JP5688127B2 - Transfer processing system and method by action pattern authentication - Google Patents

Description

  The present invention relates to a transfer processing system and method based on behavior pattern authentication. Specifically, a system and method for registering an action pattern when a customer using Internet banking performs a transfer process by himself / herself and authenticating that the user is the user using the action pattern during the transfer process About.

  In today's Internet banking environment, there is an ever-increasing number of online crimes in which customers' information is illegally obtained through keyloggers, spyware, phishing, etc. At present, various security measures are taken against such online crimes, but a new attack method will appear soon, which is a so-called weasel play. In particular, even two-factor authentication that has been considered safe and authentication that uses a public key are likely to make it difficult to defend against new attack methods.

  In recent years, as a new security measure, the behavior pattern of the customer is accumulated as data, and when performing a certain behavior, the behavior is compared with the accumulated behavior pattern data to authenticate the identity of the customer. There is an authentication method called behavior pattern authentication.

  However, the authentication accuracy of the conventional behavior pattern authentication largely depends on the amount of data stored. For this reason, the authentication system uses big data and the scale thereof becomes large. In addition, since at least a certain amount of action pattern data needs to be accumulated, the action pattern data cannot be used immediately, and if the action patterns vary, there may be cases where sufficient accuracy cannot be obtained. Furthermore, as the behavior pattern, the accumulated data and the data used for authentication cannot be determined by the customer itself, so the robust security may deprive the user of freedom. In other words, the customer should be able to freely adjust the security level according to the terminal using net banking, the network to be connected, or the contents of the transaction to be used. Therefore, a system and method is desired that can register the behavior pattern when the Internet banking customer performs the transfer process in advance and can authenticate the identity of the customer using the behavior pattern during the transfer process. Yes.

In order to achieve such an object, the present invention
A computer that executes a transfer process by action pattern authentication, wherein the computer
A means for receiving transfer data and execution movement data from a customer terminal used by a customer, wherein the execution movement data is action pattern data relating to an operation of a transfer process performed at the customer terminal. Means,
The transfer data and / or the execution behavior data is collated with action condition data and action pattern authentication is performed, wherein the action condition data is registered in advance by the use customer and the use customer performs a transfer process. A means for performing behavior pattern authentication, which is pattern data relating to correct behavior to be performed when operating
In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that matches the behavior pattern, a means for executing the transfer process based on the transfer data is provided. And

The invention described in the preceding paragraph is
In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that does not match the behavior pattern, the customer terminal or an abnormal-time administrator terminal different from the customer terminal A means of requesting a password;
Means for receiving the password from the customer terminal or the manager terminal at the time of abnormality, and performing password authentication;
The password authentication further includes means for executing a transfer process based on the transfer data when it is determined that the received password is correct.

Furthermore, in any one of the inventions described in the preceding two paragraphs, the action condition data is:
A user ID for uniquely identifying the customer,
A handling upper limit for indicating the upper limit of the amount that the customer can handle during the transfer process;
An operation date to indicate the date operated by a legitimate customer,
A time zone to indicate when the legitimate customer operates,
It includes at least one of a usage terminal ID for uniquely identifying the customer terminal.

  Furthermore, in any one of the inventions described in the preceding three paragraphs, there are a plurality of use customers, the behavior pattern authentication is performed for a plurality of use customers, and the relationship between the plurality of use customers. Is further authenticated as one action pattern.

  As described above, according to the present invention, it is possible to pre-register the behavior pattern when the Internet banking user performs the transfer process by himself / herself and authenticate that the customer is the customer by the behavior pattern during the transfer process. it can.

It is a figure which shows the system configuration | structure which concerns on one Embodiment of this invention. It is a flowchart which shows the action pattern authentication process which concerns on one Embodiment of this invention. It is a flowchart which shows the process at the time of abnormality which concerns on one Embodiment of this invention. It is a flowchart which shows the multiple person's action pattern authentication process which concerns on one Embodiment of this invention. It is a figure which shows the data stored in the action condition data storage part which concerns on one Embodiment of this invention. It is a figure which shows the data stored in the transfer data storage part which concerns on one Embodiment of this invention.

