JP2024022359A - Automatic cash transaction equipment and automatic cash transaction system - Google Patents

Abstract

[Problem] To enable an address to be changed when verifying the identity using an automated teller machine.
[Solution] When the automated teller machine determines that it is necessary to verify the identity within a predetermined period, the automated teller machine causes the user interface to present information prompting the user to verify the identity, and the automatic teller machine displays information prompting the user to verify the identity within a predetermined period of time. If the registered address and the address stored in the identity verification medium that stores the user's identity verification information do not match (S108), the user is identified based on the user's face image data registered in the identity verification server. Face authentication is performed (S111), and if the face authentication is successful, the address stored in the personal identification information is stored in the account information (S113, S106).
[Selection diagram] Figure 14

Description

The present invention relates to an automated teller machine and an automated teller system.

In recent years, with the revision of the Act on Prevention of Transfer of Criminal Proceeds, methods of verifying identity using ATMs (Automated Teller Machines) are being considered, in addition to limited mail and face-to-face identity verification at counters. There is.

Japanese Unexamined Patent Publication No. 2005-182398 (Patent Document 1) is a technology for verifying identity using an automatic transaction machine (ATM) on a store floor of a financial institution. This bulletin states, ``An automatic transaction device that performs transactions based on user operations, a card reader that detects users who come for transactions and reads account information from transaction media in the user's possession, and A facial image database storing human facial images in correspondence with the account information, a user photographing camera for photographing the face of a user who has come for a transaction, and an identification device for identifying the user; When the identification device receives the account information as a reading result from the card reading device, the identification device photographs the user's face with the user photographing camera to obtain a facial image of the user, and also captures the facial image. By acquiring facial images corresponding to the account information from the database and comparing the feature points of each facial image, it is determined whether the user is the account holder, and the identification result and the aforementioned Send account information to the automated transaction device."

On the other hand, Japanese Patent Application Laid-Open No. 2006-251971 (Patent Document 2) is a method of acquiring an address registered with an administrative agency using a basic resident register card. This bulletin states that ``a) an automatic cash deposit/withdrawal machine connected to a host device that executes the process of changing the address of a customer registered with a financial institution; a card handling unit that acquires information specifying the stored account; (c) a character reading unit that reads characters written on the customer's certificate; and (d) identifying the account acquired by the card handling unit. automatic cash deposit/withdrawal, characterized in that it has a control unit that notifies the higher-level device of the information and the characters written on the certificate read by the character reading unit to execute a process of changing the address of the customer. Machine.”

Japanese Patent Application Publication No. 2005-182398 Japanese Patent Application Publication No. 2006-251971

In the conventional technology, an ATM is used to verify the identity of the person, but the system does not prompt the user to confirm the identity within a certain period of time, making it inconvenient to use. This is because in recent years, there has been an increasing need to carry out identity verification within a certain period of time, and it is desirable to carry out identity verification efficiently by reducing the burden and cost of counter operations and limited-person mail. ing. However, in Patent Document 1, it is not possible to efficiently verify the identity within a predetermined period.

On the other hand, banks manage customers' addresses, but address changes due to moving are only made to government agencies or the postal mail, and may not be reported to the bank. If the customer address managed by the bank differs from the actual customer address, documents sent from the bank to the customer may be returned to an unknown address, resulting in waste in the bank's administrative procedures. Patent Document 2 discloses a technology for changing the address registered in a financial institution via an ATM, but it requires a connection between the financial institution's computer and the administrative institution's computer, which is costly to realize. It takes.

The present invention has been made in view of the above-mentioned problems, and an object of the present invention is to provide an automated teller machine and an automated cash transaction system that allow address changes to be made during identity verification.

In order to solve the above problems, an automated teller machine according to the present invention includes a control section, a communication section, and a user interface section, and when the control section receives a request for a predetermined transaction from a user, the control section receives the user's account information. By acquiring the account information and transmitting the acquired account information from the communication department to the identity verification server, the identity verification server is asked whether or not identity verification is required to carry out a given transaction, and the identity verification server collects the account information and information. If it is determined that identity verification is required within a predetermined period by referring to predetermined management information associated with information regarding the user's identity verification, the user interface unit will request the user to verify his or her identity. This is a system that prompts users to present information that is registered in the identity verification server when the address registered in the account information and the address stored in the identity verification medium that stores the user's identity verification information do not match. The user's face is authenticated based on the user's face image data, and if the face authentication is successful, the address stored in the personal identification information is stored in the account information.

According to the present invention, the automated teller machine can present information prompting the user to confirm the user's identity when the user needs to confirm the user's identity within a predetermined period, and furthermore, the automated teller machine can present the user with information that prompts the user to confirm the user's identity, and furthermore, the automated teller machine can present the user with information that prompts the user to confirm the identity within a predetermined period. Even if the address stored in the account information does not match the address stored in the account information, if the user's face authentication is successful, the address on the identity verification medium can be stored as the address in the account information.

It is a block diagram of the whole system including an automated teller machine (ATM). This is an example of a customer information table. This is an example of an identity verification result management table. It is a flowchart which shows the process of setting an identity verification deadline. It is a flowchart which shows the whole process of ATM. It is a flowchart which shows withdrawal processing as a "predetermined process." 12 is a flowchart illustrating a process of determining whether or not identity verification is necessary in the identity verification server. This is an example of a screen that includes information prompting the user to confirm his or her identity. It is a flowchart which shows the identity verification process in ATM. It is a flowchart which shows the person identification processing in the person identification server. It is an overall configuration diagram of an automated cash transaction system according to a second embodiment. It is a flowchart which shows the identity verification process in ATM. It is an explanatory view concerning a 3rd example. It is a flowchart which concerns on 4th Example and shows an identity verification process. This is an example of an identity verification result table. This is an example of a screen when requesting a user to register or change an address.

