JP4861938B2 - PIN number input device and payment terminal - Google Patents

Description

The present invention relates to a password input device and a payment terminal.

  Conventionally, electronic payment using various cards instead of cash has been widely used. Examples of the various cards include a credit card and an IC card used for debit card settlement.

  Electronic payment using an IC card is executed by connecting a pin pad to a payment terminal, as shown in Patent Document 1, for example. The pin pad is an input device for inputting numbers, and includes an IC card reader / writer that reads and writes data from and to an IC chip mounted on the IC card. Hereinafter, what connected the pin pad to the payment terminal may be called a payment terminal system.

  For example, when the IC card is a credit card, the pin pad reads card data such as a credit card number from the IC card or accepts an input of a personal identification number at the time of electronic settlement.

  Then, in the payment terminal system, authentication of the input personal identification number, creation of inquiry information based on the read card data, and transmission of inquiry information to the payment institution computer are executed. In the settlement institution computer, a credit inquiry is performed and an approval response to the inquiry is returned. In the payment terminal system, when an approval response is received, a payment process is executed.

JP 2005-215834 A

  With the spread of electronic payment using the IC card as described above, skimming damage in which data stored in the IC card is stolen is expected. Such skimming is performed by improperly mounting a device called a skimming machine on the pin pad.

  An example of IC card skimming will be described.

  As a skimming technique, first, the person who performs the fraud removes the pin pad from the settlement terminal without attaching it to the human eye so as to attach the skimming machine to the pin pad.

  Next, the cheating person performs an operation of prying open the housing of the removed pin pad, attaching a skimming machine therein, and closing the housing again.

  The fraudulent performer attaches the pin pad with the skimming machine to the payment terminal without touching it again. Thereby, the payment terminal system is returned to the original normal state in appearance.

  In this state, every time an electronic payment is made in the payment terminal system, information such as a communication record in the payment is accumulated in the skimming machine.

  After the information is illegally accumulated in the skimming machine in this manner, the cheating person again performs the work of removing the pin pad from the settlement terminal and taking out the skimming machine from the removed pin pad. Then, by analyzing information such as communication records accumulated in the skimming machine, data stored in the IC card is illegally stolen. Unauthorized electronic settlement is performed by using the stolen data.

  An object of the present invention is to prevent skimming damage in electronic settlement using an IC card.

The personal identification number input device of the present invention includes a user interface including an IC card reader / writer that reads and writes data from and to an IC chip mounted on an IC card, and a connection cable that is connected to the payment terminal and supplies power from the payment terminal When a detection unit for detecting the stop of power supply from the settlement terminal according to the said from the payment terminal connection cable is disconnected, the power that will be subjected fed from the payment terminal via the connection cable to the user interface A power unit that supplies power from the battery to the user interface when the connection cable is disconnected from the payment terminal, and power from the payment terminal by supplying power from the battery on the condition of the detection. Describes power supply stop information, which is information that a supply stop has been detected. A control unit to be stored in the part, referring to the storage unit during startup, when the power supply stop information in the storage unit is stored, nonvolatile a program for driving and controlling the user interface Means for erasing the control program stored in the memory to render the user interface unusable.

The payment terminal of the present invention includes a connection unit to which a personal identification number input device having a user interface including an IC card reader / writer that reads and writes data from and to an IC chip mounted on an IC card is connected so that data communication is possible, and the connection A means for detecting connection / disconnection of the personal identification number input device with respect to a section, and information indicating that the personal identification number input device has been disconnected with respect to the connection section on the condition that the connection is detected and means for storing the information in the second storage unit, by referring to the second storage unit to detect a condition of the connection, the if the non-connection information is stored in the second storage unit, wherein a program for driving control of the user interface to erase the control program stored in the nonvolatile memory, the user to the password input device And means for executing a processing for disabling the interface, the.

  According to the present invention, when the pin pad is removed from the payment terminal, the IC card reader / writer of the pin pad becomes unusable, so that electronic payment using the IC card is not performed and skimming damage can be prevented.

  Embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
A first embodiment of the present invention will be described with reference to FIGS.

  FIG. 1 is an external perspective view showing a payment terminal system 71 in the first embodiment. As shown in FIG. 1, the payment terminal system 71 is configured such that separate payment terminals 1 and pin pads 11 are connected to each other via a connection cable 81 so that data communication is possible.