  Hereinafter, a transfer processing system and method based on behavior pattern authentication according to an embodiment of the present invention will be described with reference to the accompanying drawings.

  First, an outline of a transfer processing system based on behavior pattern authentication will be described. FIG. 1 is a diagram showing a system configuration according to an embodiment of the present invention. The Zengin System Server 100 is an external server installed by the National Bank Association. A bank server 101 installed in a data center or the like is connected to a Zengin system server 100 and customer terminals 103a,..., 103n (hereinafter collectively referred to as “customer terminals 103”) via a network 102 (for example, the Internet). ). In FIG. 1, the bank server 101 is shown as a single server, but it can also be configured as a distributed system with a plurality of servers.

  The customer terminal 103 is a terminal used by a customer. The customer can use the customer terminal 103 to access the bank server 101 and register or customize an action pattern used for action pattern authentication. The customer can also perform a transfer process using the customer terminal 103.

  When the bank server 101 receives the transfer data for performing the transfer process from the customer terminal 103, the bank server 101 performs behavior pattern authentication. When the result of the action pattern authentication is OK, the bank server 101 executes the transfer process by transmitting the transfer data to the Zengin System Server 100. On the other hand, when the result of the behavior pattern authentication is NG, the bank server 101 executes an abnormality process.

  Next, the configuration of the bank server 101 will be described. In FIG. 1, only a necessary functional configuration is shown assuming a single computer system.

  In the bank server 101, a RAM 111, an input device 112, an output device 113, a communication control device 114, and a storage device 116 including a nonvolatile storage medium (ROM, HDD, etc.) are connected to the CPU 110 via a system bus 115. It has the structure made. The storage device 116 includes a program storage area for storing a software program for performing each function of the transfer processing system based on behavior pattern authentication, and a data storage area for storing data handled by the software program. Each means in the program storage area described below is actually an independent software program, a routine or component related to the software program, and the like. Each means is called from the storage device 116 by the CPU 110 and expanded in the work area of the RAM 111, and then sequentially executed while referring to a database or the like as appropriate.

  The data storage area in the storage device 116 includes an action condition data storage unit 131 and a transfer data storage unit 132 if only those related to the present invention are listed. Both are fixed storage areas secured in the storage device 116.

  The behavior condition data storage unit 131 stores behavior condition data for each customer to be used for behavior pattern authentication. The behavioral condition data can be registered and customized by the customer itself. In addition, the behavior condition data is registered as pattern data for correct behavior to be performed when the user operates the transfer process. Thereby, at the time of an actual transfer processing operation, the actual operation (behavior) can be checked against the registered action condition data to confirm the identity of the customer. For example, when a person who is going to perform a transfer process via the customer terminal 103 shows an action pattern that does not match the action condition data, the person can be determined not to be the customer himself / herself. FIG. 5 is a diagram showing data stored in the action condition data storage unit 131 according to an embodiment of the present invention. The action condition data in FIG. 5 includes a “company code” that uniquely identifies the company to which the customer belongs, a “user ID” that uniquely identifies the customer, “user type” that indicates the type of customer, Includes pattern data and a password used in the event of an abnormality. In the “user type”, a numerical value (for example, 0: administrator at abnormality, 1: transfer manager, 2: transfer approver) for uniquely identifying the type of customer can be set.

  Next, the behavior pattern data will be described in detail. The action pattern data (for example, data from “upper limit amount of money” to “approver ID” in FIG. 5) is compared with the actual action (operation) of the customer to be used indicated by the user ID, and the legitimate customer (usage) It can be determined whether or not the action is by the customer. If even one piece of data of the action pattern data does not match the actual action, it can be determined that the action is by an unauthorized user. However, since the behavior pattern data (behavior condition data) is based on the premise that the customer can customize it freely, for example, empty data is set for some data and is not used for behavior pattern authentication. You can also. Furthermore, a flag, ID, or the like can be provided separately, and data used for action pattern authentication can be determined according to the type of operation.

