JP6971204B2 - Financial trading equipment - Google Patents

Description

The present invention relates to a financial transaction device that executes a deposit / savings transaction using a mobile terminal device such as a smartphone without using a cash card.

With the widespread use of mobile terminal devices such as smartphones, technologies for using smartphones to operate ATMs have been developed for deposit and savings transactions of financial institutions. For example, Patent Document 1 introduces a technique for inputting data for a transaction and performing authentication processing using a two-dimensional bar code for communication between an ATM and a smartphone. Further, Patent Document 2 introduces a technique for performing authentication processing by Internet banking and withdrawal processing at an ATM.

Japanese Patent No. 4998065 2017-211796

However, the conventional system has the following problems to be solved. If Wi-Fi or Bluetooth (registered trademark) is used for communication between a smartphone and an ATM, radio waves may be intercepted, which poses a security problem. Therefore, it is desirable to use a two-dimensional bar code as in the above patent documents, but as in each of the above patent documents, data communication is performed between the server of Internet banking and the accounting server of a financial institution. Has a security problem in another sense.

Therefore, it is desired to realize a system that executes deposit and savings transactions more safely and reliably by using a mobile terminal device such as a smartphone without using a cash card. The present invention has been made to solve the above problems.

The following configurations are means for solving the above-mentioned problems, respectively.

<Structure 1>
The first encryption key pair is the transaction start data acquired from the user's mobile terminal device, including the financial transaction card information for starting the financial transaction, the transaction data, and the data indicating the expiration date of the financial transaction. The first encryption method to encrypt with the public key of
A second encryption means that generates hash data of the above transaction start data and encrypts this hash data with the private key of the second encryption key pair.
A barcode data generation means for generating a two-dimensional bar code including data after encryption by the first encryption means and data after encryption by the second encryption means described above.
A financial transaction device including a transmission means for transmitting the generated image data of the two-dimensional bar code to a user's mobile terminal device.

<Structure 2>
A reading device that reads the two-dimensional bar code displayed on the user's mobile terminal device in configuration 1 to acquire the above-mentioned encrypted data, and
The first decryption means for decrypting the above transaction start data with the private key of the first encryption key pair,
A second decryption means that decrypts the above hash data with the public key of the second encryption key pair,
Generates hash data of the decrypted transaction start data, determines whether it matches the hash data decoded by the second decoding means, and determines whether it matches.
Validity determination means for determining whether or not the expiration date is within the expiration date by comparing the expiration date and the current time contained in the decrypted transaction start data.
When the above transaction start data is determined to be valid by the validity determination means, the corresponding financial transaction is started using the financial transaction card information and the transaction data included in the above transaction start data. A financial trading device equipped with a means of starting a transaction.

<Structure 3>
The above-mentioned first encryption key pair and the above-mentioned second encryption key pair are different in content, and one or both of them are characterized by being private and used only inside a financial institution. The financial transaction device according to the configuration 1.

<Structure 4>
The encryption server connected to the user's mobile terminal device
Transaction start data, including financial transaction card information, transaction data, and expiration date data, is encrypted with the public key of the first encryption key pair.
Generate the hash data of the above transaction start data, encrypt this hash data with the private key of the second encryption key pair,
A two-dimensional bar code including the above encrypted data is generated, and the generated image data of the two-dimensional bar code is transmitted to the user's mobile terminal device.
ATM is,
Read the two-dimensional bar code displayed on the user's mobile terminal device,
Decrypt the above encrypted transaction start data with the private key of the first encryption key pair,
Decrypt the above encrypted hash data with the public key of the second encryption key pair,
The validity of the transaction start data is determined from the contents of the decrypted transaction start data and the hash data.
When the above transaction start data is determined to be valid, the financial transaction card information and transaction data included in the above transaction start data are used to start the corresponding financial transaction. Financial transaction method.

<Structure 5>
The above-mentioned first encryption key pair and the above-mentioned second encryption key pair are different in content, and one or both of them are characterized by being private and used only inside a financial institution. The financial transaction method according to the configuration 4.

<Structure 6>
Before encrypting the financial transaction card information, execute the conversion process of the financial transaction card information according to the agreement of the financial institution, and execute the process to restore the converted part at the start of the transaction by the ATM. The financial transaction method according to the configuration 4 or 5, wherein the method is to be performed.

