JP6572045B2 - PIN code input device - Google Patents

Description

  The present invention relates to an apparatus for controlling a personal identification number input from a touch panel of an automatic transaction apparatus.

  In financial institutions, an automatic transaction apparatus called ATM (Automated Teller Machine) is widely used. In the automatic transaction apparatus, transactions are mainly carried out using a cash card, and the legitimacy of the customer to be used is judged by the code number of the cash card.

  In the automatic transaction apparatus, when a cash card is inserted, an input operation screen requesting input of a personal identification number is displayed on the screen. Normally, the operation keys displayed on the input operation screen are fixedly displayed. Therefore, carefully observe the actions of the operator who is entering the password, especially the movement of the finger that selects and inputs the operation keys. This makes it possible for another person to estimate the password.

  Therefore, a password input method has been proposed in which a password cannot be easily estimated even if a third party observes the password input operation. For example, the finger of the input person only operates one dial and one button, and there is no correlation between the position of the finger and the input number. A password input method in which a number is not inferred has been proposed (for example, Patent Document 1).

Japanese Patent Laid-Open No. 11-86093

  As mentioned above, the ten-key method, which is currently the mainstream input format, is a simple mechanism that is easy for users to accept. Therefore, it is easy for a third party to know the PIN number by collecting fingerprints or shooting operation screens. There is a problem that it ends up. However, since the method of Patent Document 1 requires a rotating member, application to a touch panel is difficult.

  An object of the present invention is to provide a personal identification number input device in which it is difficult to estimate a personal identification number even if a third party observes the personal identification number input operation.

In order to achieve the above object, the personal identification number input device displays a display symbol corresponding to the personal identification number in a circle, and matches the numeric symbol that is rotated in accordance with the rotation operation of the customer and the numeric symbol. And a plurality of marks including a dummy mark in addition to a true mark, which are fixedly arranged around the number board as a mark for displaying a password input screen, and according to a customer's rotation operation When the confirmation button displayed on the password input screen is operated after the rotation operation is finished and the dial button is rotated, the number corresponding to the position of the true mark among the plurality of marks is displayed. The display symbol of the number board is acquired, and the acquired display symbol of the number board is determined as a personal identification number.

  According to the present invention, it is possible to provide a personal identification number input device in which it is difficult to estimate a personal identification number even if a third party observes the personal identification number input operation.

It is an external view of the automatic transaction apparatus which concerns on embodiment of this invention. It is a figure showing the whole automatic transaction system composition. It is the flowchart 1 explaining the example of transaction processing by an automatic transaction apparatus. It is the flowchart 2 explaining the transaction processing example by an automatic transaction apparatus. It is the guidance screen 1 displayed on a display part in the process of transaction processing. It is the guidance screen 2 displayed on a display part in the process of transaction processing. It is a figure which shows the example of a password input screen. It is the figure which expanded the number board and mark of a password input screen. It is a figure which shows that the position of a mark is set at random. It is a figure which shows that the position and order of a mark are set at random. It is a figure explaining the starting angle (alpha). It is a figure which shows that the position of the display symbol of a number board is set at random. It is a subroutine 1 for explaining the processing procedure of the password input. It is a subroutine 2 for explaining the processing procedure of the password input. It is a figure which shows a password screen. It is a figure which shows a password screen. It is a figure which shows a password screen. It is a figure which shows a password screen. It is a figure which shows a password screen. It is a figure which shows a password screen. It is a figure which shows the number board table corresponding to each PIN code input screen. It is a figure which shows the number board table corresponding to each PIN code input screen.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is an external view of an automatic transaction apparatus 10 according to an embodiment of the present invention. The automatic transaction apparatus 10 is provided in a financial institution, a convenience store, or the like, and automatically performs transaction processing such as deposit / withdrawal or transfer by a customer's operation.

  In the automatic transaction apparatus 10, a bankbook entry / exit 12, a card entry / exit 14, a coin entry / exit 16, a bill entry / exit 18, a touch panel 20 and the like are arranged. The bankbook entry / exit 12 is an opening through which a customer enters and exits the transaction bankbook. The card entrance / exit 14 is an opening through which a customer puts in / out a transaction medium such as a card to / from the automatic transaction apparatus 10.

