JP7421986B2 - Financial institution system and method for guarding account transactions - Google Patents

Description

The present invention relates to a monitoring device and a financial institution system that monitor users during account transactions.

Recently, damage caused by illegal remittances due to bank transfer fraud and phishing fraud is on the rise again. On the other hand, many systems have been proposed to prevent such fraud.

For example, Patent Document 1 discloses an abnormal transaction prevention system and method for effectively canceling transfer instructions or withdrawal instructions suspected to have been made by a bank transfer fraud victim or a thief using a counterfeit/stolen card at a financial institution. Disclosed. According to this system, a notification is sent to the abnormal transaction monitoring server according to the time period and amount transferred from the ATM. The server estimates whether the transfer instruction was caused by fraud or theft based on the transaction history of the account and other information. As a result, if it is estimated that the crime was caused by such a crime, the person who gave the transfer instruction and the operator of Bank A have a conversation via telephone, and the operator determines that a crime has occurred. In this case, the transfer instruction is canceled.

Furthermore, Patent Document 2 discloses a transfer management system that can improve the safety of transfer operations and withdrawal operations, as well as speed up withdrawal processing and reduce the security burden on a monitoring center. According to this system, the management device includes an account information acquisition unit that acquires transfer destination account information from an ATM, transmits the transfer destination account information to a transaction information management center, and sends credit information of the transfer destination account to the transaction information management center. a monitoring information determining unit that determines monitoring information indicating monitoring contents to the security center based on the credit information; and a monitoring information determining unit that transmits the monitoring information to the security center and acquires suspicious information from the security center. A suspicious information acquisition unit, a transfer acceptance judgment unit that determines, based on the suspicious information, whether or not a transfer can be accepted to the recipient's account indicated by the recipient's account information; and a transfer permission notification unit that notifies the ATM of transfer acceptance permission when the transfer is accepted.

Furthermore, Patent Document 3 describes a verification system that is a system for preventing phishing fraud and allows the user who received the email to verify that the email was sent from a legitimate organization. Disclosed. According to this system, the sender verification device includes means for extracting a plurality of mutually different e-mail addresses of users who are destinations from the e-mail address storage means, and the e-mail transmission means of the verification device extracts the extracted plurality of e-mail addresses. It is disclosed that emails with the same content may be sent to the email address of the other person, and each email may include a secret word that cannot be understood without checking the other email.

Japanese Patent Application Publication No. 2007-226682 Japanese Patent Application Publication No. 2010-238183 JP 2019-212329 Publication

In the systems disclosed in Patent Documents 1 and 2, the financial institution strengthens the monitoring of fraudulent activities from ATMs, but does not require any countermeasures to be taken by the user who holds the account. Recently, in addition to fraud using ATMs, there has also been an increase in online banking fraud, which can be carried out by elderly people with weakened legs and feet from their home PCs, smartphones, etc., without leaving their homes. The system of Patent Document 3 allows the user to verify whether the received email was sent from a legitimate financial institution, but fraud techniques are becoming more diverse and sophisticated, and there are various types of fraud. Measures are required.

Therefore, the first object of the present invention is to provide countermeasures on the side of the user who holds the account (a system different from the financial institution's system) in order to prevent bank transfer fraud and phishing fraud in account transactions performed by users from their own terminals. To provide a monitoring device (or monitoring device) that watches over users and monitors account transactions.
A second object of the present invention is to provide a system that notifies a financial institution when the monitoring device detects that a phishing fraud is suspected against a user's account.
A third object of the present invention is to provide a system in which a financial institution system permits transactions in a user's account on the condition that the monitoring device is in a monitorable state.

In order to achieve the third objective, the present invention provides the following solution.

(1) A financial institution system in which a user holds an account, which receives status information of the monitoring device from a monitoring device that is associated with the account and monitors images of the user, and the monitoring device is in a monitoring enabled state. It is characterized by accepting transactions for the account from the user on the condition that the transaction is in the account.

(2) In the configuration of (1) above, the authentication of the user is completed using the user's face image captured by the monitoring device, and the combination of the ID of the monitoring device and the user is registered on the financial institution side. It is characterized by accepting transactions for the account on the condition that the transaction matches the transaction.

(3) In the configuration of (1) or (2) above, the transaction for the account is accepted on the condition that the captured facial image matches an authentication facial image registered on the financial institution side. do.

(4) In the configuration of (1) or (2) above, when the monitoring device cannot recognize the user's face image, the monitoring device detects the positional relationship between the monitoring device and the user terminal, the clothes worn by the user, and/or It is characterized by authenticating that the user is the account holder based on images of the user's surroundings.

(5) In any of the configurations (2) to (4) above, when the user's face image cannot be recognized, the monitoring device images the shape of the user's ears and uses ear-shaped authentication to identify the user. It is characterized by authenticating that the person is the account holder.

(6) A method executed by a computer in a system of a financial institution in which a user holds an account, the method receiving, from a monitoring device associated with the account and for monitoring images of the user, status information of the monitoring device. The system is characterized in that transactions in the account from the user are accepted on the condition that the monitoring device is in a monitoring enabled state.

