JPH10105627A - Method for protecting electronic currency transaction machine from being lost or stolen and electronic currency transaction machine - Google Patents

Abstract

PROBLEM TO BE SOLVED: To protect an electronic currency transaction from being lost or stolen by letting the owner of an electronic currency transaction machine carry equipment, which mutually exchanges an existence confirm signal with a paired electronic currency transaction machine through fine radio waves and issues an caution in the state of stopping receiving the existence confirm signak from the electronic currency transaction machine, with him. SOLUTION: An electronic money card 10 performs the key transmission of an existence confirm radio wave in respect to an existence confirm inquiry from counter parts 21 paired with that card itself (1), spontaneously transmits the existence confirm radio wave when the existence confirm inquiry from the counter parts 21 is not dispatched within specified time (2) and spontaneously transmits the existence confirm radio wave when impulse more than a certain degree is received (3). Besides, in case of (2) and (3), the electronic money card 10 temporarily stops a transaction function so as not to transact with the other electronic money card 10. The electronic money card 10 can transmit or stop an SOS while receiving the transmitting instruction or stopping instruction of the SOS from an artificial satellite 25.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic currency transaction system of an electronic currency transaction system in which a pair of electronic currency transaction machines, which are issued from a banking machine of a financial institution and store electronic currency, trade electronic currency. The present invention relates to a method for preventing a lost or stolen electronic currency transaction machine, and particularly relates to a method for easily finding a lost or stolen electronic currency transaction machine, or an electronic currency transaction machine stored in a lost or stolen electronic currency transaction machine. The present invention relates to a method of preventing the loss and theft of an electronic currency transaction machine and a digital currency transaction machine, which can easily collect a currency and other data.

[0002]

2. Description of the Related Art Conventionally, for example, Japanese Patent Publication No. 8-27815 (title of invention; electronic asset data transfer method) and Japanese Patent Publication No.
As disclosed in Japanese Patent Publication No. 111723 (Title of Invention; Electronic Currency System), a data carrier (electronic currency transaction machine) or a transaction module storing an electronic currency (electronic money) corresponding to a currency is used between individuals or individuals. There is a technology that enables commercial transactions or transactions such as money lending between a company and a non-individual such as a store.

[0003]

However, in the technology disclosed in the above-mentioned publication, attention is paid to the recovery of the electronic currency transaction machine or its stored data in case of loss or theft of the electronic currency transaction machine. There was no problem.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and a first object of the present invention is to prevent an electronic currency transaction machine from being dropped from the body or lost due to being left behind after use. It is an object of the present invention to provide a method for preventing a currency exchange machine from being lost or stolen.

A second object of the present invention is to provide an electronic currency transaction machine which has been lost or stolen or an electronic currency transaction machine which can easily collect digitized currency and other data stored in the electronic currency transaction machine. Is to provide.

Further, a third object of the present invention is to temporarily stop the function of the electronic currency transaction machine every time a specified time elapses so as to enhance the safety of the electronic currency transaction machine, It is an object of the present invention to provide an electronic currency transaction machine which can cancel the function stop of the electronic currency transaction machine by inputting a password changed to the electronic currency transaction machine.

[0007]

In order to achieve the first object, a method for preventing the loss and theft of an electronic currency transaction machine according to the present invention uses a weak radio wave to confirm the existence of the electronic currency transaction machine. In the state where signals are sent and received and the existence confirmation signal from the electronic currency exchange machine is no longer received, the owner of the electronic currency exchange machine carries a device that issues a warning to the owner of the electronic currency exchange machine, and the electronic currency transaction It is characterized by preventing loss and theft.

Further, in order to achieve the second object, the electronic currency transaction machine of the present invention provides another electronic currency which is owned by a lost or stolen rescue organization via a wireless line of a first carrier frequency. First means for, when receiving a transfer instruction to the transaction machine, encrypting the data including the electronic currency held as transfer data and transmitting the encrypted data on a wireless line of a second carrier frequency different from the transfer instruction; When receiving encrypted transfer data from another electronic currency transaction machine through the wireless line of the second carrier frequency, transfer data holding means for holding transfer data from the other electronic currency transaction machine; The transfer data held in the transfer data holding means is transmitted to a predetermined financial institution via a network, and the transfer processing means for transferring the data is transferred from the lost and stolen rescue organization to the wireless line of the first carrier frequency. When receiving the relocation command stop command is Flip stops the transmission of the transfer data, characterized in that it comprises a disposal means for disposing of electronic currency itself held, the.

[0009] When transmitting the transfer data to the radio line of the second carrier frequency, the transfer data is transmitted after the transaction is disabled.

Further, in order to achieve the third object, the electronic currency transaction machine of the present invention disables itself at predetermined time intervals, cancels the transaction impossible state by inputting a password, and It is characterized in that the password is changed when the user becomes incapable of dealing at predetermined time intervals.

[0011]

Embodiments of the present invention will be described below in detail with reference to the drawings.

Note that data transmitted and received between devices in the embodiment of the present invention is encrypted so that it can be decrypted only between devices to be transmitted and received unless otherwise specified. A known encryption technique is used for this encryption.

FIG. 1 is a system configuration diagram showing an embodiment of an electronic currency transaction system to which the present invention is applied. An electronic currency transaction machine (= MM, hereinafter referred to as an electronic money card) issued from a bank A cashier. 10) and 11a-11
c and the electronic money card 12 issued from the teller machine of the bank B. The broken line in FIG. 1 clearly indicates the relationship with the issuing bank.

Among them, the electronic money cards 10 and 1
Reference numeral 2 denotes a single electronic money card having no parent-child relationship. However, the electronic money cards 11a to 11c have parent-child relationships between a parent, a child, and a grandchild in a teller machine of Bank A.

Each of the electronic money cards 10, 11a to
11c and 12 are also configured to be portable, and can be exchanged between a bank teller or another electronic money card, or electronic money cards in a parent-child relationship, or between POS terminals 13 and 14 capable of trading electronic currency EM. It is possible to trade in the currency EM. Banks A and B have network 1
5 so as to be able to trade electronic currency EM between banks through this network 15.

However, transactions of electronic money cards 11b and 11c having a parent as their own higher-level machine are restricted by attributes set by the parent. The lower device cannot delete the attribute set from the upper device without permission. However, the addition of attributes and the attributes added by the user can be freely deleted.

The electronic currency EM to be traded is encrypted according to an encryption algorithm using a known symmetric key cryptographic notation technique and transferred to a trading partner.

These portable electronic money cards 10,
11a to 11c and 12 are set with identification information (ID) indicating that they are owned by an individual when issued from a bank machine.

The POS terminals 13 and 14 are also issued from the teller machines of the banks A and B, and at the time of the issuance, identification information (ID) is set to indicate that they are owned by non-individuals.

When trading the electronic currency EM, the solid line S
As shown by, a session (communication path) is established with the partner device. This session (communication path) is established by means using a known technique such as a direct connection using a cable or the like, light, a weak radio wave, or electromagnetic coupling.

The electronic money cards 10, 11a to 11c,
12 is provided with a currency holder for each budget cost item in order to support a transaction based on a budget plan.
A communication program with a personal computer is built in so that the settings can be arbitrarily set in steps 17 and 18. Initially, a standard holder structure is prepared, and any one of them is selected and corrected as necessary for use.

The electronic money cards 10, 11a to 11c,
12 includes a connection interface 110 with the personal computer 17, a connection interface 111 with another electronic money card 12, and a connection interface 112 with the POS terminal 19, as shown as a representative of the electronic money card 11a in FIG. Further, a display unit 114 for displaying the balance and transaction amount of the electronic currency EM in the currency holder, a payment key 116, a balance introduction key 117, and an acceptance key 11
8. A function key unit 115 including operation buttons such as a cancel key 119 and a signature key 120, and a character key unit 122 including keys such as numerals and alphabets and a cursor movement key 121 are provided on the operation surface side.

The payment key 116 is a key operated when the contents of the transaction with the partner are agreed upon and the electronic currency EM is actually transferred to the partner machine. When a transaction is made with the POS terminal 19, a "payment approval key" installed on the POS terminal 19 may be operated instead of operating the payment key 116.