  The coin entrance / exit 16 is a part into which coins that the customer deposits into the automatic transaction apparatus 10 are input and the coins withdrawn from the automatic transaction apparatus 10 are discharged. The banknote inlet / outlet 18 is a part into which a banknote inserted by the customer into the automatic transaction apparatus 10 is inserted and a banknote withdrawn from the automatic transaction apparatus 10 is discharged. The touch panel 20 displays a screen for guiding operation procedures and information input by the customer, and detects the touch input of the customer correspondingly.

  FIG. 2 is a diagram showing the overall configuration of the automatic transaction system 1 including the automatic transaction apparatus 10 and the host computer 200. The plurality of automatic transaction apparatuses 10 and the host computer 200 are connected by a line such as a network 300.

  The automatic transaction apparatus 10 transmits a transaction instruction from the customer to the host computer 200. The host computer 200 determines and processes a request for a transaction or the like transmitted from each automatic transaction apparatus 10 and transmits an instruction to the automatic transaction apparatus 10. The automatic transaction apparatus 10 performs depositing / withdrawing or bookkeeping processing according to an instruction from the host computer 200.

  The automatic transaction apparatus 10 includes a control unit 30, a storage unit 50, a communication unit 52, a passbook processing unit 54, a card processing unit 56, a banknote processing unit 58, a coin processing unit 60, an operation unit 62, a display unit 64, and the like.

  The control unit 30 is a control unit that comprehensively controls the entire automatic transaction apparatus 10. The control unit 30 includes a CPU, and executes each process by software processing performed by the CPU that has read the control program. The storage unit 50 is a non-volatile storage unit that stores data such as control programs and guidance screens, or voice guide data.

  The communication unit 52 processes communication with the host computer 200, and performs transmission / reception processing of messages between the automatic transaction apparatus 10 and the host computer 200. The passbook processing unit 54 carries the passbook entered from the customer to the passbook entrance 12 and reads MS (Magnetic stripe) data of the passbook, and prints out the transaction details.

  The card processing unit 56 conveys the card inserted from the customer into the card entrance 14 and reads and writes the MS data of the card or the IC memory of the card.

  The banknote processing unit 58 transports a banknote inserted into the banknote entrance 18 from a customer, temporarily stores the banknote, determines the authenticity of the banknote, and converts the banknote into a banknote stacker (not shown) by denomination. Store. The coin processing unit 60 transports coins input from the customer to the coin entrance 16 and stores them in an internal coin stacker (not shown) according to denomination. The operation unit 62 and the display unit 64 The operation unit 62 constitutes the touch panel 20.

  The control unit 30 includes a transaction control unit 32, a card control unit 34, a screen control unit 36 and a personal identification number processing unit 38. The transaction control unit 32 executes a transaction process selected by an instruction from the customer. For example, when a withdrawal process is designated as a transaction by the customer, the transaction control unit 32 transmits the input personal identification number to the host computer 200 to confirm the personal identification number, or the card account number or withdrawal. The money amount is transmitted to the host computer 200, and whether or not withdrawal is possible is determined according to the answer from the host computer 200. When the withdrawal is permitted, the transaction control unit 32 controls the banknote processing unit 58 and the coin processing unit 60 to perform a withdrawal process of a predetermined amount of banknotes and coins.

  The card control unit 34 controls the card processing unit 56 to read or write a card inserted from a customer. The screen control unit 36 displays various guidance screens on the display unit 64 according to the progress of the operation, and displays a password input screen on the display unit 64 when a password for the card is input.

  The password processing unit 38 generates a password input screen 100 (also referred to as a password input screen) when inputting the password of the card, and confirms the password according to an operation from the customer on the displayed password input screen. To do. The personal identification number processing unit 38 is also called a personal identification number input device. Details of the password input screen will be described later.

  The host computer 200 includes a communication unit 202, a customer management unit 204, and a customer database 206. The communication unit 52 processes communication between the host computer 200 and the automatic transaction apparatus 10, and performs transmission / reception processing of messages between the automatic transaction apparatus 10 and the host computer 200. In the customer database 206, an account ledger in which information on each account is recorded, a transaction history in which transaction results for each account are described, and the like are recorded. The customer management unit 204 manages customer account information using the customer database 206.

  3 and 4 are a flowchart 1 and a flowchart 2 for explaining an example of transaction processing by the automatic transaction apparatus 10. 5 and 6 are a guidance screen 1 and a guidance screen 2 displayed on the display unit 64 in the course of transaction processing. In the following, the case where “Balance inquiry” is selected will be mainly described.