Embodiments of the present invention will be described below based on the drawings. In this embodiment, an automated teller machine (ATM) is used to verify the identity, and if the address stored in the account information and the address stored in the identity verification medium such as a driver's license do not match, On the condition that the user's face authentication is successful, the address of the identity verification medium can be stored in the account information (customer information table described later).

In this embodiment, the user's identity verification can also be performed within a predetermined period using an ATM. The predetermined period is a period during which the user's identity can be verified. The predetermined period is, for example, a guidance period. The predetermined period may include the period from the end of the guidance period until the end of the identity verification. Even if the end date for identity verification has passed, a predetermined grace period may be provided. In this embodiment, each time a user uses an ATM, it is determined whether or not it is within a predetermined period for identity verification, and if it is within the predetermined period, information prompting the user to verify his or her identity is presented. The user who viewed the information may confirm his/her identity via an ATM on the spot, or may confirm his/her identity via an ATM at a later date. Until the user verifies his/her identity, information prompting the user to verify his or her identity is presented each time the user uses the ATM. Therefore, the user can remember to verify his/her identity, and the convenience of user management is improved for the financial institution that operates the ATM.

If only the address does not match at the time of identity verification, and the user's face authentication is successful, the address in the customer information table is updated with the address recorded on the identity verification medium. Although users report address changes due to moving to administrative agencies, there is a possibility that they neglect to complete address change procedures with financial institutions and the like. Therefore, in this embodiment, if a discrepancy in addresses is detected during identity verification, the address managed by the financial institution can be changed to the latest address on the spot. The latest address may be obtained by reading the address written on the face of the identification medium and recognizing the characters, or by reading data from an IC chip built into the identification medium.

In this manner, in this embodiment, using an ATM, it is possible to efficiently verify the identity of a user who wishes to make a transaction and update the address. In this embodiment, the user's address stored in the account information can be updated to the address of the identity verification medium without obtaining information from the administrative agency that manages the user's address.

Below, we will first explain some methods of identity verification, and then explain a method of managing a user's address stored in account information using an ATM without connecting to a computer system of an administrative agency. In this example, if the addresses do not match during the identity verification process, the user's address registered in the account information is updated to the address on the identity verification medium.

Note that the present invention is applicable not only to automatic teller machines but also to other devices such as automatic ticket vending machines as long as the device requires periodic identification.

A first embodiment will be described using FIGS. 1 to 10. In this embodiment, an ATM will be described as an example of an automated teller machine. In this example, when a financial institution manages a user (customer) and adopts an operation of performing identity verification at least once within a predetermined period, the identity verification process is carried out by using ATM1 as appropriate. The purpose of this is to implement the system efficiently for financial institutions and users. That is, when a user uses the ATM 1, if a predetermined condition is met, the user is prompted to confirm his or her identity at the ATM 1, thereby reducing the effort for both the financial institution and the user. In other words, it is possible to reduce the need for a counter service for identity verification or for correspondence via identity-only mail. Hereinafter, users may be referred to as customers (customers of financial institutions).

FIG. 1 shows an example of the overall system configuration of this embodiment. The automated cash transaction system includes, for example, an ATM 1, an identity verification server 2, an accounting host 3, and an operator terminal 4. A plurality of ATMs 1 and operator terminals 2 may be included in the automated cash transaction system. Each of the devices 1 to 4 is configured using a computer, and is connected to enable two-way communication via a communication line CN.

The ATM 1 includes, for example, a microprocessor (CPU in the figure) 101, a memory 102, a communication interface section 103, a user interface section 104, and an ATM mechanism section 105. The "control unit" mainly includes a microprocessor 101 and a memory 102. The ATM 1 is connected to the communication line CN using the communication interface section 103.

The user interface unit 104 has an information input unit into which information is input from the user, and an information output unit which provides information to the user. The information input section includes, for example, a touch panel. Examples of the information output section include a monitor display and a printer.

The ATM mechanism section 105 is a mechanism section necessary to realize the function of an ATM, and includes, for example, a card/statement mechanism section, a banknote deposit/withdrawal mechanism section, a coin deposit/withdrawal mechanism section, a passbook printing mechanism section, a camera, etc. There is.

The main functions of the ATM 1 include an ATM function execution section 110 and an identification information acquisition section 120.

The ATM function execution unit 110 is a function that allows a user who is a customer of a financial institution to conduct cash transactions using a cash card or bank passbook. The identity verification information acquisition unit 120 is a function that supports online identity verification in accordance with the Act on Prevention of Transfer of Criminal Proceeds.

The ATM function execution unit 110 implements functions such as a card reader function for reading data from a cash card, etc., a passbook processing function, a cash handling function, a statement printing function, a customer operation function, and a maintenance staff function.

The identity verification information acquisition unit 120 acquires information from the IC chip in the identity verification medium IVM with a face photo that the user brings. When the user inserts the identification medium IVM into a predetermined slot of the ATM mechanism section 105 or holds it over a predetermined non-contact reader and enters the PIN number from the touch panel, the identification information acquisition section 120 acquires the user's facial image from the IC chip. Obtain identity verification information, including data.

Examples of the personal identification medium IVM include a driver's license, driving history certificate, My Number card, residence card, and special permanent resident card. Even if the document does not have a built-in IC chip, it can be used if it has a photograph of the person's face attached and is recognized by the financial institution as an identity verification medium (IVM).

When verifying the identity, the identity verification information acquisition unit 120 uses the user's face image data read from the identity verification medium IVM and the user's face image data taken with the camera of the ATM mechanism unit 105 to verify the identity. Send to server 2.

The identity verification server 2 includes, for example, a microprocessor 201, a memory 202, and a communication interface section 203. The main functions of the identity verification server 2 include an identity verification information management section 210 and an identity verification result management table 220.

The identity verification information management unit 210 acquires the information of the customer information table 310 from the banking host 3 and determines whether the user who conducts the transaction at the ATM 1 is a user who requires identity verification (re-identity verification; the same shall apply hereinafter). . If the user requires identity verification, the identity verification information acquisition unit 120 acquires the results of identity verification, registers the verification results from the operator terminal 4, and sends the obtained information to the accounting system host 3. and is reflected in the customer information table 310.

