JP2024037040A - Host computer, automatic transaction system, authentication method, and program - Google Patents

Abstract

To accomplish, when an automatic transaction device installed at an area other than areas where an automatic transaction device with a high utilization frequency by a customer is installed is utilized, a scheme of executing additional authentication processing to the customer.SOLUTION: A host computer includes: a first identifying unit that identifies an installed position of an automatic transaction device utilized by a customer; a second identifying unit that identifies an installed area of an automatic transaction device with a high utilization frequency by the customer; a determining unit that determines whether or not the installed position identified by the first identifying unit is included in the installed area identified by the second identifying unit; and an additional authentication processing executing unit that executes additional authentication processing to the customer when the determining unit determines that such a position is not included in such an area.SELECTED DRAWING: Figure 2

Description

The present invention relates to a host computer, an automatic transaction system, an authentication method, and a program.

Conventionally, automatic transaction devices such as ATMs (Automatic Teller Machines) have been installed in branches of financial institutions such as banks, convenience stores, and the like. Automated transaction systems including such automated transaction devices employ various mechanisms from the perspective of preventing fraudulent transactions at the automated transaction device due to impersonation. For example, there is a system in which a customer registers a usage area in advance so that the use of automatic transaction devices installed outside the registered usage area is prohibited (for example, see Patent Documents 1 and 2), and a system in which a customer By registering conditions (transaction store, transaction time, transaction amount, etc.) and a second password in advance, it is possible to create a system in which the input of the second password is required for transactions other than the transaction conditions (for example, see Patent Document 3). , a system in which customers can register usage conditions (time of use, location of available automated transaction devices, etc.) in advance, and if the usage conditions are not met, the automated transaction device cannot be used (e.g. (See Patent Document 4) and the type of cash card used (magnetic stripe card, IC card, biometric information registered IC card, etc.).

Japanese Patent Application Publication No. 2007-94874 Japanese Patent Application Publication No. 2006-39729 International Publication No. 02/75676 Japanese Patent Application Publication No. 2007-86967

However, in the past, when an automated transaction device installed in a region other than the area where the automated transaction device that is frequently used by the customer is used, additional authentication processing is required for the customer. There is no mechanism.

In view of the above-mentioned circumstances, the present invention realizes a mechanism that executes additional authentication processing for customers when an automatic transaction device installed in a region other than the area where the automatic transaction device is installed is frequently used by customers. The purpose is to provide a host computer, an automatic trading system, an authentication method, and a program that can perform the following tasks.

One aspect of the device is that the device includes: a first identifying unit that identifies the installation location of an automatic transaction device used by a customer; a second identifying unit that identifies an installation area of an automatic transaction device that is frequently used by the customer; a determination unit that determines whether the installation location identified by the first identification unit is included in the installation area identified by the second identification unit; and a determination unit that determines whether the installation location identified by the first identification unit is included in the installation area; The host computer includes an additional authentication processing execution unit that executes additional authentication processing for the customer.

One aspect of the system is an automatic transaction system including a plurality of automatic transaction devices and a host computer, wherein the host computer includes a first identification unit that identifies the installation position of the automatic transaction device used by a customer; a second specifying unit that specifies an installation area of the automatic transaction device that is frequently used by the customer; and an installation position specified by the first specifying unit is located in an installation area specified by the second specifying unit. It includes a determination unit that determines whether or not the customer is included, and an additional authentication processing execution unit that executes additional authentication processing for the customer when the determination unit determines that the customer is not included.

One aspect of the method is to identify the installation location of the automatic transaction device used by the customer, to identify the installation area of the automatic transaction device that is frequently used by the customer, and to ensure that the specified installation location is in the specified installation area. This is an authentication method in which a host computer executes processing to determine whether or not the customer is included, and when it is determined that the customer is not included, to execute additional authentication processing for the customer.

One aspect of the program is to identify the installation location of the automatic transaction device used by the customer, to identify the installation area of the automatic transaction device that is frequently used by the customer, and to ensure that the specified installation location is located in the specified installation area. This program determines whether or not the customer is included, and if it is determined that the customer is not included, causes the host computer to execute additional authentication processing for the customer.

According to the present invention, it is possible to realize a mechanism for executing additional authentication processing for a customer when an automatic transaction device installed in a region other than the area where the automatic transaction device that is frequently used by customers is installed. can.