  First, the payment terminal 1 will be described. The payment terminal 1 has a housing 2 in which each part is arranged. The housing 2 has a bottom surface in contact with the mounting surface, and an upper surface that is inclined downward from the back side toward the near side.

  A slit-like reading groove 3 is provided at a position on the right side as viewed from the front side of the housing 2. The reading groove 3 is for inserting a magnetic stripe of a magnetic card and drawing it out to the front side. Therefore, the housing 2 contains a magnetic card reader 10 (see FIG. 2) for reading data recorded on the magnetic stripe of the card.

  On the upper surface of the housing 2, a keyboard 5, a receipt issuing port 8, and a display 6 are arranged in this order from the front side to the back side of the payment terminal 1.

  The keyboard 5 has an external structure in which various keys such as a numeric key 5a from “0” to “9” for inputting a monetary amount, a function key 5b, and the like are arranged for each block.

  The display 6 includes an LCD (Liquid Crystal Display) and displays transaction contents, operation guidance, and the like. The receipt issuing port 8 is an issuing port for issuing a receipt (not shown) printed by a printer 7 (see FIG. 2) built in the housing 2.

  The receipt issuing port 8 passes through the housing 2 and is formed in the housing 2 at a position where a printed sheet (not shown) printed by a printer 7 (see FIG. 2) built in the housing 2 is discharged. Yes.

  A power cable 9 connected to an external power source 101 (see FIG. 2) is connected to the rear surface of the housing 2. The power cable 9 supplies power from the external power source 101 to the payment terminal 1. The external power supply 101 is a commercial power supply as an example.

  Next, the pin pad 11 will be described. The pin pad 11 is, for example, a password input device for inputting a password determined for each card. The pin pad 11 includes a display 12, a keyboard 13, and an IC card reader / writer 14 (see FIG. 2) as user interfaces.

  The pin pad 11 has a housing 11a in which each part is arranged. The housing 11a includes a flat plate-shaped first housing 11aa on which the display 12 and the keyboard 13 are arranged, and an IC card reader / writer 14, and a rectangular parallelepiped second housing 11ab formed with a card insertion slot 14a. It consists of and.

  In the first housing 11aa, the upper surface on which the display 12 and the keyboard 13 are arranged is inclined downward from the back side toward the near side, and the bottom side on the near side is in contact with the placement surface. And the 1st housing 11aa has the back side part connected to the approximate vertical center part of the 2nd housing 11ab. The second housing 11ab has a card insertion slot 14a formed on the upper surface thereof, the bottom surface side on the near side is in contact with the placement surface, and the upper surface side is inclined slightly toward the front.

  The display 12 displays transaction details, operation guidance, and the like. The keyboard 13 is composed of a set of various keys such as numeric keys from “0” to “9” for inputting a personal identification number. The IC card reader / writer 14 reads and writes various data with respect to an IC chip (not shown) mounted on an IC card (not shown) inserted into the card insertion slot 14a. Here, the IC card is a so-called contact type, and the IC card reader / writer 14 contacts the IC chip of the IC card and executes reading of stored data and the like.

  The connection cable 81 that connects the payment terminal 1 and the pin pad 11 so that data communication can be performed with each other is fixedly connected to the pin pad 11 at one end side and a pin pad connection provided at the payment terminal 1 at the other end side. It is connected to the interface 85 (see FIG. 2).

  A battery box 95 is provided in the middle of the connection cable 81. The battery box 95 includes a battery 91 (see FIG. 2) that supplies power to the inside thereof. The power of the battery 91 is supplied to the pin pad 11 by the connection cable 81. The battery 91 is a lithium ion battery as an example.

  FIG. 2 is a block diagram showing an electrical connection of the payment terminal system 71 in the first embodiment. Note that the wiring between the external power source 101 and the battery 91 and other components is omitted from FIG.

  First, the payment terminal 1 will be described. The settlement terminal 1 has a built-in microcomputer 15, and the microcomputer 15 includes a bus line 16, various control circuits (not shown), a keyboard 5, a display 6, a printer 7, and a magnetic card reader 10. The drive is controlled through. In such a microcomputer 15, a ROM 18 that stores fixed data such as a computer program (startup program and control program) and a RAM 19 that stores various data in a rewritable manner are connected to the CPU 17 via a bus line 16. It is constituted by.

