JP6570140B2 - Unauthorized card usage prevention system - Google Patents

Description

  The present invention relates to a fraudulent card usage prevention system that automatically detects caching by a fraudulent card and prohibits the use of the card.

  In recent years, there has been a wide-area organized crime in which a large amount of ATM is used in a very short time and a large amount of cash is carried out with a fraudulently created credit card. In this crime, a credit card issued by the same bank was counterfeited, and cashing transactions were made possible using the depositor's identification number or PIN that was illegally obtained from the bank. In order to prevent such crimes, an authentication processing technique using an IC card having higher security has been developed (Patent Document 1) (Patent Document 2).

Japanese Patent Laying-Open No. 2006-67056 JP 2011-81499 A

  The above conventional technique has the following problems to be solved. Not all credit cards and cash cards have been converted into IC cards in Japan or abroad. A card using a magnetic card can be forged relatively easily. In addition, there are cases where an illegal operation is performed even with an IC card. In addition, if the discovery of fraud is delayed, the damage increases. In order to find such an illegal operation, a quick fraud determination and response processing when the card is used in ATM is necessary. Furthermore, real-time monitoring in a wide area is also necessary. In particular, it is important to correctly distinguish between a normal operation and an unauthorized operation correctly, and to report when the operation is determined to be an unauthorized operation and system cooperation processing. The present invention relates to a fraudulent card use prevention system that has been made paying attention to the above points.

  The following configurations are means for solving the above-described problems.

<Configuration 1>
Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The upper SL operator terminal device, the wide area map showing all the location of the automatic cash depositing and dispensing machine to be the supported appears, the state of the automatic cash depositing and dispensing machine, or beyond the limits of normal operation mode A system for preventing unauthorized use of an automatic cash deposit / withdrawal machine, characterized in that a display for distinguishing between different modes is made .

<Configuration 2>
Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The above-mentioned operator terminal device includes an individual shut-off button for individually prohibiting cashing using the corresponding card by the corresponding automatic cash dispenser by remote operation, or the corresponding card by all cash automatic depositing and dispensing machines to be supported. A system for preventing fraudulent card use in an automatic cash deposit / withdrawal machine, which is provided with a simultaneous shut-off button for simultaneously prohibiting cashing using a remote control .

<Configuration 3>
Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The operator terminal device has a warning message transmission button for displaying on the transaction screen of the corresponding automatic teller machine that the cashing using the corresponding card is restricted when the limit value is exceeded. An illegal card use prevention system for an automatic teller machine characterized by being provided .

<Configuration 4>
The determination means has set a warning value and a limit value in advance,
When the above transaction execution time is within a certain monitoring time and the number of occurrences of monitoring data with the same issuer identification data exceeds the warning value, the warning mode is set, and when the limit value is exceeded, the transaction by the automatic cash dispenser It is characterized by comprising a notification means for notifying the registered address of either the normal operation mode, the alert mode or the cutoff mode, in the judgment result notification destination registered in advance, The fraudulent card use prevention system of the automatic teller machine according to any one of the configurations 1 to 3 .

<Configuration 5>
The above judging means is a user change from when a general user finishes the transaction operation and leaves the automatic teller machine until a new user starts standing in front of the automatic teller machine. When the time interval is T, when the cashing transaction is repeated at a sufficiently short time interval t that can be distinguished from this time T, the same user automatically enters and exits the same cash card with the same issuer identification data. 4. The fraudulent card use prevention system for an automatic teller machine according to any one of the first to third aspects, wherein it is determined that cash is repeatedly carried out using a gold machine.

<Configuration 6>
The determination means determines that a part of transactions by the automatic teller machine is performed when the number of occurrences of monitoring data in which the transaction execution time is within a certain monitoring time and the issuer identification data is the same exceeds a limit value. It is illegal to forcibly shut down, stop all transaction functions of the automatic teller machine, refuse to use the card of the relevant issuer identification data, or return the card of the relevant issuer identification data 4. The fraudulent card use prevention system for an automatic teller machine according to any one of the configurations 1 to 3 , wherein the processing for automatically generating the evidence material for the wrong action is executed.