The balance introduction key 117 is for displaying the balance of the electronic currency EM in the currency holder. Each time the balance introduction key 117 is operated, the balance of the next currency holder is displayed.

The accept key 118 is a key operated when accepting the electronic currency EM from the partner machine.

The cancel key 119 is a key operated when canceling a transaction. When the cancel key 119 is operated, the session established with the partner machine is disconnected.

The signature key 120 is a key operated when transmitting the signature of the transfer source of the electronic currency EM to the partner machine.
Used for transactions such as checks.

FIG. 2 shows an example in which the connection interfaces 110 and 111 to the personal computer 17 and other electronic money cards 12 are connected by cables, and the connection interface 11 to the POS terminal 19 is connected by weak radio waves. However, the present invention is not limited to this.

However, connecting the connection interface 112 to the POS terminal 19 by a weak radio wave is more effective for efficient processing when trading the electronic currency EM with an unspecified number of customers. is there.

FIG. 3 shows the electronic money cards 10, 11a-
It is a functional block diagram showing internal functions of 11c and 12,
When roughly classified, the memory 130, the CPU 135, and the clock /
A timer 136, an input / output interface 137, a keyboard interface 138 with operation keys on the operation surface, a display interface 139, an interface 140 with an external personal computer, an interface 141 with another electronic money card, an interface 142 with a POS terminal , Transceiver 14 for communicating with artificial satellites
4. A transmitter / receiver 143 for transmitting / receiving to / from another electronic money card, a transmitter / receiver 145 for transmitting / receiving to / from a counter part to be described later, and for performing position recognition by GPS (position recognition system using artificial satellite). GPS receiver 146 is provided.

In the memory 130, a safe 1301 for storing the electronic currency EM (electronic money) and a substitute money storage 130 for storing substitute money such as coupons.
2. A transaction log storage 1303 for storing the transaction history, a money holder 1304 for storing the amount of the electronic currency EM for each purpose of use, a storage area 1305 for storing the issuing bank ID,
A storage area 1306 for storing the own apparatus ID, a storage area 1307 for storing the upper apparatus ID, a storage area 1308 for storing the lower apparatus ID, and a storage for storing the attributes of the own apparatus used for restricting use of the electronic currency EM. Area 1309, personal computer communication professional storage area 1310, transaction machine program storage area 1311, these storage areas 131
Transfer area 1313 for transmitting and receiving transfer data between 0 and 1311, storage area 13 for encryption / decryption program
12. Transmission / reception program 1 with counter parts to be described later
315, a communication program 1316 with an artificial satellite, a transmission / reception program 1317 with another electronic money card,
A transmission / reception data storage area 131 for storing data transmitted / received by these programs 1315, 1316, and 1317
8 are provided.

FIG. 4 shows the electronic money card 11b and the POS
13 to pay for purchased items in electronic currency EM
It is explanatory drawing which shows the process in a transaction machine in the case of performing in and the flow of electronic money EM schematically. In FIG. 4,
Personal transaction machines and electronic money cards are the same.

[0033] The carrier of the electronic money card 11b has a POS
In the case where the user purchases a product at the store where the electronic money card 13 is installed and intends to complete the transaction by paying with the electronic currency EM in the electronic money card 11b,
The electronic money card 11b is brought close to the reader of the POS 13, and the electronic money card 11b is
A session with the OS 13 is established.

In this state, if the charge amount and the product attributes such as the product name and the product category of the purchased product read by the bar code reader of the POS 13 are sent from the POS 13, the electronic money card 11b Investigate whether there is a money holder for each use item (for each purpose of use) corresponding to the category, and if it does not exist, or if it does exist, if the retained amount is less than the billed amount, determine that transaction is impossible, The payment of the electronic currency EM is not permitted (step 1701).

However, if there is a money holder for each use item (for each purpose of use) corresponding to the product category and the retained amount exceeds the billed amount, then a use restriction check is performed (step 1702).

More specifically, prohibition / cancellation of withdrawal from a cash machine of a bank set in the storage area 1309 of the own device attribute,
Maximum number of electronic money transfers per day, limit per transaction, transaction limit per day, reporting time to higher-level device (end of month, etc.), date of birth of lower-level device carrier, ID of higher-level device to report
Then, the attribute information is extracted, and the attribute information is compared with the product category, product name, billing amount, and the like. If the transaction prohibition condition is satisfied, payment of the electronic currency EM is prohibited (step 1702).

The case corresponding to the transaction prohibition condition refers to, for example, a case where a minor tries to purchase a cigarette, and a message to that effect and a corresponding product name are displayed on the display unit 114.

However, if the conditions do not correspond to the transaction prohibition conditions, the payment button 116 is operated, and the payment of the electronic currency EM is permitted under the condition that the purchase intention of the purchaser is determined, and the electronic currency corresponding to the billed amount is paid. The EM is extracted from the safe 1301, encrypted, and transmitted to the POS 13.

The POS 13 receiving the electronic currency EM is
If a receipt is issued when the electronic currency EM is paid, the receipt and its ID are transmitted to the electronic money card 11b. If a message indicating that a coupon is to be used is received when the electronic currency EM is paid, the amount corresponding to the coupon is subtracted from the billed amount, and the remainder is regarded as the billed amount. Then, a coupon is issued by this purchase of a new product, transmitted to the electronic money card 11b, and the session is disconnected.

After the session is disconnected, the electronic money card 11
b stores the transaction history including the receipt in the transaction log storage area 130;
3 and end the transaction processing.

It should be noted that whether or not to use a coupon and whether or not to request a receipt are set in advance before purchasing a product. This is set by a key operation of the character key unit 122.

FIG. 5 is a system configuration diagram showing a configuration of a main part of a loss / theft prevention function in an electronic currency transaction system to which the present invention is applied, and the same parts as those in FIG. 1 are denoted by the same symbols. In the following configuration, data transmitted / received between the devices is encrypted so that it can be decrypted only between the transmission / reception target devices unless otherwise specified. A known encryption technique is used for this encryption.

In FIG. 5, reference numeral 10 denotes an electronic money card storing electronic money and the like. Reference numeral 21 denotes a counter part that forms a pair with the electronic money card 10 and that prevents the electronic money card 10 from being lost or stolen. Reference numeral 22 denotes an emergency part of the electronic money card 10, and the electronic money card 1
0 stores the telephone number of the destination in the case of loss and theft.

Reference numeral 23 denotes an emergency reception device for carrying a lost or stolen report of the electronic money card 1 or collection and delivery of electronic money; An artificial satellite for giving an instruction to the electronic money card 10 as an instruction target, 26 is each financial institution that has issued the electronic money card 10, and 20 is a store machine installed in a financial institution or a public facility.

The outline of the function of each device will be individually described below.

(1) Electronic Money Card 10 In addition to the electronic money transaction function described above, the electronic money card 10 has the following functions to prevent loss and theft.

<Transmission of Presence Confirmation Radio Wave for Preventing Loss and Theft> A presence confirmation radio wave is transmitted in response to a presence confirmation inquiry from the counter part 21 that forms a pair with itself.

If the presence confirmation inquiry from the counter part 21 has not arrived within the specified time, the presence confirmation radio wave is spontaneously transmitted.

When a certain degree of impact is received, a presence confirmation radio wave is transmitted spontaneously.

In the case described above, the electronic money card 10 temporarily stops its transaction function so that it cannot make a transaction with another electronic money card 10.

<Sending and Stopping SOS When Lost or Stolen> The electronic money card 10
The SOS can be transmitted or stopped in response to the transmission instruction or the stop instruction.

In order to collect the electronic money from the lost or stolen electronic money card 10, the SOS is transmitted in the SOS data so that the other electronic money card 10 cannot use the electronic money (EM). The electronic money held by the electronic money card 10 exists in an encrypted form.

When the SOS is transmitted, the transaction function is stopped so that a transaction with another electronic money card 1 cannot be made.

Further, when stopping the SOS, the electronic money held is discarded.