  The microcomputer 15 is connected to the communication interface 21, the nonvolatile memory 22, and the pin pad connection interface 85 via the bus line 16. The communication interface 21 is connected to a payment institution computer provided in a credit company, a bank, or the like via a relay center such as a public line network, which is a communication line, or CAFIS (Credit And Finance Information Switching System). Perform data communication with. The non-volatile memory 22 is a memory that stores data in a rewritable manner, and stores various computer programs and various files.

  As an example, the standard of the pin pad connection interface 85 is USB (Universal Serial Bus). Therefore, the connection cable 81 is designed as a signal cable for data communication, and a control signal from the settlement terminal 1 is input to the microcomputer 35 described later of the pin pad 11 via the connection cable 81. On the other hand, the connection cable 81 supplies power for driving the pin pad 11 to the pin pad 11. That is, power is supplied from the external power supply 101 to the payment terminal 1 to drive the payment terminal 1, and further, power is supplied to the pin pad 11 by the connection cable 81 to drive the pin pad 11.

  The battery box 95 provided in the connection cable 81 is provided with a power stop detection circuit (not shown) for detecting a stop of power supply from the settlement terminal 1 via the connection cable 81, and further, a P-MOSFET ( (Not shown) is provided. When the power supply from the payment terminal 1 is normal, the P-MOSFET is closed, the power of the battery 91 is not supplied to the pin pad 11, and only the power from the payment terminal 1 is supplied to the pin pad 11 via the connection cable 81. The Then, the P-MOSFET is opened in response to the detection of the power stop detection circuit by the power stop from the settlement terminal 1, and the power from the battery 91 is supplied to the pin pad 11 through the connection cable 81.

  Next, the pin pad 11 will be described. The pin pad 11 incorporates a microcomputer 35, and the microcomputer 35 connects each part such as the display 12, the keyboard 13, and the IC card reader / writer 14 through a bus line 36 and various control circuits (not shown). Drive control. Such a microcomputer 35 connects a CPU 38 with a ROM 38 for storing fixed data such as a computer program such as a startup program and an erasing program, which will be described later, and a RAM 39 for storing various data in a rewritable manner via a bus line 36. It is comprised by doing. In the RAM 39, a flag area 33 described later is formed. The RAM 39 is backed up by a battery 91.

  The microcomputer 35 is connected to the power supply circuit 44, the voltage detection circuit 23, and the nonvolatile memory 32 via the bus line 36.

  The power supply circuit 44 is a power circuit that generates power required for driving each unit from power supplied to the pin pad 11 via the connection cable 81. The power supply circuit 44 supplies the generated power to each unit. Therefore, the power supply circuit 44 constitutes a power unit that supplies power from the settlement terminal 1 supplied via the connection cable 81 and power supplied from the battery 91 to each unit.

  The voltage detection circuit 23 monitors the power supplied to the pin pad 11 via the connection cable 81, and outputs a voltage drop signal to the microcomputer 35 of the pin pad 11 when the monitored voltage falls below a specified value. The voltage value when power is supplied from the battery 91 is lower than the voltage value when power is supplied from the settlement terminal 1, and the above-mentioned “specified value” in the voltage detection circuit 23 is an intermediate value between the two. It is. When the connection cable 81 is disconnected from the pin pad connection interface 85, the battery box 95 starts supplying power from the battery 91. At this time, the voltage starts to decrease and reaches the above-mentioned specified value on the way. And since the electric power from the battery 91 is supplied, a voltage rises again. The voltage detection circuit 23 constitutes a detection unit that detects a stop of power supply from the payment terminal 1.

  The non-volatile memory 32 stores a control program 34 that is a computer program. The control program 34 is a program for the microcomputer 35 of the pin pad 11 to drive and control each unit such as the display 12, the keyboard 13, and the IC card reader / writer 14.

  In such a payment terminal system 71, as an electronic credit payment with an IC card, which is a credit card, authentication of a personal identification number input by the keyboard 13 of the pin pad 11 and reading by the IC card reader / writer 14 of the pin pad 11 are performed. Creation of inquiry information based on the card data, transmission of inquiry information to the payment institution computer via the communication interface 21 of the payment terminal 1 are executed. In the settlement institution computer, a credit inquiry is performed and an approval response to the inquiry is returned. In the payment terminal system 71, when an approval response is received, a payment process is executed.