<Structure 7>
A computer program for a financial transaction device that causes a computer to function as each means according to the configuration 1 or 2.
<Structure 8>
A computer-readable recording medium on which the computer program according to configuration 7 is recorded.

<Effects of configurations 1, 2 and 4>
Before operating an ATM, a mobile terminal device such as a smartphone can be used to prepare for a transaction, and the result can be imported into the ATM with a two-dimensional bar code. Since the two-dimensional bar code is managed by separately encrypted hash data and expiration date, it is possible to prevent falsification of transaction start data. In addition, if the hash data is encrypted with a private key, the source can be clarified and falsification can be prevented.

<Effects of configurations 3 and 5>
If the transaction start data and the hash data are encrypted with different encryption key pairs and used only inside the financial institution, there is an effect that the security can be further enhanced.

FIG. 1 is a block diagram of a system for acquiring a two-dimensional bar code using a mobile terminal device. FIG. 2 is a flowchart of the above computer processing. FIG. 3 is an example of a screen displayed on the mobile terminal device in the process. FIG. 4 is a system block diagram for transaction processing using an ATM. FIG. 5 is a computer flowchart of transaction processing using an ATM. FIG. 6 is an example of a screen displayed on an ATM in the process. FIG. 7 is an explanatory diagram of an encryption process and a decryption process.

In the present invention, financial transaction card information and transaction data are taken into a mobile terminal device such as a smartphone by using an Internet banking server or the like. The financial transaction card information is an account number or the like recorded on a bank's cash card or the like. The transaction data is data showing the type of deposit / savings transaction, deposit / withdrawal amount, remittance amount, and the like. The transaction start data encrypted with these is displayed as a two-dimensional bar code on the screen (display) of the mobile terminal device.

Have the ATM read this two-dimensional bar code. Thereby, for example, a considerable part of the process for starting the withdrawal transaction can be performed in advance using the user's mobile terminal device. When the ATM reads the two-dimensional bar code, the withdrawal process can be started immediately at the ATM after a simple operation such as inputting a password.

In the present invention, the processing using Internet banking and the processing for the subsequent operation of the ATM can be completely separated. There is no communication between the Internet banking server and the accounting server that controls the ATM. Further, the transaction start data and the hash data thereof are encrypted separately. This ensures a sufficiently high level of security. Hereinafter, embodiments of the present invention will be described.

FIG. 1 is a block diagram of a system for acquiring a two-dimensional bar code 34 using a mobile terminal device 14.
As shown in this figure, the user logs in to the Internet banking server 12 by a dedicated application using a mobile terminal device 14 such as a smartphone. When the authentication process is completed, the financial transaction card information 28 and the transaction data 30 are input.

The dedicated application may be used for Internet banking in general, or may be dedicated to cardless banking. In the authentication process, identity verification is performed using a user code and password. The financial transaction card information 28 is data recorded on a cash card necessary for depositing and withdrawing deposits and withdrawals of a bank.

The financial transaction card information 28 is input by the user to the mobile terminal device 14, or is input by selecting data registered on the Internet banking server 12 side. The transaction data 30 is, for example, data having a withdrawal amount of 30,000 yen in a withdrawal transaction.

For example, a dedicated application may convert the data recorded in the cash card in advance according to the agreement of the financial institution and then send it to the encryption server 16. According to the agreement at the start of ATM transaction, the converted part may be restored. For example, the conversion may be a simple replacement of character data. Even if the transaction start data is decrypted by a malicious third party, the financial transaction card information 28 can only be reproduced from the data, so that secondary damage such as duplication of the cash card can be prevented.

For example, when there is a request for withdrawal processing, the Internet banking server 12 requests the encryption server 16 to encrypt the financial transaction card information 28, the transaction data 30, and the expiration date thereof.

The expiration date is set to prevent unauthorized use of this data. For example, if the corresponding transaction is not made at the ATM within 30 minutes after the transaction data 30 is input, the transaction can be invalidated.

The arithmetic processing unit of the encryption server 16 is provided with a first encryption means 18, a second encryption means 22, a bar code data generation means 26, and a transmission means 40. The public key of the first encryption key pair 20 and the second encryption key pair 24 are stored in the storage device of the encryption server 16.

The first encryption means 18 of the encryption server 16 uses the financial transaction card information 28, the transaction data 30 and the expiration date 38 input from the mobile terminal device 14, and the public key of the first encryption key pair 20. And perform encryption processing.

