JP4020939B2 - Electronic money handling apparatus and control method thereof - Google Patents

Description

  The present invention relates to an electronic money system that performs settlement by transferring electronic money having a value equivalent to currency, and more particularly to an electronic money storage device that stores a card storing electronic money.

  In recent years, electronic money systems have been developed that have high security against forgery and can also be used for offline transactions. This electronic money system is a system in which electronic money (electronic money having the same value as the currency in circulation) is stored on an IC chip in an IC card (also called an electronic money card). It is a system that makes payment by transferring electronic money.

  In the case of this system, it corresponds to a cash storage such as an automatic cash transaction apparatus in a financial institution, a cash register in a distribution institution, etc. A device for receiving and paying out electronic money data is required. Furthermore, in this system, since electronic money data is traded between an IC card and an IC card, the IC card on the financial institution / distribution side is occupied as well as the IC card on the user side during the transaction processing of the electronic money data. End up. Therefore, in order to conduct transactions simultaneously with a plurality of users, the financial institution / distribution institution must possess and control a plurality of IC cards, and a plurality of PCs connected to ICRW for reading and writing the IC cards are required. This was realized by installing.

  In the above-described prior art, since a plurality of PCs are required to control a plurality of IC cards, the cost is high and a large installation space is occupied. In addition, when a large number of users access a PC on the financial institution side or the like at once, it is difficult to control the PC itself.

  Furthermore, since the IC card in this system has the same economic value as cash currency, human crimes such as fraud of IC card handlers, destruction and theft by suspicious persons, natural disasters such as earthquakes and fires, etc. It is necessary to defend the IC card from this point, but this point was not particularly considered.

  An object of the present invention is to provide an electronic money storage device that stores and controls a plurality of IC cards in such an electronic money system at a low cost and in a small space.

  Another object of the present invention is to provide an electronic money storage device capable of protecting an IC card from human crimes such as fraud and crimes, natural disasters such as earthquakes and fires, and the like.

  In order to achieve the above object, in the present invention, a plurality of ICRWs are controlled by one control device, and electronic money data is exchanged between an IC card mounted on the selected ICRW and another IC card. In addition, a change in environmental information in which the apparatus is installed is detected by various sensors, and processing such as transaction stoppage of electronic money data is performed.

  Electronic money can be protected from human crimes and disasters.

  FIG. 1 is a system schematic diagram of an electronic money system to which an electronic money storage device according to the present invention is applied. Note that FIG. 1 and the other drawings below show one embodiment of the present invention, and do not limit the configuration, function, or the like of the present invention.

  This electronic money system has the same transferability and anonymity as cash, and in order to maintain high security against tampering and counterfeiting, electronic money data is stored on the IC chip in the electronic money card (IC card). It is a system that makes a settlement by transferring electronic money between an IC card and an IC card.

  FIG. 1 is a schematic diagram showing an electronic money system, where 1 is an electronic money issuing organization that issues electronic money, 2 is a financial institution such as a bank, 3 is a host center of the financial institution, 4 is a circulation of department stores, etc. Institutions 5 and 5 are general users, respectively. Electronic money can be traded between the forms, and electronic money can be traded in one form. 6 is an electronic money storage device that controls and stores a plurality of IC cards, 7 is an automatic cash transaction apparatus (also simply referred to as ATM) that can handle electronic money, 8 is a communication server that communicates with a host-side accounting system, 9 is an accounting system, 10 is a master file for storing the currency flow, 11 is an electronic money register that handles electronic money, 12 is an electronic money phone that can handle electronic money through a telephone line, and 13 is a PC (personal computer) , 14 is an ICRW for reading and writing an electronic money card (IC card), 15 is an electronic money wallet that allows users to trade electronic money between individuals, 16 is an electronic money card (IC card), and 17 is each form. Indicates the network to be connected.

  An example of electronic money transaction will be described with reference to FIG.

  First, the electronic money issuing organization 1 issues the same amount of electronic money to the financial institution host center 3 in exchange for cash. The financial institution 2 receives electronic money from the financial institution host center 3 and prepares for electronic money transaction requests from the distribution institution 4 and the general user 5. This is equivalent to preparing banknotes and coins of an amount necessary for a transaction in a safe or an automatic cash transaction apparatus 7 in the case of cash.