<Reception of SOS> Electronic Money Card 10
Can receive the SOS transmitted by another electronic money card 10.

The electronic money card 10 receiving the SOS
Captures the SOS into the own electronic money card 10 and notifies the holder of the own electronic money card 1 at an appropriate time by vibration / sound / flashing or the like that "the SOS is held and must be delivered". If the holder of the electronic money card 10 receiving the SOS does not deliver it within a certain period, the electronic money card 10 receiving the SOS may stop its function. Whether to suspend or not suspend can be set by the financial institution depending on the bank credit of the owner.

The electronic money card 10 stores an encrypted photograph of the person, and cannot be replaced.

<Intensity of Radio Wave> The output of the radio wave transmitted from the electronic money card 10 to the counter part 21 is larger than the presence confirmation inquiry radio wave transmitted from the counter part 22.

(2) Counter part 21 <Purpose of counter part 21>
It is for early detection of loss of the electronic money card 10,
It forms a pair with the electronic money card 10. When the electronic money card 10 is separated from the holder's body by a specified distance or a specified time, the electronic money card 10 notifies the holder.

Usually, it is attached to an accessory / watch / glasses / belt buckle or the like which is always carried with the body of the holder.

FIG. 6 is a functional block diagram showing the configuration of the counter part 21. The CPU 210, a program 211 for transmission and reception between transaction machines with another electronic money card stored in the memory, a liquid crystal display (LCD) 212, Buzzer 21
4, a transmitter / receiver 216 with the electronic money card 10 forming a pair, an interface with the transmitter / receiver 216, an antenna 217, a metal fitting 218 for fixing to a part of clothes and portable goods, and a search button 219. ing.

<Neighborhood Existence Confirmation Function> Counter Part 21
Makes an inquiry about the existence of the corresponding electronic money card 10 at specified time intervals by radio waves. The electronic money card 10 that has received the inquiry responds with the above-described confirmation of the presence of the own card. If a response from the electronic money card 10 cannot be received within the specified time, the counter part 21
By vibrating / sounding / blinking itself, the owner of the counter part 21 is notified of the fact.

Also, when the electronic money card 10 receives the existence confirmation transmitted by itself, the counter part 21
By vibrating / sounding / blinking itself, the owner of the counter part 21 is notified of the fact.

<Temporary Suspension of Neighborhood Confirmation Function> The holder can temporarily suspend the neighborhood presence confirmation function. In this case, the counter part 21 informs the electronic money card 10 paired with the counterpart 21 to that effect.

<Mode> The holder of the electronic money card 10 usually carries the counter part 21 together with the electronic money card 10. The counter part 21 is usually carried on the body so that it is difficult to separate from the body. In addition, a mobile phone in which the counter part 21 is previously incorporated in accessories such as a necklace, a ring, a bracelet, a nose ring, glasses, and a belt buckle may be used.

In this case, the function can be enhanced to display the received azimuth / distance data based on the presence confirmation received from the electronic money card 10. In addition, the closer to the electronic money card 10, the more the vibration / sound / blinking can be controlled by the intensity of the received radio wave.

Since the counter part 21 itself may be lost, it is desirable that two or more electronic money cards 10 be carried around the user.

(3) Emergency part 22 <Purpose / Function> The emergency part 22 is an electronic money card 1
This is a telephone card for delivery for lost or stolen 0.

One or a plurality of electronic money card IDs and a telephone number of the lost or stolen center 24, which is the destination, are set. The loss and theft of the electronic money card 10 can be reported to the loss and theft center 24 by inserting the emergency part 22 into the emergency reception device 23 or the telephone.

Since the emergency parts 22 are inexpensive, about ten emergency parts 22 having the same contents are held for one electronic money card 10 or all the electronic money cards 10 owned by the family, and are provided in various places. It is desirable to keep them scattered.

Even if the electronic money card 10 and the counter part 21 are robbed together with the emergency part 22 due to a burglar / robbery / threatening, the emergency part 22 which is not robbed is left somewhere. Can be kept.

It is desirable to carry the emergency parts 22 so that the electronic money card 10 can be immediately delivered when it is lost or stolen.

(4) Emergency Reception Device 23 <Purpose> The emergency reception device 23 is a device for delivering the lost or stolen electronic money card 10 to the lost and stolen center 24. Also, the lost and stolen electronic money card 1
It is also a device for delivering the SOS received from 0 to the lost and stolen center 24.

<Function> The emergency parts 22 are transferred to the emergency reception device 2
3, the emergency reception apparatus 23 displays one or a plurality of electronic money card IDs registered in the inserted emergency parts 22 on the display unit of the emergency reception apparatus 23. Then, the electronic money card ID selected by the person who inserted the emergency part 22 is used as the electronic money card ID of the lost and stolen electronic money card 10,
Delivered to

<Installation Location> The emergency reception device 23 is installed in the main branch of a financial institution, post office, police station police box, station, hospital, public facility, and the like.

(5) Lost and stolen center 24 <Purpose> The lost and stolen center 24 is a management center for the electronic money card 10 that has been lost and stolen.

<Function> The lost and stolen center 24 instructs the artificial satellite 25 to transmit the SOS to the electronic money card 10 of the electronic money card ID reported from the emergency reception apparatus 23, and the electronic money card Inform the financial institution 26 that has issued 10 of that fact.

When the electronic money card 10 held by the lost and stolen electronic money card 10 is collected, the electronic money card 10 is instructed to stop the transmission of the SOS to the artificial satellite 25, and The fact is notified to the financial institution 26 that issued the card 10.

(6) Artificial Satellite 25 <Purpose> The artificial satellite 25 is a relay device for transmitting an instruction from the lost and stolen center 24 to the electronic money card 10.

<Function> The artificial satellite 25 is connected to the emergency reception device 2.
3 instructs the electronic money card 10 of the electronic money card ID instructed to send or stop the SOS.

The outline of the loss / theft prevention function will be described below.

First, prevention of loss and theft will be described.

(1) Case 1 <Normal> The counter part 22 constantly inquires of the electronic money card 10 about the existence confirmation shown in FIG. 9 at specified time intervals. In response to this inquiry, the electronic money card 10
Sends a presence confirmation response shown in FIG. Therefore, it is possible to mutually confirm that the other party is in the vicinity of the own device within a range where the radio waves transmitted from the respective devices reach.

(2) Case 2 <When the magnitude of the impact is greater than a specified value due to the drop of the electronic money card 10> The holder of the electronic money card 10 drops the electronic money card 10 while walking, and the electronic money card 10 If the drop impact received by the electronic money card 10 is equal to or greater than the prescribed value, the electronic money card 10 itself transmits the data of the presence confirmation spontaneous transmission shown in FIG.

When receiving this data, the counter part 21 warns the holder of the electronic money card 10 by vibrating / sounding / flashing the counter part 21 itself.
As a result, the holder who continues walking without noticing that the electronic money card 10 has been dropped can immediately notice that the electronic money card 10 has been dropped, and can be prevented from being lost due to a drop or the like.

(3) Case 3 <Drop impact is less than specified> The electronic money card 10 constantly monitors whether or not the presence confirmation inquiry from the counter part 21 is within a specified time. Therefore, after the existence confirmation inquiry transmitted from the counter part 21 does not reach the electronic money card 10, after the specified time elapses, the data of the spontaneity confirmation transmission is transmitted from the electronic money card 10. Since the radio wave output of the existence confirmation spontaneous transmission transmitted by the electronic money card 10 is larger than the output of the existence confirmation inquiry radio wave from the counter part 21, the counter part 21 receives the data of the existence confirmation spontaneous transmission in this case. become. In response to this reception, the counter part 21 warns the electronic money card 10 by causing the counter part 21 itself to vibrate / sound / blink.

The counter part 21 measures the distance between the counter part 21 and the electronic money card 10 based on the strength of the received presence confirmation response radio wave (reception electric field strength). If this measurement distance becomes larger than the specified distance,
The counter part 21 warns the holder of the electronic money card 10 by causing the counter part 21 itself to vibrate / sound / blink. Further, the counter part 21 displays the data based on the azimuth / distance data sent from the electronic money card 10.
Increase sound / flashing.