Hash data 36 is generated from the transaction start data before the first encryption means 18 performs the encryption process. The hash data 36 is for determining whether or not the financial transaction card information 28 and the transaction data 30 and the like have been tampered with.

Further, the hash data 36 is encrypted by the second encryption means 22 using the private key of the second encryption key pair 24. The first encryption key pair 20 and the second encryption key pair 24 are completely different. Further, it is preferable that one or both of the encryption key pairs are unique ones that are used only inside the financial institution and that not only the private key but also the public key is kept secret to the outside. By using the two types of encryption key pairs in this way, as will be explained later, the presence or absence of tampering with the two-dimensional bar code was detected, and the encryption process was definitely performed by a specific Internet banking server. Can be confirmed. This has the effect of eliminating the need for communication between the Internet banking server 12 and the accounting host computer 42.

After the encryption is completed, the bar code data generation means 26 generates the encrypted data 32 including the data encrypted by the first encryption means 18 and the data encrypted by the second encryption means 22. It is converted into the image data of the two-dimensional bar code 34.

The transmission means 40 transmits the two-dimensional bar code 34 to the mobile terminal device 14. As a result, the mobile terminal device 14 can display the two-dimensional bar code 34 on the display unit (display) thereof.

FIG. 2 is a flowchart of the above computer processing. FIG. 3 is an example of a screen displayed on the mobile terminal device 14 in the process.
First, the screen 62 shown in K1 of FIG. 3 is displayed on the mobile terminal device 14. In step S11, the cardless withdrawal icon 64 on the screen is clicked. This switches to the screen 62 shown in K2.

In step S12, the Internet banking server 12 is logged in on the screen 62 shown in K2 of FIG. For example, an ID is entered in the ID input box 66, a password is entered in the password input box 68, and the login button 70 is clicked.

In step S13, the screen 62 shown in K3 of FIG. 3 is displayed on the mobile terminal device 14, and net banking is started. Here, when the withdrawal transaction start button 72 is touched in step S14, the cardless withdrawal processing request is accepted.

In step S15, the amount input box 74 for inputting the withdrawal amount of the cardless withdrawal process is displayed on the screen 62 shown in K4 of FIG. When the user operates the numeric keypad 76, inputs the withdrawal amount, and touches the confirmation button 80, the user can proceed to the next step. You can also operate the back button 78 to start over.

After that, the withdrawal amount, the two-dimensional bar code 34, the expiration date 38, and the like are displayed on the screen 62 shown in K5 of FIG. That is, the Internet banking server 12 displays the withdrawal amount in step S16, generates a two-dimensional bar code and displays the result in step S17, and generates and displays the expiration date 38 in step S18. In this way, the screen 62 shown in K5 is displayed. To redo the operation, touch the back button 78.

This makes it possible to make a withdrawal transaction using the mobile terminal device 14 thereafter. In step S19, the Internet banking server 12 completes the preparatory work for the cardless withdrawal process, and in step S20, the net banking log-off process is performed. The operation screen is arbitrary and is not shown.

FIG. 4 is a system block diagram for transaction processing using the ATM 44.
The user 45 uses the mobile terminal device 14 to have the ATM 44 read the two-dimensional bar code 34 and start a transaction. The ATM 44 is controlled by the accounting host computer 42, and the decoding process of the two-dimensional bar code 34 is configured to be executed by the decoding server 46.

The ATM 44 has a built-in digital camera, scanner, or the like that captures an image of the two-dimensional bar code 34, and the reading device 48 obtains the encrypted data from the two-dimensional bar code 34 and obtains the encrypted data from the two-dimensional bar code 34 to obtain the decryption server 46. Transfer to. The decryption server 46 includes a first decryption means 50, a second decryption means 54, a validity determination means 58, and a transaction start means 60 for decrypting the encrypted data. The reading device may be a device having an arbitrary structure known to restore the original character data from the two-dimensional bar code converted into image data, and may be an independent device different from the ATM 44.

The first decryption means 50 decrypts the transaction start data input from the reading device 48 with the private key of the first encryption key pair 52. The second decryption means 54 decrypts the hash data 36 with the public key of the second encryption key pair 56. With the above configuration, one decryption server 46 can control transactions of a plurality of ATMs 44.

