JP2023157367A - Agent authentication system, and agent authentication method - Google Patents

Abstract

To provide an agent authentication system capable of safely achieving a transaction in which an agent withdraws cash while reducing the burden on an agent and a bank.SOLUTION: In an agent authentication system 100, a case management system 110 generates and registers a piece of agent transaction information based on input from a person in charge 10 for each agent transaction case and outputs a piece of matter identification information of the agent transaction information to a ledger 161. An automatic cash transaction machine 120 verifies the identity of the operator who presents the ledger 161 and the identification document, and when the identity verification is successful, transmits the case identification information acquired from the ledger 161 and name information acquired from an identity verification documents to the case management system 110. The case management system 110 determines that the operator is the agent 20 and the authentication has been successful, when there is the agent transaction information that has the combination of the case identification information and the name information and notifies the permission for the transaction based on the transaction details of the case to the automatic cash transaction machine 120. The automatic cash transaction machine 120 executes the transaction according to the notify.SELECTED DRAWING: Figure 1

Description

The present invention relates to an agent authentication system and an agent authentication method, and relates to an agent authentication system and an agent authentication method that authenticate an agent when the agent withdraws bank deposits using an automated teller machine. It is suitable for application.

Currently, opportunities to handle cash are decreasing year by year due to the spread of cashless payments and Internet banking (IB), but the need to withdraw cash remains strong.

For example, regarding a bank account held by a corporation, if you use the Internet banking (so-called electronic banking (EB)) that the corporation uses, you can check the balance and make transfers online, but if you want cash. In some cases, it is necessary for a person to go to a bank counter and withdraw money over the counter. Generally, cash withdrawal processing in a corporation is performed by an agent (for example, a clerk) rather than a person in charge (manager) who is responsible for the withdrawal. When a cash withdrawal process is performed by an agent, the agent (e.g., a clerk) prepares identification documents such as a driver's license, a seal (company seal), and a corporate passbook, etc., and goes to the counter. After transaction verification and identity verification, cash can be withdrawn from the corporate bank account.

Here, for example, Patent Document 1 discloses a slip generation system aimed at efficiently verifying the identity of the user. The slip generation system described in Patent Document 1 includes an electronic bookkeeping machine that accepts input from a customer, an acquisition section that acquires at least a part of information related to customer identification, and a slip generation system that receives input from a customer based on the information acquired by the acquisition section. , a search unit that searches for information related to social risks of customers in a database containing information related to social risks; It is characterized in that at least a part of the steps are executed in parallel.

JP2020-061078A

However, in the conventional method of cash withdrawal by an agent as described above, the agent brings valuables such as the corporate seal and passbook to a bank counter, and the bank counter staff checks the transaction and confirms the identity. Because of this necessity, there was a problem in that it placed a heavy burden on both the corporation (agent) and the counter staff. Another problem was that cash withdrawals using counters could not be easily linked to EBs. Another cash withdrawal method is to have your corporate card held by an agent and withdraw cash from an automatic teller machine (ATM). This poses security management risks and is not common. Such a problem could not be solved even with the slip generation system disclosed in Patent Document 1.

The present invention has been made in consideration of the above points, and is an agent authentication system that allows an agent to safely perform a transaction in which cash is withdrawn while reducing the burden on the agent and the bank. This paper attempts to propose an agent authentication method.

In order to solve such problems, the present invention provides an agent authentication system that performs agent authentication in agent transactions by an agent designated by a person in charge, the agent authentication system comprising information on predetermined items regarding the agent transactions. The case management system includes a case management system that manages transaction information, and an automated teller machine that has a function of verifying the identity of the operator, and the case management system receives input from the person in charge for each case of the agent transaction. The automatic teller machine generates and registers the agent transaction information based on the registered agent transaction information, outputs the case identification information of the registered agent transaction information on a form, and the automated teller machine sends the transaction information to the operator who has presented the form and the identity verification document. If the identity verification is successful, the matter identification information acquired from the form and the name information acquired from the identity verification document are sent to the matter management system, and the matter management system The agent transaction information is searched based on the combination of the case identification information and the name information received from the automated teller machine, and if a case having the combination exists in the agent transaction information, the operator determines that the agent is the agent and that the agent authentication is successful, notifies the automatic teller machine of permission for transactions based on the transaction details of the case registered in the agent transaction information, and the automatic teller machine , there is provided an agent authentication system characterized in that a transaction is executed in accordance with a notification from the case management system.