  Next, processing executed to prevent skimming damage will be described. Here, skimming is performed by accumulating communication records and the like in electronic settlement in a skimming machine that is illegally attached to the inside of the pin pad 11.

  As a process for preventing such skimming damage, a skimming prevention first process (see FIG. 3) and a skimming prevention second process (see FIG. 4) described below are executed.

  First, when a fraudster who tries to attach the skimming machine to the pin pad 11 removes the pin pad 11 from the settlement terminal 1 for the attachment (when the connection cable 81 is pulled out from the pin pad connection interface 85), The power supply to the pin pad 11 is stopped, and the voltage detection circuit 23 outputs a voltage drop signal. As a result, the first skimming prevention process is executed.

  FIG. 3 is a flowchart showing the first skimming prevention process. When the microcomputer 35 of the pin pad 11 determines the reception of the voltage drop signal output from the voltage detection circuit 23 (Y in step S101), the flag area 33 of the RAM 39 indicates that the power supply from the payment terminal 1 has been stopped. A power supply stop flag that is a flag is stored (step S102). At this time, power from the battery 91 is supplied to the microcomputer 35.

  That is, the power supply stop flag is power supply stop information that is information indicating that a stop of power supply from the payment terminal 1 is detected, and the flag area 33 constitutes a storage unit that stores the power supply stop information. . Then, the microcomputer 35 of the pin pad 11 supplies a power supply stop flag (power supply stop information) by supplying power from the battery 91 by the power supply circuit 44 (power unit) on condition that the voltage detection circuit 23 (detection unit) detects. Is configured in the flag area 33 (storage unit).

  Next, the cheating person who attached the skimming machine to the pin pad 11 connects the pin pad 11 to the payment terminal 1 again. That is, the drawn connection cable 81 is connected to the pin pad connection interface 85 again. Then, in order to accumulate communication records and the like in the skimming machine attached to the pin pad 11, the fraudulent performer waits until the payment terminal system 71 is activated and electronic payment is executed.

  FIG. 4 is a flowchart showing the second skimming prevention process. After the skimming machine is attached to the pin pad 11, the store clerk in which the payment terminal system 71 is introduced activates the pin pad 11 by a predetermined operation to start business.

  The microcomputer 35 of the pin pad 11 refers to the flag area 33 of the RAM 39 according to the activation program according to the activation of the pin pad 11 (Y in step S201) (step S202). Then, it is determined whether or not a power supply stop flag is stored in the flag area 33 (step S203).

  If the power supply stop flag is not stored in the flag area 33 (N in Step S203), the microcomputer 35 of the pin pad 11 executes activation according to the activation program and ends the processing.

  On the other hand, if the power supply stop flag is stored in the flag area 33 (Y in step S203), the microcomputer 35 of the pin pad 11 executes a process according to the erase program stored in the ROM 38. That is, the microcomputer 35 of the pin pad 11 accesses the nonvolatile memory 32 according to the erasing program and executes a process of erasing the control program 34 stored in the nonvolatile memory 32 (step S204).

  Here, the control program 34 is a program for the microcomputer 35 of the pin pad 11 to drive and control the display 12, the keyboard 13, the IC card reader / writer 14, and the like.

  Therefore, when the control program is deleted in step S204, the display 12, the keyboard 13, and the IC card reader / writer 14 cannot be driven and controlled by the microcomputer 35 of the pin pad 11, and cannot be used.

  As described above, since the IC card reader / writer 14 and the like cannot be used, for example, the card data cannot be read by the IC card reader / writer 14 or input by the keyboard 13 cannot be performed. Thus, since the pin pad 11 cannot be used, electronic settlement is not performed, and skimming by a skimming machine attached to the pin pad 11 can be prevented.

  For example, the pin pad 11 can be used again by storing the control program 34 in the non-volatile memory 32 from the payment terminal 1, but the power supply stop flag in the flag area 33 may be cleared at that time. it can.

[Second Embodiment]
Next, a second embodiment of the present invention will be described with reference to FIGS.