  Next, a transaction example in which the general user 5 withdraws electronic money from the automatic cash transaction apparatus 7 of the financial institution 2 will be described as a transaction example in which electronic money is distributed in the market. First, the general user 5 inserts the IC card 16 into the automatic teller machine 7, and performs personal verification by inputting a personal identification number or the like. When the identity system and the deposit balance are confirmed by the accounting system 9 and the master file 10, the withdrawal of the deposit balance is permitted. When the user selects withdrawal with electronic money, electronic money data for the designated withdrawal amount is transferred from the electronic money storage device 6 of the financial institution 2 to the user's IC card 16. At this time, the deposit balance of the user on the master file 10 and the electronic money balance of the electronic money storage device 6 of the financial institution 2 are reduced by the withdrawal amount, and the transaction is completed.

  Subsequently, when the user 5 pays for the purchased product with electronic money at the distribution institution 4, the user 5 inserts the IC card 16 with the electronic money balance into the electronic money register 11 as the price for the purchased product. Pay. The electronic money data for the purchased product price is transferred from the user's IC card 16 to the electronic money storage device 6 of the distribution institution 4, the electronic money balance in the user's IC card 16 is reduced by the purchase amount, and the distribution institution 4 The electronic money balance of the electronic money storage device 6 increases by the purchase price, and the transaction is completed. This transaction is completed in the distribution institution 4 as an off-line transaction without exchange of identity authentication or balance confirmation with the financial institution 2 or the like. Further, the distribution institution 4 can send the electronic money data possessed in the electronic money storage device 6 to the financial institution 2 through the network 17 at an arbitrary timing. In addition, it is also possible for a user to withdraw electronic money through the network 17 using the electronic money telephone 12 or the PC 13 or to exchange electronic money data between users using the electronic money wallet 15.

  In addition, in order to transfer electronic money between IC card and IC card, it is necessary to send / receive data several times, such as authenticity determination of partner IC card, setting of deposit / withdrawal, transfer amount, etc. Since exchanges with other IC cards cannot be performed in parallel, a pair of IC cards is occupied until the transaction is completed. For this reason, a financial institution or the like needs to possess and control a plurality of IC cards in order to conduct transactions simultaneously with a plurality of users.

  In addition, an electronic money storage device that stores and controls IC cards with the same economic value as cash currency protects IC cards from human crimes such as fraud, destruction, theft, and natural disasters such as earthquakes and fires. There is a need.

  FIG. 2 is a block diagram of the electronic money storage device 6 of FIG. 1, and the electronic money storage device 6 is mainly installed in each of the management-side institutions 2, 3, 4 as in the above-described configuration.

  21 is a control device for controlling each component unit of the electronic money storage device 6, 22 is a CPU of the control device 22, 23 is a storage unit for storing electronic money transaction data, and 24 is an output display from the electronic money storage device 6. 1 is a display control unit for controlling the data, 25 is an input control unit for controlling data input to the electronic money storage device 6, 26 is a file control unit for controlling various files, and 27 is an external terminal (for example, cash in FIG. 1). A line control unit for controlling communication with the automatic transaction apparatus 7), 28 is an ICRW control unit for controlling the electronic money card (IC card) 16 via the ICRW 14 according to an instruction from the control unit 21, and 29 is an electronic money storage A power supply control unit 30 that controls ON / OFF of the power supply of the device 6, and 30 represents a backup power supply unit that supplies backup power in the event of a power failure.

  Further, the electronic money storage device 6 displays a sensor 31 for detecting temperature, vibration, etc., a file device 32 for storing a transaction history file, and a message for displaying a warning such as an operational warning and an IC card replacement instruction. The apparatus 33 includes an ID information input device 34 that reads operator ID information and the like when replacing an IC card, an input device 35 that is used for password entry and maintenance operations when replacing an IC card, and the like. The storage unit 23 and the file device 32 are collectively referred to as a memory.

  As shown in FIG. 2, there are a plurality of ICRW control units 28, and several ICRWs 14 are connected to each ICRW control unit 28, but all the ICRWs 14 shown in the figure are included in one ICRW control unit 28. A connected configuration may be used.