In order to solve this problem, the present invention provides an agent authentication method in which an agent authentication system performs agent authentication in agent transactions by an agent designated by a person in charge, wherein the agent authentication system , a case management system that manages agent transaction information consisting of information on predetermined items related to the agent transaction, and an automated teller machine having a function of verifying the identity of an operator; a registration step of generating and registering the agent transaction information based on input from the person in charge for each agent transaction case; and a registration step in which the case management system identifies the case of the agent transaction information registered in the registration step. a form output step of outputting information to a form, and the automated teller machine performs identity verification on the operator who presented the form and identification documents, and if the identity verification is successful, the automated teller machine performs identity verification from the form. an identity verification step of transmitting the acquired matter identification information and the name information acquired from the identity verification document to the matter management system; and the matter management system transmits the matter identification received from the automatic teller machine in the identity verification step. The agent transaction information is searched based on the combination of information and the name information, and if a case having the combination exists in the agent transaction information, the operator is authenticated as the agent. an agent authentication step in which the automated teller machine is determined to be successful and notifies the automated teller machine of permission for the transaction based on the transaction details of the case registered in the agent transaction information; An agent authentication method is provided, comprising: a transaction execution step of executing a transaction in accordance with a notification from the step.

According to the present invention, it is possible to safely realize a transaction in which an agent withdraws cash while reducing the burden on the agent and the bank.

1 is a diagram illustrating a configuration example of an agent authentication system 100 according to an embodiment of the present invention. It is a diagram showing an example of the configuration of an automated teller machine (ATM) 120 with an identity verification function. 2 is a flowchart illustrating an example of a procedure for a cash withdrawal transaction using the agent authentication system 100. 3 is a diagram illustrating an example of agent transaction information registered in the matter management system 110. FIG. FIG. 7 is a diagram showing an example of agent transaction information registered in the case management system 110 in a fourth modification.

Embodiments of the present invention will be described in detail below with reference to the drawings.

In the following explanation, various information may be explained using expressions such as "table", "table", "list", "queue", etc., but various information may also be expressed using data structures other than these. good. "XX table", "XX list", etc. are sometimes referred to as "XX information" to indicate that they do not depend on the data structure. When explaining the contents of each piece of information, expressions such as "identification information", "identifier", "name", "ID", and "number" are used, but these can be replaced with each other.

In addition, in the following explanation, when the same type of elements are explained without distinguishing them, reference numerals or common numbers in the reference signs are used, and when the same kind of elements are explained separately, the reference numerals of the elements are used. Alternatively, an ID assigned to the element may be used instead of the reference code.

In addition, in the following explanation, processing performed by executing a program may be explained, but the program is executed by at least one or more processors (for example, a CPU) to store predetermined processing as appropriate. Since the processing is performed using resources (for example, memory) and/or interface devices (for example, communication ports), the main body of the processing may be a processor. Similarly, the subject of processing performed by executing a program may be a controller having a processor, a device, a system, a computer, a node, a storage system, a storage device, a server, a management computer, a client, or a host. The main body (for example, a processor) that performs processing by executing a program may include a hardware circuit that performs part or all of the processing. For example, the main body of processing performed by executing a program may include a hardware circuit that performs encryption and decryption, or compression and expansion. A processor operates as a functional unit that implements a predetermined function by operating according to a program. Devices and systems that include processors are devices and systems that include these functional units.

A program may be installed on a device, such as a computer, from a program source. The program source may be, for example, a program distribution server or a computer-readable storage medium. When the program source is a program distribution server, the program distribution server includes a processor (for example, a CPU) and a storage resource, and the storage resource may further store a distribution program and a program to be distributed. Then, by the processor of the program distribution server executing the distribution program, the processor of the program distribution server may distribute the program to be distributed to other computers. Furthermore, in the following description, two or more programs may be realized as one program, or one program may be realized as two or more programs.

(1) Configuration First, the configuration of an agent authentication system 100 according to an embodiment of the present invention and its related configuration will be described with reference to FIGS. 1 and 2.

FIG. 1 is a diagram showing a configuration example of an agent authentication system 100 according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of the configuration of an automated teller machine (ATM) 120 with an identity verification function.

As shown in FIG. 1, the agent authentication system 100 includes a case management system 110 and an automated teller machine (ATM) 120 with an identity verification function. FIG. 1 also shows an Internet banking 130, an accounting system 140, a terminal 150, and a printer 160 as related components of the agent authentication system 100.

Further, FIG. 1 shows a person in charge 10 who is responsible for transactions (in this example, withdrawals) and an agent 20 who actually performs cash withdrawals. The person in charge 10 is a person in charge of managing the bank account of the Internet banking 130, and is, for example, a manager of a corporate company. The agent 20 is a person who withdraws cash as an agent in accordance with a request from the person in charge 10, and is, for example, a clerk at a corporate company.

Note that in FIG. 1, the symbols (S11 to S20) assigned to arrows between structures, etc. correspond to the processes of steps S11 to S20 in the flowchart of FIG. 3, which will be described later.