The validity determination means 58 first generates hash data of the decrypted transaction start data. Then, it is determined whether or not it matches the hash data 36 decoded by the second decoding means 54. If the transaction start data has not been tampered with, they should match.

Further, the expiration date included in the decrypted transaction start data is compared with the current time to determine whether or not the expiration date is within the expiration date. If it is not within the expiration date, the transaction will be rejected. It is valid if the date and time data of the current time is before the date and time data of the expiration date.

Since the two-dimensional bar code is decoded separately for the transaction start data and the hash data, a high security level can be ensured. Moreover, if the hash data is encrypted with the private key and decrypted with the public key, it can be definitely determined that the hash data is encrypted by the encryption server 16 (FIG. 1). If the first and second encryption key pairs have different contents and are used only inside the financial institution, the security can be further enhanced.

The result of decrypting the encrypted data is returned to the ATM 44. The ATM 44 communicates with the accounting host computer 42 from the state in which the transaction data 30 is input, and starts the deposit / withdrawal transaction of deposits and savings. Subsequent processing is the same as that of the known ATM44.

These processes in the ATM 44 are performed separately from the Internet banking server 12. In the above series of processes, communication between the Internet banking server 12 and the accounting host computer 42 is not required. Therefore, there is no risk that information for cardless withdrawal transactions will be leaked by communication between them. Of course, since communication between the Internet banking server 12 and the accounting host computer 42 is not required, the processing speed does not decrease.

FIG. 5 is a computer flowchart of transaction processing using the ATM 44. FIG. 6 is an example of a screen displayed on the ATM 44 in the process.
First, in step S21, a transaction is selected on the screen B1 of FIG. 6 displayed on the ATM 44. That is, the user 45 touches the withdrawal button 88. The screen of ATM44. In B1 and B2, the display of buttons unnecessary for the explanation of the present invention is omitted.

In step S22, the user 45 touches the cardless withdrawal button 90 on the screen B2 displayed on the ATM 44. After that, in step S23, the reading device 48 of the ATM 44 reads the two-dimensional bar code 34 displayed on the mobile terminal device 14.

In step S24, the withdrawal amount display 92 is displayed on the screen B3 of the ATM 44 according to the read financial transaction card information 28 and the transaction data 30. Touch the cancel button 94 to cancel the transaction, the back button 95 to return to the original state, or the next button 96 to leave the transaction as it is.

In step S25, a password input request is made on the screen B4 of the ATM 44. The user 45 uses the numeric keypad 100 to input the personal identification number in the personal identification number input box 98. After that, in step S26, the withdrawal process as usual is started, and the corresponding cash is withdrawn from the ATM 44. That is, the processing is exactly the same as the normal withdrawal processing by the ATM using the cash card. In step S27, the withdrawal process is completed.

FIG. 7 is an explanatory diagram of an encryption process and a decryption process.
This figure summarizes the above encryption and decryption processes. As shown in this figure
The public key 20a and the private key 20b are the first encryption key pair 20 for the decryption server 46 to perform encrypted communication. On the other hand, the public key 24a and the private key 24b are the second encryption key pair 24 for the encryption server 16 to perform encrypted communication.

The encryption server 16 encrypts the transaction start data 110 with the public key 20a of the first encryption key pair 20. On the other hand, the decryption server 46 decrypts the encrypted transaction start data 110 with the private key 20b of the first encryption key pair 20. This process is a general encrypted communication process. The transaction start data 110 may include any data as long as it is necessary and sufficient data for starting an ATM transaction.

On the other hand, the hash data 36 is encrypted with the private key 24b of the second encryption key pair 24 on the encryption server 16 side. Then, on the decryption server 46 side, the public key 24a of the second encryption key pair 24 is used for decryption. Since the private key 24b is unique to the encryption server 16 and only the encryption server 16 is used, it can be confirmed on the decryption server 46 side that the encryption server 16 has encrypted. Since 24a can be used only within a financial institution and kept secret, security can be ensured.

The system of the present invention as described above can obtain the following effects for each embodiment.
(1) Since deposits and savings can be traded only with a mobile terminal device and a cash card is not used, skimming of stealing magnetic data of the cash card can be prevented.
(2) Since the authentication process is performed by the mobile terminal device and the Internet banking server and the card information for financial transactions and the transaction data are input in advance, the operation time of the ATM after that is shortened and the convenience of the user is improved. Can be improved.
(3) By encrypting financial transaction card information, transaction data, expiration date and its hash data with separate encryption key pairs, it is possible to make decryption difficult and prevent data tampering.