(4) Case 4 <Forgotten, but the existence confirmation inquiry reaches the electronic money card 10> Since the distance is measured, this is the same as the case of “the drop impact is below the specified value”.

(5) Case 5 <Presence confirmation inquiry does not arrive but spontaneous existence confirmation transmission from the electronic money card 10 reaches the counter part 2> In this case, the case 3 is the same as the case <drop impact is below the regulation>. .

(6) Case 6 <Spontaneous Confirmation of Existence from Electronic Money Card 10 Does Not Reach Counter Part 21> In this case, the holder of electronic money card 10 will use counter part 2 to look for a reminder. Become.

The search button 2 of the counter part 21
When the counter part 21 receives the self-check of the existence check transmitted from the electronic money card 10 by pressing the button 19, the counter part 21
Is displayed based on the azimuth / distance data sent from the electronic money card 10.
Flashing can be strengthened.

(7) Case 7 <Lost> If the search is not found or the warning of the counter part 21 is not noticed, that is, if it is lost,
The emergency parts 22 will be used to deliver to the lost and stolen center 24.

(8) Case 8 <Theft> This case is the same as Case 7 “Lost”.

The following describes case 7 “lost” and case 8 “stolen”.
The operation of the system for the case (1) will be described. The operation of the system in these cases is the same.

When the electronic money card 10 is lost or stolen, the holder of the electronic money card 10
Use 2. The emergency part 22 includes an electronic money card I of one or more electronic money cards 10 in advance.
D and the telephone number of the lost and stolen center 24 are set. This is inserted into a nearby telephone or an emergency part 22 insertion slot of the emergency reception device 23. When the emergency part 22 is inserted into the telephone, the telephone displays one or a plurality of electronic money card IDs registered in the inserted emergency part 22 on the display unit of the telephone. Emergency parts 2
2 inserts the electronic money card 10 which was lost and stolen from the displayed electronic money card ID.
Is selected. Electronic money card 1 whose selected electronic money card ID was lost and stolen
The electronic money card ID becomes 0 and is automatically sent to the lost and stolen center 24.

The emergency part 22 can be inserted into the emergency reception device 23. The operation of the emergency reception device 23 in this case is the same as the operation of the telephone.

If there is only one electronic money card ID registered in the emergency part 22, this electronic money card ID is lost and stolen.
The electronic money card ID is 0.

[0098] The telephone or the emergency receiving device 23 into which the emergency part 22 is inserted transmits the electronic money card ID determined in this way to the lost and stolen center 24.

The emergency reception device 23 is installed in a main branch of a financial institution, a post office, a police station, a police box, a station, a hospital, a public facility, or the like.

The emergency reception device 23 sends the electronic money card I
The lost and stolen center 24 that has received the D registers the received electronic money card ID in the lost and stolen database, and transmits the electronic money card ID to the artificial satellite 25.

The artificial satellite 25 receives the electronic money card ID transmitted from the lost and stolen center 24, and converts the electronic money card 10 having the received electronic money card ID into the SOS.
It designates the sending electronic money card 10 and broadcasts the SOS sending instruction.

The electronic money card 10 receiving this SOS broadcast from the artificial satellite 25 ignores the broadcast if the electronic money card ID being broadcast is not the electronic money card ID of the own electronic money card 10.

However, when the electronic money card ID being broadcast is the electronic money card ID of the own electronic money card 10 (hereinafter, this electronic money card 10 is referred to as card S), the card S stops its own transaction function. I do. Then, the built-in balloon connected to the card S with a vinyl tube or the like is discharged to the outside, and the built-in gas is injected to inflate the balloon. As a result, if the card S is not caught on something, it floats in the water and broadcasts from the air.

Even if the card S is stuck on something and cannot float in the water, the SOS is broadcast. The SOS is broadcast to the next device.

A. An electronic money card 10 having an electronic money card ID having a specific relationship with the electronic money card ID of the card S (hereinafter, referred to as a card R) b. Emergency reception device 23 c. Lost and stolen center 24 One or more of the above devices that have received the SOS from card S receive the SOS broadcast from card S, and take in the SOS into their own device.

Hereinafter, the operation of the electronic money card 10 (card R) in which the SOS is taken will be described.

The card R calculates a report time for notifying the holder of the card R of the receipt of the SOS using the electronic money card ID of the card R, for example, "what day after the SOS reception date". Then, when the SOS reception report date comes,
The holder of the card R is notified of the SOS reception by sound / flashing or the like.

[0108] The holder of the card R who knows this is installed at a nearby telephone or a financial institution main branch, post office, police station, police box, station, hospital, public facility, etc. within a fixed period from the report date. By causing the emergency reception device 23 and the card R to communicate with each other, the SOS held by the card R is transmitted to the lost and stolen center 24 via the emergency reception device 23.

The lost and stolen center 24 is connected to the emergency reception device 23
Knows the electronic money card ID of the lost and stolen electronic money card 10 (card S) from the SOS collected via
Own center 2 whether or not the case of this card S has been resolved
Investigate the solution database held in No.4. As a result of the investigation, if the case has not been registered in the solution database, the case is resolved and the registered contents of the solution database are deleted.

Next, the lost and stolen center 24 sends the card S in order to stop broadcasting the SOS of the card S.
Is transmitted to the artificial satellite 25.

Next, the lost and stolen center 24 sends the SOS of the card S to the financial institution 26 that issued the card S.
The financial institution 26 that has received the SOS sends the electronic money card ID of the card S to the holder registered when the card S was issued or the changed holder who subsequently notified the electronic money card ID. Notify that money etc. has been collected. Of course, the collected SOS has a card S
It contains all the electronic money and other data of the amount held by the card S when the OS was broadcast.

The artificial satellite 25 broadcasts an SOS stop instruction to the card S instructed by the lost and stolen center 24. The devices that receive the broadcast of the SOS stop instruction and perform some operation are the card S and the card R.

When the card S receives this stop instruction, the card S
Stop the OS broadcast and disconnect the balloon. In addition, the presence confirmation is spontaneously transmitted.

As for the card R, the card R is the card S
Card S holding the SOS having the electronic money card ID of the electronic money card ID of the card S,
Discard the SOS with. Therefore, some cards R that have received the SOS from the card S may discard the SOS before reporting it to the holder of the card R. May have received the SOS and discarded it.

The electronic money card 1 held by the individual
In the case where the individual electronic money card 10 that is the transaction partner is the card R that holds the SOS data, the store machine 20 that does the transaction with 0 does not report the SOS holding to the card R holder. Also takes in the SOS of the plurality of cards S held by the card R from the electronic money card 10,
It has a function of transmitting the acquired SOS to the lost and stolen center 24. That is, the store machine 20 is the emergency reception device 2
It also has a proxy function of 3.

Further, the electronic money card 10 in which the SOS has been taken in this way discards all the SOS held therein.

Next, measures for preventing the use of a person who is not a valid holder of the electronic money card 10 will be described with reference to FIGS. 7 and 8. FIG.

<24h Effective Password> As shown in FIG. 7, a required number of users set a password of mixed authenticity as a password. Here, Pt1 to Ptn are true passwords, and Pf1 to Pfm are false passwords.

The method of setting a password here is characterized in that not only a true password is input but also a fake password is intentionally required. In addition, the number of true passwords and the number of false passwords to be entered are different depending on the day of the week or the date.

This method will be described with reference to FIG. If the password is not entered before the first use of the day, the electronic money card 10 is in a temporarily stopped function. First,
In inputting the password, all the mixed passwords registered in the electronic money card 10 are displayed on a display device provided in the electronic money card 10. The holder of the electronic money card 10 selects a password to be input from the displayed mixed password as follows. When inputting by selecting a password, the electronic money card 10 sets the password to one.
Each time the player is selected, he does not ask "What's next?" That is, it is left to the person who entered the password whether the input of the password is completed or whether the password is subsequently input. And
If the input password is different from the password of the day as a result of the declaration of the end of the password input, simply display "password error". If this "password error" has reached the prescribed number of times consecutively, the use of the prescribed number of days is stopped.