The case management system 110 is a system that manages agent transactions performed by the agent 20, and is realized by a server such as a cloud, for example. The case management system 110 is configured independently of the Internet banking 130 for corporations. The reason for this is that each bank has its own Internet banking 130 server, and if you try to introduce the case management system 110 to such Internet banking 130, large-scale renovations will be required, resulting in a large amount of cost and a lot of work. This is because it takes time. Therefore, in this embodiment, the case management system 110 is an independent server such as a cloud, and the interface part of the server is provided as an API (Application Programming Interface). The agent authentication system 100 can be realized with a smaller modification than the modification of the server.

The matter management system 110 mainly has display, registration, update, and authentication functions. For example, the matter management system 110 displays an input screen for registering information related to proxy transactions (proxy transaction information) on the terminal 150 of the person in charge 10, and in response to the input operation by the person in charge 10, Generate or update information and maintain it. Details of the agent transaction information will be described later with reference to FIG. 4. In addition, when the agent 20 who has received a request from the person in charge 10 attempts to withdraw cash from the ATM 120 as an agent, the case management system 110 uses the agent transaction information held by the agent 20 and information about the transactions performed at the ATM 120. Based on the result of the identity verification process for the agent 20, agent authentication is performed to determine whether the agent 20 is the agent registered in the agent transaction information.

The automatic teller machine (ATM) 120 with an identity verification function includes a camera section 121, an identity verification section 122, and an automatic cash transaction section 123, as shown in FIG.

Internet banking 130 is Internet banking for corporations (so-called electronic banking (EB)).

The accounting system 140 is a business system that executes bank account processing. The accounting system 140 is constructed for each bank that provides Internet banking 130, and in this example, manages the bank account of the corporation to which the person in charge 10 belongs.

The terminal 150 is an information processing terminal used by the person in charge 10 and is connectable to the Internet banking 130 network. Specifically, the terminal 150 may be any information processing terminal that has a connection function to a network, such as a personal computer or a smartphone.

Printer 160 is a printer connected directly or indirectly to terminal 150. The printer 160 outputs a form 161 in response to an operation from the terminal 150 when the terminal 150 is connected to the case management system 110 via the Internet banking 130. However, the output of the form 161 is controlled by the case management system 110. Specifically, if agent transaction information for a case for which the person in charge 10 is the person in charge has been registered, the case management system 110 will manage the transaction in accordance with the operation from the terminal 150 used by the person in charge 10. The output of the form 161 is permitted. By performing such control, it is possible to prevent anyone other than the person in charge 10 from issuing the form 161 for proxy transactions.

The form 161 is, for example, a two-dimensional barcode, does not include information indicating specific transaction details, and is printed with information obtained by encrypting the case management number registered in the agent transaction information. Information output to the form 161 is controlled by the case management system 110. Note that the form 161 is not limited to a two-dimensional barcode, and may be in other output formats (for example, an image or electronic data).

(2) Proxy withdrawal procedure Next, referring to FIG. 3 etc., in the proxy authentication system 100 shown in FIGS. We will explain in detail the procedure for withdrawing money.

FIG. 3 is a flowchart showing an example of a procedure for a cash withdrawal transaction using the agent authentication system 100.

According to FIG. 3, first, the person in charge 10 operates the terminal 150 to display the login screen of the Internet banking 130, and logs in to the Internet banking 130 by entering the ID and password on this login screen (step S11). ). The ID and password are information that only the person in charge 10 (or the person in charge of the corporate company) can know, and by successfully logging in, it is assumed that the person in charge 10 (or the person in charge of the company) has logged in. I reckon.

Next, the person in charge 10 selects a desired transaction from the Internet banking 130 menu displayed on the terminal 150 upon successful login in step S11. Specifically, in this example, "proxy withdrawal", which means a transaction in which cash is withdrawn by an agent, is selected (step S12).

When "proxy withdrawal" is selected in step S12, internet banking 130 connects to case management system 110 (step S13). Thereafter, all communications between the terminal 150 and the case management system 110 are performed via the Internet banking 130. When connected to the matter management system 110 in step S13, a registration screen for agent transaction information is displayed on the terminal 150.

Next, the person in charge 10 operates the terminal 150 and inputs predetermined information regarding the agent transaction. In response to this input operation, the matter management system 110 registers agent transaction information (step S14). Registration of agent transaction information performed in step S14 will be explained using agent transaction information 210 in FIG. 4.

FIG. 4 is a diagram showing an example of agent transaction information registered in the matter management system 110. The agent transaction information 210 shown in FIG. 4 is an example of the entire table of agent transaction information held by the matter management system 110. In this explanation, for the sake of simplicity, when the terminal 150 is connected to the case management system 110, a table of agent transaction information 210 shown in FIG. Although it is assumed that the agent transaction information 210 is registered in the matter management system 110 by this, in reality, the display mode of the agent transaction information on the terminal 150 and the data structure of the agent transaction information held by the matter management system 110 are explained below. may not be the same.