1 is a diagram illustrating the configuration of an automatic transaction system according to an embodiment. FIG. 2 is a diagram illustrating a functional configuration related to a function of causing a host computer to execute additional authentication processing according to an embodiment. 1 is a diagram illustrating a hardware configuration of a host computer according to an embodiment; FIG. FIG. 1 is a diagram illustrating an external configuration of an automatic transaction device according to an embodiment. It is a diagram illustrating a hardware configuration of an automatic transaction device according to an embodiment. It is a flowchart illustrating the flow of processing executed in the automated trading system according to one embodiment.

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram illustrating the configuration of an automatic transaction system according to an embodiment. The automatic transaction system 1 illustrated in FIG. 1 includes a plurality of automatic transaction devices 10 and a host computer 20. A plurality of automatic transaction devices 10 and host computers 20 are connected to a network 30, and each automatic transaction device 10 and host computer 20 can communicate via the network 30. Network 30 includes the Internet.

Note that the automatic transaction system 1 may further include a storage device 40 directly connected to the host computer 20 or a storage device 40 connected to the network 30 so as to be communicable with the host computer 20. The storage device 40 is, for example, a database.

The automatic transaction device 10 is, for example, an ATM, and is installed in a branch of a financial institution such as a bank, a convenience store, or the like. The automated teller machine 10 executes various transaction processes (transaction processes such as deposits and withdrawals) in cooperation with the host computer 20 in response to input operations by customers (users). During transaction processing, if the installation location of the automated transaction device 10 used by the customer is not included in the installation area of automated transaction devices that are frequently used by that customer, the host computer 20 will provide additional information to the customer. Execute authentication processing. For example, when a one-time password authentication process is executed as an additional authentication process, the one-time password authentication process is executed via the customer's portable information terminal (eg, smartphone) 50 and the internet banking system 60. Note that the Internet banking system 60 is connected to the network 30, and the customer's portable information terminal 50 is wirelessly connected to the network 30, so that the Internet banking system 60 and the host computer 20, and the Internet banking system 60 and the customer's portable information terminal are connected to the network 30. 50 can communicate via the network 30.

FIG. 2 is a diagram illustrating a functional configuration related to a function of causing a host computer to execute additional authentication processing according to an embodiment. The host computer 20 illustrated in FIG. 2 includes a first identifying section 21, a second identifying section 22, a determining section 23, an additional authentication processing execution section 24, and a storage section 25.

The first specifying unit 21 specifies the installation position of the automatic transaction device 10 used by the customer. The second specifying unit 22 specifies the installation area of the automatic transaction device 10 that is frequently used by customers. The determining unit 23 determines whether the installation position specified by the first specifying unit 21 is included in the installation area specified by the second specifying unit 22. The additional authentication process execution unit 24 executes an additional authentication process for the customer when the determination unit 23 determines that the customer is not included.

The first specifying unit 21 specifies the installation position based on installation position information indicating the installation position (for example, address) of the automatic transaction device 10 acquired from the automatic transaction device 10 used by the customer. Good too. Alternatively, the first identifying unit 21 identifies the installation location using identification information (for example, device ID) of the automatic transaction device 10 acquired from the automatic transaction device 10 used by the customer and the installation location of each automatic transaction device 10. This may be performed based on installation location information indicating the location (for example, address). The installation location information at this time includes, for each automatic transaction device 10, identification information of the automatic transaction device 10 and information indicating the installation position of the automatic transaction device 10, for example. Such installation position information may be stored in the storage unit 25 or in the storage device 40 (see FIG. 1) external to the host computer 20.

The second identifying unit 22 identifies the installation area based on customer identification information (for example, card number or passbook number) acquired from the automatic transaction device 10 used by the customer and the automatic transaction device that is frequently used by each customer. This may be performed based on usage area information indicating the installation area of 10. The usage area information includes, for each customer, for example, customer identification information and information indicating the installation area of the automatic transaction device 10 that is frequently used by the customer. Such usage area information may be stored in the storage unit 25 or in the storage device 40 (see FIG. 1) external to the host computer 20.

