JP5343394B2 - Automatic transaction equipment - Google Patents

Description

  The present invention relates to an automatic transaction apparatus that is connected to a host computer and transmits a personal identification number entered by the user to the host computer to confirm the identity of the user. It is related with the automatic transaction apparatus which detects the unauthorized use when it is made.

  Conventionally, when performing a transaction using an automatic transaction apparatus installed in a financial institution, a user performs a transaction using his / her card. The card is provided with a magnetic stripe as a storage unit, and the magnetic stripe stores personal identification information such as the number of the financial institution that issued the card, its branch number, and account number. At the time of the transaction, the personal identification information of the card is read, and the user is requested to input a personal identification number. The entered password is transmitted to the host computer, which is the host device, and verified with the password registered in the host computer. As a result of the verification, if identity verification is obtained, the transaction is executed.

  The personal identification number used for identification is determined by the user alone, and there is a tendency to select a number that can be easily remembered by the user so that the user does not forget it. For example, the user's date of birth, telephone number, car number, etc. tend to be used as a personal identification number. Therefore, if the card is illegally obtained by a third party, the password of the card owner may be easily guessed. Various attempts have been made to prevent this.

  For example, in Patent Document 1 (Japanese Patent Application Laid-Open No. 2007-034409), when a user changes a password, the password entered by the user is transmitted to the host computer, and the password entered by the host computer is transmitted. Is compared with the personal identification number that is easy to guess from the personal information of the user, and it is judged whether or not the change of the personal identification number is accepted. If the entered personal identification number and the personal identification number that is easy to guess match, A PIN number changing system is described in which a number is presented to the user.

  Further, for example, Patent Document 2 (Japanese Patent Application Laid-Open No. 2006-301931) discloses a similar check for a currently registered personal identification number. In Patent Document 2, it is determined whether or not the currently registered personal identification number matches the easy-to-guess personal identification number, and if it coincides, a personal identification number change screen is displayed to prompt the personal identification number to be changed. In addition, it is stated that the number of grace is recorded in the host computer when the change of the security code is postponed, and the security code is disabled when the grace time exceeds the standard number. .

  The inventions described in Patent Documents 1 and 2 above are effective for financial institutions that issued cards, but are used when the card is illegally used in financial institutions other than the card issuing financial institution. It is not possible to determine whether or not the security code is dangerous. In addition, since the personal identification number that is easy to guess is calculated based on the personal information of the user held by the financial institution or the like, the range of personal identification numbers that can be calculated is naturally limited. Furthermore, in the case of Patent Document 2, since the personal identification number itself is locked, if it is locked by mistake, the card must be reissued, and there is a certain period of time before the card can be used again. Necessary.

On the other hand, in Patent Document 3 (Japanese Patent Application Laid-Open No. 2006-059306), when a user registers a contraindication word (number) when opening an account at a financial institution or the like and setting a personal identification number, the contraindication word will be displayed. It is described that (number) is stored in a cash card (see paragraph 0035). And it is stated that when a user who obtained a cash card illegally enters a PIN, if there is a contraindicated word (number) in the entered PIN, a warning will be issued that there is a possibility of unauthorized use (See paragraph 0037).
JP 2007-034409 A JP 2006-301931 A JP 2006-059306 A

  However, in the invention described in Patent Document 3, the contraindication word is set when the cash card is issued, so that after the card is issued, for example, when the telephone number or the car number changes, the user's When personal information changed, there was a problem that the previous contraindication word became useless. In addition, when it was determined that there was a possibility of fraudulent use of the card, the action was left to the financial institution used, and the intention of the true cardholder was not reflected.

In order to solve the above-mentioned problems, the present invention registers a number that is easy to guess as a personal identification number as an illegal use prevention number, and the personal identification number entered by the user coincides with the unauthorized use prevention number. an automatic transaction apparatus for carrying out the measures Jo Tokoro when the unauthorized use preventing numbers, to allow changes a Subscriber, the predetermined measures, so the user can select from a plurality of measures, said plurality of One of the measures is that the balance is reduced and displayed .

According to the present invention having the above structure, since it is configured as described above, the user is Ri Do and can be changed at any time when you want to change the unauthorized use prevention number, measures the time of unauthorized use detection of the card's customers It reflects the intention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Elements common to the drawings are denoted by the same reference numerals. FIG. 1 is a perspective view showing an automatic transaction apparatus according to an embodiment of the present invention.

  In FIG. 1, the automatic transaction apparatus 1 is provided with a customer operation unit 2, a banknote deposit / withdrawal port 3, a coin deposit / withdrawal port 4, a card insertion / ejection port 5, and a passbook insertion / ejection port 6. Also, a bill deposit / withdrawal device and a coin deposit / withdrawal device (not shown) are mounted inside the automatic transaction apparatus 1, the bill deposit / withdrawal port 3 is connected to the bill deposit / withdrawal device, and the coin deposit / withdrawal port 4 is a coin deposit / withdrawal device. It is connected to the.