  FIG. 3 is an example showing a block diagram of the ICRW control unit 28 described in FIG.

  A system bus interface unit 102 connected to the system bus 101 of the control device 21, a local processor 103 (hereinafter referred to as LP), a local memory 104, and a plurality of ICRW interface units 105, and a plurality of units connected to the ICRW control unit 28 The ICRW 14 is controlled.

  FIG. 4 is a flowchart of a transaction operation performed by the electronic money storage device 6 configured as shown in FIGS. Here, as an example, an operation when depositing electronic money from an external IC card other than the electronic money storage device 6 to the electronic money storage device 6 through a network will be described. Needless to say, the electronic money data can be transferred between the electronic money cards 6 in the electronic money storage device 6 (similar to the configuration described later), but will be omitted in the following description.

  First, as an initial setting operation (step 400) when the electronic money storage device 6 is turned on, each ICRW 14 is allocated from the storage unit 23 of the control device 21 shown in FIG. 2 to the local memory 104 in the ICRW control unit 28 shown in FIG. An I / O address table composed of the determined individual RW number and I / O address is written via the system bus 101 and the system bus interface unit 102 (step 401). The RW number in this I / O address table indicates the number of each ICRW 14 shown in FIG. 3, for example, “00”, “01”, “02” in order from the top, and is assigned by the number of ICRWs. The I / O addresses in the / O address table are assigned to the RW numbers such as “FF00 to FF0F”, “FF10 to FF1F”, and “FF20 to FF2F”.

  Next, the CPU 22 reads the balance of the electronic money in the IC card 16 attached to each ICRW 14 and creates a balance table in the storage unit 23. Hereinafter, a configuration for creating this balance table will be described first.

  The CPU 22 sends an RW number of the ICRW 14 to be accessed and an IC card command stored in the storage unit 23, for example, a command “read the electronic money balance in the card and return it as response data” to the system bus 101. To the predetermined area of the local memory 104 via the system bus IF unit 102 (step 402). In response to this, the LP 103 refers to the I / O address table described above from the RW number written in the local memory 104, recognizes the I / O address assigned to the control of the corresponding ICRW 14, and the I / O address. The aforementioned IC card command is transmitted to the address (step 403).

  Since the IC card 16 receives the IC card command via the ICRW 14 and transmits the balance of the electronic money in the IC chip as response data to the local memory 104 according to the content of the command, the LP 103 stores the ICRW 14 The electronic money balance as the response data from the IC card 16 is received via, and stored in the local memory 104 together with the RW number (step 404).

  The CPU 22 reads the RW number and the electronic money balance corresponding to the RW number from the local memory 104 (step 405), and all the IC cards stored in the electronic money storage device 6 perform the electronic money balance reading process described above. 16 (step 406), a balance table indicating the balance of electronic money of each IC card 16 in the electronic money storage device 6 is created in the storage unit 23. The balance table is updated so that the latest balance can be set every time each IC card 16 performs a transaction.

  Next, it is necessary to manage whether each ICRW 14 is in the middle of a transaction. This is because when one IC card 16 is traded, the other IC card cannot be accessed. Therefore, an ICRW busy management flag is created in the storage unit 23 (step 407). As this ICRW busy management flag, for example, bits corresponding to the number of ICRWs provided in the electronic money storage device 6 are secured in the storage unit 23, and the ICRW busy management flag between each ICRW 14 from the start of the transaction to the completion thereof. Is set to “1”, and “0” is set when there is no other transaction.

  As described above, as an initial setting of the electronic money storage device 6, for each electronic money card stored in the electronic money storage device 6 (similar to the above RW number), the balance of electronic money in each card is being traded By linking an ICRW busy management flag indicating whether or not to be prepared in the storage unit 23, management of each card is facilitated as described below.

  Here, when data relating to a deposit transaction from an external IC card other than the electronic money storage device 6 is received via the network 17 or the line control unit 27 (step 408), this data is buffered in the storage unit 23 ( Step 409), an electronic money card (IC card) 16 on the electronic money storage device 6 side to be a trading partner is selected. Here, as an example of the selection procedure of the IC card 16, the following description will be made assuming that the IC card 16 with the lowest balance among the IC cards 16 that are not in transaction is sequentially deposited.