The installation area of the automatic transaction device 10 that is frequently used by each customer, which is shown in the usage area information, may be determined based on the installation position of the automatic transaction device 10 that each customer used in the past. For example, the installation area of the automated transaction device 10 that is frequently used by each customer may be an area that includes the installation location of the automated transaction device 10 used in the past (or within a predetermined period in the past) for each customer, The area may include the installation location of the automatic transaction device 10 that has been used a predetermined number of times or more in the past (or within a predetermined period in the past) for each customer, or may be the area that has been used the most in the past (or within a predetermined period in the past) for each customer. The area may include the installation location of the automatic transaction device 10. In this case, the automatic transaction device 10 that is frequently used by each customer is installed in not only one area but may be installed in a plurality of areas. Furthermore, the installation area of the automatic transaction device 10 that is frequently used by each customer may be an area divided by place name such as a city, ward, town, or village, or a specific size area (such as a rectangular area or a circular area). ). The determination of the installation area of the automated transaction device 10 that is frequently used by each customer, and the generation and updating of usage area information, are performed based on, for example, usage history information indicating the usage history of the automated transaction device 10 of each customer. , may be performed by the host computer 20. For example, each time the automatic transaction device 10 is used by a customer, the usage history information includes information indicating the date and time of use, identification information of the customer, and information indicating the installation location of the automatic transaction device 10. It may be something that The generation and updating of usage history information may be performed by the host computer 20. Such usage history information may be stored in the storage unit 25 or in the storage device 40 (see FIG. 1) external to the host computer 20.

The additional authentication process executed by the additional authentication process execution unit 24 may include one or both of a one-time password authentication process and a biometric authentication process. However, additional authentication processing is not limited to these.

FIG. 3 is a diagram illustrating the hardware configuration of a host computer according to an embodiment. The host computer 20 illustrated in FIG. It is connected.

The processor 201 includes a CPU (Central Processing Unit), and performs various processes by executing OS (Operating System) programs and application programs.

The memory 202 includes a RAM (Random Access Memory) and a ROM (Read Only Memory). Part of the program executed by the processor 201 is temporarily stored in the RAM. The RAM is also used as a working storage area for the processor 201. The ROM stores programs executed by the processor 201 and various data necessary for executing the programs.

The input device 203 is a device that accepts various inputs from a user (such as an administrator), and is a keyboard, mouse, touch panel, or the like. The output device 204 is a display device (for example, an LCD (Liquid Crystal Display)) or the like.

The storage device 205 is a HDD (Hard Disk Drive), an SSD (Solid State Drive), or the like. Portable storage medium drive device 206 drives portable storage medium 206a and accesses its storage contents. The portable storage medium 206a is a memory device, a flexible disk, an optical disk, a magneto-optical disk, etc., and includes a CD-ROM (Compact Disc Read Only Memory), a DVD (Digital Versatile Disc), a Blu-ray disc, and a USB (Universal Serial Bus). ) memory etc. are also included.

The communication interface 207 is connected to the network 30 and communicates with external devices (automatic transaction device 10, internet banking system 60, etc.) via the network 30.

Note that the programs executed by the processor 201 and various data necessary for executing the programs are not limited to the ROM of the memory 202, but may be stored in one or more of the ROM of the memory 202, the storage device 205, and the portable storage medium 206a. may be done. Further, the program executed by the processor 201 and various data necessary for executing the program may be stored in one or both of the storage device 205 and the portable storage medium 206a from an external device via the network 30.

The host computer 20 is not limited to the one illustrated in FIG. 3, and may be configured with one or more of the components illustrated in FIG. 3, or may be configured without some of the components. good. For example, the number of processors is not limited to one processor 201, but a plurality of processors may be provided.

The host computer 20 also includes a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), and an FP. Including hardware such as GA (Field Programmable Gate Array) may be configured. For example, processor 201 may be implemented using at least one of these hardwares.

In the host computer 20 illustrated in FIG. 3, the processor 201 corresponds to the first specifying section 21, the second specifying section 22, the determining section 23, the additional authentication processing execution section 24, etc., and the storage device 205 is a storage device. This corresponds to section 25, etc.

FIG. 4 is a diagram illustrating the external configuration of an automatic transaction device according to an embodiment. The automatic transaction device 10 illustrated in FIG. 4 includes a passbook insertion/ejection section 11, a card insertion/ejection section 12, a coin deposit/withdrawal section 13, a banknote deposit/withdrawal section 14, a display input unit 15, and a biometric authentication processing unit 16.

The passbook insertion/discharge unit 11 accepts and returns passbooks. The card insertion/ejection unit 12 accepts and returns cards (such as cash cards) used in transactions. The card insertion/discharge section 12 also discharges a receipt on which transaction details are printed. The coin deposit/withdrawal unit 13 accepts deposited coins and discharges deposited coins. The banknote deposit/withdrawal unit 14 accepts deposited banknotes and discharges paid banknotes. The display input unit 15 displays various transaction screens and accepts input operations from customers. The biometric authentication processing unit 16 reads the customer's biometric information (for example, palm vein pattern information) and performs the customer's biometric authentication.