  The customer operation unit 2 displays operation guidance and a selection screen when the user performs a transaction operation. FIG. 2 shows a selection screen at the start of the transaction operation. In FIG. 2, a transaction selection screen 10 includes a deposit button 11a that is pressed when depositing, a passbook entry button 11b that is pressed when performing passbook entry, a transfer button 11c that is pressed when performing transfer transaction, and a withdrawal A withdrawal button 11d that is pressed when making a transaction, a balance inquiry button 11e that is pressed when making a balance inquiry, and detecting whether an unauthorized user of the card enters a personal identification number by guessing to conduct an illegal transaction. An unauthorized use detection setting change button 11f for changing the setting is provided.

  Next, the operation when the unauthorized use detection setting change button 11f is pressed will be described with reference to the flowchart shown in FIG. FIG. 3 is a flowchart showing an unauthorized use detection setting changing operation. First, when the user approaches the automatic transaction apparatus 1, the proximity is detected by a proximity sensor (not shown), and the transaction selection screen 10 shown in FIG. 2 is displayed on the customer operation unit 2 (step 1).

  When the user depresses the unauthorized use detection setting change button 11f (step 2), a screen for requesting the user to insert a card is displayed on the customer operation unit 2 (step 3), and the user can change his / her own card. When the card is inserted into the card insertion / ejection slot 5, a screen for requesting the user to input a personal identification number is displayed on the customer operation unit 2 (step 4). When the user inputs the password, the automatic transaction apparatus 1 transmits the input password to the host computer by host communication (step 5).

  When the password is confirmed by the host computer and the confirmation that it is valid is obtained, the fact is transmitted to the automatic transaction apparatus 1. When the automatic transaction apparatus 1 receives information that the confirmation of the validity of the password has been received (step 6), an unauthorized use detection valid / invalid selection screen is displayed on the customer operation unit 2 (step 7). An unauthorized use detection valid / invalid selection screen is shown in FIG. If no response is obtained in step 6 that the password is valid, the user is prompted to input the password again. However, if the password is not confirmed even if it is entered a predetermined number of times (step 8) The process is terminated.

  In FIG. 4, the unauthorized use detection valid / invalid selection screen 12 displays a message that prompts the user to select whether to continue or cancel the unauthorized use detection by the currently registered unauthorized use prevention number, and cancels it. A button 13a and a continuation button 13b are displayed. That is, if the currently registered unauthorized use prevention number is to be changed, the cancel button 13a is pressed, and if it is to be used as it is, the continue button 13b is pressed. When the user presses the continuation button 13b (step 9), the unauthorized use detection setting based on the currently registered unauthorized use prevention number is maintained, and the process ends.

  When the user presses the cancel button 13a (step 9), the automatic transaction apparatus 1 uses the magnetic head of the card processing unit (not shown) at the back of the card insertion / ejection slot 5 for information on the magnetic stripe (MS) of the card. Is read (step 10). For magnetic information, to prevent unauthorized use of the card, a number that is likely to be used to guess the PIN (unauthorized use prevention number) and measures to be taken when unauthorized use is detected (measures for detecting unauthorized use) Are recorded, and the information is read by the magnetic head.

  Next, the automatic transaction apparatus 1 displays an unauthorized use prevention number input screen on the customer operation unit 2 (step 11). FIG. 5 shows an unauthorized use prevention number input screen. In FIG. 5, the unauthorized use prevention number input screen 14 displays a numeric keypad 15a for input, an inputted 4-digit unauthorized use prevention number 15b, and an explanation 15c of the unauthorized use prevention number. Here, the user can input a plurality of unauthorized use prevention numbers. Although two numbers are displayed in FIG. 5, it is also possible to input three or more numbers. Here, the unauthorized use prevention number read from the user's card in step 10 may be displayed and a different number may be input. The user may have forgotten the currently registered unauthorized use prevention number, and by displaying the current unauthorized use prevention number, a different number can be reliably input.

  Next, the automatic transaction apparatus 1 causes the customer operation unit 2 to display an unauthorized use detection measure selection screen (step 12). FIG. 6 shows an unauthorized use detection measure selection screen. In FIG. 6, an unauthorized use detection measure selection screen 16 displays an unauthorized use detection measure description 17 a and unauthorized use detection measures selection items 17 b and 17 c. The card collection selection item 17b is a measure for taking the card into the automatic transaction apparatus when unauthorized use of the card is detected and not returning it to the user. The selection item 17c with no balance is a withdrawal by the user when the unauthorized use is detected. When trying to do so, it is a measure to prevent the withdrawal by displaying that there is no balance in the account. The number of selection items is not limited to two, and more items may be selected. In this case as well, the current measure for detecting unauthorized use read from the user's card in step 10 may be displayed as a reference for selection to the user.

  When the user selects one of the selection items, the automatic transaction apparatus 1 writes the unauthorized use prevention number input by the user and the unauthorized use detection measure selected by the user in the magnetic stripe of the card (step 13). Thereafter, the card is discharged out of the apparatus and returned to the user (step 14), and the process is terminated.

  FIG. 7 shows an illegal use prevention number storage area of the magnetic stripe of the card. FIG. 7 also shows a conventional unauthorized use prevention number storage area. In other words, the present embodiment has storage areas 22 and 23 for storing unauthorized use prevention numbers calculated in advance based on the user's personal information, which have been used in the past, and a new input by the user. An area 24 for storing an unauthorized use prevention number is provided.