The identity verification result management table 220 manages information acquired by the identity verification information management section 210.

At least part of the data or computer program stored in the identity verification server 2 can be transferred to and stored in the storage medium MM. Alternatively, the data or computer program stored in the storage medium MM can be transferred to and stored in the memory 202 of the identity verification server 2. The storage medium MM is configured as a rewritable nonvolatile medium such as a flash memory, a hard disk, or an optical disk.

The accounting system host 3 is a host computer on which an accounting system (not shown) of a financial institution operates. The accounting host 3 includes, for example, a microprocessor 301, a memory 302, and a communication interface 303.

A major function of the accounting host 3 is a customer information table 310. The customer information table 310 is a customer information table used in the accounting system, and its details will be described later with reference to FIG.

The operator terminal 4 is a computer that inspects the result of the identity verification performed by the identity verification server 2 and makes necessary corrections, and includes, for example, a microprocessor 401, a memory 402, and a communication interface unit 403.

The operator terminal 4 refers to the identity verification result management table 220 and compares the user's identity verification information acquired at the ATM 1 with the information acquired from the customer information table 310 to determine the identity verification result (OK or NG). It has a correction/confirmation section 410 in which an operator judges and registers the information.

By using the correction/confirmation unit 410, the operator refers to the case that requires a final determination of identity verification from the identity verification result management table 220, and compares the information stored in the customer information table 31 with the identity verification obtained at the ATM 1. Compare information. Then, by using the correction/confirmation unit 410, the operator checks whether there is any change in attribute information such as the address, and further checks the facial image data obtained by photographing the user's face and the facial image data stored in the identity verification medium ( (face photo). Regarding a case that requires a final judgment, if the operator can identify the user himself/herself, the operator judges it as "OK", and otherwise judges it as "NG".

The communication line CN connects the accounting host 3 and the ATM 1 as an accounting system. Furthermore, an accounting host 3, a personal identification server 2, and an operator terminal 4 are connected to the communication line CN as an information system.

FIG. 2 shows an example of a customer information table 310 that is master-managed by the accounting host 3. A customer is a customer of a financial institution and a user who uses the ATM 1.

The customer information table 310 includes, for example, store number 311, account 312, account number 313, holder's name 314, date of birth 315, address 316, risk evaluation 317, last identity verification date 318, and last identity verification medium expiration date 319.

The store number 311 indicates the store number of the account held by the user (customer, hereinafter the same). The subject 312 indicates the subject of the account held by the user. Account number 313 indicates the account number of the account held by the user. The holder name 314 indicates the name of the holder of the account held by the user. The date of birth 315 indicates the date of birth of the account holder held by the user. Address 316 indicates the address of the account holder held by the user.

The risk evaluation 317 is a value set for the user by a financial institution and indicates a risk rank. For the risk evaluation, a plurality of values are set depending on the magnitude of risk, such as high level (H), middle level (M), and low level (L), for example. A two-stage risk assessment or a four-stage or more risk assessment may be used.

Last identity verification date 318 indicates the date when the user last verified identity at a financial institution, that is, the latest date. The previous identity verification medium expiration date 319 indicates the expiration date of the identity verification medium IVM used when the user last verified his/her identity at a financial institution. Examples of the previous identity verification medium expiration date 319 are the expiration date of a driver's license, the stay term of a residence card, etc.

FIG. 3 shows an example of the identity verification result confirmation table 320 held by the identity verification server 2. The identity verification result management table 320 includes, for example, a store number 321, a subject 322, an account number 323, an identity verification deadline 324, a face authentication image 326, an identity verification implementation date 327, and an identity verification result 328.

Store number 321, item 322, and account number 323 are the same as store number 311, item 312, and account number 313 in customer information table 310, respectively, and are used as keys to identify the user's account.

The identity verification deadline 324 is a deadline calculated by the processing of the identity verification server 2, which will be described later, and is a deadline for which identity verification is required. In FIG. 4, which will be described later, the value of the identity verification deadline 324 is referred to as identity verification deadline Ta.

The ticket image 325 is a file address that specifies the ticket image held by the identification medium acquired at the ATM 1.

The face authentication image 326 is a file address that specifies image data of the face of the user operating the ATM 1 photographed by the camera of the ATM 1.

The identity verification date 327 indicates the date when the user verified his identity using the ATM 1 and the result of the identity verification was approved by the operator terminal 4.

The personal identification result 328 indicates the user's personal identification using the ATM 1 and the result (OK or NG) confirmed by the operator terminal 4.

FIG. 4 is a flowchart showing a process for setting an identity verification deadline. This process is executed by the identity verification server 2.

The identity verification server 2 refers to the customer information table 310 of the accounting host 3 for each target user (S11), and checks whether the previous identity verification medium expiration date Te is set in the customer information table (S12). The previous identity verification medium expiration date Te is the expiration date of the identity verification medium that was confirmed at the time of the previous identity verification.

If the previous identity verification medium expiration date Te is set in the table 310 (S12: YES), the identity verification server 2 proceeds to step S13, and if it is not set (S12: NO), the identity verification server 2 advances to step S17.

The identity verification server 2 calculates the maximum time limit Th by adding the previous identity verification cycle to the previous identity verification date (S13), and compares the expiration time Te set in the table 310 with the maximum time limit Th (S14). The identity verification cycle is set according to the user's risk evaluation value. For example, when the risk evaluation value is high (evaluation value H), the identity verification cycle is 1 year, when the risk evaluation value is medium (evaluation value M), the identity verification cycle is 2 years, and when the risk evaluation value is low (evaluation value The identity verification cycle for value L) is 3 years. The relationship between the risk evaluation value and the identity verification cycle is not limited to the above example.