According to the present invention, it is possible to provide a system in which a financial institution's system permits transactions in a user's account on the condition that the monitoring device is in a monitorable state.

FIG. 1 is a diagram showing an image of the first embodiment of the present invention. FIG. 1 is a diagram showing a functional configuration of a system according to a first embodiment. FIG. 7 is a diagram showing a modified example of the functional configuration of the system of the first embodiment. FIG. 2 is a diagram showing an example of a fake email (phishing email) pretending to be from a financial institution. It is a figure which shows the operation|movement of a warning etc. which a monitoring device performs. It is a figure which shows the image of the 2nd embodiment of this invention. FIG. 3 is a diagram showing the functional configuration of a system according to a second embodiment. FIG. 3 is a diagram showing an example of a user registration table. FIG. 7 is a diagram showing an image of a third embodiment of the present invention. It is a figure showing the functional composition of a system of a 3rd embodiment. It is a figure showing the processing flow in a 3rd embodiment. It is a figure which shows the example of a display screen from a financial institution in 3rd Embodiment.

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, modes for carrying out the present invention (hereinafter referred to as embodiments) will be described in detail with reference to the accompanying drawings. Furthermore, the systems or devices of each embodiment will be collectively referred to as the present system. In the subsequent figures, the same numbers or symbols are given to the same elements throughout the description of the embodiments. Furthermore, in the diagrams of each functional configuration of this system, arrows between functional blocks represent the direction of data flow or the flow direction of processing.

<First embodiment>
FIG. 1 is a diagram showing an image of the first embodiment of the present invention. This embodiment is a system that includes a monitoring device that watches and monitors a screen displayed on a user terminal used by a user, and is configured mainly around the monitoring device. The targets monitored by the monitoring device are mainly fake emails (phishing emails) from malicious parties pretending to be legitimate financial institutions, or fake screens displayed by fake sites (phishing sites) that are directed from there. , called a false screen). The fake screen is displayed on a user terminal such as a PC, tablet, or smartphone. Furthermore, the monitoring device may also monitor images of users to be monitored.

Here, the users to be watched are mainly elderly people and people with poor judgment. When a user clicks or taps on a URL, etc. listed on a fake screen, the user is guided to a fake site, and the account number, PIN, login ID, password, address, name, etc. that the user carelessly entered on the screen of the fake site is sent to the fake site. The number of cases of items being stolen continues to increase. In order to prevent such damage, this system uses a monitoring device to take timely images of the screen of the user terminal, sends the captured screen image to the determination server, and determines whether the screen image is a genuine screen of a legitimate financial institution or a fake. screen (authenticity of the screen image).

The determination server analyzes the screen image received from the monitoring device, compares it with the image in the fake screen information storage unit that stores information about the fake screen of a phishing scam, or the real screen of a legitimate financial institution, and determines the authenticity of the screen image. Determine. If the determination server determines that the screen is a false screen or that the screen is suspicious (suspicious), the determination server determines that the screen is a fake screen or that the screen is suspicious (suspicious), (other terminals) to alert them. Furthermore, if a legitimate financial institution can be identified from the text, logo, etc. on the fake screen, similar warning information may be sent to the server of that financial institution.

As shown in the figure, the monitoring device may be a device built into a figurine such as a stuffed animal (stuffed robot), or a camera-equipped glasses (smart glasses) worn by a user to be monitored. Alternatively, it may be a smartphone or a tablet equipped with a holder, which is separate from the user terminal. Here, the figurine may be anything as long as it can be installed near the user and the user terminal and at a position where the user and the screen can be imaged. However, it is desirable to have something that would be natural to place next to a desk, or something that the user would like to have near themselves. Examples include printers, speakers, dolls, figurines, and pots for houseplants. Moreover, instead of an ornament, it may be a moving object, such as a collar or clothing worn on a pet. By doing so, it is possible to alleviate the feeling that the user being watched feels like he or she is being monitored. Note that the monitoring device does not need to be a single device, and may be composed of a plurality of devices or instruments. Further, the main body of the monitoring device and the camera of the imaging unit described later may be separate.

FIG. 2 is a diagram showing the functional configuration of the system of the first embodiment. This example shows a form in which the function of the above-mentioned determination server is included in the monitoring device 10. As shown in FIG. 2, the monitoring device 10 includes an imaging section 11, a user information storage section 12, a false screen determination section 13, a false screen information storage section 14, a false screen registration section 15, and an alert operation section. 16, and a determination result notification section 17. Each functional unit will be explained in turn below.

The imaging unit 11 is a device that includes one or more cameras and is capable of capturing still images and moving images, but also has a function to analyze captured images. Part or all of one or more cameras are installed at a location away from the main body of the monitoring device, and are connected wirelessly to the main body to monitor the screen of the user terminal 30 to be monitored from different angles and/or , the user may be imaged. If a plurality of cameras are installed in this manner, the screen of the user terminal 30 and the user to be monitored can be simultaneously photographed. Of course, the imaging unit 11 may include a movable part that can adjust the camera position and imaging angle. For example, a stuffed toy robot may have a built-in ultra-compact camera in its eyes so that the viewing angles of its right and left eyes can be changed freely. Note that if the monitoring device 10 is smart glasses, the camera should naturally face the screen, so adjusting the position and angle is easy. In that case, the image of the user may also be captured by another external camera.