  The CPU 22 refers to the ICRW busy management flag and the balance table described above, and determines the RW number of the IC card 16 with the lowest balance in the IC card 16 that is not doing the transaction (the setting value of the ICRW busy management flag is “0”). Recognize and select as trading partner (step 410). That is, it outputs a signal indicating permission for the access request.

  After the selection, “1” indicating that a transaction is in progress is set in the corresponding bit of the ICRW busy management flag (step 411). Thereafter, as in the case of creating the balance table described above, the command stored in the storage unit 23 in correspondence with the RW number and the transaction data from the IC card outside the device are transmitted to and received from the IC card 16, and the desired (Step 412).

  After the transaction is completed (step 413), the corresponding bit of the ICRW busy management flag is reset to “0” (step 414), and the corresponding IC card 16 in the balance table, that is, selected for the transaction. The balance data of the IC card 16 is changed to balance data after the transaction. In order to change the balance data, the method of adding the amount of received electronic money to the balance table requires the CPU 22 to analyze the transaction amount from the contents of the transaction data. Therefore, in the same manner as the balance table creation described above, a command for reading the balance of electronic money is issued again to the IC card selected for the transaction, the balance data after the transaction is read, and this balance table is written. Change.

  In addition, since the data of each electronic money transmitted / received between the IC cards 16 are buffered in the storage unit 23 or the local memory 104, that is, temporarily stored, one IC card is used for transactions. Even if it is occupied, access to other IC cards is possible, and even if there is only one electronic money storage device 1, a plurality of transactions can be processed in parallel.

  Thus, since the control device 21 of the electronic money storage device 6 of the present invention can control a plurality of ICRWs 14 and IC cards 16 via the IC card control unit 28, a plurality of transactions can be performed in parallel at a low price and in a small space. Thus, an electronic money storage device that can be processed can be realized.

  FIG. 5 is an example showing another embodiment in which the ICRW control unit 28 described in FIG. 3 is modified. As shown in the figure, a local line control unit 107 that controls, for example, a serial line is connected to the system bus 101, and a local line interface unit 108 that is connected to the local line control unit 107 is mounted in the ICRW control unit 28. The electronic money transaction described in FIG. 4 is performed. In this case, since only the local line control unit 107 is directly connected to the system bus 101, the I / O address, interrupt channel, etc. in the electronic money storage device 6 can be reduced, and compared with the configuration described in FIG. Even so, there is an effect that a large number of ICRWs can be flexibly connected.

  FIG. 6 is an example showing another embodiment in which the IC card 16 described in FIG. 3 or 5 is modified. As shown in FIG. 6, instead of the IC card 16, ICRW 14 and ICRW interface unit 105 of FIG. 3 or 5, an IC chip 109 for storing electronic money data, and an IC chip interface unit 110 connected to the IC chip 109. 2 is mounted on the control device 21 described with reference to FIG. 2. In this case, the ICRW control unit 28, the ICRW 14, and the IC card 16 as a medium become unnecessary. Price and space can be reduced.

  FIG. 7 is an external view showing the electronic money storage device 6 described above. As a medium for storing electronic money, the card described in FIG. 3 or 5 is adopted, and the IC chip described in FIG. The example of is omitted.

  As shown in the figure, the electronic money storage device 6 includes an IC card storage unit 212 provided in the upper part of the device and an operation unit 213 provided in the middle of the device. The IC card storage unit 212 includes an electronic money card (IC card). ) 16 can be stored, and the operation unit 213 is configured so that a staff member can perform a desired operation. As described above, since the IC card storage unit 212 is located at the upper part of the apparatus, an operator can easily take an electronic money card, and since the operation unit 213 is located in the middle stage of the apparatus, an electronic money storage device that is easy to handle can be provided. Then, as shown in the figure, the integrated type can reduce the space and simplify the control of desired transaction processing.