<Configuration 7>
An unauthorized card use prevention program for causing a computer to function as the monitoring data acquisition unit, the determination unit, and the operator terminal device according to any one of the configurations 1 to 3

<Configuration 8>
A computer-readable recording medium on which the unauthorized card use prevention program according to Configuration 7 is recorded.

<Effect of Configuration 1>
Count the number of occurrences of monitoring data where the transaction execution time is within a certain monitoring time and the same issuer identification data, and detect that the use of the card with the same issuer identification data is abnormally repeated , Can prevent unauthorized processing from continuing.
<Effect of Configuration 2>
It is possible to automatically determine whether the operation mode is the normal operation mode, the alert mode, or the cutoff mode, and notify any one of the states to the operator terminal device or the like. If the security company is notified of the determination result, it can be dispatched to the site. Furthermore, wide-area crimes can be prevented at an early stage by notifying relevant financial institutions and other financial institutions.
<Effect of Configuration 3>
It is possible to distinguish a usage pattern of a general user from a usage pattern of illegal caching by selecting a monitoring time.
<Effect of Configuration 4>
For crimes by a group in a wide area, wide area monitoring by a monitoring server and processing of an accurate determination means function effectively.
<Effect of Configuration 5>
The determination means can automatically block unauthorized transactions and refuse to use unauthorized cards.
<Effect of Configuration 6>
Since the state of each cash automatic depositing and dispensing machine is displayed on the wide area map by the operator terminal device, it is possible to prevent wide area crimes early. In other words, when transactions of multiple cash dispensers are monitored at the same time, all cash automatic deposit / withdrawal machines under monitoring are prevented so that the same unauthorized operation is not performed by other cash automatic deposit / withdrawal machines. , Use of the card of the corresponding issuer identification data can be refused.
<Effect of Configuration 7>
In the terminal device of the operator that supports the operation of the automatic teller machine, the operator can determine the situation and select and execute a possible process.
<Effect of Configuration 8>
An alert message is displayed on the automatic teller machine to enable interaction between the user and the operator of the automatic teller machine.
<Effect of Configuration 9>
This is particularly effective for crime prevention using cashing when the card is a credit card.

It is a block diagram explaining the system of this invention. It is explanatory drawing of the screen displayed on the operator terminal device 28 of an operator site. It is an example of the screen displayed on the transaction screen 20 of the automatic teller machine 18. It is an example of the screen displayed when the operator 30 operates the monitoring wide area map display button. It is an example of another screen displayed on the operator terminal device. The table shows how illegal transactions are prevented by the system of the present invention. This is an example in which the automatic cash dispenser 18 automatically detects fraudulent transactions independently and stops the transactions. It is an operation | movement flowchart of the monitoring data acquisition means 36 of the monitoring server 26 and the automatic teller machine 18. 4 is a flowchart showing an operation example of a determination unit 38.

  Hereinafter, embodiments of the present invention will be described in detail for each example.

FIG. 1 is a block diagram illustrating an unauthorized card use prevention system of the present invention.
In the system 12 of this embodiment, the monitoring server 26 monitors the processing of the automatic teller machine 18 such as ATM managed by the financial institution through the monitoring network 24. The arithmetic processing unit 32 of the monitoring server 26 is provided with monitoring data acquisition means 36, determination means 38, and notification means 40. These are computer programs that give the computer the following functions. The storage device 34 of the monitoring server 26 stores monitoring data 42, issuer identification data 44 (related information), a determination result notification destination 56, a warning value 58, and a limit value 60.

  Since this system 12 is for monitoring unauthorized card use, it is not necessary to constantly monitor all transaction data of the automatic teller machine 18. In this example, it is only necessary to obtain the issuer identification data 44 of the credit card 16 inserted into the card insertion slot 22 by the user 14 in the automatic cash dispenser 18. A large number of automatic teller machines at various sales offices of financial institutions are connected to the monitoring network 24 to be monitored. The thing of a single financial institution may be sufficient, and the thing of several financial institutions may be mixed. The monitoring effect increases as the wide area is monitored.