The identity verification server 2 adopts the shorter of the previous identity verification medium expiration date Te and the maximum time limit Th as the identity verification deadline Ta (S15 to S17). If the previous identity verification medium expiration date Te is earlier than the maximum time limit Th (S15: YES), the identity verification server 2 sets the previous identity verification medium expiration date Te as the identity verification time limit Ta (S16).

If the maximum time limit Th is earlier than the previous identity verification medium expiration date Te (S15: NO), the identity verification server 2 sets the maximum time limit Th as the identity verification time limit Ta (S17). If the expiration date Te of the identity verification medium is not set in the customer information table 310 (S12: NO), the maximum time limit Th is set as the identity verification deadline Ta (S17).

FIG. 5 is a flowchart showing an overview of the processing of the ATM 1. The ATM 1 displays a menu via the user interface unit 104 (S21). The user selects one of the displayed menus (S22). The menu includes, for example, "withdrawal" (S23), "deposit" (S24), "transfer" (S25), "balance inquiry" (S26), passbook entry (S27), and identity verification (S28). The menu items are not limited to the above example.

Among the menus presented to the user, a predetermined menu is preset as a "predetermined transaction." For example, "withdrawal" and "transfer" may be set as predetermined transactions that require periodic identity verification. A financial institution can set which menu item is a "predetermined transaction." Furthermore, the amount of the transaction may be taken into consideration to determine whether the transaction corresponds to a "predetermined transaction." For example, if the total transaction amount within a certain period of time is greater than or equal to a predetermined amount, identity verification may be requested.

"Identity Verification" in the menu of the ATM 1 is a menu item for the user to use the ATM 1 to verify his/her identity to a financial institution. The details will be described later.

FIG. 6 is a flowchart showing a withdrawal process as an example of a "predetermined transaction." The user selects "withdraw" to withdraw cash, and inserts the cash card into the card insertion slot (not shown) of the ATM mechanism section 105.

The ATM 1 detects the insertion of the cash card (S31), and acquires the password that the user inputs from the user interface section 104 (S32). Further, the ATM 1 obtains the withdrawal amount input by the user (S33).

The ATM 1 requests the identity verification server 2 to determine whether or not identity verification is necessary for the user who is attempting to withdraw cash (S34). The necessity determination process in the identity verification server 2 will be described later with reference to FIG.

When the ATM 1 receives the determination result from the identity verification server 2 (S35), it determines whether identity verification is necessary before executing the transaction (S36).

If the ATM 1 determines that identity verification is necessary (S36: YES), the ATM 1 either performs the identity verification or presents the user with a screen G1 from the user interface unit 104 to inform the user that identity verification is required. (S37).

FIG. 8 is an example of the screen G1 presented to the user from the ATM 1. For example, on screen G1, the message "The deadline for identity verification is approaching. If you have any of the following identity verification documents with a face photo, you can complete the identity verification procedure at an ATM... Message GP11 with the content "Do you want to perform the confirmation procedure?" and buttons GP12 and GP13 for instructing whether or not to confirm the user's identity are displayed.

If a user brings an identification medium (IVM) such as a driver's license, My Number card, or residence card and wishes to verify his/her identity, he/she can immediately go through the procedures for identity verification with a financial institution from ATM1 on the spot. can. The identity verification process using the ATM 1 will be described later with reference to FIGS. 9 and 10.

When the ATM 1 determines that identity verification is not necessary (S36: NO), the ATM 1 withdraws the amount specified by the user (S38) and returns the cash card (S39). Even if the user does not wish to verify his/her identity (if the user presses the "No" button GP12 on screen G1), ATM1 withdraws the amount specified by the user (S38) and returns the cash card. It is also possible to do so (S39).

Based on the remaining time until the identity verification deadline Te or the elapsed time from the identity verification deadline Te and the user's risk evaluation value, it is possible to set in advance whether or not identity verification is required at the time of a predetermined transaction. For example, if the risk evaluation value is less than or equal to a predetermined lower limit value, the predetermined transaction may be performed even if the identity verification deadline Te has passed somewhat. When the risk evaluation value is greater than or equal to the predetermined upper limit, the ATM 1 does not need to conduct a transaction with the user when the remaining time until the identity verification deadline Te is less than the predetermined time.

FIG. 7 is a flowchart of a process in which the identity verification server 2 determines whether or not identity verification is necessary. The ATM 1 acquires account information (store number, account, account number) from the cash card inserted by the user, and transmits it to the identity verification server 2. The identity verification server 2 searches the identity verification result management table 220 using the account information received from the ATM 1 as a key (S41). That is, when the identity verification server 2 receives a determination request from the ATM 1 that includes account information (branch number, account number, account number) for identifying the user to be determined, it searches the identity verification result management table 220 and retrieves the corresponding record. Specify (S41).

The identity verification server 2 determines whether today is the guidance period (S42). That is, the identity verification server 2 determines whether or not the day on which the ATM 1 requests determination of the necessity of identity verification falls within the guidance period (S42).

The guidance period is a period starting from a predetermined number of days before the identity verification deadline Ta. The end of the guidance period may be the last day of the identity verification deadline Ta, or may be the day until a predetermined grace period elapses from the last day of the identity verification deadline Ta. For example, the guidance period is set to be several days, more than ten days, or several weeks before the identity verification deadline Ta.

If the identity verification server 2 determines that today is within the guidance period (S43: YES), it determines that identity verification is necessary (S44: YES). On the other hand, if the identity verification server 2 determines that today is not within the guidance period (S44: NO), it determines that identity verification is unnecessary (S45).

FIG. 9 is a flowchart showing the process when the user uses the ATM 1 to verify his/her identity.

When authenticating the user using the ATM 1, the user selects the type of identification medium to be used. The ATM 1 acquires the type of the identification medium (S51), and detects that the identification medium has been inserted into the ATM 1 (S52).