The agent transaction information 210 in FIG. 4 has a record for each agent transaction case registered by the person in charge 10, and each record is configured with data items 211 to 216. Note that the data structure shown in FIG. 4 is just an example, and for example, the account number of the corporate account of the withdrawal source (the account logged in through Internet banking 130) may be automatically registered.

In the "matter management number" column of item 211, the management number of the case to be registered as an agent transaction is registered. In the “withdrawal amount” column of item 212, the amount to be withdrawn in the case is registered. The name of the person in charge 10 who registered the matter is registered in the "name of person in charge of withdrawal" column of item 213. In the "withdrawal agent name" column of item 214, the name of the agent 20 who actually makes the withdrawal in the case is registered. In the “matter registration date and time” column of item 215, the registration date and time of the relevant case is registered. In the "ATM transaction completion date and time" column of item 216, the date and time when the agent transaction (ie, withdrawal at the ATM) in the case was completed is registered.

The process of step S14 in FIG. 3 will be explained in detail using the agent transaction information 210 in FIG. 4. First, the case management system 110 connected from the logged-in terminal 150 generates a new record of agent transaction information 210, and sets the name of the person in charge 10 in the field 213 of the record based on the login information. Next, the matter management system 110 displays a registration screen showing the record on the terminal 150 using an interface such as a GUI (Graphical User Interface). Next, on the registration screen displayed on the terminal 150, the person in charge 10 enters the amount to be withdrawn in item 212, enters the name of the agent in item 213, and confirms the input (by pressing the registration button). )I do. In response to the press of the registration button, the matter management system 110 updates the agent transaction information 210 it holds, and registers a record in which the above input information is set. Note that the data of item 216 is recorded in step S20, which will be described later.

Returning to the explanation of FIG. 3. After registering the agent transaction information, the person in charge 10 performs a predetermined operation on a predetermined screen presented by the matter management system 110 (specifically, for example, "Print" to output the registered information on the registration completion screen). By pressing a button, etc.), a form 161 is output from a printer 160 connected to the terminal 150. The form 161 is, for example, a two-dimensional barcode. The form 161 does not show any information that shows the specific transaction contents of the agent transaction information 210 registered in step S14, and for example, only the item 211 "Project management number" is printed in an encrypted state. Ru.

Next, the agent 20 goes to the ATM 120, carrying the form 161 (two-dimensional barcode) output in step S15. The ATM 120 includes a device such as a scanner that can acquire information recorded on the form 161 (in this example, information on an encrypted two-dimensional barcode). Using this device, the ATM 120 reads the encrypted case management number from the form 161 presented by the agent 20, and acquires the case management number by decrypting it (step S16).

Next, the ATM 120 (identity verification unit 122) performs identity verification processing for the agent 20 (step S17). For the identity verification process, an identity verification document (for example, a driver's license) with a face photo that the agent 20 possesses is used.

In the identity verification process, first, the camera unit 121 takes a photo of the driver's license and the face of the agent 20. Next, the identity verification unit 122 determines the authenticity of the license (authenticity determination). Known methods for determining the authenticity of identification documents such as driver's licenses can be used as the method for determining authenticity, and detailed description thereof will be omitted. For example, it is assumed that special light is irradiated onto a driver's license from a light source provided in the identity verification unit 122 to check the state of reflection. Furthermore, the identity verification unit 122 performs facial authentication using the image taken by the camera unit 121 to confirm that the person (proxy 20) operating the ATM 120 with identity verification function is the person indicated on the driver's license. Determine if they are the same (identity determination). In this identity determination, biometric authentication may be performed by instructing the operator to make a predetermined movement, thereby preventing a third party from impersonating the person shown on the driver's license. Then, if the identity verification unit 122 determines that the license is genuine in the authenticity determination and that the agent 20 is the person indicated on the license, the identity verification unit 122 determines that the driver's license is authentic. Handle names as character data. The character data can be obtained by performing image processing such as OCR (Optical Character Recognition) on the image of the driver's license taken by the camera unit 121. By confirming that the agent 20 is the owner of the license through the identity verification process, the ATM 120 can handle the character data as name information of the agent 20.

Next, the ATM 120 (identity verification unit 122) uses the case management number obtained in step S16 and the character data of the name of the identification document (for example, a driver's license) obtained through the identification process in step S17 to manage the case. system 110. Then, the matter management system 110 uses the received matter management number as a key to search for the applicable matter from the agent transaction information 210 it owns, and sets the "withdrawal agent name" in item 204 in the corresponding matter record. It is compared with the received character data of the name, and it is determined whether or not the two match (step S18).