  An operator site is provided to support the user 14 when he / she is troubled with a normal transaction operation of deposit / saving of the automatic teller machine 18. The operator site is provided with an operator terminal device 28 so that the operator 30 can check the state of the automatic teller machine, perform remote operation, and interact with the user 14 as necessary. It has become.

  The monitoring server 26 determines that an illegal transaction has occurred when a credit card issued by the same financial institution is repeatedly used unnaturally. For this reason, one piece of monitoring data 42 includes the issued card issuer identification data 44, transaction execution time 46, transaction occurrence location 48, and device identification data 50. The monitoring data acquisition means 36 stores the storage device. 34 is stored.

  Further, when the same credit card is repeatedly used for a predetermined time, the monitoring data 42 with the same issuer identification data 44 is repeatedly acquired. At this time, the number of occurrences 52 of the monitoring data 42 having the same issuer identification data 44 is counted and recorded in the storage device 34.

  A predetermined monitoring time is determined in advance, and the determination unit 38 determines whether or not the number of occurrences 52 has exceeded a warning value 58. Further, the counting means 38 determines whether or not the number of occurrences 52 has exceeded the limit value 60. Fraudulent transactions are most dangerous when done centrally. Enormous damage can occur before it turns out to be fraudulent. Therefore, the fixed monitoring time is set to 1 hour or 2 hours, for example.

  The determination means 38 is set to a warning mode when the number of occurrences 52 exceeds a warning value 58, and is set to a blocking mode for blocking a transaction when the limit value 60 is exceeded. In the figure, the storage area labeled mode 54 stores a flag or the like for distinguishing between the alert mode, the cutoff mode, and the normal operation mode. In the case of the alert mode state, the notification means 40 notifies the determination result notification destination 56 registered in advance of the state. In the determination result notification destination 56, for example, an operator site address, a security company address, an address of a management office of a financial institution that manages an automatic cash dispenser, and the like are registered.

  The storage device 34 stores information such as the name of the financial institution and contact information for the issuer identification data 44. The state in which the notification means 40 notifies the determination result notification destination 56 registered in advance is the content of the monitoring data 42. Also, monitoring data 42 and information such as financial institution name and contact information may be transmitted to the operator site. When necessary information is transmitted to the operator site, the operator 30 can judge the situation in detail and perform appropriate processing.

  Further, when the number of occurrences 52 exceeds the limit value 60, the determination means 38 automatically sends a control signal to the corresponding automatic cash dispenser 18 to forcibly block the transaction. It is good to do. You may stop all the transaction functions of a corresponding automatic teller machine, and you may control so that use of the credit card of the corresponding issuer identification data 44 may be prohibited. In addition, when an applicable credit card is inserted into an automatic cash dispenser, the user 14 is photographed with a surveillance camera without returning the credit card, and evidence of fraudulent behavior is automatically obtained. It can also be controlled to generate.

  FIG. 2 is an explanatory diagram of a screen displayed on the operator terminal device 28 at the operator site. FIG. 3 shows an example of a screen displayed on the transaction screen 20 of the automatic teller machine 18. FIG. 4 shows an example of a screen displayed when the operator 30 operates the monitoring wide area map display button. In FIG. 2, only one operator terminal device 28 operated by the operator is shown, but in addition to this, various terminal devices that can be used by the operator may be provided. The screen described below may be displayed on any of them. An image to be displayed on the automatic teller machine may also be displayed on another display provided near the automatic teller machine for a caution message that is not directly related to transaction data.

In the screen shown in FIG. 2, six buttons are arranged on the right side. When the monitoring image display button 64 is operated, a monitoring camera image 66 obtained by photographing the user 14 and the automatic cash dispenser 18 is displayed on the operator terminal device 28. When the monitoring wide area map display button 68 is operated, as shown in FIG. 4, the wide area map 84 of the installation locations of all the automatic teller machines to be supported is displayed on the operator terminal device 28. On this map, the state of each automatic teller machine is color-coded with symbols 84. For example, a device in the warning mode is displayed in yellow, and a device in the cutoff mode is displayed in red.