  Initially, the transaction control part 32 makes a customer perform transaction classification selection (step S10). The transaction control unit 32 causes the screen control unit 36 to display the screen 1 (see FIG. 5) on the display unit 64. Transaction control unit 32 determines whether any transaction key is pressed on screen 1 (step S12). Transaction control unit 32 loops step S12 until it is determined that the transaction key has been pressed (NO in step S12).

  When the transaction control unit 32 determines that the transaction key is pressed (YES in step S12), it determines whether “Balance inquiry” is pressed (step S14). If transaction control unit 32 determines that “balance inquiry” has not been pressed (NO in step S14), it executes another pressed transaction process (step S16) and returns to step S10.

  If the transaction control unit 32 determines that the pressed item is “balance inquiry” (YES in step S14), screen 2 (see FIG. 5) is used to prompt the customer to insert a medium (in this example, a card). Is displayed (step S18). Transaction control unit 32 loops step S20 until it is determined that a medium has been inserted (step S20 NO).

  If transaction control part 32 judges that a medium was inserted (Step S20 YES), it will judge whether a medium check is OK (Step S22). The card control unit 34 reads MS data or IC chip data from the inserted medium (card) and determines whether the medium is a predetermined transaction medium.

  When the transaction control unit 32 determines that the medium check is not OK (step S22 NO), the transaction control unit 32 displays the screen 7 for returning the NG medium to the customer (step S24), and performs the medium return process by the card control unit 34 (step S22). S40). The card control unit 34 determines whether the medium has been removed (step S42). The card control unit 34 loops step S42 until it is determined that the medium has been removed. When the card control unit 34 determines that the medium has been removed (step S42 YES), the card control unit 34 returns to step S10.

  Returning to step S22, when the transaction control unit 32 determines that the medium check is OK (step S22 YES), the transaction control unit 32 executes a password input process (step S26). The password input process will be described with reference to FIG.

  The electronic text of the personal identification number subjected to the personal identification input process is transmitted from the automatic transaction apparatus 10 to the host computer 200 and inquired with the registered personal identification number. It is assumed that a message that the correct personal identification number is sent from the host computer 200 to the automatic transaction apparatus 10. On the other hand, when a message indicating that the passwords do not match is received from the host computer 200, the transaction control unit 32 displays a screen for instructing re-input of the password.

  Transaction control unit 32 generates a balance inquiry transaction message (step S28). The transaction control unit 32 displays a waiting screen (screen 3 in FIG. 5) to the customer in order to notify that the balance inquiry processing with the host computer 200 is in progress (step S30). The transaction control unit 32 performs processing for communicating the balance inquiry message to the host computer 200 through the communication unit 52 (step S32).

  Transaction control unit 32 determines whether a response message for the balance inquiry message has been received from host computer 200 (step S34). Transaction control unit 32 loops step S34 until it is determined that a response message has been received (step S34 NO).

  When it is determined that the response message has been received (YES in step S34), the transaction control unit 32 determines whether the response is a response that permits balance inquiry (step S36). If the transaction control unit 32 determines that the response is not a response permitting the balance inquiry (NO in step S36), the card control unit 34 returns a transaction impossible (NG) medium and displays the screen 8 of FIG. 6 (step S38). . And the transaction control part 32 performs the process of step S40 mentioned above and step S42, and returns to step S10.

If transaction control part 32 judges that it is a response which permits balance inquiry (Step S36 YES), it will display a balance as shown in screen 4 of Drawing 5 (Step S50). Transaction control unit 32 determines whether the confirmation key shown in screen 4 has been pressed (step S52). Transaction control unit 32 loops step S52 until it is determined that the confirmation key has been pressed (NO in step S52). When determining that the confirmation key has been pressed (YES in step S52), the transaction control unit 32 displays the screen 5 in FIG. 5 and returns the medium (step S54).

  The transaction control unit 32 performs medium return processing by the card control unit 34 (step S56). The transaction control unit 32 determines whether the medium has been removed by the card control unit 34 (step S58). Transaction control unit 32 loops step S58 until the medium is removed. If the transaction control unit 32 determines that the medium has been extracted (YES in step S58), the transaction control unit 32 displays the screen 6 in FIG. 5 as a screen for thanking the customer (step S60), and returns to step S10.