FIG. 5 is a diagram illustrating a hardware configuration of an automatic transaction device according to an embodiment. The automatic transaction device 10 illustrated in FIG. 5 includes a control unit 110, a passbook processing unit 121, a card processing unit 122, a coin processing unit 123, and a banknote processing unit 124, in addition to the display input unit 15 and biometrics processing unit 16 described above. Equipped with

The control unit 110 includes a processor 111, a RAM 112, a communication interface 113, a graphics processing unit 114, a storage device 115, and an input/output interface 116, which are interconnected by a bus 117.

The processor 111 includes a CPU, and performs various processes by executing various programs such as OS programs and application programs. Part of the program executed by the processor 111 is temporarily stored in the RAM 112 . The RAM 112 is also used as a working storage area for the processor 111.

The communication interface 113 is connected to the network 30 and communicates with an external device (such as the host computer 20 ) via the network 30 .

The graphic processing unit 114 is connected to the display device 15a of the display input unit 15, and displays various transaction screens and the like on the display device 15a according to control signals from the processor 111.

The storage device 115 is an HDD, an SSD, or the like. The storage device 115 stores various programs executed by the processor 111 and various data necessary for executing the programs.

The input/output interface 116 is connected to the touch panel 15b of the display input unit 15, the passbook processing unit 121, the card processing unit 122, the coin processing unit 123, the bill processing unit 124, and the biometric authentication processing unit 16. Although not shown, the automatic transaction device 10 further includes a portable storage medium interface capable of writing information to and reading information from the portable storage medium, and the input/output interface 116 It may further be connected to a portable storage medium interface.

The input/output interface 116 outputs control signals from the processor 111 to the touch panel 15b, the passbook processing unit 121, the card processing unit 122, the coin processing unit 123, the banknote processing unit 124, and the biometric processing unit 16. Further, the input/output interface 116 outputs signals from the touch panel 15b, the passbook processing unit 121, the card processing unit 122, the coin processing unit 123, the bill processing unit 124, and the biometric authentication processing unit 16 to the processor 111.

The display input unit 15 includes a display device 15a and a touch panel 15b arranged on the display device 15a. The display device 15a is, for example, an LCD, and displays various transaction screens. The touch panel 15b detects an input operation on the touch panel 15b, and outputs a signal to the processor 111 according to the detection result.

The passbook processing unit 121 inserts and ejects the passbook from the passbook insertion/ejection section 11 . It also reads out information (data) recorded on the magnetic stripe of the inserted passbook, makes entries in the passbook, etc.

The card processing unit 122 inserts and ejects a card from the card insertion/ejection section 12 . It also reads and writes information (data) to and from the magnetic stripe and IC chip of the inserted card. The card processing unit 122 also prints transaction details on a receipt and discharges it from the card insertion/discharge unit 12.

The coin processing unit 123 deposits and withdraws coins from the coin deposit and withdrawal section 13 . It also counts and differentiates incoming coins, and counts outgoing coins. The banknote processing unit 124 deposits and withdraws banknotes from the banknote deposit and withdrawal section 14 . It also counts and discriminates incoming banknotes, counts outgoing banknotes, etc.

As described above, the biometric authentication processing unit 16 reads the customer's biometric information and performs the customer's biometric authentication. Biometric authentication at this time is performed, for example, by comparing the read biometric information of the customer with the biometric information of the customer registered in advance in the IC chip of the IC cash card inserted into the card insertion/ejection section 12. It's okay. Alternatively, it may be performed in cooperation with the host computer 20. In this case, the read biometric information of the customer may be transmitted to the host computer 20, and biometric authentication may be performed by comparing it with the biometric information of the customer registered in advance in the host computer 20.

Next, the processing executed in the automatic transaction system 1 will be explained using FIG. 6. Here, a case where a customer performs a withdrawal transaction using the automatic transaction device 10 will be described as an example.

FIG. 6 is a flowchart illustrating the flow of processing executed in the automated trading system according to one embodiment. In the process illustrated in FIG. 6, first, the automatic transaction device 10 accepts a customer's cash card (S11). This is done by the customer inserting the cash card into the card insertion/ejection section 12.