  When the alert message transmission button 70 is operated, an alert message 78 is displayed on the transaction screen 20 of the automatic teller machine 18. A message indicating that caching using the corresponding cash card is restricted is displayed there. Thereby, the operator's intention to refuse the use of the credit card 16 to the user 14 is transmitted. If there is any question from the user 14, the operator 30 may be called by operating the operator call button 80 on the transaction screen 20. When a telephone for calling the operator is provided at the device installation location, a display such as “Please call the operator using the telephone” may be displayed.

  When the dialog start button 71 on the operator operation screen 62 is operated, the operator 30 can interact with the user 14 by telephone. When the individual blocking button 72 is operated, caching using the cash card of the corresponding automatic teller machine 18 can be prohibited by remote control. Further, when the simultaneous cut-off button 74 is operated in order to prevent a wide-area crime, it is possible to prohibit the use of the card of the corresponding issuer identification data 44 for all the automatic teller machines that are supported at the operator site. When it is determined that the operation is not an unauthorized operation after the prohibition, the transaction is resumed by operating the individual resume button 73 or the simultaneous resume button 75.

  When the notification transmission button 76 is operated, the monitoring data of the automatic teller machine is transmitted to the determination result notification destination stored in the storage device 34 of the monitoring server 26. You can be notified. The above information is sent to the relevant financial institution or security company, and a response can be requested. Note that the corresponding credit card may not be used as it is without shifting from the warning mode to the blocking mode. In this case, for example, the automatic cash deposit / withdrawal machine may be automatically restored after one day. Also, once the power is turned off and restarted, the warning mode may be canceled. Although the above example is an example of a general ATM, it is effective for management of various automatic depositing and dispensing machines capable of cashing and cash withdrawal.

FIG. 5 is an example of another screen displayed on the operator terminal device 28.
For example, consider a case where the monitoring data 42 is stored in the storage device 34 of the monitoring server 26 shown in FIG. 1, the occurrence count 52 is counted, and the limit value 60 is not reached even if the warning value 58 is exceeded. In this case, if the credit card 16 having the same issuer identification data 44 is not used thereafter, the transaction of the automatic teller machine 18 is resumed.

  However, when a report is made to a related party and it is determined that a warning should be given for a while, it is preferable to lower the warning value 58 or the limit value 60 and monitor this time. Therefore, as shown in FIG. 5, a warning value 58 and a limit value 60 are set individually for each issuer identification data 44. Also, the integrated value of the number of occurrences 52 is recorded. If this is stored in the storage device 34 as attribute data of the issuer identification data 44, stricter management becomes possible.

FIG. 6 shows a list of how fraudulent transactions are prevented by the system of the present invention.
In the embodiment described so far, the monitoring server 26 monitors the transaction of the automatic teller machine 18 and automatically transmits a transaction stop control signal to the automatic teller machine 18 when it is determined to be fraudulent. We explained the case of making a decision and the case of leaving the decision to the operator. When the operator 30 analyzes the contents of the data transmitted from the monitoring server 26 and determines that the transaction is illegal, the operator 30 transmits a control signal for forcibly stopping the transaction to the cash dispenser 18.

  Further, when it is determined that the transaction is not fraudulent and the transaction is automatically stopped, the transaction is resumed. On the other hand, an automated teller machine can also automatically block fraudulent transactions without external control. This embodiment will be described with reference to FIG.

FIG. 7 illustrates an example in which the automatic teller machine 18 automatically detects fraudulent transactions independently and stops the transactions.
In this embodiment, a monitoring data acquisition unit 92, a determination unit 94, and a notification unit 96 are provided in the arithmetic processing unit 88 of the automatic teller machine. These functions are the same as those of the computer program having the same name provided in the monitoring server 26. In the storage device 90, monitoring data 98 and a limit value 60 are stored.

  The monitoring data acquisition means 92 acquires the monitoring data 98 when the user 14 inserts the credit card 16 into the automatic cash dispenser 18. The issuer identification data 44 and the transaction execution time 46 are included in the monitoring data 98 in the same manner as performed by the monitoring server 26. Then, the number of occurrences 52 of transactions using the same issuer identification data 44 is counted and stored. When the number of occurrences 52 exceeds the limit value 60, the automatic teller machine 18 automatically stops the transaction. If such control is performed, unauthorized transactions can be prevented without waiting for the judgment of the monitoring server 26 or the operator 30.