<PIN input screen>
Next, the password input process in step S26 will be described. First, the configuration of the password input screen 100 will be described. FIG. 7 is a diagram illustrating an example of the password input screen 100 displayed on the display unit 64 (touch panel 20). The password input screen 100 in FIG. 7 is a screen at the start.

  The password input screen 100 is created by the password number processing unit 38. In the upper left part of the password input screen 100, an operation guide 102 (please input the password) is displayed as a guide for the customer. In the upper right part of the password input screen 100, a confirmation field 108 indicating the input status of a 4-digit password is displayed.

  On the lower left portion of the password input screen 100, a number board 120 is displayed. On the number board 120, a total of 12 symbols of numbers 0-9 and * and # are arranged in a circle at equal intervals of 30 °. The numbers “0-9” and the symbols “*, #” are symbols that can be entered as the password. These are collectively referred to as a display symbol 122.

  In addition, around the number board 120, six marks 104 of A, B, C, D, E, and F are arranged at equal intervals of 60 °. The mark 104 is an index indicating the alignment position of the display symbol 122 on the number board 120. Of the six marks 104, only one is a correct mark and the other five are fake marks. The correct mark is called a confirmation mark 104a (also called a true mark), and the apparent mark is called a dummy mark 104b.

  The dummy mark 104b is for preventing the input personal identification number from being specified even if the user is peeping at the screen being operated from the side. The number board 120 is rotated according to the operation of the customer, but the mark 104 is displayed at a fixed position.

  In the lower right part of the password input screen 100, a cancel button 106a and a confirm button 106b are displayed as operation buttons 106. The cancel button 106a is a button for instructing cancellation of the input personal identification number, and the confirmation button 106b is a button for instructing confirmation input using the display symbol 122 combined on the number board 120 as the personal identification number.

  FIG. 8 is an enlarged view of the number board 120 and the mark 104 on the password input screen 100. In the following description, the angle is displayed clockwise from the vertical axis Y with the vertical axis Y as a reference (0 °). First, the order of the display symbols 122 shown on the number board is always constant in the order of 0-9, *, # clockwise as shown in the figure. The number board 120 is rotated by a customer's operation, but the position of the display symbol 122 of the number board 120 displayed at the start is determined by a random number. In FIG. 8, the display symbol “0” starts from 0 ° and becomes “0, 1, 2... *, #” In the clockwise direction. The display symbol “0” may start from 30 ° or 100 °.

  Further, the position of the mark 104 is randomly determined for both the arrangement and the position. In FIG. 8, “A” is displayed at a position of 30 °, “B” is displayed at a position of 90 °, and “C, D, F, F” at intervals of 60 °. There is an example. Specifically, for the position of the mark 104, first, the mark at the 30 ° position is determined by a random number (“A” in FIG. 8), and the next mark at the 60 ° position is determined by a random number (in FIG. 8). “B”), this is repeated to determine all marks.

  9A and 9B show other examples of mark positions. 9A, the order of the marks 104 is the same as that of FIG. 8, but the start position is different. FIG. 9B differs from FIG. 8 in the order and position of the marks 104.

  Thereby, the arrangement order and initial position of the marks are random at the start of the input of the personal identification number (the variation is 6 * 5 * 4 * 3 * 2 * 1 = 720 patterns when there are 6 marks). Also, keep the order of the marks that were displayed last time, and if they match the current order, re-determine the order so that they do not always match the previous order. Then safety is further increased.

  In the following example, it is assumed that “B” is the confirmation mark 104a. It is assumed that the customer indicates in advance at the time of a procedure such as medium issuance whether his / her confirmation mark is “A, B... F”. In addition, the information of the own confirmation mark is also recorded on the medium (card). The confirmation mark 104a differs depending on the customer. The position of the confirmation mark 104a is represented by an angle θ from the Y axis to the confirmation mark 104a. In the example of FIG. 8, since “B” is the confirmation mark 104a, θ = 90 °.

  FIG. 10A is a diagram illustrating the start angle α. The start angle α indicates the position of each display symbol 122. The start angle α is a clockwise angle with respect to the Y axis. As shown in FIG. 10A, the start angle α (0) of the display symbol “0” = 0 °, the start angle α (1) = 30 ° of the display symbol “1”, the start angle α (# of the display symbol “#” ) = 330 °.