  The “handling upper limit amount” of the behavior pattern data indicates the upper limit of the amount that can be handled by the customer during the transfer process. When the transfer process for the amount within the “handling upper limit amount” is operated via the customer terminal 103, it can be determined that the operation is performed by a legitimate customer.

  Next, “operation date” in the behavior pattern data indicates a date operated by a legitimate user. If the 2nd record of FIG. 5 is demonstrated as an example, when it operates 3 business days before a transfer designated date, it can determine with having been operated by the authorized user. Note that the “operation date” in FIG. 5 is shown as character string data for convenience, but can also be set by ID (numerical data) or the like. In addition, the operation date can be set as period data for a certain period as an operation period. In this case, set the start date and end date of the operation period as the “operation start date” and “operation end date”, such as “operation start time” and “operation end time” described in detail in the next paragraph. .

  Next, “operation start time” and “operation end time” of the behavior pattern data indicate a time zone in which a legitimate user is operating, and for example, a time in units of 24 hours can be set. To explain the second record in FIG. 5 as an example, the “operation start time” and “operation end time” are “13” and “16”, respectively. In this case, when the transfer process is operated between 13:00 and 16:00 via the customer terminal 103, it can be determined that the operation is performed by a legitimate customer. It should be noted that the “operation start time” and “operation end time” can of course be set to minutes or seconds. Further, when an operation is possible for 24 hours, such as an administrator at the time of abnormality, “0” and “24” can be set to “operation start time” and “operation end time” (for example, “operation start time”). By setting 0 to 0 and “operation end time” to 24, operation can be performed from 0:00 to 24:00, that is, 24 hours).

  Next, the “use terminal ID” of the behavior pattern data is data for uniquely identifying the customer terminal 103. For example, when the global IP address of the customer terminal 103 for which the transfer process has been operated matches the IP address indicated by the “use terminal ID”, it can be determined that the customer terminal 103 has been operated by a legitimate user.

  Next, “approver ID” of the behavior pattern data is data that uniquely identifies an approver who approves the transfer process operated by an arbitrary user. Referring to the second record in FIG. 5 as an example, the user with the user ID “2222222222” has the user type “1” and is the person in charge of transfer. The person in charge of transfer considers that one correct behavior pattern is to receive the approval of the approver indicated by the “approver ID” when operating the transfer process. That is, when the user with the user ID “2222222222” does not make an approval request to the user with the approver ID “3333333333” at the time of the transfer processing operation (for example, when the approval request itself is not made, It is assumed that an approval request is made to the approver), and it can be determined that the operation is performed by an unauthorized user. Note that “user ID” data can be used as the “authorizer ID”.

  The transfer data storage unit 132 stores data indicating transfer contents such as a transfer person, a transfer amount, and a transfer destination for performing the transfer process. FIG. 6 is a diagram showing data stored in the transfer data storage unit 132 according to an embodiment of the present invention. The transfer data in FIG. 6 includes a “transfer management number” that uniquely identifies the transfer data, a “transfer specified date” that indicates the specified transfer date, a “transfer amount” that indicates the amount to be transferred, and the financial institution data of the transfer person And bank account data, as well as financial institution data and bank account data.

  Next, the software programs stored in the program storage area in the storage device 116 enumerate only those relevant to the present invention. The behavior condition registration means 120, the transfer data reception means 121, the behavior pattern authentication means 122, the transfer execution Means 123 and abnormality processing means 124 are provided. These means 120 to 124 are executed by the CPU 110.

  The behavior condition registration unit 120 causes the customer terminal 103 to register and customize behavior condition data used for behavior pattern authentication. More specifically, the behavior condition registration unit 120 receives behavior condition data registration (or customization) data from the customer terminal 103. The registration (or customization) data is transmitted from the customer terminal 103 via an application or user interface provided in advance to the customer terminal 103. Next, the behavior condition registration unit 120 creates (or updates) behavior condition data based on the received registration (or customization) data, and stores the behavior condition data in the behavior condition data storage unit 131.