Furthermore, the imaging unit 11 continuously captures an image of the e-mail screen even before the user to be monitored displays the e-mail screen, and displays the e-mail screen after the user taps or clicks the URL information written in the e-mail. It is desirable to include an image of the screen. This is because it is difficult to judge from just one screen.

Alternatively, the user may be identified by performing face authentication using the image of the user captured by the imaging unit 11. At this time, in case face authentication is not possible due to the user's location or the brightness of the room, the user's fingerprint or ear shape is captured and combined with fingerprint authentication and ear type authentication (auricular authentication). Good too. Note that each authentication method is a well-known technique, so a description thereof will be omitted here.

The user information storage unit 12 is a storage device that stores attributes of the user to be monitored (age, physical condition, gender, and other information that can authenticate the user, such as a face image, a fingerprint image, and an ear image). It is. The user information storage unit 12 may store a user registration table that will be described later with reference to FIG. Typically, the user to be monitored is an elderly person or a person with poor judgment, but minors may also be included. However, since minors do not have accounts, access to sites that are harmful to minors may be monitored instead of access to financial institution sites. The user information storage unit 12 also stores the types of user terminals frequently used by the user of the person to be watched, the types of browsers, the regular positional relationship between the user terminal 30 and the monitoring device 10, images around the user, and items frequently worn by the user. Clothes worn by the user, etc. may be stored as user environment information. The information stored in the user information storage section 12 is referenced by each machine section including the attention-calling operation section 16, which will be described later.

If the monitoring device 10 does not have an external camera, depending on the positional relationship between the user and the monitoring device 10, the screen and the user's face may not be sufficiently recognized using only the built-in camera. In that case, the monitoring device 10 may issue a voice to the user, asking the user to "face this way." Alternatively, the user may be authenticated (quite It is possible to infer with the accuracy of By doing so, even if another person, such as a family member, is operating the user terminal 30, the user is not recognized as the user. Furthermore, if a front face image of the user cannot be obtained, the ear type authentication using the ear image described above may be used.

The false screen determination unit 13 refers to the false screen information storage unit 14 that stores a large amount of information on already known false screens or true screens of financial institutions, and compares the currently captured screen image with the false screen image or true screen image. The authenticity of the screen image is determined by comparison. Furthermore, even if the screen does not already exist, patterns of fake screens may be learned and determined using AI (Artificial Intelligence) technology. If there is an image whose characteristics match the image of a fake screen, it is determined to be a fake screen, and if the pattern does not match but is similar and the AI determines that it is suspicious, it is also determined to be a fake screen. Furthermore, as in the example described below, if the screen displays a URL of a domain that is completely unrelated to the domain of a legitimate financial institution, the screen is determined to be a fake screen.

In addition, when the false screen determination unit 13 cannot recognize the user, the false screen determination unit 13 determines whether the user has been accessed from a different environment than usual, based on information that can be obtained from the screen image and user environment information stored in the user information storage unit 12. In some cases, it may be determined that the account transaction is suspicious. For example, when you use a smartphone when you normally use a PC, your browser may identify a suspicious account transaction when you use Chrome (registered trademark) instead of Internet Explorer (registered trademark). You can.

The false screen registration unit 15 is a storage device that registers screen images that are determined to be suspicious by the false screen determination unit 13. Screen images suspected to be fake screens stored in the fake screen registration unit 15 may also be transmitted to the financial institution server 40 and shared as warning information. By accumulating images that have been determined to be suspicious, more accurate determinations can be made.

The attention-calling operation unit 16 calls attention based on the result of the determination by the false screen determination unit 13 and according to the attributes of the user to be monitored. Therefore, an action table (described later) is provided that stores predetermined actions that can be performed by the monitoring device 10 to call attention or warn. The predetermined actions that the monitoring device 10 can perform include, for example, in the case of an ornament such as a stuffed toy robot, calling for attention or warning (hereinafter referred to as "warning, etc.") by sound, light, or vibration, and in the case of smart glasses, This is to superimpose information such as warnings on the lens. If your smart glasses do not have an audio function, you can output the audio to an external speaker.

Further, the attention operation unit 16 may change the attention etc. depending on the attributes (age, physical condition, etc.) of the user to be watched. In addition, if the user is an elderly person or a person with impaired judgment, the alert operation unit 16 may be activated before clicking or tapping the URL information (the URL itself or a character string linked to the URL) written on the fake screen. Additionally, a means may be provided that allows the observer to adjust the method of calling attention to the URL.

If the result of the determination made by the false screen determination unit 13 is that the screen is a false screen or is suspicious, the determination result notification unit 17 notifies the user terminal 31 of the watcher and/or the financial institution server 40 of a warning. At this time, the screen image that is the basis for the determination may also be notified, or there may be a plurality of screen images that are the basis for the determination. If the screen image is a video, it is desirable to include the screens before and after the screen that is the basis for the determination.