Next, the automatic transaction device 10 selects a withdrawal transaction as a transaction to be performed by the customer (S12). This is done by the customer selecting a withdrawal transaction on the transaction selection screen displayed on the display input unit 15.

Next, the automated teller machine 10 receives the customer's PIN number (S13). This is done by the customer entering his or her password on the password input screen displayed on the display input unit 15.

Next, the automatic transaction device 10 accepts the withdrawal amount (S14). This is done by the customer inputting the withdrawal amount on the withdrawal amount input screen displayed on the display input unit 15.

Next, the automatic transaction device 10 notifies the host computer 20 of the withdrawal request (S15). The withdrawal request at this time includes the customer's card number obtained from the magnetic stripe or IC chip of the cash card accepted in S11, the customer's PIN number accepted in S13, and the withdrawal amount accepted in S14. Information indicating the address of the automatic transaction device 10 is included. Here, the information indicating the customer's card number is also the customer's identification information. The information indicating the address of the automatic transaction device 10 is also installation position information indicating the installation position of the automatic transaction device 10.

The host computer 20 that has been notified of such a withdrawal request first performs a password authentication process (S16). This is done by determining whether the customer's PIN number indicated in the information included in the withdrawal request matches the customer's PIN number registered in advance in the customer information. The customer information includes each customer's name, address, telephone number (phone number of the portable information terminal 50), e-mail address (e-mail address that can be received by the portable information terminal 50), card number, passbook number, and information indicating a password, etc., and biometric information, and is stored in, for example, the storage device 205 (see FIG. 3) or the storage device 40 (see FIG. 1). In the password authentication process of S16, if the passwords match, the authentication is successful; if they do not match, the authentication fails. Although not shown, if the authentication fails, the automatic transaction device 10 is notified that withdrawal is not possible, and the customer is prohibited from making a withdrawal transaction. Alternatively, if the authentication fails, the processes of S13, S15, and S16 are repeated, and if the authentication fails a predetermined number of times in succession, the automatic transaction device 10 is notified that withdrawal is not possible, and the customer's withdrawal transaction is It may be set to be prohibited.

On the other hand, if the authentication is successful in the PIN authentication process in S16, the host computer 20 uses the address of the automated transaction device 10 indicated in the information included in the withdrawal request notified from the automated transaction device 10 in S15. 10 is specified (S17).

Next, the host computer 20 determines whether the automatic transaction transaction that is frequently used by the customer is based on the customer's card number indicated in the information included in the withdrawal request notified from the automatic transaction device 10 in S15 and the usage area information. The installation area (high usage frequency area) of the device 10 is specified (S18). The usage area information includes, for each customer, customer identification information (card number) and information indicating the installation area of the automatic transaction device 10 that is frequently used by the customer. ) or stored in the storage device 40 (see FIG. 1).

Next, the host computer 20 determines whether the installation location specified in S17 is included in the high usage frequency area specified in S18 (S19). If the determination result in S19 is YES, the process advances to S26.

On the other hand, if the determination result in S19 is NO, the host computer 20 notifies the Internet banking system 60 of an additional authentication request in order to execute additional authentication processing for the customer (S20). Note that the internet banking system 60 is the internet banking system of the financial institution that issued the cash card with the customer's card number indicated in the information included in the withdrawal request notified from the automatic transaction device 10 in S15. The additional authentication request includes information indicating the telephone number of the customer's portable information terminal 50 (or an e-mail address that can be received by the customer's portable information terminal 50). The customer's telephone number (or e-mail address) is identified based on the card number and customer information shown in the information included in the withdrawal request.

The Internet banking system 60 that has been notified of such an additional authentication request issues a one-time password and notifies the one-time password to the customer's portable information terminal 50 (S21). The one-time password notified at this time will be notified via SMS (short message service) to the phone number indicated in the information included in the additional authentication request (or via email indicated in the information included in the additional authentication request). email address).

The customer's portable information terminal 50 to which the one-time password has been notified prompts the customer to input the notified one-time password into the portable information terminal 50, and accepts the one-time password (S22). This means, for example, that the notified one-time password and a message to the effect that input of the one-time password is required for a withdrawal transaction are displayed on the display screen of the portable information terminal 50, and the customer responds accordingly. This is done by inputting the one-time password into the portable information terminal 50.

Next, the portable information terminal 50 notifies the Internet banking system 60 of the one-time password received in S22 (S23).