  The transfer data receiving means 121 receives the transfer data from the customer terminal 103 and stores it in the transfer data storage unit 132. The transfer data is also transmitted from the customer terminal 103 via an application or user interface provided in advance to the customer terminal 103. Further, the transfer data receiving means 121 also receives execution motion data (not shown) from the customer terminal 103. The execution motion data is action pattern data related to the operation of the transfer process actually performed at the customer terminal 103, corresponding to the action condition data shown in FIG.

  The behavior pattern authentication unit 122 compares the execution motion data received from the customer terminal 103 with the behavior condition data (FIG. 5), and determines whether or not the operation is performed by a legitimate customer (behavior pattern authentication).

  The transfer execution means 123 executes the transfer process when the result of the behavior pattern authentication is OK. More specifically, the transfer execution means 123 transmits the transfer data received from the customer terminal 103 to the Zengin System Server 100 when the result of the action pattern authentication is OK. Even if the action pattern authentication result is NG, the transfer execution means 123 can execute the transfer process if the authentication result is OK due to password authentication in the abnormal process. It should be noted that it is possible to determine whether or not to perform authentication at the time of abnormality processing based on the data that has become NG as a result of the behavior pattern authentication (for example, authentication at the time of abnormality processing is performed when the operation date indicates authentication NG). Yes, but if the handling upper limit is NG, the authentication in the abnormal process is not performed).

  The abnormal time processing means 124 executes the abnormal time processing when the result of the behavior pattern authentication is NG. More specifically, the abnormality time processing means 124 notifies the customer terminal 103 that there is an abnormality. Further, the abnormal time processing means 124 requests the customer terminal 103 for a password, and determines whether or not the password received from the customer terminal 103 is correct (password authentication). The notification of the abnormality and the request for the password can be made to the customer terminal 103 (actual transfer processing operator terminal such as a transfer officer terminal or a transfer approver terminal) that operated the transfer processing. It can also be performed on the customer terminal 103 used by the administrator at the time of abnormality that handles the abnormality.

  Next, with reference to the flowcharts of FIGS. 2 and 3 and the tables of FIGS. 5 and 6, the transfer process by the action pattern authentication according to the embodiment of the present invention will be described along the flow. FIG. 2 is a flowchart showing a behavior pattern authentication process according to an embodiment of the present invention. In step 201, the transfer data receiving means 121 receives the transfer data from the customer terminal 103 used by the customer (for example, the person in charge of transfer). The transfer data is, for example, data including a transfer amount, a transfer person, and a transfer destination as shown in FIG. At this time, the transfer data receiving means 121 also receives the execution motion data as the behavior pattern data of the customer. The execution motion data is behavior pattern data related to the operation of the transfer process performed at the customer terminal 103 used by the customer, and corresponds to the behavior condition data shown in FIG. Specifically, it includes the company code and user ID of the person in charge of the transfer who performed the operation of the transfer process, the date and time of the operation, and the global IP address of the customer terminal 103 used by the person in charge of the transfer.

  Upon receipt of the transfer data and the execution motion data, the behavior pattern authenticating unit 122 compares the received execution motion data (behavior pattern) with the behavior condition data (FIG. 5), and the operation by the use customer whose transfer processing operation is valid. Is determined (action pattern authentication) (step 202).

  Here, a specific example is given and demonstrated about action pattern authentication. For example, it is assumed that the company code of the person in charge of the transfer who performed the transfer process is “1234567890” and the user ID is “2222222222”. The behavior pattern authentication unit 122 acquires a record of the behavior condition data (FIG. 5) using the company code and the user ID as search keys (in this case, the second record in FIG. 5 is hit). Next, the behavior pattern authentication unit 122 sets the corresponding data of the received execution motion data and the transfer data to the data (behavior pattern data) of the “use terminal ID” from the “maximum handling amount” of the second record. Match one by one. For example, since the “maximum handling amount” in the second record indicates 100,000 yen, the behavior pattern authentication unit 122 determines whether the “transfer amount” in the received transfer data (FIG. 6) is 100,000 yen or less. Determine. If the “transfer amount” exceeds 100,000 yen, the behavior pattern authentication unit 122 determines that the behavior pattern authentication is NG (the transfer process performed is not an operation by a legitimate bank transfer person).