<Modification of the first embodiment>
FIG. 3 is a diagram showing a modified example of the functional configuration of the system of the first embodiment. In this example, a monitoring device 10 and a determination device 20 (determination server in FIG. 1) are separated as independent devices, and are connected locally and to the Internet. Since it is functionally almost the same as the case in FIG. 2, only the points that are different from FIG. 2 will be explained.

In order to communicate between the monitoring device 10 and the determining device 20, the monitoring device 10 is equipped with a determining device communication section 18, and the determining device 20 is equipped with a monitoring device communication section 21. Communication between the monitoring device 10 and the determination device 20 is preferably peer-to-peer short-range wireless communication such as Bluetooth (registered trademark). Further, the fake screen information DB 23 corresponds to the fake screen information storage section 14 in FIG. 2, and is a database version of this.

By separating the determination device 20 and the monitoring device 10, the monitoring device 10 can perform local communication such as peer-to-peer communication with the determination device 20 without directly connecting to the Internet. Therefore, the defense against unauthorized remote control from outside that occurs due to direct connection to the Internet is strengthened. Further, by providing the false screen information DB 23, false screen information can be easily obtained not only from financial institutions but also from sites 50 other than financial institutions. Furthermore, compared to the false screen determination section 13 built into the comparatively small monitoring device 10, the determination device 20 can have a larger processing capacity and storage capacity, so the false screen determination section 22 has a false screen information gathering ability and determination ability. is significantly improved. Furthermore, when AI technology is used for determination, the accuracy of the machine learning will also improve.

Further, the fake screen information DB 23 may store screen images whose authenticity has been determined. That is, even if a real screen that is a screen of a legitimate financial institution and is determined to be not a fake screen is registered, and the determination device 20 compares the obtained screen image with the real screen. good. Furthermore, the images to be compared by the determination device 20 are "images whose authenticity has been determined", and what is stored in the false screen information DB 23 may be only true images, only false images, or both. good. If either is true or false, both can be determined using the same logic. Furthermore, if the approximation is made with an error less than a predetermined value compared to the true screen, it may be determined as "true" or "false". When there is both true and false data and it is not possible to decide on one or the other, the image taken of the screen being used by the user to be compared will be determined to be "true" with an error of 2%, for example, and an error of 1%. If the screen is determined to be "false" due to an error, it may be determined that the screen is "false" with a low probability of error.

FIG. 4 is a diagram showing an example of a fake email (phishing email) masquerading as a financial institution. In addition to regular e-mail, an increasing number of fake e-mails use short messages (SMS). Since SMS is a short text, it takes advantage of the tendency of users to open links due to its casualness.

A screen 100 shown in FIG. 4 is an example of an SMS phishing email. If you click on the URL in the fake email pretending to be a bank maintenance site, you will be redirected to a screen 110 of a fake site for updating your internet banking login ID and password. be guided. Some of the screens of fake emails and fake sites imitate real sites, but if you look closely, you will notice that the Japanese is unnatural or the URL domains are different between the link source and the link destination. A point exists. Specifically, in the example of FIG. 4, on the fake email screen 100, the text that should have read "Revoked." is now "Revoked." Further, the domain of the URL on the fake site screen 110 is different from the domain on the fake email screen 100. Therefore, in order to determine whether or not an email is a fake email, it is necessary to check the text of the email in detail and to compare the images of the screen before the click and the screen after the click. Further, in the case of a legitimate site, the URL may be forcibly displayed. By incorporating logic for forcibly displaying a URL into a program related to screen display, it becomes possible to determine authenticity by comparing the characters in the URL, without having to compare whether the image is a legitimate image.

Screen 200 in FIG. 4 is an example of a fake email that is an ordinary email. Unlike SMS, where the phone number is the sender's address, in regular e-mail it is not easy to hide the sender's address, but it is easy to hide the link destination URL. . For example, in screen 200, if the user clicks on "here", the user is guided to screen 210 of a fake site. Although actual financial institutions do not ask users to update their passwords or registration information via email, the elderly and those with poor judgment are easily fooled. In addition, many financial institutions have recently adopted one-time passwords and two-step authentication for transfers, so if your online banking login ID and password are simply stolen, fraudulent transfers cannot be made, but account information and name holder information cannot be transferred. Information may be obtained. Also, many users use the same login ID and password for other sites, so be careful. Recently, a method of stealing one-time passwords has also been discovered, so you need to be even more careful.

FIGS. 5(a) and 5(b) are diagrams showing operations such as alerting performed by the monitoring device 10. FIG. 5C is a diagram showing an example of an action table that defines operations (actions) of the monitoring device 10. If the false screen determination unit 13 of the monitoring device 10 determines that the screen is suspicious, it recognizes the characteristics of the user who is using the user terminal 30 at that time from the user's image, and determines the user's attributes (age, physical condition, etc.). Accordingly, the action of calling attention or warning described in the action table can be performed.