The ATM 1 determines whether the identity verification medium has an IC chip (S53), and if the identity verification medium has an IC chip (S53: YES), obtains the PIN entered by the user (S54) and sends the password from the IC chip. The card face data is read (S55). If the ticket face data is on both the front and the back, the front PIN is acquired to obtain the front ticket face data, and the back PIN is acquired to obtain the back face data.

The ATM 1 photographs the user's face with a camera, performs facial recognition using the facial photograph of the card face data (S56), and sends the photographed facial image data, card face data (including data of the user's facial photograph), and face authentication results. A request for identity verification is made by transmitting to the identity verification server 2 (S57).

On the other hand, if the user's identity verification medium does not have a built-in IC chip (S53: NO), or if the user forgets the PIN of the IC chip and cannot obtain the correct PIN at the ATM1 (S54: NO), The ATM 1 uses a built-in scanner or camera to acquire digital data including the characters and photographs on the face of the card (S58). Alternatively, the ATM 1 can guide the user to a manned counter by displaying a message on the user interface unit 104 or providing audio guidance, and prompting the user to confirm his or her identity at the counter.

FIG. 10 is a flowchart showing the identity verification process in the identity verification server 2. Upon receiving the data from the ATM 1 (S61), the identity verification server 2 acquires customer information about the user to be verified from the customer information table 310 of the banking host 3 (S62). The order of step S61 and step S62 may be changed.

The identity verification server 2 determines whether verification by the operator terminal is necessary (S63), and when determining that it is necessary (S63: YES), transmits data in response to a request from the operator terminal 4 (S64).

Although not shown, the operator accesses the identity verification server 2 using the operator terminal 4 and obtains data on a case that requires verification. The operator can identify the target user by comparing the face authentication results performed at ATM1, the face photo recorded on the personal identification medium, and the facial image taken at ATM1, and checking the card face data on the personal identification medium. determine whether the person is the person in question. In the case of digital data obtained by photographing or scanning the face of the card, the operator determines whether character recognition of the digital data is correct, and manually corrects the character recognition if the character recognition is incorrect. The operator then transmits the determination result to the identity verification server 2.

When the identity verification server 2 receives the operator's determination result from the operator terminal 4 (S65), it transmits the determined identity verification result to the accounting host 3 and updates the customer information table 310 (S66).

The identity verification server 2 sends an e-mail to a user terminal owned by the target user (for example, the user terminal 5 described later in FIG. 11) to notify that the identity verification has been completed (S67). Therefore, the user who has completed the online procedure for identity verification using the ATM 1 receives the result of the identity verification from the identity verification server 2 after completing the online procedure. The user does not have to wait near the ATM 1 until the online procedure is finished.

According to this embodiment configured in this way, when the user uses the ATM 1, it is possible to guide the user to perform the procedure for identity verification within a predetermined period (identity verification deadline Ta), so that the user and the financial institution can This will improve convenience for people.

According to this embodiment, the user can use the ATM 1 to perform online procedures for identity verification, thereby improving convenience.

According to this embodiment, the result of the identity verification by the identity verification server 2 is notified to the user by e-mail at a later date, so the user can act freely after completing the online procedure for identity verification from the ATM 1, providing convenience. will improve.

A second example will be described using FIGS. 11 and 12. In the following examples including this example, differences from the first example will be mainly described. In this embodiment, the user can use the electronic identity verification medium 510 stored in the user terminal 5 to perform identity verification procedures online from the ATM 1.

FIG. 11 is an overall schematic diagram of the automatic cash transaction system according to this embodiment. The user terminal 5 used by the user includes, for example, a microprocessor 501, a memory 502, a communication interface 503, and a user interface section (not shown), and includes, for example, a personal digital assistant or a mobile phone (including a so-called smartphone). , wearable terminals, personal computers, etc. An electronic identity verification medium 510 is stored in the memory 502 .

FIG. 12 is a flowchart showing the process when the user uses the ATM 1 to verify his/her identity.

When authenticating the user using the ATM 1, the user selects the type of identification medium to be used. The ATM 1 acquires the type of identity verification medium (S71), communicates with the user terminal 5 (S72), and determines whether connection with the user terminal 5 has been established (S73).

When the ATM 1 is able to connect to the user terminal 5 (S73: YES), the ATM 1 reads the face data from the electronic identification medium 510 (S74). Then, the ATM 1 photographs the user's face with a camera (S75), and requests identity verification by transmitting the photographed face image data and ticket face data to the identity verification server 2 (S76).

On the other hand, if the ATM 1 cannot be communicatively connected to the user terminal 5 (S73: NO), the ATM 1 notifies the user of an error message or guides the user to a manned counter via the user interface unit 104 of the ATM 1 (S77).

This embodiment configured in this manner also provides the same effects as the first embodiment. Furthermore, in this embodiment, the user can perform the identity verification procedure online from the ATM 1 using the electronic identity verification medium 510 in the user terminal 5, which further improves convenience.

A third example will be described using FIG. 13. FIG. 13 is a schematic diagram of the automatic cash transaction system according to this embodiment. In this embodiment, the user terminal 5 is provided with an electronic identification medium 510, an identification guide section 520, and a position confirmation section 530.

The personal identification guide unit 520 communicates with nearby ATMs 1 to obtain the guidance period, and if it is the guidance period, notifies the user of the personal identification guidance and the location of the nearest ATM 1. The personal identification guide unit 520 is configured, for example, like an application program installed in a smartphone or the like.

The location confirmation unit 530 identifies the location of the user terminal 5 using GPS (Global Positioning System) or the like.

As shown on the right side of FIG. 13, the personal identification guidance unit 520 periodically detects the position of its own device (user terminal 5) (S81), refers to an external map server (not shown), The ATM 1 within a predetermined range from the terminal 5 is detected (S82).