Next, a specific method of inputting a password will be described. If the current day is Sunday, the password is input before the first use of the day. However, since it is Sunday, the password to be input is one true password and three false passwords. . As a result, the electronic money card 10 can be used on Sunday. Then, this password becomes invalid at midnight the next day. That is, from midnight of the next Monday, unless two new true passwords and two false passwords are input, the electronic money card 10 cannot be used on the following Monday.

The same applies to FIG. The only difference between FIG. 7 and FIG. 8 is whether the password is changed on a day of the week or on a date.

Thus, even if the person who steals the electronic money card 10 investigates the attributes of the valid holder and guesses the password, one true password is selected in the same manner as in the other password input methods. Since the possibility is high, the use of a person who is not a valid holder of the electronic money card 10 can be prevented with a high probability.

Also, the electronic money card 10 stolen by a stolen person without entering a password can be used because the electronic money card 10 is stolen together with the counterpart 21,
Also, this is only when the function stop instruction from the artificial satellite 25 to the stolen electronic money card 10 is not in time for the use of the stolen person on the day of the theft. And only on the day of the theft.

The electronic money card 10 can set the limit of the amount of money that can be used in one day as a preset value, and can temporarily increase the amount. Further, even if the daily usage limit is increased, the original preset value is returned after a prescribed time has elapsed.

Therefore, by using two types of password methods, a password method for activating the function of the electronic money card 10 and a password method for increasing the daily usage limit, the amount of damage caused by theft is further reduced. be able to.

If the password includes attributes of the user (for example, birthday, telephone number, room number, etc.),
A password can be deduced by investigating the person's personal background. Therefore, by intentionally including the attribute of the cardholder's lies in the password, it becomes difficult to estimate the password, and the effect of preventing unauthorized use can be further improved.

FIG. 9 shows the data contents of the existence confirmation inquiry 40 transmitted from the counter part 21 to the electronic money card 10, and includes the electronic money card ID 41 and the inquiry code 4.
Consists of two.

The electronic money card ID 41 specifies the electronic money card 10 and the counter part 21 of the electronic money card 10, and is unique in the system. The inquiry code 42 is a code indicating an existence confirmation inquiry from the counter part 21 to the electronic money card 10.

The electronic money card ID 41 includes an issuing financial institution branch code 413 indicating the branch of the issuing financial institution 26 that issued the electronic money card 10, and an issuing financial institution code 4 indicating the issuing financial institution 26 to which the issuing financial institution branch belongs.
12 and country code 4 indicating the country to which the issuing financial institution 26 belongs
11 and other data 414 as other data.

FIG. 10 shows the data content of the existence confirmation response 50 transmitted from the electronic money card 10 to the counterpart 21 in response to the existence confirmation inquiry to the electronic money card 10.

The electronic money card ID 51 is the same ID as the electronic money card ID 41. The longitude and latitude 52 are the electronic money card 10 received by the electronic money card 10 from the GPS system (position confirmation system using artificial satellites).
Is the latitude and longitude information indicating the current position of. The calling time 53 is
This is the time when the electronic money card 10 transmitted the existence confirmation response 50, and stores information on hours, minutes, seconds and microseconds. The response code 54 indicates that it is response data from the electronic money card 10 to the presence confirmation inquiry from the counter part 21.

FIG. 12 shows the data content of the existence confirmation spontaneous transmission 60 transmitted from the electronic money card 10 to the counter part 21, and the electronic money card ID 61 is the same as the electronic money card ID 41. The latitude and longitude 62 is information having the same meaning as the latitude and longitude 52. The calling time 63
This is information having the same meaning as the transmission time 53. The spontaneous transmission code 64 indicates that the presence confirmation was sent unilaterally from the electronic money card 10 without the presence confirmation inquiry from the counter part 21.

FIG. 13 shows the data contents of the function stop 70 transmitted to the electronic money card 10 to notify the stop of the existence confirmation inquiry from the counter part 21 to the electronic money card 10. The electronic money card ID 71 is the same as the electronic money card ID 41. The function suspension time 72 indicates a time interval at which the existence confirmation inquiry is suspended. The function stop code 73 indicates a function stop.

FIG. 14 is a diagram showing the classification of functions of the electronic money card 10 and the function of dealing with other machines. The classes of functions are classified into first to third grades. Transaction or communication with the emergency reception device 23 is also possible in the class. However, in the first-level function stop mode, transactions with the shop machine 20 are prohibited. Also, in the 1st and 2nd class shutdown modes,
Password entry is prohibited.

The electronic money card 10 is turned on when the power-on switch is pressed for a short time, and when the power-on switch is pressed for a long time, the power is turned on and the transaction or communication with only the emergency reception device 23 becomes possible. Furthermore, even if the power-on switch is pressed for a long time while the power is on, it is possible to make a transaction or communication with only the emergency reception device 23.

FIG. 15 shows the data content of the SOS transmission instruction 80 transmitted from the lost and stolen center 24 to the artificial satellite 25. The artificial satellite ID 81 is a code for specifying the artificial satellite 25 that receives the SOS transmission instruction 80. The SOS transmission instruction code 82 is an instruction content for the artificial satellite 25, and is a content for instructing the electronic money card 10 of the lost or stolen electronic money card ID 83 to broadcast an SOS transmission instruction. Electronic money card ID8
Reference numeral 3 denotes an electronic money card ID of the electronic money card 10 which has been reported and received as lost or stolen.

FIG. 16 shows the data content of the SOS transmission instruction broadcast 90 for broadcasting the SOS transmission instruction to the electronic money card 10 of the electronic money card ID 83 lost and stolen from the artificial satellite 25. SO
The S transmission instruction code 91 indicates that this broadcast is SO
This indicates an S transmission instruction. The electronic money card ID 92 indicates an SOS transmission instruction to the electronic money card 10 having this ID.

FIG. 17 shows the data content of the SOS stop instruction 100 transmitted from the lost and stolen center 24 to the artificial satellite 25. The artificial satellite ID 101 is a code for specifying the artificial satellite 25 that receives the SOS stop instruction 100. SOS
The stop instruction code 102 is the content of an instruction to the artificial satellite 25, and is a content to instruct the electronic money card 10 of the electronic money card ID 103 to broadcast an SOS stop instruction.

FIG. 18 shows that the SOS is transmitted from the artificial satellite 25 to the electronic money card 10 of the electronic money card ID 152.
This is the data content of the SOS stop instruction broadcast 150 that broadcasts the stop instruction. The SOS stop instruction code 151 indicates that this broadcast is an SOS stop instruction. Electronic money card ID15
2 indicates that the SOS stop instruction to the electronic money card 10 having this ID is given.

FIG. 19 shows an electronic money card ID 92 (= electronic money card ID 16) instructed to transmit SOS by the SOS transmission instruction broadcast 90 from the artificial satellite 25.
2) SO broadcast by the electronic money card 1
This is the data content of S160. The SOS code 161 is
This indicates that this broadcast is an SOS. The electronic money card ID 162 is the electronic money card ID of the electronic money card 10 broadcasting the SOS. The latitude and longitude 163 is latitude and longitude information indicating the current position of the electronic money card 10 received by the electronic money card 10 from the GPS system. Calling time 16
Reference numeral 4 denotes a time when the electronic money card 10 broadcasts the SOS, and stores information on hours, minutes, seconds, and microseconds. Stored electronic money 165
Is encrypted electronic money stored in the electronic money card 10. Other stored data 166 is the electronic money 1 stored in the electronic money card 10.
The stored data other than 65 is encrypted.

FIG. 20 shows the data contents of the emergency part 22. 171 is data for additional functions. The electronic money card ID 172 is an electronic money card ID, and can store a plurality of electronic money card IDs. The emergency reception device telephone number 173 is the telephone number of the emergency reception device.

FIG. 11 shows the data contents of the lowest order function from the counter part 21 to the electronic money card 10, the electronic money card ID 181 and the function restart code 18.
2 according to the contents of the function restart code 182,
The function stop state of the first to third classes is released.

FIG. 21 is a flowchart showing a basic operation relating to the prevention of loss and theft of the electronic money card 10.