When the monitoring device 10 in FIG. 5(a) is a stuffed toy robot, the actions include speaking, sounding an alarm, and vibrating. The action is performed based on the action table shown in FIG. 5(c) depending on the attribute. In particular, in the case of a user to be watched, such as an elderly person, a stronger action is selected. The selection of actions may be based on the number of times a warning is received, but as described above, it is desirable that the action can be adjusted by the observer. For example, for Mr. A (age 35), the robot may say things like ``This is a suspicious screen'' or ``This is a suspicious sender,'' or an alarm may sound, or a stuffed toy may vibrate. On the other hand, for Mr. B (80 years old, hard of hearing), the system would say stronger words such as "Danger! STOP!", sound a loud alarm, and give warnings using lights and vibrations. Adjust as follows.

If the monitoring device 10 in FIG. 5(b) is smart glasses, instead of speaking, a message such as a warning is superimposed on the screen of the smart glasses. At that time, the suspicious URL may be highlighted and a message may be displayed around it. In the case of elderly users, the warning display may be stronger, the smart glasses may be turned off (disabled), or the lights on the smart glasses or surrounding smartphones may be emitted along with the warning display. You may.

<Second embodiment>
FIG. 6 is a diagram showing an image of the second embodiment of the present invention. This embodiment is a reporting system in which the monitoring device 10 reports the monitoring determination result to the financial institution server 40. When the monitoring device 10 of the second embodiment determines that the captured screen image is suspicious, it notifies the financial institution server 40 of the name and date of birth of the holder extracted from the screen image of the registration information update screen. If the destination is a financial institution where the holder has an account, just the account number is sufficient. Note that the monitoring device 10 of this embodiment only notifies the financial institution and does not itself perform any action such as alerting.

The financial institution server 40 that receives the notification does not permit transactions in the reported account. In other words, transactions for that account are temporarily suspended or transactions are not accepted. As a result, even if the criminal enters the fraudulent ID and password, accesses the website of a legitimate financial institution (here referred to as financial institution A), and attempts to make an unauthorized remittance using the holder's information. Transaction is rejected. On the other hand, the server of financial institution A where the user has an account shares its account information and holder information with servers of other financial institutions (hereinafter referred to as financial institution B and financial institution C). Financial institution B and financial institution C, with whom the information was shared, investigate whether there is an account with the same name and date of birth as the reported account holder, and if there is an identical account, financial institution A Similarly, transactions for that account may be temporarily suspended or no transactions may be accepted. Internet banking users often use the same ID and password at multiple financial institutions, so criminals can use the same ID and password to access Financial Institution B and Financial Institution C and commit fraudulent activities. This is because they may try to do so.

If the financial institution server 40 that received the report is another financial institution, the holder's name, date of birth, and (in some cases, address) are provided, the names are combined, and the same subscriber is sent to the own financial institution. Check if it exists. If the same contractor exists, notify the customer that a security incident may have occurred. Then, transactions with the same contractor may be put on hold, and the most recent month's account details may be sent to the customer for confirmation. By doing so, both the own financial institution and other financial institutions can speed up and automate the notification of security incidents to customers.

FIG. 7 is a diagram showing the functional configuration of the system of the second embodiment. In the second embodiment as well, the functions of the imaging unit 11, user information storage unit 12, and false screen determination unit 13 in the monitoring device 10 are the same as in the first embodiment shown in FIG. However, a financial institution communication section 19 for reporting account information and holder information to the financial institution is added to the monitoring device 10.

In addition, the A financial institution server 40A that receives the report includes a monitoring device information receiving unit 41 that receives the report from the monitoring device 10, an account transaction restriction unit 42 that restricts account transactions of the received account information, and other financial institutions. A financial institution cooperation section 43 is provided that cooperates with the server of the financial institution and shares information. The same applies to the B financial institution server 40B and the C financial institution server 40C.

Further, the monitoring device 10 can immediately determine which financial institution the user is trying to use from the acquired screen image. This is because even if the received e-mail etc. disguises a legitimate financial institution, the legitimate financial institution can be identified from the disguised screen. When the user starts connecting to any financial institution, the monitoring device 10 notifies the determined financial institution of the start of use. It is also good to notify the user when the use is finished. In other words, the monitoring device 10 identifies the financial institution that the user will use from now on from the screen image of the financial institution displayed on the user terminal 30, and the user terminal 30 actually connects to the system of the financial institution and conducts transactions. When the transaction starts, a signal to start the transaction is sent to the financial institution's system, and when the transaction ends, a signal to end the transaction is sent to the system of the financial institution. Upon receiving the notification, the financial institution's system determines whether there is a contradiction between the notification and the actual transaction status, and performs the necessary processing.

In other words, if a financial institution is directed to a spoofed site, it is sufficient for the financial institution to be able to recognize that the corresponding user's screen on its own banking system is up, but if the financial institution cannot recognize that the screen is up, it should alert the user ( You can send a notification to your mobile phone or smartphone. Furthermore, even though the financial institution has accepted the signal to end the use, if there is any transaction instruction from the fake site to the financial institution's server, the user is alerted. Further, a signal may be sent to the financial institution between the start and the end to inform that the service is in use. By doing this, if the usage time is long, there is no need to worry about not knowing whether it has finished or not. When a financial institution notifies a user of the possibility of fraud using such a method, it is of course necessary to take a defensive posture as a system. By doing so, it is also possible to eliminate the need for the monitoring device 10 to compare screen images for false screen determination.