If the result of the matching performed in step S18 is OK, that is, the name of the withdrawal agent and the name on the driver's license match (YES in step S18), the case management system 110 has successfully authenticated the agent 20. I judge that. In this case, the matter management system 110 notifies the ATM 120 that withdrawal of the amount registered in the item 212 "withdrawal amount" in the matter record searched in step S18 is permitted, and the ATM 120 that has received the notification It communicates with the accounting system 140 and withdraws the above amount from the corporate bank account (step S19). The accounting system 140 also notifies the Internet banking 130 of the withdrawal record. When the withdrawal process in step S19 is completed, the ATM 120 notifies the case management system 110 of the transaction completion date and time. Finally, the matter management system 110 registers the transaction completion date and time notified from the ATM 120 in the "ATM transaction completion date and time" of item 216 of the matter record (step S20), and completes the proxy withdrawal process. By recording the ATM transaction completion date and time in the agent transaction information 210, the person in charge 10 can confirm from the agent transaction information 210 when the registered agent transaction was completed or uncompleted. be able to.

On the other hand, if the result of the verification performed in step S18 is NG, that is, the name of the withdrawal agent and the name on the driver's license do not match (NO in step S18), it is determined that the authentication of the agent 20 has failed. . In this case, the case management system 110 notifies the ATM 120 that withdrawal by the proxy 20 is not permitted, and completes the proxy withdrawal process. At this time, the ATM 120 uses its own display screen (not shown) to notify the agent 20 that agent authentication has failed and that the agent 20 cannot be permitted to withdraw cash. good.

According to the above-described agent transaction, the following effects can be obtained.

First, in the agent authentication system 100 according to the present embodiment, the information printed on the form 161 is encrypted, so the form 161 (two-dimensional barcode) necessary for performing agent transactions Even if the form 161 is lost, misuse by a third party who has obtained the form 161 can be prevented. In particular, personal information (or similar information) such as the names of the person in charge 10 and the agent 20, and bank account numbers (or similar information) are not printed on the form 161, and even if it were decrypted, only the case management number would be printed. Since the information is not displayed, damage such as information leakage and fraudulent withdrawals can be more reliably prevented.

Second, in the agent authentication system 100 according to the present embodiment, in the identity verification process for the agent 20, the identity verification unit 122 uses an image taken of the operator of the ATM 120 and a photo attached to the identity verification document. Even if the form 161 and identification document (driver's license) are stolen by the agent 20, who is the withdrawal agent, the image taken of the thief and the photo of the identification document Because they do not match, the thief cannot pass the identity verification, and the thief cannot impersonate an agent and withdraw money. Furthermore, even if the thief clears the identity verification using his or her own driver's license, the name information written on the driver's license, etc. will be used in the agent transaction information 210 during agent authentication in the case management system 110. Since the name does not match the agent's name, agent authentication will fail, and it is possible to prevent fraudulent withdrawals.

Third, in the agent authentication system 100 according to the present embodiment, the data sent from the ATM 120 to the case management system 110 in order for the case management system 110 to perform agent authentication is only character data of name information. Therefore, the line load between the case management system 110 and the ATM 120 can be reduced. In terms of agent authentication as a whole, other data exchanged between the case management system 110 and the ATM 120 is also notification of success or failure of agent authentication, notification of ATM transaction completion date and time, etc., and the amount of data is small. Therefore, the line load between the case management system 110 and the ATM 120 can be reduced.

Fourthly, according to the agent authentication system 100 according to the present embodiment, when performing an agent transaction, the agent 20 brings only the form 161 passed from the person in charge 10 and his/her own identity verification document to the ATM 120. The burden on the agent 20 can be reduced. Furthermore, the fact that particularly complicated operations are not required at the ATM 120 also reduces the burden on the agent 20. Further, since the proxy transaction is completed at the ATM 120 without involving a bank teller, the burden on the bank side can be reduced. Furthermore, since withdrawals are made only with the amount registered in the agent transaction information, the risk of fraudulent withdrawals, etc. is low, and the administrative burden on the person in charge 10 can be reduced.

(3) Modifications The present invention is not limited to the embodiments described above, and includes various modifications. Below, some modified examples will be presented and their characteristics will be explained.

(3-1) First Modified Example In the above-described embodiment, the name of the agent 20 is used as one of the keys for agent authentication, so if there is a person with the same name in the company, impersonation will be prevented. There is a possibility of making money. Taking this situation into consideration, the agent authentication system 100 may be configured as in the following first modification.

In the first modified example, the case management system 110 holds agent transaction information in a form that includes identification information that can uniquely identify the agent 20 (for example, an employee number) that cannot be known by a third party. . Specifically, for example, the data structure is such that an item "withdrawal agent employee number" is added to the agent transaction information 210 shown in FIG. 4. The item "withdrawal agent employee number" in the agent transaction information is the employee number of the agent 20 specified by the person in charge 10 when registering the agent transaction information 210 by the person in charge 10 (step S14 in FIG. 3). is entered and registered. An employee number is information that can uniquely identify an employee within a company.