The electronic money card 10 has a sub power supply used for the purpose of the present invention and a main power supply used for the original purpose of the electronic money card 10.

When the main power supply is turned on, the condition shown in FIG.
The common process shown in the flowchart of FIG. 0 is executed (step 2104). Then, upon returning from the common processing shown in FIG. 30, the operation shifts to the operation during main power-on shown in FIG.

If the main power supply is turned off while the main power supply is on, the main power supply is turned off after the owner of the electronic money card 10 is notified by a display / voice or the like that the main power supply is to be turned off. The process ends (steps 2101 to 2103).

After the main power supply is turned on, the event waiting state is released. Then, what event has occurred is identified.

By this separation, the occurrence events of transaction with the emergency reception device 23, transaction with another machine / operation inside the machine, impact detection, own money card ID reception, reception of other money card ID, timeout, etc. are determined. (Steps 2105 to 211
0).

Then, a process corresponding to the event is executed (steps 2111 to 2116).

Hereinafter, each occurrence will be described individually.

(1) If the transaction is with the emergency receiving apparatus 4, the common processing shown in FIG. 30 is executed as shown in FIG.
1).

(2) If the transaction is with another machine / operation within own machine, the sub-operation shown in FIG. 30 is executed (step 230).
1) When the process returns from the common process, the target transaction is executed as shown in the detailed flowchart of FIG.
(Step 2302). Next, it is checked whether or not the counterparty machine is the shop machine 20 (step 2303).

If the counterparty machine is the shop machine 20, it is checked whether or not the own electronic money card 10 holds the SOS (step 2304). The data is transmitted to the shop machine 20 as the partner machine (step 2305). Thereafter, the held SOS is discarded (step 2306), and the process ends, that is, an event waiting state is set.

If it is determined in the step 2304 that the SOS of the other electronic money card 1 is not held, the process is terminated as it is, that is, the event wait state is set.

If it is determined in step 2303 that the counterparty machine is not the shop machine 20, the process is terminated as it is, that is, the event wait state is set.

(3) When the impact is detected, that is, when there is an impact exceeding the specified value, the transaction function of the own electronic money card 10 is stopped as a third-level transaction function as shown in the detailed flowchart of FIG. 24 (step 2401). ).

[0158] The third-level transaction function suspension is a state in which a password is required to be input in the next user operation of the own electronic money card 10.

Next, the data 50 of the existence confirmation spontaneous transmission shown in FIG. 12 is transmitted (step 2402). Then, T
The timer 1 is set (step 2403), and the process is terminated, that is, an event wait state is set.

(4) When the data in which the own money card ID exists is received, as shown in the detailed flowchart of FIG. 25, the type of the received data is analyzed. As a result of this analysis, the received data is received data 40 (step 2501) of the existence confirmation inquiry from the counter part 21 shown in FIG. 9, and received data 70 (step 2502) of the function stop notification from the counter part 21 shown in FIG. Received data 180 of the function resumption notification from the counter part 21 shown in FIG. 21 (step 2503), received data 90 of the SOS transmission instruction broadcast from the artificial satellite 25 shown in FIG. 16 (step 2504), and the artificial satellite 25 shown in FIG. From the SOS stop instruction broadcast received data 150 (step 2505).

Hereinafter, each received data will be individually described.

First, when an existence confirmation inquiry is received from the counter part 21 shown in FIG. 9 (step 2501),
Reset the timers of T1 and T2 (step 25)
06). Then, it is checked whether or not the own electronic money card 10 is in the presence confirmation spontaneous transmission (step 2507). If the presence confirmation spontaneous transmission is being performed, the presence confirmation spontaneous transmission 60 shown in FIG. 12 is transmitted (step 2508). Thereafter, the timer T1 is set (step 2509), and the process is terminated, that is, an event waiting state is set.

If the result of the check in step 25070 is that the own electronic money card 10 is not in the presence confirmation spontaneous transmission, the presence confirmation response transmission 50 shown in FIG. 10 is transmitted (step 2510). Thereafter, the existence confirmation response data 50 shown in FIG. 10 is transmitted (step 2513). Next, the timer T2 is set (step 2511), and the process is terminated, that is, an event waiting state is set.

Next, when the function stop data 70 shown in FIG. 13 is received from the counter part 21 (step 250).
2) The transaction function of the own electronic money card 10 is set to the third-level transaction function suspension (step 2512). Then, the function stop time 7 in the function stop data 70 set as the function stop time
2 is set as a timer T3 (step 2514), and the process is terminated, that is, an event waiting state is set.

Next, when the function resumption data 180 shown in FIG. 11 is received from the counter part 21 (step 2).
503) and reset the timer T3 (step 251).
5) Release the suspension of the third-level trading function (step 25)
16). Thereafter, the existence confirmation response data 50 shown in FIG.
Is transmitted (step 2516). Next, the timer T2 is set (step 2518), and the process is terminated, that is, an event waiting state is set.

Next, S from the artificial satellite 25 shown in FIG.
If the OS transmission instruction broadcast data 90 is received (step 2504), the transaction function of the own electronic money card 10 is suspended in the first-class transaction function (step 251).
9). Next, the balloon contained in the electronic money card 10 is released (step 2520), and the gas contained therein is injected into the released balloon (step 2521).
Then, "Please send the electronic money card 10 to an arbitrary financial institution 26" on the display device of the own electronic money card 10.
Is displayed (step 2522).

Thereafter, the electronic money and other data stored in the electronic money card 10 are encrypted by different encryption methods (step 2523), and the SOS data 160 shown in FIG. 19 is transmitted (step 252).
4). Thereafter, the timer T4 is set (step 252).
5) End, that is, an event waiting state.

Next, S from the artificial satellite 25 shown in FIG.
When the OS stop instruction broadcast data 150 is received (step 2505), the electronic money and other data stored in the own electronic money card 10 are discarded.
(Step 2526). And own electronic money card 10
Of the first-class trading function (step 252)
7) Stop transmitting the SOS data 160 (step 2)
528).

Thereafter, a display meaning "Please deliver the electronic money card 10 to an arbitrary financial institution 26" is displayed on the display device of the own electronic money card 10 (step 2529).
Then, the releasing balloon is separated from the own electronic money card 10 (step 2530), and the existence confirmation spontaneous transmission data 60 shown in FIG. 12 is transmitted (step 2531).
Thereafter, the timer T5 is set (step 2532), and the process is terminated, that is, an event waiting state is set.

Next, when data having another money card ID is received, as shown in the detailed flowchart of FIG. 27, the type of the received data is analyzed. As a result of this analysis, the received data is divided into SOS data 160 (step 701) shown in FIG. 19 and SOS stop instruction broadcast data 150 (step 2702) from the artificial satellite 25 shown in FIG.

Hereinafter, each received data will be described individually.

First, when the SOS data 160 shown in FIG. 19 is received (step 2701), it is checked whether the SOS data 160 of the electronic money card 10 having the same ID as the electronic money card ID 162 in the received data is already held. (Step 2703). As a result of this check,
If not, the SOS data 160 is stored in its own electronic money card 10 as it is (step 2704). Thereafter, based on the electronic money card ID of the own electronic money card 10, the own electronic money card 1
The time at which data retention of the SOS data 160 should be reported to the holder of the SOS data 160 is calculated (step 2705), and the time of reporting the calculated result is stored in the timer T6 (step 270).
6). Then, the process is terminated, that is, an event waiting state.

As a result of the check in step 2703, if the data is already stored, the processing is terminated without any operation, that is, an event wait state is set.

Next, S from the artificial satellite 25 shown in FIG.
When the OS stop instruction broadcast data 150 is received (step 2702), it is checked whether or not the SOS data 160 of the electronic money card 10 having the same ID as the electronic money card ID 152 in the received data is held (step 2707). . As a result of this check, if the SOS data 160 is retained, the retained data of the SOS data 160 is discarded (step 2708). After that, the display device of the own electronic money card 10 displays “Data of own electronic money card 10 is stored in the own electronic money card 10. When the SOS notification recommendation is in progress (step 2709), it is determined whether the SOS notification recommendation is based on the SOS data 160 of the electronic money card 10 of the electronic money card ID 162 in the received data. A check is made (step 2710). If so, SO
The S notification recommendation is stopped (step 2711), and the process is terminated, that is, an event waiting state is set.

