened at financial institution A (for example, branch name 511 and account number 512). The account data 52 of other financial institutions includes, for example, data for identifying accounts opened in other financial institutions (for example, financial institution name 521, branch name 522, and account number 523 of other financial institutions). The account data 52 of other financial institutions also includes a personal identification number 524 set for the account specified by the account data 52 .

The account data 52 of other financial institutions indicates accounts of other financial institutions (hereinafter referred to as "authentication surrogate accounts") for which account holders of accounts indicated by account data 51 of financial institution A associated with the data 52 can instruct account processing using the surrogate authentication function. That is, in the example of FIG. 2, the data 53 in the first column indicates that the person who opened the account with the account number "○○○○" can instruct the account processing for the account with the account number "○○××" of the financial institution B by using the authentication proxy function.

For example, a person who opened an account at financial institution A can register a designated account as an authentication agency account in the financial institution A server 3 in advance by applying to financial institution A for registration of an authentication agency account. Then, at the time of (or after) the registration, a personal identification number is set for the registered authentication agency account (the personal identification number 524 indicates the personal identification number set for the authentication agency account).

In the example of FIG. 2, one authentication agency account is associated with one financial institution A account, but one financial institution A account may be associated with a plurality of authentication agency accounts. That is, one person who opened an account at financial institution A can register a plurality of authentication surrogate accounts.

FIG. 3 is a flowchart for explaining authentication proxy processing. FIG. 3 shows an example in which an operator of ATM 1 uses an ATM card issued by financial institution A, operates ATM 1, and performs account processing for his own account of another financial institution (financial institution B in this example).

First, an ATM operator inserts an ATM card issued by financial institution A into ATM1 (S1).

The ATM 1 that accepts the insertion of the ATM card reads the recorded data of the inserted ATM card. The recorded data includes, for example, data indicating that the ATM card was issued by financial institution A, and data indicating the account of the owner of the ATM card (account of financial institution A) (for example, branch name and account number). The ATM 1 notifies the financial institution A server 3 of the read record data (S2).

When the financial institution A server 3 receives the recorded data from the ATM 1, the ATM message processing unit 31 of the financial institution A transmits the data that is the basis of the service menu screen 110 of the financial institution A to the ATM 1, and causes the input/output unit 11 of the ATM 1 to display the service menu screen 110 of the financial institution A (S3). The service menu screen 110 of the financial institution A is a screen for allowing the operator of the ATM 1 to instruct the account processing for the account of the financial institution A, and is shown in FIG. 4, for example. As shown in FIG. 4, the service menu screen 110 of financial institution A displays, for example, menu items for instructing account processing (deposit processing, withdrawal processing, balance inquiry processing, etc.). In addition to the above menu items, the service menu screen 110 of financial institution A also displays a menu item ("other financial institution" in the example of FIG. 4) for making the screen transition to a screen (hereinafter referred to as "other financial institution service menu screen") for instructing the operator of the ATM 1 to perform account processing for the account of the other financial institution (authenticating agency account).

Here, the operator of the ATM 1 selects the menu item 111 of "another financial institution" on the service menu screen 110 of the financial institution A (S4).

The ATM 1 that has received the selection of the menu item 111 of "other financial institution" notifies the financial institution A server 3 that the screen transition to the service menu screen of the other financial institution has been instructed (S
5).

When the financial institution A server 3 receives the notification of step S5 from the ATM 1, the authentication proxy processing unit 33 of the financial institution A server 3 refers to the authentication proxy management data 5 and acquires the account data 52 of the other financial institution associated with the account (account of the operator of the ATM 1 of the financial institution A) indicated by the recorded data notified in step S2. The account data 52 of the other financial institution acquired here indicates the authentication surrogate account (authentication surrogate account of the ATM 1 operator) registered in advance by the operator of the ATM 1 . In this example, it is assumed that the ATM 1 operator's authentication agency account is the financial institution B account.

If the account data 52 of the other financial institution is not associated with the account indicated by the recorded data notified in step S2 (the account of the operator of ATM 1 in financial institution A), the proxy authentication processing unit 33 cannot perform authentication proxy processing (that is, the operator of ATM 1 cannot use the authentication proxy function) because the proxy authentication account does not exist. Therefore, in order to inform the operator of the ATM 1 of this in advance, for example, when the authentication agency account does not exist, the authentication agency processing unit 33 can prevent the menu item 111 of "other financial institution" from being displayed on the service menu screen 110 of the financial institution A displayed in step S3.

The authentication surrogate processing unit 33 generates data as the basis of the authentication screen 120 based on the acquired account data 52 of the other financial institution, transmits the generated data to the ATM 1, and causes the input/output unit 11 of the ATM 1 to display the authentication screen 120 (S6). As shown in FIG. 5, the authentication screen 120 displays a display area 121 for information indicating the authentication agent account of the operator of the ATM 1 (for example, a financial institution name (financial institution B in this example), branch name, account number, etc.), an area 122 for entering a personal identification number, and a confirm button 123 for confirming the input of the personal identification number.

After that, the operator of the ATM 1 inputs the PIN number set in the authentication agent account of the operator of the ATM 1 (in this example, the account of the financial institution B) displayed in the display area 121 on the authentication screen 120, and presses the confirmation button 123 (S7).

The ATM 1 that has received the input of the personal identification number notifies the financial institution A server 3 of the received personal identification number (S8).