FIG. 8 is a diagram showing an example of a user registration table. The monitoring device 10 captures not only the screen of the user terminal 30 but also the image of the user to be monitored in order to report information on the account holder. The user registration table is a table that is set in the user information storage unit 12 for the monitoring device 10 by a user who is an administrator, and is stored in the user information storage unit 12. In the user registration table, not only users to be watched over, but also family members living together can be registered as users. In the user registration table, it can be set whether or not to be watched for each cohabitant, and by providing the user registration table, it becomes easier to identify users to be watched from among images of users. Furthermore, even if there are multiple users to be monitored, it can be handled. Further, even if one user terminal 30 is shared by a plurality of people, it can be handled. Furthermore, if one user has multiple accounts, it is possible to set whether or not each account should be monitored.

In the example of the user registration table in FIG. 8, user D (wife), who is the supervisor (administrator) of the entire family account, registers user B (grandfather) in the monitoring device 10 as a priority monitoring target (monitoring target). ing. Furthermore, the C Securities account owned by User A (husband) is also subject to monitoring in consideration of the amount of damage in the event of fraud. User C (daughter), who is a minor, does not currently have an account with a financial institution, so she is not subject to monitoring here, but she does not have access to sites other than financial institutions (for example, sites that are undesirable or dangerous for young people). Sites, etc.) can also be monitored, and in that case, they can be monitored.

Note that when reporting to your own financial institution, you only need the holder's name and account number, as shown in Figure 8, but when reporting to another bank, you only need the holder's name and date of birth, as mentioned above. . By doing so, other financial institutions can quickly identify accounts where fraudulent transactions may occur and take measures such as suspending or suspending transactions in advance of an attack. In other words, the notification to other financial institutions is to prepare for a list attack (bot attack) in which a robot repeatedly enters an ID and password on the login screen of the site.

<Third embodiment>
FIG. 9 is a diagram showing an image of the third embodiment of the present invention. This embodiment is a system of a financial institution in which a financial institution server 40 plays a central role and cooperates with a monitoring device 10 connected through a network to protect a user's account from fraud. Here, the monitoring device 10 transmits its own status information to the financial institution server 40. The status information includes an identifier (ID) of the monitoring device 10 that is registered in advance with the financial institution.

The status information includes whether or not the monitoring device 10 is in a monitorable state, and when the monitoring device 10 is in a monitorable state, it identifies users near the user terminal 30, and when a user to be monitored is found, the user is identified. Contains authentication information. The monitoring device 10 is in a monitoring enabled state when the monitoring device 10, including peripheral devices such as an external camera, is powered on and is in a state where it can capture images of the screen of the user terminal 30 and the user near the terminal. say something The user may be authenticated using a facial image captured by the imaging unit 11 of the monitoring device 10. Furthermore, as described above, in case face authentication is not possible due to the user's location, ear type authentication (auricular authentication) may be used in combination. If the monitoring device 10 is smart glasses, the user may take off the glasses and take an image of his or her face and ears using the camera on the glasses.

FIG. 10 is a diagram showing the functional configuration of the third embodiment. In this embodiment, the monitoring device 10 includes an imaging section 11, a user information storage section 12, and a financial institution communication section 19. The financial institution server 40 also includes a monitoring device information receiving section 41, a monitoring device registration data storage section 44, and a monitoring device state determining section 45.

The imaging unit 11 is the same as in FIGS. 2, 3, and 7, but since user authentication is important in the third embodiment, the camera of the imaging unit 11 is positioned so that it can capture images of the screen and the user at the same time. It is necessary to install As described above, there may be a plurality of cameras, and the cameras may be built into the monitoring device 10 or may be external.

The user information storage unit 12 is a storage device that registers information necessary for authenticating users. As shown in FIG. 8 described in the second embodiment, the user may register not only the person to be watched but also all the people who may use the user terminal 30, such as family members living together.

The financial institution communication section 19 is a control section for communicating with the financial institution server 40 over the Internet. The financial institution communication department 19 may be connected to a Wi-Fi (registered trademark) device, and does not necessarily have to be built into the main body of the monitoring device 10.

The monitoring device information receiving unit 41 receives monitoring device information including the monitoring device ID and status information of the monitoring device 10 from the monitoring device 10 . The monitoring device information may include an image of the monitoring device itself. The status information includes whether the monitoring device 10 is in a monitoring possible state (the main unit and peripheral devices are powered on and there are no abnormalities), a monitoring state in which the camera is operating, or a monitoring impossible state in which there is an abnormality in the camera, etc. This is information indicating that the

The monitoring device registration data storage unit 44 is a storage device on the financial institution side that stores data associating the monitoring device ID with the user ID of the account holder. The monitoring device registration data is created when a monitoring service contract is concluded with a financial institution.