  The operation unit 213 reads a liquid crystal display 201 that displays guidance when an operator such as an attendant performs an operation, a touch panel that performs input during operation, and an ID card inserted by the operator for operator identification. The ID card reader 204 includes a digital audio tape device 204 for backing up the stored contents of the file device of FIG. As described above, the liquid crystal display 201 corresponds to the display device 33 described in FIG. 1, the ID card reader 203 corresponds to the ID information input device 34, and the touch panel 202 corresponds to the input device 35.

  The IC card storage section 212 has an IC card storage section door 205 so that the IC card to be stored is not exposed to the outside of the apparatus. The IC card storage section door 205 has a key 206 for locking the door. There are a key sensor 207 for detecting whether the key 206 is locked and a door sensor 208 for detecting whether the IC card storage door 205 is closed.

  Further, in this figure, 209 is a wired line connected to the network 7 in FIG. 1, 210 is a wireless line controlled by the line control unit 27, and 214 is a temperature sensor that is one of the sensors 31. However, each name in the figure is an example of a component for realizing the present invention. For example, the liquid crystal display 201 may be a CRT display or a 7-segment LED, and the touch panel 202 may be a keyboard. 203 may be an IC card reader or a fingerprint collation device.

  7 illustrates a state in which the operation unit 213 including the liquid crystal display 201, the touch panel 202, and the ID card reader 203 is pulled out. However, when the operation unit 213 is not used, the operation unit 213 is in the electronic money storage device 6. It is stored in. The operation unit door 211 that covers the operation unit 213 may not be provided.

  The electronic money storage device 6 is provided with 16 ICRWs 14, and an electronic money card (IC card) 16 can be mounted in each slot. The IC card 16 may be mounted on all of the 16 or a required number of the cards may be mounted. The IC card storage unit 212 on which the IC card 16 is mounted has a mechanism in which the IC card storage unit door 205 is locked by a key 206, while the operation unit 213 such as the liquid crystal display 201, the touch panel 202, and the ID card reader 203. In addition, separate doors are provided so that the operation unit door 211 is provided.

  To remove the IC card 16, it is necessary to open the IC card storage unit door 205, but the ID card held by the operator must be set in the ID card reader 203 of the operation unit 213 instead of being locked only by the key 206. By preventing the door from being opened, security for security is enhanced. Details of the security control will be described later with reference to FIG.

  Next, a case where the power supply is shut off will be described. When the power supplied to the electronic money storage device 6 is cut off, the IC card storage door 205 is not opened under the control of the control device 21. As shown in FIG. 8, this can be realized by using an electromagnetic solenoid and a spring. That is, when the power is cut off, the spring protrudes to hold the IC card storage door 205 so that it does not open. When the power is on, the electromagnetic lock 215 is pulled in and the IC card storage door 205 is released. In this manner, the electromagnetic lock 215 that is structurally similar is used when the power is shut off and when the door 205 is crime-prevented. Further, by similarly providing an electromagnetic lock 215 in the IC card insertion slot of each ICRW 14 of the IC card storage unit 212, the IC card 16 cannot be removed even when the IC card storage unit door 205 is open. Is possible.

  Since a large amount of electronic money similar to currency is stored in the electronic money card (IC card), in order to extract the IC card from the IC card storage unit 212, the IC card in the IC card to be extracted is stored. The electronic money storage device 6 checks that the balance of electronic money is zero, thereby further improving security for crime prevention. Details of this control will be described later with reference to FIG.

  Next, FIG. 9 is an example in the case where an abnormal operation is applied to the electronic money storage device 6 according to an embodiment of the present invention, and the control device when the IC card storage door 205 is illegally opened. 21 shows a flowchart of the process 21. The regular door opening operation using the operator ID card or password input will be described later.

  During normal operation of the electronic money storage device 6, the state of the IC card storage unit door 205 is monitored by the door sensor 208 and the key sensor 207. If the opening of the IC card storage door 205 is not permitted due to a criminal act of a third party, the opening of the IC card storage door 205 is detected by the key sensor 207 and the door sensor 208. (Steps 901 and 902). Thereafter, the control device 21 in FIG. 2 checks whether communication with the outside other than the electronic money storage device 6 is possible via the wired line 209 (step 903), and if possible, the electronic money storage in which criminal acts are about to be performed is stored. The electronic money data of the IC card 16 in the apparatus 6 is moved through the wired line 209 in the same manner as the electronic money transfer described above. Specifically, the electronic money in the electronic money storage device 6 of the distribution institution 4 in FIG. 1 is transferred to the IC card 16 in another electronic money storage device 6 of the financial institution 2 (step 904).