  Similarly, since the “operation date” of the second record indicates three business days before the specified date, the behavior pattern authentication unit 122 performs the operation (for example, the system date of the bank server 101 assuming real-time processing). ) Is three business days before the “transfer designated date” of the received transfer data (FIG. 6). Here, it is assumed that the transfer process is executed later by night batch processing or the like instead of real-time processing. In this case, the transfer data receiving means 121 further receives the date when the transfer processing operation was performed as execution motion data from the customer terminal 103, and can use this as the “date of operation” at the time of action pattern authentication. . Similarly, since the “operation start time” and “operation end time” of the second record indicate the operation time from 13:00 to 16:00, the behavior pattern authentication unit 122 performs the operation between 13:00 and 16:00. It is determined whether or not. The “time when the operation is performed” can be acquired from the customer terminal 103 as the system time of the bank server 101 and the execution motion data, similarly to “the date when the operation is performed”.

  Similarly, the behavior pattern authentication unit 122 collates the “use terminal ID” of the second record with the IP address of the customer terminal 103 that operated the transfer process, and whether the transfer process was operated by a legitimate transfer person in charge. Determine whether or not.

  Even one piece of action pattern data (for example, data from “upper limit amount of money” to “use terminal ID” in the action condition data (FIG. 5)) does not match the corresponding data of the received execution action data or transfer data. In this case, the behavior pattern authentication unit 122 can determine that the behavior pattern authentication is NG (the transfer process performed is not an operation by a legitimate transfer person). In addition, the authentication order of each data of action pattern data can be defined arbitrarily.

  Returning to the flowchart of FIG. 2, when it is determined that the action pattern authentication in step 202 is OK, the process proceeds to a Yes route in step 203, and the transfer execution unit 123 executes the transfer process (step 204). Specifically, the transfer execution means 123 transmits the transfer data received in step 201 to the Zengin System Server 100. After step 204, the process ends.

  On the other hand, when it is determined that the behavior pattern authentication in step 202 is NG, the process proceeds to the No route in step 203, and the abnormality processing unit 124 executes the abnormality processing (step 205). Details of the abnormal process will be described later with reference to FIG. After step 205, the process ends.

  Next, the abnormality process in step 205 of FIG. 2 will be described. FIG. 3 is a flowchart showing the abnormality process according to the embodiment of the present invention. In step 301, the abnormality time processing means 124 notifies the customer terminal 103 of the abnormality, and further requests a password for password authentication. The notification of the abnormality or the request for the password can be made to the customer terminal 103 (transfer person terminal or transfer approver terminal, etc.) that has operated the transfer process, or when an abnormality occurs to deal with an abnormality. It can also be performed on the customer terminal 103 used by the administrator. In addition, when the transfer process is executed later by a night batch process or the like instead of the real-time process, a password request is not made, and only a notification of an abnormality can be made. In this case, after step 301, the process ends. Further, whether or not to request a password can be determined according to the content determined to be NG for the action pattern authentication. For example, when it is determined that the behavior pattern authentication is NG based on the operation date or operation time, a password is requested, and when it is determined NG based on the handling upper limit amount, only a notification that it is abnormal can be performed. This point can also be customized by the customer.

  Next, in step 302, the abnormality time processing means 124 receives the password input at the customer terminal 103 and performs password authentication. Password authentication is performed by collating the received password with the corresponding “abnormal password” in FIG. Note that password authentication is not limited to passwords, and includes authentication using data that only the user can know, such as answering secret questions registered in advance.