  Further, as described above, the order of the display symbols 122 is fixed, but the display start position of the password input screen 100 is random. FIG. 10B is a diagram showing that the position of the display symbol 122 on the number board is set at random. As shown in FIG. 10B, the first display symbol may be “*” in the clockwise direction from the Y axis. .

  11 and 12 are subroutines for explaining the password input processing procedure in step S26. 13 to 18 are diagrams showing the password input screen 100 in the middle of the password input process of FIGS. 11 and 12, and the password screen 1, the password screen 2,... Are displayed in order. FIG. 19 and FIG. 20 are diagrams showing examples of the number table corresponding to each password input screen. The password input process will be described with reference to FIGS. 11 and 12.

  The personal identification number processing unit 38 acquires information on the confirmation mark 104a from the medium (step S100). The information of the confirmation mark 104a is information on the code of the confirmation mark 104a. In the following, it is assumed that the confirmation mark 104a is “B” as in the example of FIG.

  The personal identification number processing unit 38 determines the position of the mark as an initial setting (step S102). As described above, the personal identification number processing unit 38 determines the position of each mark including the confirmed mark 104a and the dummy mark 104b on the number board 120 using a random number.

  Further, the personal identification number processing unit 38 determines the position at the start of the display symbol 122 as an initial setting (step S104). As described above, the personal identification number processing unit 38 determines the starting position of the display symbol 122 using a random number. The personal identification number processing unit 38 generates a personal identification input screen 100 based on the determined position of each mark and the initial position of the display symbol 122.

  The personal identification number processing unit 38 causes the screen control unit 36 to display the personal identification screen 1 that is the personal identification input screen 100 at the start time on the display unit 64 (step S106). FIG. 13 shows the personal identification screen 1. It is assumed that “B” of the confirmation mark 104a is determined at a position of θ = 90 °. “A, C, D, E, F” are dummy marks 104b.

  The personal identification number processing unit 38 determines whether the number board 120 has been operated by the customer (step S108). If the code number processing unit 38 determines that the number board 120 has not been operated or has been operated (NO in step S108), the process proceeds to step S114. When the code number processing unit 38 determines that the number board 120 has been operated (step S108 YES), the code number processing unit 38 rotates the number board 120 in accordance with the operation on the number board 120 (step S110). The personal identification number processing unit 38 generates a personal identification screen in which the number board 120 is rotated in accordance with the operation.

  In the following, an example in which a customer inputs “9”, “6”, “0”, “3” in order as a personal identification number will be described. As described above, the customer remembers that “B” is the confirmation mark 104a.

  First, since the first digit of the password is “9”, the customer rotates “9” on the number board 120 to the position “B”. The customer touches “9” on the number board 120 with the finger r and rotates it in the q direction (password screen 2-1 in FIG. 13). Then, the customer aligns “9” on the number board 120 with the position “B” (password screen 2-2 in FIG. 13).

  The personal identification number processing unit 38 updates the number board table in accordance with the rotation of the number board 120 (step S112).

  19 and 20 are number board tables corresponding to the password screens. The number board table tabulates the display symbols 122 and their start angles on each password screen.

  The line number is a serial number corresponding to each display symbol 122, and the correspondence between the display symbol 122 and the line number is constant regardless of the rotation. That is, line number (1)... Line number (12) always corresponds to display symbols 0, 1,.

  If the direction of the rotation operation by the customer is right rotation (clockwise), a value obtained by adding the rotation angles becomes a new start angle. When the starting angle is 360 ° or more, the value is obtained by subtracting 360 °. If the direction of the rotation operation is counterclockwise (counterclockwise), a value obtained by subtracting the rotation angle becomes a new start angle. When the starting angle is less than 0, a value obtained by adding 360 ° is used.

  A table T10 in FIG. 19 is a number board table of the personal identification screen 1 at the start. For example, the start angle α (0) = 0 of the display symbol “0”. When the display symbol “9” is rotated to the position “B” (the password screen 2-2 in FIG. 14), the number board table is updated to the table T11. For example, the start angle α (0) = 170 ° of the display symbol “0” and the start angle α (9) = 80 ° of the display symbol “9”.

  After the rotation operation of the number board 120 is completed, the personal identification number processing unit 38 determines whether or not the confirm button 106b is pressed (step S114). The customer aligns the target display symbol 122 with the confirmation mark 104a, and then presses the confirmation button 106b with the finger r (password screen 3 in FIG. 14). In addition, when rotating, it is not necessary to touch and rotate the target display symbol 122. Further, since it is not confirmed until the confirm button 106b is pressed, the finger r may be removed from the number board 120 on the way.