When the financial institution A server 3 receives the notification of the personal identification number from the ATM 1, the authentication proxy processing unit 33 of the financial institution A authenticates the account holder of another financial institution (financial institution B) (S9). Specifically, the proxy authentication processing unit 33 determines whether or not the personal identification number notified from the ATM 1 matches the personal identification number 524 included in the account data 52 of the other financial institution obtained in step S6. Then, the authentication agency processing unit 33 determines that the operator of the ATM 1 is a legitimate account opener of the financial institution B when both the personal identification numbers match (that is, the account opener authentication of the other financial institution (financial institution B) has succeeded).

When the authentication of the account holder of the other financial institution (financial institution B) is successful, the proxy authentication processing unit 33 transmits the data forming the basis of the service menu screen 130 of the financial institution B to the ATM 1, and causes the input/output unit 11 of the ATM 1 to display the service menu screen 130 of the financial institution B (S10). The service menu screen 130 of the financial institution B is a screen for instructing the operator of the ATM 1 to perform account processing for the account of the financial institution B (authenticating agency account), and is shown in FIG. 6, for example. As shown in FIG. 6, the service menu screen 130 of the financial institution B displays, for example, a display area 131 for information (e.g., branch name, account number, etc.) indicating the authentication agency account of the operator of the ATM 1, and a menu item 132 for instructing account processing (deposit processing, withdrawal processing, balance inquiry processing, etc.).

Here, the operator of the ATM 1 selects a menu item 131 instructing any account processing on the service menu screen 130 of the financial institution B (S11). The account processing instructed in step S11 is hereinafter referred to as "designated account processing".

The ATM 1, having received the selection of the menu item 131 instructing the designated account processing, notifies the financial institution A server 3 that the designated account processing has been designated (S12).

When the financial institution A server 3 receives the notification of step S12 from the ATM 1, the authentication proxy processing unit 33 of the financial institution A server 3 generates an ATM electronic message for instructing the specified account processing for the authentication proxy account of the operator of the ATM 1, and transmits the generated ATM electronic message to the financial institution B server 4 (S13, S14).

When the financial institution B server 4 receives the ATM electronic message from the financial institution A server 3, the ATM electronic message processing unit 41 of the financial institution B server 4 performs designated account processing for the authentication agent account of the operator of the ATM 1 according to the received ATM electronic message (for example, if the specified account processing is withdrawal processing, the specified amount is withdrawn from the operator's authentication agent account of the ATM 1) (S15). Then, the ATM message processing unit 41 of the financial institution B server 4 transmits to the financial institution A server 3 result data indicating the result of the designated account processing. This result data includes, for example, information indicating whether or not the specified account processing was successful, the balance after the specified account processing, and the like.

When the financial institution A server 3 receives the result data from the financial institution B server 4, the authentication proxy processing unit 33 of the financial institution A server 3 transmits the data forming the basis of the result screen 140 to the ATM 1, and causes the input/output unit 11 of the ATM 1 to display the result screen 140 (S16). As shown in FIG. 7, on the result screen 140, for example, when the designated account processing is successful, a display area 141 for a message to that effect and a display area 142 for the balance after the designated account processing is displayed.

The above is the description of the authentication proxy processing. By performing the above processing, even for other financial institutions such as the financial institution B which does not install an ATM 1 or issue an ATM card, the account opener can use the ATM 1 to instruct account processing for his/her own account in the other financial institution. In other words, even other financial institutions that do not install an ATM 1 or issue an ATM card can provide services using the ATM 1 to their account openers without installing the ATM 1 or issuing an ATM card.

The embodiments of the present invention described above are illustrative examples of the present invention and are not intended to limit the scope of the present invention only to those embodiments. The present invention can be implemented in various other aspects without departing from the gist thereof.

For example, in the present embodiment, a person who can use the authentication proxy function to instruct account processing for an account of another financial institution is a person who has opened an account at the other financial institution and financial institution A. However, for example, by doing the following, the financial institution A server 3 can provide the authentication proxy function even to a person who has not opened an account at financial institution A and has an account at another financial institution.

That is, financial institution A issues an ATM card to a person (function user) who does not have an account with financial institution A but wishes to use the authentication proxy function. This ATM card records, for example, an ID for specifying the function user. Then, financial institution A uses the ID to specify the functional user instead of the account data 51 of financial institution A in the authentication proxy management data 5, and manages the correspondence between the functional user and the authentication proxy account. As a result, the financial institution A server 3 executes the processing flow similar to that shown in FIG. 3, thereby providing an authentication proxy function even to an account holder of another financial institution who has not opened an account in the financial institution A.

1 ATM, 2 ATM network, 3 financial institution A server, 4 financial institution B server

Claims (2)

A financial institution server connected to an account processing instruction device via a communication network and executing a predetermined program stored in a memory,
an account data receiving unit for receiving first account data specifying a first account of a first financial institution, transmitted from the account processing instruction device;
instruction data transmission means for generating instruction data for each of the plurality of accounts associated with the first account based on instructions from the user of the account processing instruction device;
the first account data is included in a storage medium issued by the first financial institution;
The first account data is read from the storage medium by the account processing instruction device,
A financial institution server, wherein a financial institution of each of the plurality of accounts is different from the first financial institution. A method implemented by a financial institution server connected to an account processing instruction device via a communication network and executing a predetermined program stored in a memory, comprising:
receiving first account data specifying a first account of a first financial institution, transmitted from the account processing instruction device;
generating instruction data for each of the plurality of accounts associated with the first account based on instructions from the user of the account processing instruction device;
the first account data is included in a storage medium issued by the first financial institution;
The first account data is read from the storage medium by the account processing instruction device,
The method, wherein a financial institution for each of said plurality of accounts is different than said first financial institution.

Images