  If it is determined that the password authentication in step 302 is OK, the process proceeds to a Yes route in step 303, and the transfer execution unit 123 executes the transfer process (step 304). On the other hand, if it is determined that the password authentication in step 302 is NG, the process proceeds to the No route in step 303 and the process ends. At this time, it is also possible to notify the customer terminal 103 used by the manager at the time of abnormality that the password authentication has failed. In addition, when it determines with NG regarding action pattern authentication or password authentication, abnormal data can be memorize | stored in the bank server 101 as a log. Here, the abnormal data is, for example, the IP address of the customer terminal 103 determined to be abnormal, the date and time of occurrence of the abnormality, and the cause of the abnormality (for example, a transfer processing operation of 500,000 yen is performed for the handling upper limit of 100,000 yen). , Etc.), and bank account data of the bank account.

  Next, with reference to the flowchart of FIG. 4 and the tables of FIGS. 5 and 6, the transfer process based on the behavior pattern authentication of a plurality of persons according to an embodiment of the present invention will be described along the flow. FIG. 4 is a flowchart showing a behavior pattern authentication process for a plurality of persons according to an embodiment of the present invention. The behavior pattern authentication process for a plurality of persons in FIG. 4 is an application of the behavior pattern authentication process in FIG. 2, and it is assumed that an approval request is made from the person in charge of transfer to the transfer approver. That is, the security is improved by performing the action pattern authentication of the person in charge of transfer and the transfer approver. One major feature of this process is that the relationship between multiple people, such as whether or not the person in charge of transfer has made an approval request, to which approver has made an approval request (selected as a transfer approver), is also 1 Authentication is performed as one action pattern. Hereinafter, this process will be described in detail.

  Steps 401 to 403 are almost the same processing as steps 201 to 203. The execution motion data received together with the transfer data in step 401 is different in that an approver ID for identifying an approver of the transfer process content is included. In the action pattern authentication in step 402, the approver ID and the corresponding “approver ID” in the action condition data (FIG. 5) are further verified. When the approver ID between the execution motion data and the behavior condition data does not match, the behavior pattern authentication unit 122 determines that the behavior pattern authentication is NG (the transfer process performed is not an operation by a legitimate transfer officer). . Further, when the approver ID is not included in the execution motion data (for example, in the case of empty data), it can be determined that the approval request has not been made, and in this case as well, it is determined that the behavior pattern authentication is NG. it can.

  When it is determined that the behavior pattern authentication in step 402 is OK, the process proceeds to a Yes route in step 403, and the received transfer data is transmitted to the transfer approver terminal based on the received approver ID (step 404). Thereafter, the transfer approver checks the transmitted transfer data on the customer terminal 103 and determines whether or not to approve.

  On the other hand, when it is determined that the action pattern authentication in step 402 is NG, the process proceeds to the No route in step 403, and the abnormality processing unit 124 executes the abnormality processing (step 405). The abnormal time process is substantially the same as the abnormal time process in the flowchart of FIG. 3, but the execution of the transfer process in Step 304 is replaced with the transmission of the transfer data to the transfer approver terminal in Step 404. If the password authentication at step 302 is NG, this process ends (does not proceed to step 406 and subsequent steps).

  Next, in step 406, the transfer data receiving means 121 receives approval content data (not shown) from the customer terminal 103 used by the transfer approver. The approval content data is, for example, a flag indicating whether approval (OK / NG) is possible for the transfer processing content (transfer data). At this time, the transfer data receiving means 121 also receives the execution motion data as the action pattern data of the transfer approver. The execution motion data is action pattern data related to the operation of the transfer process performed at the customer terminal 103 used by the transfer approver.

  When the approval content data received in step 406 indicates approval NG, the process proceeds to the No route in step 407, and the received transfer data is returned to the customer terminal 103 used by the person in charge of transfer (step 408). Thereafter, the person in charge of transfer confirms the returned transfer data on the customer terminal 103 and corrects the transfer data. After step 408, the process ends.