If the personal identification guidance unit 520 can detect the ATM1 within the predetermined range (S83: YES), it determines whether or not it is the guidance period (S84), and if it is the guidance period (S84: YES), the guidance message G2 Notify the user. If the ATM 1 within the predetermined range is not detected (S83: NO) or if it is not the guidance period (S84: NO), the personal identification guide unit 520 returns to step S81.

The guidance period for the user who owns the user terminal 5 can be managed within the identity verification guidance section 520. The identity verification guide section 520 can manage the identity verification deadline, guidance period, etc. based on the email of the identity verification result sent from the identity verification server 2. Alternatively, the identity verification deadline may be transmitted from the identity verification server 2 to the user terminal 5 periodically or irregularly.

For example, the guidance message G2 includes a text such as "The deadline for identity verification is approaching (until XX, 2021). You can verify your identity at an ATM near you." and a guide map GP21 to the detected ATM1. can include.

When the user arrives at the ATM 1 to which he has been guided, he performs the identity verification procedure from the ATM 1 using the electronic identity verification medium 510, as described in the second embodiment.

This embodiment configured in this manner also provides the same effects as the first embodiment. Furthermore, in this embodiment, since the user terminal 5 determines whether the guidance period is in effect and whether there is an ATM 1 within a predetermined range and notifies the user, convenience is further improved.

A fourth embodiment will be described using FIGS. 14 to 16. In this embodiment, the user address 316 stored in the customer information table 310 as "account information" is managed by using the identity verification process using the ATM 1.

FIG. 14 is a flowchart showing the identity verification process executed by the identity verification server 2A of this embodiment. FIG. 15 is an example of the personal identification result table 320A. FIG. 16 is an example of a screen when requesting a user to register or change an address.

In the automated cash transaction system according to this embodiment, the address of the user (customer) registered in the customer information table 310 held by the accounting system host 3 of the financial institution is the address stored in the user's identity verification medium IVM. Update it with

When a user uses ATM 1, if the user's address stored in the customer information table 310 and the address stored in the identity verification medium IVM do not match, that is, the address in the customer information table 310 is an old address. In some cases, the address 316 (see FIG. 2) in the customer information table 310 held by the accounting host 3 is rewritten to the latest address (the address stored in the identity verification medium IVM). When managing the history of address changes, you may add addresses instead of rewriting them.

As described above, in this embodiment, when a user uses ATM 1, if a predetermined condition is met, the customer's latest address (stored in the identity verification medium IVM) obtained by prompting the user to verify his/her identity at ATM 1 is displayed. address) can be stored in the customer information table 310 of the accounting host 3. In this embodiment, the user's address stored in the customer information table 310 is updated by utilizing the address mismatch found during the identity verification process using the ATM 1.

The automatic cash transaction system of this embodiment can support appropriate management of user addresses without cooperating with administrative agencies that manage family registers, basic resident register cards, etc. (without computer communication). Therefore, the user does not need to visit the counter of the financial institution to change the address, and the usability for the user is improved. Financial institutions can also manage users' addresses efficiently, without having to process changes in users' addresses at manned counters or using private-only mail. Furthermore, for financial institutions, it is possible to reduce the number of mails addressed to users that are returned to unknown addresses, which further improves operational efficiency and improves convenience for financial institutions.

The automatic cash transaction system of this embodiment has the same system configuration as that in FIG. 1, so illustration is omitted. The explanation will be given by changing the code of the identity verification server from "2" to "2A". If an overall system diagram is required, simply change the symbol "2" in FIG. 1 to "2A" to obtain the entire system diagram of this embodiment.

FIG. 14 is a flowchart of the identity verification process executed by the identity verification server 2A of this embodiment.

Upon receiving data from the ATM 1 (S101), the identity verification server 2A acquires customer information about the user to be verified from the customer information table 310 of the banking host 3 (S102). The order of step S101 and step S102 may be changed.

In step S101, the identity verification server 2A receives identity verification information such as name, address, and date of birth stored in the identity verification medium IVM. On the other hand, the identity verification server 2A receives customer specific information such as name (account holder name), address, and date of birth stored in the customer information table 310 in step S102.

The identity verification server 2A then uses the identity verification information (name, address, date of birth) stored in the identity verification medium IVM and the customer specific information (name 314, address 316) stored in the customer information table 310. , date of birth 315), each item is compared to see if they match (S103).

The identity verification server 2A determines whether all items match (S104). If all items match (S104: YES), the identity verification server 2A determines that the identity verification has been successful (S105), sends the identity verification result to the accounting host 3 (S106), and displays the customer information table. 310 is updated. Furthermore, the identity verification server 2A notifies the user terminal 5 that the identity verification was successful (S107).

On the other hand, if even one item of the information acquired in step S101 and the information acquired in step S102 does not match (S104: NO), the identity verification server 2A determines that the only mismatched item is "address". It is determined whether there is one (S108). If the plurality of items do not match (S108: NO), the identity verification server 2A determines that identity verification has failed (S109), and transmits the result of identity verification to the accounting host 3 (S106). The identity verification server 2A also transmits to the user's terminal 5 that the identity verification has failed (S107).

If only the address item does not match, but the name and date of birth items match (S108: YES), the identity verification server 2A compares the user's face authentication image 326A used for the previous identity verification with the latest one. Face authentication is performed using the user's face image (S110).

The "face authentication image 326A" and the "user's face image" are examples of "user's face image data." The face image data may be black and white or color image data, or may be feature data indicating features extracted from the user's face image. A set of normal image data and feature data may also be used.

The latest user face image used for user face authentication can be either the user's face image acquired from the identity verification medium IVM or the user's face image taken with a camera included in the ATM mechanism unit 105. Good too. The user's face image acquired from the identity verification medium IVM is, for example, electronic data obtained by reading the face image printed on the face of the identity verification medium IVM with a scanner, or electronic data stored in an IC chip built into the identity verification medium IVM. face image data.