  If it is determined in step 903 that the wired line 209 cannot communicate, it is checked whether the wireless line 210 shown in FIG. 7 is communicable (step 905). The electronic money data is moved through 210 (step 904). In this way, if either the wired line 209 or the wireless line 210 is communicable, the electronic money is transferred from the electronic money storage device 6 on which the criminal activity is about to be performed to the other storage device 6, and the network An alarm is sent to a management terminal (not shown) connected to the terminal 7 (step 907) to inform that a criminal act is being performed.

  In this way, if the transfer of electronic money data is successful, even if the IC card 16 is subsequently taken away, the electronic money data itself is present in the electronic money storage device 6 in the financial institution 2 and is therefore damaged. Requires only the loss of the physical IC card 16.

  When both the wired line 209 and the wireless line 210 are incapable of communication, an electronic lock state in which the movement of the IC card 16 in the electronic money storage device 6 is prohibited so that the electronic money data cannot be moved again. (Step 906) or the electronic money data itself is deleted. In this case, when the IC card 16 is taken away, the electronic money data itself is lost, but the consumption of the electronic money data by a criminal can be prevented.

  Next, control when an abnormal situation such as a disaster occurs in the electronic money storage device 6 will be described with reference to FIG. Note that the case where the sensor 31 in FIG. 2 is the temperature sensor 214 in FIG. 7 will be described. The temperature sensor 214 is installed at the position shown in FIG. 7, but there are no restrictions on the installation location and the number of installations.

  When the electronic money storage device 6 is heated by a burner or the like for a disaster such as a fire or theft, the temperature sensor 214 detects the abnormal state and opens the IC card storage door 205 described above with reference to FIG. The control device 21 checks whether or not communication with the outside is possible via the wired line 209 (similar to step 903), and if possible, the electronic money data in the IC card 16 inside the electronic money storage device 6 is checked. It moves to an electronic money storage medium such as another electronic money storage device 6 through the wired line 209 (same as step 904), and notifies an alarm to a management terminal (not shown) (same as step 907). If the wired line 209 cannot be communicated due to a criminal act or the like, it is checked whether the wireless line 210 is communicable (similar to step 905), and if possible, separate electronic money data through the wireless line 210. To the electronic money storage medium to notify the alarm (similar to steps 904 and 907). When both the wired line 209 and the wireless line 210 cannot communicate, the electronic money data of the IC card 16 inside the electronic money storage device 6 is brought into an electronic lock state so as to prohibit the movement. (Same as step 906).

  The environmental information detected in the form of disaster or crime is vibration, impact, electromagnetic waves, water, etc. The sensor 10 described with reference to FIG. 2 detects these states and performs the same processing as in the case of the temperature sensor 214. I do.

  As described above, the electronic money storage device 6 becomes a higher-security electronic money storage device by providing crime prevention equipment in the IC card storage unit 212, the operation unit 213, or the entire electronic money storage device 6.

  By the way, even when a detection signal from the sensor 31 or the key sensor 207 is input to the control device 21 at the time of a disaster or a crime, there is no guarantee that power is supplied to the electronic money storage device 6. Therefore, by driving the apparatus with the backup power supply unit 30 shown in FIG. 2, as described above, electronic money data can be transferred to another electronic money storage apparatus. That is, when power is not supplied due to a power failure or the like, the backup power supply unit 30 operates the electronic money storage device 6 as a standby power supply, and the device is turned on when the voltage of the backup power supply unit 30 becomes a predetermined voltage. Turn it off. Further, when this power failure state continues for a predetermined time, the electronic money storage device with higher security can be obtained by moving the electronic money data to a predetermined electronic money storage medium such as another electronic money storage device. Can be provided.

  FIG. 10 is a flowchart of processing when the IC card storage unit door 205 shown in FIG. 7 is normally opened.