FIG. 8 is an operation flowchart of the monitoring data acquisition means 36 of the monitoring server 26 and the automatic teller machine 18.
First, when the user 14 inserts the credit card 16 into the automatic cash dispenser 18, the card is read in step S11. In step S12, it is determined whether or not caching is performed. This determination is not necessary in the case of a cash card instead of the credit card 16. In the case of a cash card, it may be determined whether the use time is midnight. If the result of this determination is yes, the process proceeds to step S13, and if no, the process ends. In step S13, issuer identification data 44 is acquired. In step S14, it is determined whether or not the use is repeated within the monitoring time. If the result of this determination is yes, the process proceeds to step S15, and if no, the process ends.

  In step S15, the number of occurrences is counted. In step S16, the monitoring data 42 is generated or updated according to the count processing result. In step S <b> 17, the obtained number of occurrences 52 is compared with the warning value 58 and the limit value 60, and the determination unit 38 is requested to perform determination processing. The determination process will be described with reference to FIG.

FIG. 9 is a flowchart illustrating an operation example of the determination unit 38.
When the determination unit 38 receives a determination request from the monitoring data acquisition unit 36, the determination unit 38 reads the number of occurrences in step S21. Next, in step S22, it is determined whether the warning value 58 has been exceeded. If the result of this determination is yes, the process proceeds to step S23, and if no, the process returns to step S21.

  When the warning value 58 is exceeded, the warning mode is set. In step S24, the mode display of the monitoring data 42 is updated. In step S25, it is determined whether the limit value 60 has been exceeded. If the result of this determination is yes, the process proceeds to step S26, and if no, the process returns to step S21.

When the limit value 60 is exceeded, the shut-off mode is set in step S26. In step S27, it is determined whether the process is automatic. If the result of this determination is yes, the process proceeds to step S28, and if no, the process proceeds to step S29. In step S28, automatic transaction stop control is performed, and then the process proceeds to step S29.

  If it is not automatic processing, the processing is left to the operator. Therefore, the process proceeds from step S27 to step S29. In any mode, the mode is notified to the operator terminal in step S29. Thus, the operator can make an appropriate judgment and process.

  As described above, the system of the present invention makes it possible to quickly detect a credit card issued by a financial institution or the like in a wide area when used for illegal caching. And when an operator can respond, an illegal transaction is prohibited immediately by an operator. Further, when a certain condition is satisfied, the automatic cash dispenser itself or the monitoring server can automatically prohibit transactions using the corresponding credit card. Whether it is a magnetic card or an IC card, it is possible to monitor without distinction.

  In addition, cash cards used for deposits and withdrawals are also subject to counterfeiting. In this case, it is not preferable to determine that the operation is illegal until the withdrawal operation from one's account is repeated. Therefore, in the case of cash cards, withdrawal transactions with the same issuer or the same account number were made more than a certain number of times in the short time in the midnight hours when ordinary people do not withdraw deposits much. In this case, the alert mode may be set. The exception process may be the same as for credit cards.

(Transaction stop processing procedure)
As described above, in a financial institution, an automatic cash dispenser 18, a monitoring server 26 that monitors the operation of a group of automatic cash dispensers 18, and an operator terminal device that remotely supports the operation of the automatic cash dispenser 18. 28, and these are connected to each other via a network. The monitoring data acquisition unit 36 and the determination unit 38 described in the above embodiment may be provided anywhere. Moreover, the determination means 38 may be provided in both the automatic teller machine 18 and the monitoring server 26.

  Further, if the determination means 38 automatically determines whether the operation mode is the normal operation mode, the alert mode or the shut-off mode according to the contents of the monitoring data, and the state is notified to the operator terminal device 28, the operator will promptly perform illegal caching. You can discover and respond appropriately. It suffices that the operator terminal device has a display that can determine whether the operation mode is the normal operation mode, the alert mode, or the cutoff mode.