As a result of the check in step 2707, otherwise, nothing is done and the processing ends, that is, an event wait state is set.

SOS held in step 2708
If the SOS data 160 has not been delivered by the specified deadline after discarding the data 160
(Step 2712) It is checked whether or not the non-delivery is the non-delivery of the electronic money card 10 having the same ID as the electronic money card ID 152 of the SOS stop instruction broadcast data 150 just received (step 2713). As a result of this check, if so, release the secondary trading function suspension
(Step 2714) The third-level transaction function is stopped (Step 2715). Thereafter, a "main power-off instruction" is issued (step 2716), and the operation branches off to main power-off operation.

As a result of the check in step 2713, if not, the process is terminated, that is, an event wait state is set.

Next, when a timeout event is detected (step 2100), as shown in the detailed flowchart of FIG. 28, which timeout event is further analyzed.

As a result of this analysis, the time-out event is the time-out of the timer T1 due to the impact (step 28).
01), timeout of timer T2 such as no inquiry from counter part 21 (step 2802), timeout of timer T3 without notification of function resumption (step 2803), timeout of timer T4 during SOS transmission (step 2804), stop of SOS Timeout of timer T5 later (step 2805) Timeout of timer T6 when SOS notification recommendation date arrives (step 2806), Timeout of timer T7 when SOS notification recommendation expires
(Step 2807).

Hereinafter, each time-out event will be individually described.

If the timer T1 times out due to an impact (step 2801), the third-class transaction function is stopped.
(Step 2808). Then, the existence confirmation spontaneous transmission data 60 shown in FIG. 12 is transmitted (step 2809). Thereafter, the timer T1 is set (step 2810), and the process is terminated, that is, an event waiting state is set.

If the timer T2 times out due to no inquiry from the counter part 21 (step 280).
2), the third-level trading function is suspended (step 281)
1). Then, the presence confirmation spontaneous transmission data 6 shown in FIG.
0 is transmitted (step 2812). Then, the timer T2
Is set (step 2813), and the process is terminated, that is, an event wait state is set.

If the timer T3 has timed out without notification of function resumption (step 2803), the tertiary transaction function is stopped (step 2814). Then, the existence confirmation spontaneous transmission data 60 shown in FIG. 12 is transmitted (step 281).
5). Thereafter, the timer T2 is set (step 281).
6), end, that is, an event waiting state.

If the timer T4 times out during SOS transmission (step 2804), the first-class transaction function is stopped (step 2817). Then, the SOS data 160 shown in FIG. 19 is transmitted (step 2818). Thereafter, the timer T4 is set (step 2819), and the process is terminated, that is, an event waiting state is set.

If the timer T5 times out after the SOS is stopped (step 2805), the first-class transaction function is stopped (step 2820). Then, it transmits the existence confirmation spontaneous transmission data 60 shown in FIG. 12 (step 2821). Thereafter, the timer T2 is set (step 2822), and the process is terminated, that is, an event waiting state is set.

If the timer T6 times out when the SOS notification recommendation date arrives (step 2806), the display device of the own electronic money card 10 indicates that "data of another own electronic money card 10 is held in own electronic money card 10." Please use the emergency reception device 23 to deliver by the year, year, month, and day ”, that is, make an SOS notification recommendation (step 2823). Thereafter, the delivery expiration date is calculated based on the own electronic money card ID and is set as the timer T7 (step 2824), and the process ends, that is, enters an event waiting state.

If the timer T7 for the SOS notification recommendation expiration has timed out (step 2807), the second-level transaction function is stopped (step 2825). Then, on the display device of the own electronic money card 10, "The data of the own electronic money card 10 is held in the own electronic money card 10, but the notification is not received within the time limit of year x month x day. Therefore, the electronic money card 10 has been suspended in the second-class transaction function. Please deliver it using the emergency reception device 4 as soon as possible, that is, the SOS delivery expiration date and delivery recommendation are made (step 2826). ). Then, the process is terminated, that is, an event waiting state.

Next, a common process which is called from each process of the electronic money card 10 and performs a process will be described with reference to the flowcharts of FIGS.

When common processing is performed by being called from each processing of the electronic money card 10, the state of the electronic money card 10 or what kind of transaction request is analyzed. As a result of this analysis, in the common processing, the first-level transaction function suspension state (step 3001), the second-level transaction function suspension state (step 3002), the third-level transaction function suspension state (step 3003), the emergency Transaction request with the reception device 23 (step 300
4), others (step 3005), etc.

Hereinafter, each state will be described individually.

First, in the case of the first-class transaction function suspension state
(Step 3001) The display device of the present electronic money card 10 displays the meaning of "Please bring the present electronic money card 10 to the nearest financial institution", that is, recommends bringing to the financial institution 26 (Step 30060). Then, a "main power off instruction" is issued to turn off the main power (step 3007).

Next, in the case of the state where the secondary trading function is suspended
(Step 3002) It is checked whether it is a transaction request with the emergency reception apparatus 23 (Step 3008). If the request is a transaction request with the emergency reception device 23, a session with the emergency reception device 23 is established (step 3009), and all SOS data held by the electronic money card 10 is transmitted to the emergency reception device 2
3 (step 3010), and after the transmission, releases the session with the emergency reception device 23 (step 301).
1). Next, all the SOS data being held are discarded (step 3012), the suspension of the second-level trading function is canceled (step 3013), and the third-level trading function is stopped (step 301).
4). Then, a "main power off instruction" is issued to turn off the main power (step 3015).

If it is determined in step 3008 whether the request is a transaction request with the emergency reception device 23 or not, and if the transaction request is not a request with the emergency reception device 23, the display device of the own electronic money card 10 displays the message “own electronic money card”. 10 holds the data of the other own electronic money card 10,
The electronic money card 10 has been suspended for the second-class transaction because no notification was received within the deadline of year x month x day. Please deliver using the emergency reception device 23 as soon as possible ", that is, make an SOS notification expiration and notification recommendation (step 3016). And
Return to caller.

Next, in the case where the third-level trading function is suspended
(Step 3003), the input of the password is requested (Step 3017). Then, it is checked whether the input password is a prescribed password (step 3).
018) If the password is the specified password, the tertiary transaction function suspension is released (step 3022), and the process returns to the calling source.

However, if the input password is not the prescribed password, the wrong number of times is counted continuously, and it is checked whether or not this count has reached the prescribed number (step 3019). As a result of the check, if the number of consecutive errors has reached the specified number, the first-class transaction function is stopped (step 3020). Then, a "main power off instruction" is issued to turn off the main power.

If the result of the check in step 3019 is that the number of consecutive errors has not reached the prescribed number, the flow returns to step 3018 to request a password again.

Next, in the case of a transaction request with the emergency reception device 23 (step 3004), a session with the emergency reception device 23 is opened (step 3023), and all SOS data held by the electronic money card 10 are held. Is transmitted to the emergency reception device 23 (step 3024), and when transmission is completed, the session with the emergency reception device 23 is released (step 3025). Next, all SOS data being held is discarded (step 302).
6) A "main power off instruction" is issued to turn off the main power (step 3027).

In other cases (step 3005), it is checked whether the operation is "main power ON operation" (step 302).
8) If yes, step 3 of "password request"
017 ", and if not, return to the calling source.

The above is the operation relating to the function of preventing the electronic money card 10 from being lost or stolen.

FIGS. 32 to 34 are flowcharts showing the operation of the counter part 21. Hereinafter, the operation of the counter part 21 will be described below.

The power supply of the counter part 21 is one power supply, and is basically always on.

In the operation of the counter part 21, the operation waits in the event waiting state, and the operation starts when the waiting state is released. Then, what event has occurred is identified. By this separation, the power is turned on (step 3201), and the existence confirmation response to the inquiry is received (step 3201).
2), spontaneous transmission data 60 for confirming the existence of the electronic money card 10
(Step 3203), a request for stopping the function from the user (step 3204), a request for releasing the function stop from the user (step 320).
5), request from the user to cancel the battle system (step 320)
6), time-out (steps 3207 to 3211), power-off, and the like.