  First, the door open is selected from the operation menu displayed on the liquid crystal display 201 via the touch panel 202 (steps 1001 and 1002). Subsequently, the control device 21 displays a message for requesting insertion of the operator ID card on the liquid crystal display 201 (step 1003), and in response to this, the operator is authorized to open the IC card storage unit door 205. Is inserted into the ID card reader 203 (step 1004). When the ID card is inserted, a message requesting input of a password is displayed on the liquid crystal display 201 (step 1005). When the operator inputs a password from the touch panel 202 (step 1007), the control device 21 collates the input password with password management data for each ID number in the ID card managed in the electronic money storage device 6. (Step 1008) In the case of verification OK, the verification OK is displayed on the liquid crystal display 201, and the display for prompting the opening of the IC card storage unit door 205 is performed (Step 1009), and the electromagnetic lock 215 described with reference to FIG. As described above, the IC card storage portion door 205 is released using the key 206 of FIG. 7 (step 1010).

  If the password verification in step 1008 is NG, a display requesting re-input is performed on the liquid crystal display 201 (step 1005), and a retry is permitted a predetermined number of times (step 1006). A guard is performed to prevent any operation with the ID card (step 1011).

  FIG. 11 is a flowchart of processing when the IC card 16 set in the ICRW 14 of the IC card storage unit 212 is taken out.

  A predetermined operation menu is displayed on the liquid crystal display 201, and the operator selects an IC card removal process from these (steps 1101 and 1102). Then, the control unit 21 of the electronic money storage device 6 checks that the IC card storage unit door 205 shown in FIG. 5 is opened (step 1103). In the case of the check NG, operation impossible is displayed on the liquid crystal display 201 (step 1104), and the initial operation menu is returned. If the check is OK, a message prompting the user to input the number of the ICRW 14 storing the IC card 16 to be taken out is displayed on the liquid crystal display 201 (step 1105), and the operator inputs the card number on the touch panel 202. (Step 1106).

  At this time, the IC card 16 is taken out by a management terminal (not shown) allowing the IC card to be taken out / permitted and transferring the balance of the electronic money in the removed IC card 16 to another IC card. This operation is permitted on the condition that the balance is 0 (step 1107).

  If the balance of the IC card 16 is 0 and the above check is OK, a message requesting the password input of the operator ID card is displayed on the liquid crystal display 201 (step 1108). A password is input via the touch panel 202 (step 1110). If the verification is OK (step 1111), the selected IC card 16 is automatically ejected (step 1112). Similarly to the processing described with reference to FIG. 10, the password check here also permits a retry for a predetermined number of times to re-enter the password in the case of verification NG (step 1109). When retrying out, it is guarded that no operation with the ID card can be performed (step 1113).

  The operator used the ID card to pull out the IC card 16, but the ID card inserted into the ID card reader 203 is displayed on the liquid crystal display 201 after the operator closes the IC card storage door 205. By selecting the ID card removal process from the operation menu displayed on the screen, the ID card reader 203 automatically ejects it.

  In this example, as a condition for taking out the electronic money card (IC card), the taking out operation is permitted on the assumption that the balance of the electronic money of this card is 0. If an electronic lock state that prohibits the movement of electronic money data so that the IC card cannot be used thereafter is applied, the card removal operation may be permitted on the condition of this lock state.

  FIG. 12 is a flowchart showing the daily business operations from when the electronic money storage device is turned on until the normal transaction is made until the last power-off. Here, as an example, the operation of the electronic money storage device 6 in the distribution institution 4 in the electronic money system shown in FIG.

  When the electronic money storage device 6 is turned on (step 1201), the initial setting operation described with reference to FIG. 4 is started, and electronic money data of an amount necessary for the business of the day is stored in the electronic money storage device 6 of the financial institution 2. Then, it is withdrawn to the electronic money storage device 6 in the distribution institution 4 (step 1202), and then the desired normal transaction is performed (step 1203).

  When the business of the day ends and the electronic money storage device 6 of the distribution institution 4 is stopped, the control device 21 recognizes the stop request by the staff operation or the stop request from the outside via the network 17 and the line control unit 27. (Step 1204), the deposit and withdrawal of the day is performed based on the withdrawal amount from the financial institution 2 on the day, the transaction history in operation, and the like (Step 1205). Thereafter, after depositing the electronic money data of the electronic money storage device 6 in the distribution institution 4 into the electronic money storage device 6 of the financial institution 2 (step 1206), the power is cut off and the electronic money device 6 is stopped (step 1206). 1207), the daily work is completed.