  When the personal identification number processing unit 38 determines that the confirmation button 106b has not been pressed (NO in step S114), it determines whether the cancel button 106a has been pressed (step S116).

  If the personal identification number processing unit 38 determines that the cancel button 106a has not been pressed (NO in step S116), it returns to step S108.

  When it is determined that the cancel button 106a has been pressed (YES in step S116), the personal identification number processing unit 38 discards all the confirmed personal identification numbers (step S118), sets the number of digits of the confirmed personal identification number to 0 (step S120), The process returns to step S108.

  When it is determined that the confirmation button 106b has been pressed (YES in step S114), the personal identification number processing unit 38 acquires a line number corresponding to the confirmation mark 104a from the number table (step S122). In the state of the personal identification screen 2-2, the number board table is updated to the table T11 of FIG. Thereby, when the line number corresponding to the confirmation mark 104a becomes “10”, the display symbol corresponding to the confirmation mark 104a is acquired as “9”. This acquisition method will be described.

  First, a method for calculating the line number corresponding to the confirmation mark 104a in step S122 will be described. Let line number be m. m = 1.

i) Start angle of line number (m) <Start angle of line number (m + 1) If the line number (m) satisfies the following expression 1, it corresponds to the confirmation mark 104a.
Start angle of line number (m) ≦ angle of confirmation mark 104a <start angle of line number (m + 1)

ii) If the starting angle of the line number (m)> the starting angle of the line number (m + 1), the line number (m) that satisfies the following expression 2 corresponds to the confirmation mark 104a.
Start angle of line number (m) ≤ Angle of definite mark + 360 ° <Start angle of line number (m + 1) + 360 ° ··· Formula 2

  Whether line number (1) to line number (12) are satisfied in order is checked whether the expression 1 or 2 is satisfied. For example, in the example of the table T11 in FIG. 19, the row number (1) is first examined. According to the table T11, the start angle of the row number (1) is 170 °, the start angle of the row number (2) is 200 °, and the angle θ of the confirmation mark 104a is 90 °. The line number (1) is the case of i), but it can be seen that the expression 1 is not satisfied. Similarly, line number (2) does not satisfy Formula 1. The line number (10) has a start angle of 80 ° for the line number (10) and a start angle of 110 ° for the line number (11).

  Therefore, in the state of the personal identification screen 2-2, the line number corresponding to the confirmation mark 104a is acquired as the line number (10).

  The personal identification number processing unit 38 acquires the corresponding display symbol 122 from the line number and determines it as one digit of the personal identification number (step S124). In the state of the personal identification screen 2-2, the display symbol “9” corresponding to the row number (10) is acquired as the personal identification number from the table T11.

  The personal identification number processing unit 38 reflects the confirmation of one digit of the personal identification number in the confirmation field 108 (step S126). The personal identification screen 4 shown in FIG. 15 is a screen displayed subsequent to the personal identification screen 3 shown in FIG. 14 and shows that the first digit is confirmed in the confirmation field 108.

  Similarly, the second and subsequent digits are confirmed by pressing the rotation and confirm button 106b. The operation after the second digit will be briefly described. With the second digit input, the customer rotates the numeric dial 120 in the q direction to set the display symbol “6” to “B” of the confirmation mark 104a (the password screen 5-1 in FIG. 15), and then the confirmation button 106b. Is pressed (password screen 5-2 in FIG. 16). In the personal identification screen 5-2 in FIG. 16, the number board table is updated like the table T12 in FIG. 19, and the line number (7) satisfies Expression 1. Thereby, the line number (7) is acquired, and the corresponding display symbol “6” is acquired. Then, “6” is determined as the second digit password.

After inputting the third digit, the customer rotates the number board 120 in the q direction to set the display symbol “0” to “B” of the confirmation mark 104a (the password screen 5-3 in FIG. 16), and then the confirmation button 106b. Is pressed (password screen 5-4 in FIG. 17 ). In the personal identification screen 5-4 of FIG. 17 , the number board table is updated as shown in the table T13 of FIG. 20, and the line number (1) satisfies Expression 1. Thereby, the line number (1) is acquired, and the corresponding display symbol “0” is acquired. “0” is determined as the third digit password (password screen 5-4 in FIG. 17).