In addition, when the number of occurrences of monitoring data whose transaction execution time is within a certain monitoring time and the same issuer identification data exceeds the limit value, the determination means not only the above determination processing but also any of the following It is good to execute these processes as well.
(1) Some transactions by an automatic teller machine, for example, transactions using a card of the corresponding issuer identification data are forcibly blocked. This applies to all cash machines that can be managed.
(2) Stop all transaction functions of the automatic teller machine. An automatic teller machine that can be determined to have been fraudulent cashing is identified, and only that machine is suspended.
(3) Reject the caching of the corresponding issuer identification data by the card.
(4) Do not return the card of the relevant issuer identification data. At this time, the user is photographed, or the user interacts with the operator to record it, thereby automatically generating the evidence of the illegal act.

  In particular, since the automatic cash dispenser 18 can still be used in the warning mode, a security guard can be dispatched to the site by automatic notification, and the operator can also collect evidence information. In the blocking mode, the corresponding cash automatic depositing / dispensing machine 18 may automatically stop caching, or may be stopped by remote operation of the operator. If the monitoring server 26 has a determination means, the monitoring server 26 automatically monitors a wide area, and when there is illegal cashing by a plurality of cash automatic depositing / withdrawing machines 18, the warning mode can be determined early. Become.

(Judgment of fraudulent transactions)
The determination means 38 determines whether or not it corresponds to fraudulent caching, which is performed based on the characteristics of crimes that occurred in the past. There are cases where cashing is simultaneously performed in a short time using a large number of credit cards 16 in which user codes of different users issued by the same financial institution are recorded, and this is prevented.

  In the “repeated use within the monitoring time” described in FIG. 8, the same user repeatedly cashes the credit card 16 having the same issuer identification data 44 by using the same automatic cash dispenser 18. It is a case. At this time, a general user finishes the transaction operation, leaves the automatic teller machine 18, and the user changes until a new user starts standing in front of the automatic teller machine 18. When the time interval is T, the cashing transaction is repeated at a sufficiently short time interval t that can be distinguished from the time T. This can be determined.

  On the other hand, certain groups may perform illegal caching all at once. That is, in the plurality of automatic teller machines 18, the same person or different users perform caching using the credit card 16 having the same issuer identification data 44. At this time, the monitoring server 26 monitors the plurality of automatic teller machines 18 through the network. Even in this case, caching is performed intensively in a short time for fear of fraud. Therefore, for example, the monitoring time is set to 30 minutes or 1 hour, and the credit card 16 having the same issuer identification data 44 is used in any of a plurality of automatic cash dispensers 18 that can be monitored by the monitoring server 26. If caching is performed, the number of times is counted and compared with a warning value or a cutoff value. In any case, the warning value may be set to 10 times and the cutoff value to 20 times, for example.

  In addition, based on past examples, it is only necessary to detect and prevent the case where cashing using a credit card of a specific foreign bank is repeatedly and intensively performed at an early stage. In all the cash automatic depositing / withdrawing machines 18 of the financial institutions in which fraud has been performed, caching using the cash card of the corresponding issuer identification data 44 is prohibited. It is best if the criminal group is identified during the warning mode and the guard arrives before the criminal leaves the cash dispenser 18 in the blocking mode.

  If the target is restricted to fraudulent caching, it is not necessary to stop the deposit and withdrawal transaction for other deposits and savings. Therefore, even if it is the cash automatic depositing / withdrawing machine 18 that has been fraudulently cached, it is only necessary to stop the cashing function and make other transactions possible. Further, the automatic determination by the determination means is only a result of detection of a suspicious state, and should not interfere with normal transactions of general users. Most preferably, it operates to leave the final decision to the operator who is actually monitoring the automatic teller machine.