If the monitoring device ID included in the monitoring device information received by the monitoring device information receiving unit 41 is registered in the monitoring device registration data, the monitoring device status determination unit 45 accepts account transactions from the user who is the account holder. Determine whether it is good or not. Here, the determination condition may be any of the following.
(1) If the monitoring device 10 is powered on and in a monitorable state, transactions on the account are permitted.
(2) The monitoring device 10 is in a monitoring enabled state, the user authentication on the monitoring device side is completed, and the combination of ID and user of the monitoring device 10 matches the one registered at the financial institution. If so, allow trading on the account.
(3) The monitoring device 10 is in a monitoring enabled state, captures images of both the screen of the user terminal 30 and the user, and the face image of the authenticated user matches the authentication face image registered on the financial institution side. Transactions on the account are permitted on the condition that the

The determination of the conditions (1) to (3) above is performed by the financial institution based on information from the monitoring device 10. Moreover, the strength of safety increases from (1) to (3). That is, in (1), the condition is satisfied simply by the operation of the monitoring device 10, but in (2), the condition is not satisfied unless there is a set of the ID of the monitoring device and the user authenticated on the user side. In (3), the condition is satisfied only when not only the user authentication on the monitoring device side but also the user authentication on the financial institution side is completed. Furthermore, it may be added as a condition that the terminal screen imaged by the monitoring device 10 is an Internet banking screen of a financial institution.

FIG. 11 is a flowchart showing the processing in case (2) described above as an example. Although a detailed explanation will be omitted here, it should be noted that even if the monitoring device 10 is in the monitorable state and transaction enabled state, if the transaction is not completed within a predetermined time, the transaction returns to the transaction disabled state. Further, it goes without saying that the cases (1) and (3) above can also be similarly shown in a flowchart. Note that in these flowcharts, the processing order of each step may be changed as long as the relationship between input and output of each step is not impaired.

FIG. 12 is a diagram showing an example of a screen displayed from a financial institution in the third embodiment. If the account transaction is permitted (transaction allowed state), the screen of FIG. 12(a) is displayed, and if it is not permitted (transaction prohibited state), the screen of FIG. 12(b) is displayed. In particular, it is desirable that the monitoring device 10 display whether account transactions can be monitored or not. As shown in the figure, an illustration of the monitoring device, for example, an image of a “watching bear” may be obtained from the monitoring device information, and the current state of the monitoring device may be displayed on the screen.

The functional configuration of the system or device described above is just an example, and one functional block (database and functional processing unit) may be divided or multiple functional blocks may be combined into one functional block. . In each functional processing unit, the CPU (Central Processing Unit) built into the device reads computer programs stored in storage devices such as ROM (Read Only Memory), flash memory, SSD (Solid State Drive), and hard disks. , is realized by a computer program executed by a CPU. In other words, each functional processing unit reads and writes necessary data such as tables from a database (DB) stored in a storage device or a storage area in memory, and in some cases, This is realized by controlling hardware (for example, input/output devices, display devices, communication interface devices). Further, the database (DB) in the embodiment of the present invention may be a commercial database, but it also means a simple collection of tables and files, and the internal structure of the database itself does not matter.

<Effects of embodiment>
(First embodiment)
According to this embodiment, in order to prevent bank transfer fraud and phishing fraud in account transactions performed by users from their own terminals, it is possible for the user who holds the account (a system different from the financial institution's system) to take measures. can.

Specifically, the monitoring device of this system captures an image of the financial institution's screen displayed on the user terminal, determines the authenticity of the screen, and if the screen is determined to be a fake screen, displays the user terminal and/or Since a notification is sent to the financial institution's system, it is possible to quickly alert people to suspected phishing scams. In addition, the monitoring device can set alert actions for each user, and can emphasize or adjust the alerting method, especially if the user is elderly or has impaired judgment. be able to. In addition, the monitoring device may be a figurine placed next to the user or smart glasses worn by the user; if the monitoring device is a figurine, it alerts the user by sound, light, or vibration; displays a warning superimposed on the lens of smart glasses. If the user is a priority target for monitoring, a stronger warning is given. By doing so, it is possible to issue a warning suitable for the user and the usage environment. In addition, the monitoring device identifies the financial institution that the user is about to use from the screen image of the financial institution displayed on the user terminal, and starts the transaction when the user actually starts a transaction on the online banking of that financial institution. Since the system of the financial institution is notified of the completion of the transaction, the financial institution can also check whether there are any discrepancies between the notification from the monitoring device and the status of the online banking screen. Additionally, since the monitoring device continuously captures images of the user's screen and captures images of the screen that is displayed immediately after clicking the URL on the screen, it is possible to determine the authenticity of the screen from the information of the displayed URL. Can be done.

(Second embodiment)
According to the present embodiment, it is possible to provide a system that notifies a financial institution when the monitoring device detects that a phishing fraud is suspected against a user's account.