The identity verification server 2A compares the user's face image acquired from the identity verification medium IVM and the user's face image photographed by the camera of the ATM 1 with the most recent face authentication image 326A in the identity verification result table 320. Good too. For example, both the degree of matching between the most recent facial authentication image 326A and the facial image acquired from the identity verification medium IVM, and the degree of matching between the most recent facial authentication image 326A and the facial image photographed by the camera of ATM1 are considered. Then, the user's face authentication may be performed.

The identity verification server 2A determines whether the face authentication was successful (S111), and if the face authentication was successful (S111: YES), it determines that the identity verification was successful even though the addresses do not match ( S112). The identity verification server 2A asks the user to confirm whether it is okay to update the address 316 stored in the customer information table 310 of the banking system host 3 with the address stored in the identity verification medium IVM (S113). .

FIG. 16 shows an address change confirmation screen G2 presented to the user in step S113. The address change confirmation screen G2 is displayed on the user interface section 104 of the ATM 1. The guide unit GP21 displays a message asking the user whether it is okay to update the address 316 of the customer information table 310. The address display unit GP22 displays the address acquired from the user's identity verification medium IVM.

The user operates either the "No" button GP23 or the "Yes" button GP24. If the address stored in the identity verification medium IVM is not the latest address, the user operates the "No" button GP23 to cancel the address change screen G2. The user can return to the transaction screen (not shown) at ATM1.

When the user agrees to the change to the address displayed on the address display section GP22, the user operates the "Yes" button GP24.

Return to FIG. 14. When the user operates the "Yes" button GP24 and agrees to update the address (procedure for changing the address reported to the financial institution) (S113), the address data obtained from the identity verification medium IVM and the identity verification result are is transmitted to the accounting host 3 (S106). The accounting host 3 that receives this notification updates the customer information table 310.

The identity verification server 2A notifies the user's terminal 5 of the identity verification result and the completion of the address change procedure at the financial institution (S107).

On the other hand, if the user's face authentication fails (S111: NO), the identity verification server 2A asks the user whether to verify his or her identity through a manned counter or an electronic procedure such as eKYC (electronic Know Your Customer) (S114). If the user refuses to verify his/her identity at a manned counter (S114: NO), the verification fails (S109), and a notification that the verification has failed is sent to the accounting host 3 and user terminal 5 (S106, S107).

If the user agrees to identity verification at a manned counter, etc., and the identity verification is successful (S114: YES), the identity verification server 2A determines that the user's identity verification has been successful (S112), and the user is managed by the financial institution. The user is asked if it is okay to change the address (S113).

When the user agrees to the address change procedure, the address data acquired from the identity verification medium IVM is sent to the accounting system host 3 together with the identity verification result (S106). The identity verification server 2A transmits the identity verification result and the completion of the address change procedure at the financial institution to the user's terminal 5 (S107).

According to this embodiment configured in this way, at the time of identity verification using the ATM 1, the user's address managed by the financial institution (address in the customer information table 310) and the address stored in the identity verification medium IVM are used. If a mismatch is detected, the address managed by the financial institution is updated on the condition that the user's face authentication is successful. Therefore, the user can use the ATM 1 to quickly perform address change procedures at the financial institution without visiting the counter of the financial institution, improving usability for the user.

For financial institutions, users' addresses can be appropriately managed without connecting the accounting system host 3 to administrative agency computers (not shown), improving the efficiency of office management.

In the automatic cash transaction system of this embodiment, there is no need to provide the configuration for guiding the user when to confirm the identity, as described in the first embodiment. In the automatic cash transaction system of this embodiment, it is sufficient that the user's address can be updated as necessary when verifying the user's identity using the ATM 1. Therefore, in this embodiment, there is provided an automated cash transaction system that includes an automated teller machine and an identity verification server, and when the automated teller machine receives a transaction request from a user, the identity verification server sends information to the user's account. The user's name, address, and date of birth are acquired from the information, and the identity verification server acquires the user's name, address, and date of birth stored in the user's identity verification medium via the automated teller machine. The user's name, address, and date of birth are verified by comparing the user's name, address, and date of birth stored in the account information with the user's name, address, and date of birth stored in the identity verification medium, and the user's name and date of birth are verified. If the dates match and the addresses do not match, the user's facial image data registered in advance is used to perform face authentication of the user, and if the face authentication is successful, it is determined that the user's identity has been successfully verified. Automatic cash transaction System.” has been disclosed.

Note that the present invention is not limited to the above-described embodiments, and includes various modifications. For example, the embodiments described above are described in detail to explain the present invention in an easy-to-understand manner, and the present invention is not necessarily limited to having all the configurations described. Further, it is also possible to replace a part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Further, it is possible to add, delete, or replace a part of the configuration of each embodiment with other configurations. In addition, information such as programs, tables, files, etc. that realize each configuration can be stored in a memory, a recording device such as a hard disk, an SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD. can.

The following inventions are disclosed in this embodiment.
Expression 1: An automated teller machine comprising a control unit, a communication unit, and a user interface unit, and the control unit, upon receiving a request for a predetermined transaction from a user, executes the predetermined transaction. An inquiry is made to the identity verification server via the communication unit as to whether identity verification is necessary at the time of the transaction, and if the identity verification server determines that identity verification is required within a predetermined period, the user interface unit An automatic cash transaction device that prompts customers to present information to confirm their identity.

Expression 2. When the control unit receives the request for the predetermined transaction from the user, the control unit obtains the user's account information and transmits the obtained account information from the communication unit to the identity verification server, thereby completing the predetermined transaction request. Inquire of the identity verification server whether the identity verification is necessary when implementing the transaction, and refer to predetermined management information in which the account information and information related to the user's identity verification are associated with the identity verification server. When it is determined that the identity verification within the predetermined period is necessary, the cash machine according to Expression 1 causes the user interface unit to present information prompting the user to verify the identity. Trading device.

Expression 3. The automatic teller machine according to expression 2, wherein the predetermined period is a guidance period set for the user's identity verification.