The internet banking system 60 that has been notified of the one-time password performs one-time password authentication processing (S24). This is done by determining whether the one-time password notified to the customer's portable information terminal 50 in S21 and the one-time password notified from the customer's portable information terminal 50 in S23 match. . If the one-time passwords match, authentication is successful; if they do not match, authentication fails. Note that, if the one-time password is not notified from the customer's portable information terminal 50 even after a predetermined period of time has passed since the Internet banking system 60 notifies the one-time password to the customer's portable information terminal 50 in S21, the Internet banking system 60 performs S24. The processing result is assumed to be an authentication failure.

Next, the Internet banking system 60 notifies the host computer 20 of the authentication result, which is the result of the one-time password authentication process in S24 (S25).

If the authentication result notified from the internet banking system 60 to the host computer 20 in S25 is that the authentication has failed, the host computer 20 notifies the automated teller machine 10 that withdrawal is not possible (not shown) and cancels the customer's withdrawal transaction. is prohibited. Alternatively, if the authentication fails, the processes of S20 to S25 are repeated, and if the authentication fails a predetermined number of times in succession, the host computer 20 notifies the automatic transaction device 10 that withdrawal is not possible, and the customer's withdrawal transaction may be prohibited.

On the other hand, if the authentication result notified from the internet banking system 60 in S25 is successful, or if the determination result in S19 is YES, the host computer 20 records the usage history of the automatic transaction device 10 by the customer. Information indicating the date and time of use (for example, the date and time when the automatic transaction device 10 notified the withdrawal request in S15), customer identification information shown in the information included in the withdrawal request notified from the automatic transaction device 10 in S15, and the automatic Information indicating the address of the transaction device 10 is registered in the usage history information (S26). The usage history information in which usage history is registered in this manner is stored, for example, in the storage device 205 (see FIG. 3) or the storage device 40 (see FIG. 1). Further, the usage history information is used in determining the installation area of the automatic transaction device 10 that is frequently used by each customer, updating the usage area information, etc., which is shown in the usage area information used in S18. Such decisions and updates are performed by, for example, the host computer 20.

Next, the host computer 20 notifies the automatic transaction device 10 of withdrawal permission (S27).

The automatic transaction device 10 that has been notified of the withdrawal permission discharges the cash card accepted in S11 from the card insertion/discharge section 12, and also transfers the cash of the withdrawal amount accepted in S14 to the coin deposit/withdrawal section 13 and banknote deposit/withdrawal section. 14 (S28). Further, following the ejection of the cash card, a receipt with printed transaction details is also ejected from the card insertion/ejection section 12. When these discharges are completed, the automatic transaction device 10 ends the withdrawal transaction.

In the process illustrated in FIG. 6, in S15, the automatic transaction device 10 notifies the host computer 20 of a withdrawal request including information indicating the address of the automatic transaction device 10, and in S17, the automatic transaction device 10 is notified based on the address. However, for example, in S15, a withdrawal request that includes identification information (for example, device ID) of the automatic transaction device 10 instead of information indicating the address of the automatic transaction device 10 is sent from the automatic transaction device 10 to the host. The computer 20 may be notified, and in S17, the installation position of the automatic transaction apparatus 10 may be specified based on the identification information of the automatic transaction apparatus 10 and the installation position information. The installation location information at this time includes identification information of the automatic transaction device 10 and information indicating the installation position of the automatic transaction device 10 for each automatic transaction device 10, and includes, for example, the storage device 205 (see FIG. 3) or It may be stored in the device 40 (see FIG. 1).

In addition, in the process illustrated in FIG. 6, in S20, an additional authentication request is notified to the internet banking system 60, and the internet banking system 60 executes a one-time password authentication process in order to execute an additional authentication process for the customer. However, in S20, for example, instead of notifying the Internet banking system 60 of the additional authentication request, or in addition to that, the automatic transaction device 10 is notified of the additional authentication request, and the automatic transaction device 10 performs biometric authentication processing. You may also have it executed. In this case, in the automatic transaction device 10, the customer's biometric information is read by the biometric authentication processing unit 16, and the biometric information is verified (verified with the biometric information registered in the IC chip of the cash card). The host computer 20 may be notified of the authentication result based on the result. Alternatively, the customer's biometric information read by the biometric authentication processing unit 16 is notified to the host computer 20 together with the customer's identification information, and the host computer 20 verifies the biometric information (verifies it with the customer's biometric information included in the customer information). ) may be performed to perform biometric authentication.