12 Internet banking server 14 Mobile terminal device 16 Encryption server 18 First encryption means 20 First encryption key pair 22 Second encryption means 24 Second encryption key pair 26 Bar code data generation means 28 Financial transaction card information 30 Transaction data 32 Encrypted data 34 Two-dimensional barcode 36 Hash data 38 Expiration date 40 Transmission means 42 Accounting host computer 44 ATM
45 User 46 Decoding server 48 Reading device 50 First decoding means 54 Second decoding means 58 Validity determination means 60 Transaction starting means 62 Mobile operation screen 64 Icon 66 ID input box 68 Password input box 70 Login button 72 Withdrawal transaction start button 74 Amount input box 76 Numeric keypad 78 Back button 80 Confirm button 86 ATM operation screen 88 Withdrawal button 90 Cardless withdrawal button 92 Withdrawal amount display 94 Cancel button 95 Back button 96 Next button 98 PIN Input box 100 Numeric keypad 110 Transaction start data 20a Public key 20b Private key 24a Public key 24b Private key

Claims (8)

The first encryption key pair is the transaction start data acquired from the user's mobile terminal device, including the financial transaction card information for starting the financial transaction, the transaction data, and the data indicating the expiration date of the financial transaction. The first encryption method to encrypt with the public key of
A second encryption means that generates hash data of the above transaction start data and encrypts this hash data with the private key of the second encryption key pair.
A barcode data generation means for generating a two-dimensional bar code including data after encryption by the first encryption means and data after encryption by the second encryption means described above.
A financial transaction device including a transmission means for transmitting the generated image data of the two-dimensional bar code to a user's mobile terminal device. A reading device for acquiring the above-mentioned encrypted data by reading the two-dimensional bar code displayed on the user's mobile terminal device in claim 1.
The first decryption means for decrypting the above transaction start data with the private key of the first encryption key pair,
A second decryption means that decrypts the above hash data with the public key of the second encryption key pair,
Generates hash data of the decrypted transaction start data, determines whether it matches the hash data decoded by the second decoding means, and determines whether it matches.
Validity determination means for determining whether or not the expiration date is within the expiration date by comparing the expiration date and the current time contained in the decrypted transaction start data.
When the above transaction start data is determined to be valid by the validity determination means, the corresponding financial transaction is started using the financial transaction card information and the transaction data included in the above transaction start data. A financial trading device equipped with a means of starting a transaction. The above-mentioned first encryption key pair and the above-mentioned second encryption key pair are different in content, and one or both of them are characterized by being private and used only inside a financial institution. The financial transaction device according to claim 1. The encryption server connected to the user's mobile terminal device
Transaction start data, including financial transaction card information, transaction data, and expiration date data, is encrypted with the public key of the first encryption key pair.
Generate the hash data of the above transaction start data, encrypt this hash data with the private key of the second encryption key pair,
A two-dimensional bar code including the above encrypted data is generated, and the generated image data of the two-dimensional bar code is transmitted to the user's mobile terminal device.
ATM is,
Read the two-dimensional bar code displayed on the user's mobile terminal device,
Decrypt the above encrypted transaction start data with the private key of the first encryption key pair,
Decrypt the above encrypted hash data with the public key of the second encryption key pair,
The validity of the transaction start data is determined from the contents of the decrypted transaction start data and the hash data.
When the above transaction start data is determined to be valid, the financial transaction card information and transaction data included in the above transaction start data are used to start the corresponding financial transaction. Financial transaction method. The above-mentioned first encryption key pair and the above-mentioned second encryption key pair are different in content, and one or both of them are characterized by being private and used only inside a financial institution. The financial transaction method according to claim 4. Before encrypting the financial transaction card information, execute the conversion process of the financial transaction card information according to the agreement of the financial institution, and execute the process to restore the converted part at the start of the transaction by the ATM. The financial transaction method according to claim 4 or 5, wherein the method is to be performed. A computer program for a financial transaction device that causes a computer to function as each means according to claim 1 or 2. A computer-readable recording medium on which the computer program according to claim 7 is recorded.

Images