  FIG. 5 is an external perspective view showing a payment terminal system 71 in the second embodiment. FIG. 6 is a block diagram showing an electrical connection of the payment terminal system 71 in the second embodiment. The same parts as those of the first embodiment described with reference to FIGS. 1 to 4 are denoted by the same reference numerals, and the description thereof is also omitted.

  The second embodiment described with reference to FIGS. 5 and 6 differs greatly from the first embodiment described with reference to FIGS. 1 to 4 in that a battery box 95 is provided in the housing 11a of the pin pad 11. It is a point. More specifically, the battery 91 is built in the second housing 11ab in which the IC card reader / writer 14 is built.

  In 2nd Embodiment, since the battery box 95 is incorporated in the housing 11a of the pin pad 11, the battery box 95 cannot be visually recognized from the external appearance. Therefore, the problem of layout, etc. that may occur when the battery box 95 is visible as in the first embodiment are solved.

  Also in the second embodiment, the first skimming prevention process (see FIG. 3) and the second skimming prevention process (see FIG. 4) are performed as processes for preventing skimming by the skimming machine attached to the pin pad 11. Is executed. As a result, the display 12 of the pin pad 11, the keyboard 13, and the IC card reader / writer 14 cannot be driven and controlled by the microcomputer 35 of the pin pad 11, and cannot be used. Thus, since the pin pad 11 cannot be used, electronic settlement is not performed, and skimming by a skimming machine attached to the pin pad 11 can be prevented.

[Third Embodiment]
Next, a third embodiment of the present invention will be described with reference to FIGS.

  FIG. 7 is a block diagram showing an electrical connection of the payment terminal system 71 in the third embodiment. The same parts as those of the other embodiments described with reference to FIGS. 1 to 6 are denoted by the same reference numerals, and the description thereof is also omitted.

  Also in the third embodiment, the connection cable 81 is connected to the pin pad connection interface 85 so that the payment terminal 1 and the pin pad 11 can perform data communication. The pin pad connection interface 85 of the payment terminal 1 constitutes a connection unit to which the pin pad 11 is connected so that data communication is possible.

  In the RAM 19 of the payment terminal 1 in the third embodiment, a flag area 19a is formed. In the flag area 19a, the microcomputer 15 of the settlement terminal 1 stores a non-connection flag that is a flag indicating that the connection cable 81 is disconnected from the pin pad connection interface 85. That is, the non-connection flag is non-connection information that is information indicating that the non-connection of the pin pad 11 to the pin pad connection interface 85 that is a connection unit has been detected, and the flag area 19a stores the non-connection information. A storage unit is configured.

  The microcomputer 15 of the payment terminal 1 in the third embodiment can detect the connection / disconnection of the connection cable 81 to the pin pad connection interface 85 according to the control program. This is realized, for example, when the connection standard is USB. Here, the connection / non-connection of the connection cable 81 means the connection / non-connection of the pin pad 11 to the pin pad connection interface 85 which is a connection part.

  Next, processing executed by the settlement terminal 1 in the third embodiment to prevent skimming by a skimming machine attached to the pin pad 11 (first skimming prevention processing (see FIG. 8), second skimming prevention processing ( (See FIG. 9)).

  First, an unauthorized person who intends to attach a skimming machine to the pin pad 11 first removes the pin pad 11 from the payment terminal 1 for the attachment. That is, the connection cable 81 is pulled out from the pin pad connection interface 85.

  FIG. 8 is a flowchart showing the first skimming prevention process in the third embodiment. If the disconnection of the connection cable 81 to the pin pad connection interface 85 is detected by pulling out the connection cable 81 of the cheating person (Y in step S301), the microcomputer 15 of the settlement terminal 1 A non-connection flag is stored in the flag area 19a of the RAM 19 (step S302).

  Then, the cheating person who attaches the skimming machine to the pin pad 11 connects the pin pad 11 to the settlement terminal 1 again. That is, the drawn connection cable 81 is connected to the pin pad connection interface 85 again.

  FIG. 9 is a flowchart showing the second skimming prevention process in the third embodiment. The microcomputer 15 of the payment terminal 1 waits for detection of connection of the connection cable 81 to the pin pad connection interface 85 (step S401). If the connection of the connection cable 81 to the pin pad connection interface 85 is detected (Y in step S401), the microcomputer 15 of the payment terminal 1 refers to the flag area 19a of the RAM 19 of the payment terminal 1 and refers to this flag area. It is determined whether or not there is a non-connection flag in 19a (step S403).