  7, in the present embodiment, in order to maintain compatibility with the format of the storage areas 22 and 23 for storing the conventional unauthorized use prevention numbers, the unauthorized use prevention number storage for storing new unauthorized use prevention numbers is provided. Of the 32 bits in the area 24, 2 bits are used as an identification symbol ("11") 18 and the following 2 bits are used as measure content 19 when unauthorized use is detected. The remaining 28 bits are divided into two blocks 20 and 21, each of which represents an unauthorized use prevention number with 14 bits. Since 14-bit information can represent an integer from 0 to 16383, the current unauthorized use prevention number range 0 to 9999 can be guaranteed.

  Next, an operation when a user who has illegally acquired another person's card illegally uses the card will be described with reference to the flowchart shown in FIG. FIG. 8 is a flowchart showing the operation when detecting unauthorized use of a card. First, when the user approaches the automatic transaction apparatus 1, the proximity is detected by a proximity sensor (not shown), and the transaction selection screen 10 shown in FIG. 2 is displayed on the customer operation unit 2 (step 21).

  When the user presses the withdrawal button 11d (step 22), a screen requesting the user to insert a card is displayed on the customer operation unit 2 (step 23), and the user inserts his / her card into the card. When inserted into the insertion / ejection slot 5, the automatic transaction apparatus 1 reads the unauthorized use prevention number storage area of the magnetic stripe of the card (step 24). Next, a screen for requesting the user to enter a password is displayed on the customer operation unit 2 (step 25). When the user inputs the personal identification number (step 26), the automatic transaction apparatus 1 checks whether or not the identification symbol 18 of the unauthorized use prevention number storage area read in step 24 is "11" (step 27).

  If the identification symbol is not “11”, the illegal use prevention number stored in the storage areas 22 and 23 for storing the conventional illegal use prevention numbers shown in FIG. 7 is collated with the inputted personal identification number ( Step 33). As a result of verification, if the unauthorized use prevention number and the personal identification number match, it is assumed that unauthorized use has been detected, and the continuation of the transaction is stopped. In this case, predetermined measures are executed.

  If the identification symbol 18 is “11”, the unauthorized use prevention number stored in the new unauthorized use prevention number storage area 24 shown in FIG. 7 is collated with the entered password. That is, first, it is checked whether or not the unauthorized use prevention number stored in the block 20 shown in FIG. 7 matches the input password (step 28). Here, if the unauthorized use prevention number and the password do not match, another unauthorized use prevention number stored in the block 21 is compared with the entered password (step 29).

  When the unauthorized use prevention number and the personal identification number coincide with each other in step 28 or step 29, the automatic transaction apparatus 1 checks what measure is taken when the unauthorized use is detected based on the measure content 20 shown in FIG. 7 (step 30). ). That is, if the measure content 19 is card collection, the card is collected (step 31), and if the measure content 19 is a balance of 0 yen, a balance of 0 yen is displayed (step 32).

  If the unauthorized use prevention number does not match the personal identification number in step 28 and step 29, the automatic transaction apparatus 1 uses the unauthorized use prevention numbers stored in the storage areas 22 and 23 for storing the unauthorized use prevention numbers shown in FIG. Is collated with the entered password (step 33).

  As described above, according to the present embodiment, when the unauthorized use prevention number set in advance by the user matches the entered password, the measures set by the user in advance can be performed. In addition, when a card is collected as a measure for detecting unauthorized use, and an unauthorized use is detected due to an incorrect input of a PIN, the clerk removes the card from the automatic transaction apparatus 1 and returns it to the user. It is possible to resume trading.

It is a perspective view which shows the automatic transaction apparatus which concerns on embodiment. It is explanatory drawing which shows the selection screen at the time of transaction operation start. It is a flowchart which shows an unauthorized use detection setting change operation | movement. It is explanatory drawing which shows an unauthorized use detection effective / ineffective selection screen. It is explanatory drawing which shows an unauthorized use prevention number input screen. It is explanatory drawing which shows the measure selection screen at the time of an unauthorized use detection. It is explanatory drawing which shows the PIN code storage area of the magnetic stripe of a card | curd. It is a flowchart which shows the operation | movement at the time of the unauthorized use detection of a card | curd.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Automatic transaction apparatus 2 Customer operation part 12 Unauthorized use detection valid / invalid selection screen 14 Unauthorized use prevention number input screen 16 Unauthorized use detection measure selection screen

Claims (2)

The guess is easy to number as a personal identification number for identity verification may be registered as a fraud prevention number, automatic transaction to implement the measures of Jo Tokoro is when the personal identification number input by the user coincides with the unauthorized use prevention number In the device
The unauthorized use preventing numbers, to allow changes a Subscriber, the predetermined action, the user will be able to choose from a plurality of measures, one measures the plurality of displays and reduced the balance automated teller machine, characterized in that the the fact. Wherein the plurality of one of the measures, an automatic transaction apparatus according to claim 1, characterized in that a displaying balance as $ 0.00.

Images