As described above, according to the present embodiment, when an automatic transaction device installed in a region other than the area where the automatic transaction device that is frequently used by the customer is installed, A mechanism for executing additional authentication processing can be realized. This makes it possible to prevent fraudulent transactions at the automatic transaction device 10 due to impersonation in areas where customers do not usually use the automatic transaction device 10. In addition, with this system, the installation area of the automatic transaction device 10 that is frequently used by each customer, which is shown in the usage area information, can be determined based on the usage history of the automatic transaction device 10 by each customer. Customers do not need to register in advance the installation areas of frequently used automatic transaction devices, and the burden of registration on each customer can be eliminated.

Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and various improvements and changes can be made without departing from the gist of the present invention.

1 Automatic transaction system 10 Automatic transaction device 11 Passbook insertion/ejection section 12 Card insertion/ejection section 13 Coin deposit/withdrawal section 14 Banknote deposit/withdrawal section 15 Display input unit 15a Display device 15b Touch panel 16 Biometrics processing unit 20 Host computer 21 First identification Section 22 Second identification section 23 Judgment section 24 Additional authentication processing execution section 25 Storage section 30 Network 40 Storage device 50 Portable information terminal 60 Internet banking system 110 Control unit 111 Processor 112 RAM
113 Communication interface 114 Graphic processing unit 115 Storage device 116 Input/output interface 117 Bus 121 Passbook processing unit 122 Card processing unit 123 Coin processing unit 124 Banknote processing unit 201 Processor 202 Memory 203 Input device 204 Output device 205 Storage device 206 Portable storage medium Drive device 206a Portable storage medium 207 Communication interface 208 Bus

Claims (11)

a first identification unit that identifies the installation location of the automatic transaction device used by the customer;
a second identification unit that identifies installation areas of automatic transaction devices that are frequently used by the customer;
a determination unit that determines whether the installation location specified by the first identification unit is included in the installation area specified by the second identification unit;
an additional authentication processing execution unit that executes additional authentication processing for the customer when the judgment unit determines that the customer is not included;
A host computer comprising: The first specifying unit specifies the installation position based on installation position information indicating the installation position of the automatic transaction device acquired from the automatic transaction device used by the customer.
The host computer according to claim 1, characterized in that: The first specifying unit specifies the installation location based on identification information of the automatic transaction device acquired from the automatic transaction device used by the customer and installation position information indicating the installation position of each automatic transaction device. Based on
The host computer according to claim 1, characterized in that: The installation position information is stored in a storage unit included in the host computer or in a storage device external to the host computer.
The host computer according to claim 3, characterized in that: The second specifying unit specifies the installation area using identification information of the customer acquired from the automatic transaction device used by the customer and the installation area of the automatic transaction device that is frequently used by each customer. Based on local information,
The host computer according to claim 1, characterized in that: The installation area of the automatic transaction device that is frequently used by each customer is determined based on the installation location of the automatic transaction device that each customer used in the past.
The host computer according to claim 5, characterized in that: The usage area information is stored in a storage unit included in the host computer or in a storage device external to the host computer.
The host computer according to claim 5 or 6, characterized in that: The additional authentication process includes one or both of a one-time password authentication process and a biometric authentication process.
The host computer according to claim 1, characterized in that: An automated trading system including a plurality of automated trading devices and a host computer,
The host computer includes:
a first identifying unit that identifies the installation location of the automatic transaction device used by the customer;
a second identifying unit that identifies an installation area of the automated transaction device that is frequently used by the customer;
a determination unit that determines whether the installation location identified by the first identification unit is included in the installation area identified by the second identification unit;
an additional authentication processing execution unit that executes additional authentication processing for the customer when the judgment unit determines that the customer is not included;
An automatic trading system characterized by comprising: Identify the installation location of automatic transaction equipment used by customers,
Identify the installation area of automatic transaction devices that are frequently used by the customer,
determining whether the specified installation location is included in the specified installation area;
If it is determined that the customer is not included, perform additional authentication processing for the customer;
An authentication method characterized in that processing is executed by a host computer. Identify the installation location of automatic transaction equipment used by customers,
Identify the installation area of automatic transaction devices that are frequently used by the customer,
determining whether the specified installation location is included in the specified installation area;
If it is determined that the customer is not included, perform additional authentication processing for the customer;
A program that causes a host computer to execute processing.