In the first modification, after the agent 20 in possession of the form 161 undergoes the identity verification process (step S17 in FIG. 3) at the ATM 120, the identity verification unit 122 inputs the "employee number" on the display screen of the ATM 120. Configure to prompt additionally. After the identity verification of the agent 20 is completed in the identity verification process, the ATM 120 (identity verification unit 122) manages the matter using the matter management number, the character data of the name read from the identity verification document, and the employee number as input keys. The information is transmitted to the system 110, and the matter management system 110 performs agent authentication by comparing the information of these input keys with the agent transaction information 220.

By performing agent authentication using such a procedure, in the first modification, even if a person with the same name and last name as the agent 20 exists within the company, it is possible to prevent fraudulent withdrawals by that person. A more secure proxy authentication system can be provided.

In this example, the employee number of the agent 20 is used as additional information, but the information that can be used is not limited to the employee number as long as the method allows the agent 20 to be reliably identified. Specifically, for example, in the agent transaction information 220, instead of or in addition to the "withdrawal agent employee number" in item 221, a secret password etc. that only the agent 20 and the person in charge 10 know is entered. You may also register it. In this case, when the agent 20 operates the ATM 120, the agent 20 is required to enter the password registered in the agent transaction information, and the case management system 110 authenticates the agent using this password as one of the input keys. good.

(3-2) Second Modification As a second modification, the agent authentication system 100 according to the embodiment or the first modification described above is also utilized for mutual checking within a company regarding cash withdrawals. be able to.

In the second modification, when the person in charge 10 registers the agent transaction information 210, the case management system 110 enters the same name as the item 213 (name of the person in charge of withdrawal) in the item 214 (withdrawal agent name). Restricts settings so that settings cannot be made.

According to such a second modification, the responsible person 10 can be prohibited from designating himself/herself as the agent 20, so there is a mutual check that prevents the responsible person 10 from withdrawing money from the corporate bank account alone. can be realized.

(3-3) Third Modified Example In the case of the agent authentication system 100 according to the embodiment or modified example described above, a third party steals the ID and password of the person in charge of the Internet banking 130, logs in, and authenticates the agent. If you set it to yourself, the third party will be able to make withdrawals. In order to prevent such a situation, a third modification of the agent authentication system 100 can be considered.

In the third modification, the terminal 150 used by the person in charge 10 may be registered in advance in the Internet banking 130, and the configuration may be such that a one-time password is required to be input when connecting the terminal 150 to the Internet banking 130. . With this configuration, even if the ID and password of the person in charge 10 are stolen, the risk of unauthorized withdrawal can be reduced.

(3-4) Fourth Modification In the agent authentication system 100 according to the embodiment or modification described above, if the agent 20 loses the form 161, there is no risk of transaction information being leaked as described above. Since the agent 20 will have to return to the person in charge 10 again and have the form 161 reissued, there is a risk that convenience will be impaired. In order to solve such problems, a fourth modification of the agent authentication system 100 can be considered.

In the agent authentication system 100 according to the fourth modification, the case management system 110 holds agent transaction information 210 to which "lost flag" check information is added, and when the lost flag is checked, The device is configured to accommodate loss procedures.

FIG. 5 is a diagram showing an example of agent transaction information registered in the matter management system 110 in the fourth modification. FIG. 5 illustrates proxy transaction information 220 before the start of the loss procedure and proxy transaction information 230 after the start of the loss procedure. The agent transaction information 220 has an item 221 (lost flag) added to the data structure of the agent transaction information 210 in FIG. The agent transaction information 230 has an item 231 (withdrawal store) and an item 232 (withdrawal agent employee number) added to the data structure of the agent transaction information 210 in FIG.

In the "Loss Flag" column of item 221, a check flag related to the loss of the form 161 is shown, and in a situation where no loss has occurred, it is registered in an unchecked state. When the agent 20 who has lost the form 161 informs the person in charge 10 of the loss, the person in charge 10 logs into the case management system 110 and selects the case management number of the case. Next, the person in charge 10 checks the lost flag in item 221 in the record of agent transaction information 220 corresponding to the selected case management number.

When the lost flag is checked in the agent transaction information 220, the matter management system 110 displays a registration screen as shown in the agent transaction information 230 for the matter, and prompts the person in charge 10 to enter items 231 and 232. request. At this time, the values of items 211 to 216 are inherited from the values of the same items in the agent transaction information 220 of the matter.

In the "withdrawal store" column of item 231, identification information (for example, store code, etc.) of the bank store where the transaction is conducted is registered. The employee number of the agent 20 designated by the person in charge 10 is registered in the "withdrawal agent employee number" column of item 232. An employee number is information that can uniquely identify an employee within a company.