  On the other hand, when the approval content data received in step 406 indicates approval OK, the process proceeds to a Yes route in step 407, and the behavior pattern authentication unit 122 converts the received execution motion data (behavior pattern) into behavior condition data ( FIG. 5) is compared, and it is determined whether or not the operation of the transfer process is an operation by a valid transfer approver (action pattern authentication) (step 409).

  If it is determined that the behavior pattern authentication in step 409 is OK, the process proceeds to a Yes route in step 410, and the transfer execution unit 123 executes a transfer process (step 411). The transfer process is the same as that executed in step 204. After step 411, the process ends.

  On the other hand, when it is determined that the behavior pattern authentication in step 409 is NG, the process proceeds to the No route in step 410, and the abnormal time processing unit 124 executes the abnormal time process (step 412). The abnormality process is the same as that executed in step 205. After step 412, the process ends.

  As described above, as an example of the transfer process based on the action pattern authentication of a plurality of persons, the transfer person in charge and the transfer approver have been described using two persons, but the action pattern authentication with three or more persons can be performed with the same idea. .

Claims (6)

A computer that executes a transfer process by action pattern authentication, wherein the computer
A means for receiving transfer data and execution movement data from a customer terminal used by a customer, wherein the execution movement data is action pattern data relating to an operation of a transfer process performed at the customer terminal. Means,
The transfer data and / or the execution behavior data is a means for performing behavior pattern authentication by collating with behavior condition data, and the behavior condition data is data that is registered in advance by the customer and can be customized , and A means for performing behavior pattern authentication, which is pattern data relating to correct behavior to be performed when a user operates a transfer process;
In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that matches the behavior pattern, a means for executing the transfer process based on the transfer data is provided. And computer. In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that does not match the behavior pattern, the customer terminal or an abnormal-time administrator terminal different from the customer terminal A means of requesting a password;
Means for receiving the password from the customer terminal or the manager terminal at the time of abnormality, and performing password authentication;
The computer according to claim 1, further comprising: a unit that executes a transfer process based on the transfer data when it is determined that the received password is correct in the password authentication. The behavior condition data is
A user ID for uniquely identifying the customer,
A handling upper limit for indicating the upper limit of the amount that the customer can handle during the transfer process;
An operation date to indicate the date operated by a legitimate customer,
A time zone to indicate when the legitimate customer operates,
The computer according to claim 1, further comprising at least one of a usage terminal ID for uniquely identifying the customer terminal.   The use customer is a plurality of users, and the behavior pattern authentication is performed for a plurality of the use customers, and the relationship between the plurality of use customers is further authenticated as one action pattern. The computer according to any one of claims 1 to 3. A method for executing a transfer process by action pattern authentication, wherein the method includes:
Receiving transfer data and execution movement data from a customer terminal used by a customer, wherein the execution movement data is action pattern data relating to an operation of a transfer process performed at the customer terminal; Steps,
The step of collating the transfer data and / or the execution behavior data with behavior condition data and performing behavior pattern authentication, wherein the behavior condition data is data that is registered in advance by the customer and can be customized , and A step of performing behavior pattern authentication, which is pattern data relating to correct behavior to be performed when the user operates the transfer process;
In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that matches the behavior pattern, a step of executing the transfer process based on the transfer data is provided. And how to. A computer program having computer-executable instructions for executing a method of executing a transfer process by action pattern authentication, the method comprising:
Receiving transfer data and execution movement data from a customer terminal used by a customer, wherein the execution movement data is action pattern data relating to an operation of a transfer process performed at the customer terminal; Steps,
The step of collating the transfer data and / or the execution behavior data with behavior condition data and performing behavior pattern authentication, wherein the behavior condition data is data that is registered in advance by the customer and can be customized , and A step of performing behavior pattern authentication, which is pattern data relating to correct behavior to be performed when the user operates the transfer process;
In the behavior pattern authentication, when it is determined that the operation of the transfer process performed at the customer terminal is an operation that matches the behavior pattern, a step of executing the transfer process based on the transfer data is provided. A computer program.

Images