  If the non-connection flag is not stored in the flag area 19a (N in step S403), the microcomputer 15 of the payment terminal 1 ends the process as it is.

  On the other hand, if the non-connection flag is stored in the flag area 19a (Y in step S403), the microcomputer 15 of the settlement terminal 1 controls the control program 34 (stored in the nonvolatile memory 32 of the pin pad 11). Is transmitted to the pin pad 11 (step S404). This control program erasure instruction is transmitted to the microcomputer 35 of the pin pad 11 via the pin pad connection interface 85 and the connection cable 81.

  The microcomputer 35 of the pin pad 11 that has received the control program erasure instruction executes processing according to the erasure program described in step S204 of the flowchart shown in FIG. 4 in response to the reception. That is, the microcomputer 35 of the pin pad 11 executes a process of accessing the nonvolatile memory 32 and erasing the control program 34 stored in the nonvolatile memory 32 according to the erasing program stored in the ROM 38. As a result, the display 12 of the pin pad 11, the keyboard 13, and the IC card reader / writer 14 cannot be driven and controlled by the microcomputer 35 of the pin pad 11, and cannot be used.

  Thus, since the pin pad 11 cannot be used, electronic settlement is not performed, and skimming by a skimming machine attached to the pin pad 11 can be prevented.

It is an external appearance perspective view which shows the payment terminal system in 1st Embodiment. It is a block diagram which shows the electrical connection of the payment terminal system in 1st Embodiment. It is a flowchart which shows the skimming prevention 1st process. It is a flowchart which shows the skimming prevention 2nd process. It is an external appearance perspective view which shows the payment terminal system in 2nd Embodiment. It is a block diagram which shows the electrical connection of the payment terminal system in 2nd Embodiment. It is a block diagram which shows the electrical connection of the payment terminal system in 3rd Embodiment. It is a flowchart which shows the skimming prevention 1st process in 3rd Embodiment. It is a flowchart which shows the skimming prevention 2nd process in 3rd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Payment terminal, 11 ... Pin pad, 11a ... Housing, 14 ... IC card reader / writer, 19a ... Flag area (2nd memory | storage part), 23 ... Voltage detection circuit (detection part), 33 ... Flag area (memory | storage part) 35 ... Microcomputer (control unit), 44 ... Power supply circuit (power unit), 81 ... Connection cable, 85 ... Pin pad connection interface (connection unit), 91 ... Battery

Claims (4)

A user interface including an IC card reader / writer for reading and writing data to an IC chip mounted on the IC card;
A connection cable connected to a payment terminal and supplying power from the payment terminal;
A detection unit for detecting a stop of power supply from the payment terminal due to the connection cable being disconnected from the payment terminal ;
With supplying power that will be supplied from the payment terminal via the connection cable to the user interface, a power unit for supplying electric power from the battery to the user interface when the connection cable is disconnected from the payment terminal,
A control unit that stores, in the storage unit, power supply stop information that is information indicating that a stop of power supply from the payment terminal has been detected by power supply from the battery on the condition of the detection;
When the power supply stop information is stored in the storage unit with reference to the storage unit at the time of activation, a control program stored in the non-volatile memory is driven for controlling the user interface. Means for erasing and disabling the user interface;
A PIN code input device . The battery power is supplied via the connection cable.
The personal identification number input device according to claim 1. It has a housing to place each part,
The battery is provided in the housing,
The personal identification number input device according to claim 1. A connection part to which a personal identification number input device having a user interface including an IC card reader / writer for reading and writing data to and from an IC chip mounted on an IC card is connected so that data communication is possible;
Means for detecting connection / disconnection of the personal identification number input device to the connection unit;
Means for storing, in the second storage unit, non-connection information, which is information indicating that non-connection of the personal identification number input device to the connection unit is detected on the condition that the non-connection is detected;
A program for driving and controlling the user interface when non-connection information is stored in the second storage unit with reference to the second storage unit on the condition that the connection is detected. Means for erasing the control program stored in the memory, and causing the personal identification number input device to execute processing for disabling the user interface;
Payment terminal.

Images