When items 231 and 232 are entered by the person in charge 10, the matter management system 110 registers agent transaction information 230, and in the subsequent loss procedure, agent authentication is performed using this agent transaction information 230. . In this example, the agent transaction information 220 and the agent transaction information 230 are shown separately to simplify the explanation, but they may be managed as one. Furthermore, the information in items 231 and 232 may be registered in advance when the record of this case is created for the first time, although this increases the effort of the person in charge 10.

After the lost flag is checked and predetermined information (items 231, 232) is additionally registered in the agent transaction information 230 in the case management system 110, the agent 20 registers the information that the person in charge 10 registered in item 231. The user goes to the store and presses a predetermined procedure button at the ATM 120, which is prepared in case the form 161 is lost. When this procedure button is pressed, the identity verification unit 122 of the ATM 120 starts the procedure in case of loss.

In the loss procedure, the identity verification unit 122 first performs authenticity and identity determination using the identity verification document (hereinafter referred to as a driver's license) of the agent 20, as in normal agent transactions. Furthermore, the identity verification unit 122 causes the agent 20 to input the employee number of the individual as a procedure specific to the procedure in the event of loss. Then, when the identity verification unit 122 determines that the driver's license is genuine through the authenticity determination and determines that the agent 20 is the person indicated on the driver's license through the identity determination, the identity verification section 122 reads the information from the driver's license. The character data of the name, the identification information (store code) of the store where the ATM 120 is installed, and the employee number input by the agent 20 are transmitted to the case management system 110.

Next, the case management system 110 uses the "store code", "employee number" and "name character data" received from the ATM as keys to manage the corresponding case record from the agent transaction information 230 it holds. Search for the number (item 211). As a result of this search, if the matter management number exists, the matter management system 110 determines that the authentication of 20 agents has been successful. In this case, the matter management system 110 notifies the ATM 120 that withdrawal of the amount registered in the item 212 "withdrawal amount" in the applicable matter record is permitted, and the ATM 120 that has received the notification It communicates with the system 140 and withdraws the amount from the corporation's bank account.

By performing the loss procedure as described above, in the fourth modification, when the agent 20 loses the form 161, the agent 20 does not have to return to the person in charge 10 and have the form 161 reissued. , agent transactions can be carried out through agent authentication. Therefore, the agent authentication system 100 according to the fourth modification can provide agent transactions with high confidentiality and convenience.

Note that the agent authentication system 100 according to the fourth modification is configured so that agent authentication can be performed using identification information of the agent 20 (employee number in the above explanation) instead of the case management number. Therefore, as a further modification, if the case management system 110 retains the agent transaction information 230 corresponding to the loss procedure from the normal time, the document 161 Agent authentication and proxy withdrawal based on pre-registered information (proxy transaction information), information on identity verification documents, and input information by the proxy 20 without outputting any information (for example, two-dimensional barcode) becomes possible.

Further, in the above embodiment and each modification example, other information can also be registered in the agent transaction information. For example, in addition to specifying the store where the transaction is to be made, the "expiration date" of the transaction may be specified and registered in advance in the agent transaction information. The expiration date may be set to a specific time period. If the expiration date is registered in the agent transaction information, the current date and time may be used as a search key to determine whether the expiration date conditions are met when the agent is authenticated by the matter management system 110. By making it possible to register an expiration date in agent transaction information, agent transactions can be realized more safely. Furthermore, since the expiration date can be said to be information that is not included in the information indicating the transaction details, it may be output to the form 161. When outputting the expiration date on the form 161, it may be embedded in a two-dimensional barcode, etc., but it may be printed in a separate area from the two-dimensional barcode so that the agent 20 can easily recognize it. Good too. If the agent 20 can recognize the expiration date, convenience can be improved. In addition, when the expiration date is output on the form 161, the expiration date may be read at the stage of identity verification by the ATM 120, and the transaction may be interrupted if the current date and time do not satisfy the conditions of the expiration date. . With this configuration, communication opportunities to the case management system 110 side can be reduced, so that the effect of reducing the line load can be obtained.

The embodiments and modifications described above are examples for explaining the present invention in an easy-to-understand manner, and are omitted and simplified as appropriate to clarify the explanation. Furthermore, not all combinations of features described in the embodiments and modifications are essential to the solution of the invention. The present invention is not limited to the embodiments, and any application examples that match the idea of the present invention are included within the technical scope of the present invention. Those skilled in the art can make various additions and changes to the present invention within the scope of the present invention. The present invention can also be implemented in various other forms. Unless specifically limited, each component may be plural or singular.

Further, the present invention is applicable to all cash withdrawal transactions using automated teller machines having an identity verification function. Furthermore, the present invention is not limited to corporations, such as proxy transactions from corporate accounts, but is also applicable to general proxy transactions based on requests, such as the relationship between a guardian and a ward.