  As in the business operation shown in this example, the electronic money storage device 6 of the distribution institution 4 stores the electronic money data outside the business hours without depositing the electronic money data in the financial institution 2, so that the business hours are out of business hours, for example at midnight. It is possible to eliminate the damage of electronic money data from crimes caused by illegal intrusion to the distribution organization 4 that are likely to occur.

  As described above, according to the present invention, it is possible to protect an electronic money card (IC card) from human crimes, disasters, etc., and to provide a low-priced and small-sized electronic money storage device. it can.

1 is a schematic diagram showing an electronic money system according to an embodiment of the present invention. The internal block diagram of the electronic money storage apparatus 6 shown in FIG. FIG. 3 is an internal block diagram of an ICRW control unit 28 shown in FIG. 2. It is a figure which shows the flow of transaction operation | movement of the electronic money storage apparatus. FIG. 4 is an internal block diagram showing another embodiment of the ICRW control unit 28 shown in FIG. 2. FIG. 4 is an internal block diagram of an IC chip control unit when an IC chip is used instead of the IC card 16 shown in FIG. 3. 1 is an external view showing an embodiment of an electronic money storage device 6. FIG. Schematic which shows the locking system of the IC card storage part door 205 shown in FIG. FIG. 8 is a flowchart showing a processing flow when an attempt is made to illegally open the IC card storage unit door 205 shown in FIG. 7. The flowchart which shows the flow of a process when opening the IC card storage part door 205 shown in FIG. The flowchart which shows the flow of a process when taking out IC card 16 from ICRW14 shown in FIG. The flowchart which shows the flow of the business operation | movement of the electronic money storage apparatus 6 for one day.

Explanation of symbols

1: electronic money issuing institution, 2: financial institution, 3: financial institution host center, 4: distribution institution, 5: general user, 6: electronic money storage device, 7: cash automatic transaction device, 8: communication server, 9 : Account system, 10: Master file, 11: Electronic money register, 12: Electronic money telephone, 13: PC, 14: ICRW, 15: Electronic money wallet, 16: IC card, 17; Network, 21: Control device, 22: CPU, 23: storage unit, 24: display control unit, 25: input control unit, 26: file control unit, 27: line control unit, 28: ICRW control unit, 29: power supply control unit, 30: backup power supply unit , 31: sensor, 32: file device, 33: display device, 34: ID information input device, 35 :, 101: system bus, 102: system bus interface unit, 1 3: local processor, 104: local memory, 105: ICRW interface unit, 106: decoding unit, 201: liquid crystal display, 202: touch panel, 203: ID card reader, 204: digital audio tape device, 205: IC card storage unit door , 206: key, 207: key sensor, 208: door sensor, 209: wired line, 210: wireless line, 211: operation unit door, 212: IC card storage unit, 213: operation unit, 214: temperature sensor

Claims (2)

A first storage medium for storing monetary value as fund information in an updatable manner and a second storage for transferring the fund information between the first storage media to perform electronic transactions, and storing the fund information in an updatable manner In an electronic money system having a storage medium of
Providing a lockable electronic money handling device for storing a plurality of the second storage media;
The plurality of second storage media are arranged inside a door provided in the electronic money handling device and arranged in a predetermined position in an upper part of the electronic money handling device. Electronic money system. A medium module storage means comprising a storage medium for storing electronic money, comprising a door arranged to be openable and closable, and storing a plurality of medium modules each capable of being locked and unlocked independently;
Control means for managing the storage medium,
It said media module storage means comprises a temperature of the medium module storage unit, vibration, shock, electromagnetic wave or the state detecting means for detecting a change of state on water,
The control means, when the unlocking of any one of the media modules is detected by the means for locking the door and the state detection means, access to the electronic money of the media module in which the unlocking is detected , An electronic money handling apparatus, comprising: blocking means for blocking the medium module from being electronically locked to prohibit movement of electronic money.

Images