With the fourth digit input, the customer rotates the number board 120 in the q direction to set the display symbol “3” to “B” (the password screen 5-5 in FIG. 17 ), and presses the confirm button 106b (FIG. 18). PIN screen 5-6). In the personal identification screen 5-5 in FIG. 17 , the number board table is updated as in the table T <b> 14 in FIG. 20, and the line number (4) satisfies Expression 1. The line number (4) is acquired, and the corresponding display symbol “3” is acquired. “3” is determined as the fourth digit password.

  Returning to step S128 of FIG. The personal identification number processing unit 38 determines whether the number of digits of the confirmed personal identification number has become 4 (step S128). If the code number processing unit 38 determines that the number of digits of the confirmed code number is less than 4 (NO in step S128), it returns to step S108 and waits for the next code number input. If the personal identification number processing unit 38 determines that the number of digits of the confirmed personal identification number has become 4 (YES in step S128), the personal identification number input process is terminated, and the process proceeds to step S28 in the flowchart of FIG.

<Effects of the embodiment>
According to the embodiment described above, since the dummy mark is included in the mark (indicator) for matching the display symbol 122 of the rotating number board 120, when the password is entered, the password is looked into by a third party. There is no risk of leakage.

  Furthermore, it is possible to make it more difficult to estimate the personal identification number by changing the display position of the true mark that matches the display symbol 122 for each transaction. Moreover, since the initial position of the display symbol 122 is also changed, the estimation can be made more difficult. In addition, since the information of the true mark is stored in the card, it is possible to manage the code number and the unified management.

<Modification>
Although it has been described that the confirmation mark information is stored in the card, the confirmation mark information may be stored in the host computer 200. By transmitting to the host computer 200 the angles of all the marks 104 and the number board table (for four digits) when the confirm button 106b is pressed, the host computer 200 can determine the password.
-Although the number of marks has been described as an example of six, it is not limited to six.
The control unit 30 has been described as being realized by software processing by the CPU that has read the control program, but a part or all of the control unit 30 may be configured by hardware.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, all the constituent elements shown in the embodiments may be appropriately combined. Furthermore, constituent elements over different embodiments may be appropriately combined. It goes without saying that various modifications and applications are possible without departing from the spirit of the invention.

DESCRIPTION OF SYMBOLS 1 Automatic transaction system 10 Automatic transaction apparatus 20 Touch panel 30 Control part 32 Transaction control part 34 Card control part 36 Screen control part 38 Password control part 50 Memory | storage part 62 Operation part 64 Display part 100 Password input screen 102 Operation guide 104 Mark 104a Confirmation Mark 104b Dummy mark 106 Operation button 106a Cancel button 106b Confirm button 108 Confirm field 120 Number panel 122 Display symbol 200 Host computer 202 Communication unit 204 Customer management unit 206 Customer database 300 Network

Claims (5)

A display symbol corresponding to the PIN is displayed in a circle, and is fixedly arranged around the number plate as a mark for aligning the number plate rotated according to the customer's rotation operation and the display symbol of the number plate. A password input screen having a plurality of marks including a dummy mark in addition to a true mark;
Rotate and display the number board according to the customer's rotation operation,
When the confirmation button displayed on the password input screen is operated after the rotation operation is finished, the display symbol of the number board corresponding to the position of the true mark among the plurality of marks is acquired, A personal identification number input device, wherein the display symbol of the acquired number board is determined as a personal identification number. The personal identification number input device according to claim 1, wherein an arrangement position of the plurality of marks with respect to the number board is changed for each transaction. 2. The personal identification number input device according to claim 1, wherein a true mark is determined from the plurality of marks based on information recorded on a customer's card. An automatic transaction apparatus comprising the personal identification number input device according to any one of claims 1 to 3 . A display symbol corresponding to the PIN is displayed in a circle, and is fixedly arranged around the number plate as a mark for aligning the number plate rotated according to the customer's rotation operation and the display symbol of the number plate. A password input screen having a plurality of marks including a dummy mark in addition to a true mark;
Rotate and display the number board according to the customer's rotation operation,
When the confirmation button displayed on the password input screen is operated after the rotation operation is finished, the display symbol of the number board corresponding to the position of the true mark among the plurality of marks is acquired, A method of inputting a personal identification number, wherein the display symbol of the acquired number board is determined as a personal identification number.