10 Responsible person 20 Agent 100 Agent authentication system 110 Case management system 120 Automatic teller machine (ATM) with identity verification function
121 Camera section 122 Identity confirmation section 123 Automatic cash transaction section 130 Internet banking 140 Accounting system 150 Terminal 160 Printer 161 Form 210, 220, 230 Agent transaction information

Claims (10)

An agent authentication system that performs agent authentication in agent transactions by an agent designated by a person in charge,
a matter management system that manages agent transaction information consisting of information on predetermined items regarding the agent transaction;
An automated teller machine having a function of verifying the identity of an operator;
Equipped with
The case management system generates and registers the agent transaction information for each case of the agent transaction based on input from the person in charge, and outputs the case identification information of the registered agent transaction information to a form. death,
The automated teller machine verifies the identity of the operator who presented the form and the identity verification document, and if the identity verification is successful, the automated teller machine verifies the identity of the operator who presented the form and the identity verification document, and if the identity verification is successful, the automated teller machine collects information from the case identification information acquired from the form and the identity verification document Send the acquired name information to the case management system,
The case management system searches the agent transaction information based on the combination of the case identification information and the name information received from the automatic teller machine, and a case having the combination exists in the agent transaction information. In the case where the operator is the agent, the agent authentication is determined to be successful, and the automated teller machine is notified of permission for the transaction based on the transaction details of the case registered in the agent transaction information. ,
An agent authentication system characterized in that the automated teller machine executes a transaction according to a notification from the case management system. 2. The agent transaction information includes at least the name of the person in charge, the name of the agent designated by the person in charge, and information indicating the withdrawal amount of the transaction. agent authentication system. The agent authentication according to claim 1, wherein the matter management system allows information included in the agent transaction information other than information indicating transaction details to be output to the form. system. The agent authentication system according to claim 3, wherein a two-dimensional barcode indicating the encrypted case identification information is output on the form. The automated teller machine includes a camera that photographs the operator,
The automated teller machine successfully determines the authenticity of the identification document presented by the operator, and compares the facial image obtained from the identification document with the facial image of the operator captured by the camera. The agent authentication system according to claim 1, wherein the agent authentication system determines that the identification has been successful if the identification is successful. Claim characterized in that the matter management system is configured independently from the internet banking of the account from which the money is withdrawn in the agent transaction, and receives operations from the person in charge via the internet banking. The agent authentication system described in 1. The agent authentication system according to claim 2, wherein the matter management system rejects registration of the agent transaction information in which the name of the person in charge and the name of the agent are the same. The matter management system is capable of registering identification information of a store that performs the agent transaction and identification information of the agent in the agent transaction information at a predetermined timing,
If the person in charge notifies the matter management system of the loss of the form,
The automated teller machine installed at a store that matches the store's identification information verifies the identity of the operator who has presented the identification document, and also prompts the operator to input the agent's identification information. and if the identity verification is successful, transmitting the identification information of the agent input by the operator and the name information obtained from the identity verification document to the case management system;
The case management system searches for the agent transaction information based on the combination of the agent's identification information and the name information received from the automatic teller machine, and the case having the combination is searched for as the agent transaction information. If the operator is the agent, the agent authentication is determined to be successful, and the automated teller machine is authorized to perform a transaction based on the transaction details of the case registered in the agent transaction information. notify,
The agent authentication system according to claim 2, wherein the automatic teller machine executes a transaction according to a notification from the case management system. The matter management system is capable of registering an expiration date in the agent transaction information, and does not permit proxy transactions for the subject matter if the automated teller machine is operated outside of the expiration date. The agent authentication system according to claim 2, characterized in that: An agent authentication method in which an agent authentication system performs agent authentication in agent transactions by an agent designated by a person in charge,
The agent authentication system includes a case management system that manages agent transaction information consisting of information on predetermined items regarding the agent transaction, and an automatic teller machine having a function of verifying the identity of the operator,
a registration step in which the case management system generates and registers the agent transaction information for each case of the agent transaction based on input from the person in charge;
a form output step in which the case management system outputs case identification information of the agent transaction information registered in the registration step to a form;
The automated teller machine verifies the identity of the operator who presented the form and the identity verification document, and if the identity verification is successful, the automated teller machine verifies the identity of the operator who presented the form and the identity verification document, and if the identity verification is successful, the automated teller machine collects information from the case identification information acquired from the form and the identity verification document an identity verification step of transmitting the acquired name information to the case management system;
The matter management system searches for the agent transaction information based on the combination of the matter identification information and the name information received from the automatic teller machine in the person verification step, and the matter having the combination is searched for by the agent. If the operator exists in the agent transaction information, the agent authentication is determined to be successful as the operator is the agent, and the cash machine determines that the operator is the agent and the transaction is authorized according to the transaction details of the matter registered in the agent transaction information. an agent authentication step of notifying the transaction device;
a transaction execution step in which the automatic teller machine executes the transaction in accordance with the notification from the agent authentication step;
An agent authentication method comprising:

Images