Specifically, in a reporting system in which a monitoring device and a financial institution server cooperate, the monitoring device images a screen related to account transactions displayed on a user terminal, determines the authenticity of the captured screen image, and detects a false screen. If it is determined that the screen is a screen image, the name and date of birth of the holder obtained from the screen image are reported to the financial institution server. The financial institution server then temporarily suspends account transactions of the notified holder, thereby making it possible to prevent fraudulent transactions. In addition, the financial institution server will also report the reported name and date of birth to the servers of other financial institutions, so if there is an account with the same name at another financial institution, transactions in that account will be temporarily suspended. can be stopped automatically.
In addition, the monitoring device identifies the financial institution that the user is about to use from the screen image of the financial institution displayed on the user terminal, and when the user terminal actually starts a transaction from the system of that financial institution, The financial institution's system is notified of the transaction start and transaction end signals, and the financial institution server that receives the notification of the transaction start checks whether the user's screen is up on the system and confirms that it is up. If this is not possible, a reminder can be sent to the user terminal. Further, the financial institution server can notify the user terminal of a warning if there is any transaction instruction even though the financial institution server has received the transaction completion notification.

(Third embodiment)
According to the present embodiment, it is possible to provide a system in which a financial institution's system permits transactions in a user's account on the condition that the monitoring device is in a monitorable state.

Specifically, the financial institution system receives the status information of the monitoring device from the monitoring device, and accepts account transactions from the user on the condition that the monitoring device is in a state where monitoring is possible. It is possible to prohibit account transactions without the above conditions. In addition, on the condition that the user has been authenticated using the user's facial image captured by the monitoring device, and the combination of the ID of the monitoring device and the user matches the one registered at the financial institution, the account can be verified. Since transactions are accepted, account transactions can be prohibited unless the combination of the monitoring device and the user matches. Further, since account transactions are accepted on the condition that the captured facial image matches the authentication facial image registered at the financial institution, stronger user authentication can be performed. In addition, even when the user's facial image cannot be recognized, the monitoring device can authenticate the user (with considerable accuracy) based on the positional relationship between the monitoring device and the user terminal, the clothes worn by the user, and/or images of the user's surroundings. guess) can be done. Furthermore, even when the user's face image cannot be recognized, the monitoring device can perform user authentication using ear-shaped authentication, so it can perform user authentication even when it can only capture images of the user facing sideways or backwards.

Note that the first to third embodiments may be implemented individually, or may be implemented in combination. Further, in the above embodiments, account transactions on financial institution sites have been described, but the present invention can also be applied to countermeasures against phishing scams on sites in other industries. In addition, since the monitoring device of the present invention can obtain the terminal screen and the user's image at any time close to the user, it can be used not only to prevent phishing fraud, but also to be used as an identity verification means that combines the screen and the user in various systems. In other words, it can also be used as an authentication means where the authentication method differs depending on the screen.

Although the present invention has been described above using the embodiments, it goes without saying that the technical scope of the present invention is not limited to the range described in the above embodiments. It will be apparent to those skilled in the art that various changes or improvements can be made to the embodiments described above. Furthermore, it is clear from the claims that forms with such changes or improvements may also be included within the technical scope of the present invention.

In the above embodiments, the present invention has been described as a product invention and a system related to a monitoring device, but the present invention can also be regarded as a method invention or a computer program invention.

10 Monitoring device 11 Imaging section 12 User information storage section 13 False screen determination section 14 False screen information storage section 15 False screen registration section 16 Alert operation section 17 Judgment result notification section 18 Judgment device communication section 19 Financial institution communication section 20 Judgment device 21 Monitoring device communication section 22 False screen determination section 23 False screen information DB
24 False screen registration unit 25 Judgment result notification unit 30 User terminal of monitored person 31 User terminal of guardian 40 Financial institution server 40A Financial institution server A 40B Financial institution server B 40C Financial institution server C 41 Monitoring device information receiving unit 42 Account Transaction restriction section 43 Financial institution cooperation section 44 Monitoring device registration data storage section 45 Monitoring device status determination section 50 Sites other than financial institutions 100 Screen example of fake SMS email 110 Screen example of fake site guided by SMS 200 Email Example of a screen of a fake email 210 Example of a screen of a fake site guided by an email

Claims (6)

A financial institution system in which a user holds an account,
receiving status information of the monitoring device from a monitoring device that is associated with the account and monitors images of the user;
A financial institution system that accepts transactions in the account from the user on the condition that the monitoring device is in a monitorable state. Provided that the authentication of the user has been completed using the user's face image captured by the monitoring device, and the combination of the ID of the monitoring device and the user matches that registered on the financial institution side, The financial institution system according to claim 1, wherein the financial institution system accepts transactions for the account. 3. The financial institution system according to claim 2, wherein transactions for the account are accepted on the condition that the captured facial image matches an authentication facial image registered at the financial institution. When the user's face image cannot be recognized, the monitoring device determines whether the user is the account holder based on the positional relationship between the monitoring device and the user terminal, the clothes worn by the user, and/or images of the user's surroundings. The financial institution system according to claim 2 or 3, wherein the financial institution system authenticates that there is a financial institution. From claim 2, wherein when the user's face image cannot be recognized, the monitoring device images the shape of the user's ears and authenticates the user as an account holder through ear-shaped authentication. The financial institution system described in any one of items 4 through 4. A method performed by a computer in a system of a financial institution in which a user holds an account, the method comprising:
receiving status information of a monitoring device associated with the account and for monitoring images of the user;
A method characterized by accepting transactions in the account from the user on the condition that the monitoring device is in a monitoring enabled state.

Images