12 Unauthorized Caching-Prevention System 14 User 16 Credit Card 18 Automatic Cash Deposit / Withdrawal Machine 20 Transaction Screen 22 Card Insertion Port 24 Monitoring Network 26 Monitoring Server 28 Operator Terminal Device 30 Operator 32 Arithmetic Processing Device 34 Storage Device 36 Monitoring Data Acquisition Unit 38 Determination means 40 Notification means 42 Monitoring data 44 Issuer identification data 46 Transaction execution time 48 Transaction occurrence location 50 Device identification data 52 Number of occurrences 54 Mode 56 Determination result notification destination 58 Warning value 60 Limit value 62 Operator operation screen 64 Monitor image display button 66 Monitoring camera image 68 Monitoring wide area map display button 70 Alert message transmission button 71 Dialogue start button 72 Individual block button 73 Individual restart button 74 Batch block button 75 Batch restart button 76 Report transmission button 78 Alert message 80 Operator call button 84 monitors the wide area map 86 symbols 88 processor 90 memory 92 monitoring data acquisition means 94 judging unit 96 notification unit 98 monitors data

Claims (8)

Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The upper SL operator terminal device, the wide area map showing all the location of the automatic cash depositing and dispensing machine to be the supported appears, the state of the automatic cash depositing and dispensing machine, or beyond the limits of normal operation mode A system for preventing unauthorized use of an automatic cash deposit / withdrawal machine, characterized in that a display for distinguishing between different modes is made . Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The above-mentioned operator terminal device includes an individual shut-off button for individually prohibiting cashing using the corresponding card by the corresponding automatic cash dispenser by remote operation, or the corresponding card by all cash automatic depositing and dispensing machines to be supported. A system for preventing fraudulent card use in an automatic cash deposit / withdrawal machine, which is provided with a simultaneous shut-off button for simultaneously prohibiting cashing using a remote control . Either an automatic cash dispenser connected to each other via a network at a financial institution, a monitoring server that monitors the operation of the automatic cash dispenser, or an operator terminal device that supports the operation of the automatic cash dispenser ,
Monitoring data acquisition means for acquiring issuer identification data of a card inserted in the automatic teller machine, generating monitoring data including at least the issuer identification data and transaction execution time, and storing it in a storage device;
Read the monitoring data, count the number of times that the transaction execution time is within a certain monitoring time and the same issuer identification data is generated, and determine whether the number of occurrences exceeds the limit value Determination means for executing processing is provided,
The operator terminal device has a warning message transmission button for displaying on the transaction screen of the corresponding automatic teller machine that the cashing using the corresponding card is restricted when the limit value is exceeded. An illegal card use prevention system for an automatic teller machine characterized by being provided . The determination means has set a warning value and a limit value in advance,
When the above transaction execution time is within a certain monitoring time and the number of occurrences of monitoring data with the same issuer identification data exceeds the warning value, the warning mode is set, and when the limit value is exceeded, the transaction by the automatic cash dispenser It is characterized by comprising a notification means for notifying the registered address of either the normal operation mode, the alert mode or the cutoff mode, in the judgment result notification destination registered in advance, The fraudulent card use prevention system of the automatic teller machine according to any one of claims 1 to 3 . The above judging means is a user change from when a general user finishes the transaction operation and leaves the automatic teller machine until a new user starts standing in front of the automatic teller machine. When the time interval is T, when the cashing transaction is repeated at a sufficiently short time interval t that can be distinguished from this time T, the same user automatically enters and exits the same cash card with the same issuer identification data. 4. The fraudulent card use prevention system for an automatic teller machine according to any one of claims 1 to 3 , wherein it is determined that cash is repeatedly carried out using a gold machine. The determination means determines that a part of transactions by the automatic teller machine is performed when the number of occurrences of monitoring data in which the transaction execution time is within a certain monitoring time and the issuer identification data is the same exceeds a limit value. It is illegal to forcibly shut down, stop all transaction functions of the automatic teller machine, refuse to use the card of the relevant issuer identification data, or return the card of the relevant issuer identification data 4. The fraudulent card usage prevention system for an automatic teller machine according to any one of claims 1 to 3 , characterized in that any one of processes for automatically generating evidence material of an appropriate act is executed. An unauthorized card use prevention program for causing a computer to function as the monitoring data acquisition means, the determination means, and the operator terminal device according to any one of claims 1 to 3. A computer-readable recording medium on which the unauthorized card use prevention program according to claim 7 is recorded.