Expression 4. The guidance period is calculated based on the expiration date of an identification medium that stores the user's identification information, the risk evaluation value set for the user, and the date and time when the previous identification was performed. The automated teller machine according to expression 3.

Expression 5. The control unit presents, via the user interface unit, an identity verification execution menu for the user to confirm his/her identity, and when the user selects the identity verification execution menu, the control unit displays the user's identity verification medium. through an identity verification information acquisition unit that acquires information from the identity verification medium, acquires identity verification medium information used for identity verification from the identity verification medium, acquires user image data including the user's face, and acquires user image data including the user's face. The automatic teller machine according to expression 4, wherein the automatic teller machine requests the identity verification server to confirm the identity by transmitting the information and the identity verification medium information to the identity verification server.

Expression 6. The identity verification server performs the identity verification based on the user image data and the identity verification medium information, and in a predetermined case, transmits the identity verification result to an operator terminal, and makes a judgment from the operator terminal. The automated teller machine according to expression 5, wherein the automated teller machine determines the identity verification by receiving the above.

Expression 7. The automated teller machine according to expression 6, wherein the identity verification server transmits the identity verification result to an accounting host that executes the predetermined transaction and a user terminal used by the user.

Expression 8. An automatic cash transaction system, in which an automatic teller machine, an identity verification server, and a user terminal are connected via a communication network, and the automatic teller machine includes a control section, a communication section, a user interface section, and a user terminal. When the control unit receives a request for a predetermined transaction from a user, the control unit inquires the identity verification server via the communication unit as to whether or not identity verification is required to carry out the predetermined transaction. If the confirmation server determines that it is necessary to confirm the identity within a predetermined period, the user interface unit presents information prompting the user to confirm the identity, and the user terminal collects cash within a predetermined range. An automated cash transaction system that displays the location of an automated teller machine within the predetermined range and information prompting the user to confirm the identity when an automated teller machine exists and a predetermined period is set for the user.

Expression 9. An identity verification method using an automated teller machine, wherein the automated teller machine includes a control section, a communication section, and a user interface section, and the control section receives a request for a predetermined transaction from a user. When the transaction is accepted, it inquires to the identity verification server via the communications department whether identity verification is required to carry out the prescribed transaction, and the identity verification server determines that identity verification is necessary within the prescribed period. the user interface unit presents information prompting the user to confirm his/her identity, and the user interface unit presents an identity confirmation execution menu that causes the user to confirm his/her identity, and the user When the identity verification execution menu is selected, the identity verification medium information used for identity verification is acquired from the identity verification medium via the identity verification information acquisition unit that acquires information from the user's identity verification medium. , acquiring user image data including the user's face, and transmitting the user image data and the identity verification medium information to the identity verification server to request identity verification from the identity verification server; Identity verification method using automated transaction equipment.

1: Automatic teller machine, 2, 2A: Identity verification server, 3: Accounting system host, 4: Operator terminal, 5: User terminal, 110: ATM function execution unit, 120: Identity verification information acquisition unit, 210: Identity verification Information management department, 220: Identity verification result management table, 310: Customer information table, 410: Correction/verification section, 510: Electronic identity verification medium, 520: Identity information section

Claims (8)

An automatic cash transaction device,
Comprising a control section, a communication section, and a user interface section,
The control unit includes:
When a request for a given transaction is received from a user,
acquiring the user's account information and transmitting the acquired account information from the communication unit to the identity verification server, thereby inquiring to the identity verification server whether identity verification is necessary when implementing the predetermined transaction;
The identity verification server determines that the identity verification is necessary within a predetermined period by referring to predetermined management information in which the account information and information related to the user's identity verification are associated. In this case, the user interface unit presents information prompting the user to confirm the identity,
If the address registered in the account information and the address stored in the identity verification medium that stores the user's identity verification information do not match, the user's facial image data registered in the identity verification server; The automated teller machine performs facial authentication of the user based on the above information, and stores the address stored in the personal identification information in the account information if the facial authentication is successful. The account information and the identity verification medium include the user's name, address, and date of birth;
The control unit may be configured such that the user's name and date of birth included in the account information match the user's name and date of birth stored in the identity verification medium, and the user's name and date of birth included in the account information match. The automatic teller machine according to claim 1, wherein the automatic teller machine performs face authentication of the user when only the address of the user stored in the identity verification medium does not match. The control unit performs face authentication of the user by comparing face image data of the user registered in the identity verification server and face image data of the user stored in the identity verification medium. The automated teller machine according to claim 2. A camera that photographs the user's face and outputs facial image data is connected to the control unit,
2. The control unit performs face authentication of the user by comparing face image data of the user registered in the identity verification server with face image data of the user captured by the camera. The automated teller machine described in . An automated cash transaction system comprising an automated teller machine and an identity verification server,
When the automated teller machine receives a transaction request from a user,
The identity verification server is
Obtaining the user's name, address, and date of birth from the user's account information,
The identity verification server obtains the user's name, address, and date of birth stored in the user's identity verification medium via the automatic cash transaction device,
verifying the user's identity by comparing the user's name, address, and date of birth stored in the account information with the user's name, address, and date of birth stored in the identity verification medium;
If the user's name and date of birth match but the address does not match, face authentication of the user is performed using the user's pre-registered facial image data, and if the face authentication is successful, the user's identity is confirmed. An automatic cash transaction system that is judged to have been successful. 6. The automatic cash transaction system according to claim 5, wherein when the identity verification server determines that the identity verification is successful, the identity verification server stores the address stored in the identity verification medium in the account information. The identity verification server performs facial authentication of the user by comparing the pre-registered facial image data of the user with the user's facial image data acquired from the identity verification medium. The automated cash transaction system according to any one of Items 5 and 6. The automated teller machine includes a camera that photographs the user's face and outputs facial image data,
6. The identity verification server performs face authentication of the user by comparing the pre-registered face image data of the user with face image data of the user taken by the camera. 6. The automated cash transaction system according to any one of 6.

Images