Hereinafter, each occurrence will be described individually.

First, when the power is turned on (step 3201), the data of the existence confirmation inquiry 40 shown in FIG. 9 is transmitted to the electronic money card 10 (step 3212).
Thereafter, the timer T10 is set (step 321).
3) End, that is, an event waiting state.

Next, when the existence confirmation response data 50 to the inquiry shown in FIG. 10 is received (step 3202),
It is checked whether or not the system is ready for battle (step 3124). In the case of a battle system, response data 5 to the existence confirmation inquiry
The report of the 0 reception is displayed on the display device of the counter part 21 to mean "receive a response to the existence confirmation inquiry" (step 3215). Note that this display may be a numeric code if the display area of the display device is small. If a display device cannot be provided, the information may be reported by voice, the number of vibrations, or the like. After that, the timer T
11 is set (step 3216), and the process is terminated, that is, an event wait state is set.

If not, the timer T9 is set and the timer T10 is reset (step 321).
7) End, that is, an event waiting state.

Next, in the case of receiving the spontaneous transmission data 60 for confirming the presence of the electronic money card 1 shown in FIG. 12 (step 3203), the timer T9 and the timer T10 are reset (step 3218), and the display device of the counter part 21 is displayed. Displays the meaning of “self-originated transmission existence confirmation reception” (step 321).
9) Then, the presence confirmation inquiry data 40 shown in FIG. 9 is transmitted to the electronic money card 10 (step 3220). Then, in order to determine which timer is to be set, it is checked whether or not the system is ready for battle (step 3221).

If the system is ready for battle, the timer T11 is set (step 3222), and the process ends, that is, the system waits for an event.

If not, the timer T10 is set (step 3223), and the process is terminated, that is, an event wait state is set.

Next, in the case of a function stop request from the user (step 3204), the function stop data 7 shown in FIG.
0 is transmitted to the electronic money card 10 (step 322).
4). Then, the time until the restart set by the user is set to T3.
The timer T3 is set (step 3225), and the timer T9 and the timer T10 are reset (step 322).
6), end, that is, an event waiting state.

Next, in the case of a function stop release request from the user (step 3205), it is checked whether the function is stopped, just in case (step 3227). If the function is suspended, the function resumption data 180 shown in FIG. 21 is transmitted to the electronic money card 10 (step 3228). Thereafter, the timer T8 is set (step 3229), and the process is terminated, that is, an event waiting state is set.

If the function is not stopped, the process is terminated without any operation, that is, an event wait state is set.

Next, in the case of a request from the user to cancel the battle system (step 3206), the battle system is canceled (step 3230), and thereafter, the state is terminated, that is, an event wait state is set.

In the case of timeout, T3, T8, T9,
There are five types, T10 and T11.

[0215] Timer T3 times out (step 3207) to notify that the function suspension time has ended and the function is to be resumed, and a response is received from electronic money card 10 within a specified time after notification of function resumption. Timeout of timer T8 notifying that it could not be performed (step 3208), Timeout of timer T9 notifying that it is time to make an inquiry about presence confirmation to electronic money card 10 (step 3209), In response to the inquiry about the existence confirmation, the timer T10 times out to notify that the response from the electronic money card 10 has not been received within the specified time (step 3210). The timer T11 that indicates that the time to inquire for confirmation has come It is classified as out (step 3211).

Hereinafter, each time-out will be individually described.

First, in the case of a time-out of the timer T3 for notifying that the time for stopping the function is over and the time for restarting the function is reached (step 3207), the function restart data 150 shown in FIG. Send
(Step 3231). After that, set the timer T8
(Step 3232), the process is terminated, that is, an event wait state is set.

Next, after the function resumption notification, if the timer T8 times out to notify that the response has not been received from the electronic money card 10 within the specified time (step 3208), the display of the counter part 21 is displayed. "No response from the electronic money card 10 to the function resumption notification"
Is displayed (step 3233), and the battle system is established.
(Step 3234). Thereafter, the process ends, that is, an event wait state is set.

Next, in the case of a time-out of the timer T9 notifying that the time for inquiring of the electronic money card 10 about presence confirmation has come (step 3209), FIG.
The presence confirmation inquiry data 40 shown in FIG.
0 (step 3235). Then, the timer T1
0 is set (step 3236), and the process is terminated, that is, an event wait state is set.

Next, in response to the inquiry about the existence confirmation to the electronic money card 10, when the timer T10 for notifying that the response was not received from the electronic money card 10 within the prescribed time is timed out (step 3210). ),
The display device of the counter part 21 displays the meaning of "no response from the electronic money card 10 in response to the inquiry about the existence check" (step 3237), and the battle system is established (step 3238). Thereafter, the process ends, that is, an event wait state is set.

In the battle system, the electronic money card 1
In the case of a time-out of the timer T11 notifying that it is time to make an inquiry about the presence confirmation to 0 (step 3211), the existence confirmation inquiry data 40 shown in FIG. 9 is transmitted to the electronic money card 10 (step 3239). .
Thereafter, the timer T11 is set (step 3240),
End, that is, an event waiting state.

Finally, if the power is off, the process ends without doing anything.

FIG. 35 is a flowchart showing the operation of the emergency reception apparatus 23. Emergency reception device 23 using FIG.
The operation of is described below.

In the operation of the emergency reception device 23, it is always in a state of waiting for the reception of a call signal. Then, when a call signal is received, a call from which device is separated is performed, a call from the telephone (step 3501), a call by directly inserting the emergency parts 22 into the emergency reception device 23 (step 3501), Call from the money card 10 (step 350
3) is divided into

Hereinafter, each call will be described individually.

First, in the case of calling from a telephone (step 3501), a session is established with the telephone (step 3504), and data is received from the telephone (step 3).
505) When the reception is completed, the session with the telephone is released (step 3506). Note that there are two types of received data: a lost and stolen electronic money card ID, which is lost and stolen report data, and an SOS transmitted from a lost and stolen electronic money card 10.

After releasing the session with the telephone, the lost and stolen center 24 is called (step 3507), and a session is established with the lost and stolen center 24 (step 3).
508), the data received from the telephone is transmitted to the lost and stolen center 24 (step 3509), and when transmission is completed, the session is released (step 3510). After that, the process is terminated, that is, a call signal reception waiting state is set.

In the case of calling by directly inserting the emergency part 22 into the emergency reception device 23 (step 3501), all of the electronic money card IDs registered in the emergency part 22 are displayed on the display device of the emergency reception device 23. Is determined, and one electronic money card ID to be delivered as the lost and stolen electronic money card 10 is determined (step 3).
511). Thereafter, the emergency parts 22 are discharged (step 3).
512), the operation after step 3507 described above is performed using the determined electronic money card ID as transmission data.

Next, in the case of calling from the electronic money card 10 (step 3503), the electronic money card 1
0 (step 3513), and receives data from the electronic money card 10 (step 351).
4) When the reception is completed, the session with the electronic money card 11 is released (step 3515). Thereafter, the operation after step 3507 described above is performed using the data received from the electronic money card 10 as transmission data.

FIGS. 36 and 37 show the lost and stolen center 2
6 is a flowchart showing the operation of FIG. The operation of the lost and stolen center 24 will be described below with reference to FIGS. 36 and 37.

In the operation of the lost and stolen center 24, it is always in a state of waiting for the reception of a call signal from the emergency reception apparatus 23. When the call signal is received (step 3601), a session is established with the emergency reception device 23 (step 3602), data is received from the emergency reception device 23 (step 3603), and when the reception is completed, the emergency Release the session with the receiving device 23 (step 360)
4). Thereafter, the type of the received data, that is, when the received data is the electronic money card ID (step 3605) When the received data is the SOS data (step 36
06).

Hereinafter, each operation will be individually described.

First, the received data is an electronic money card ID.
If it is a lost or stolen report (step 36
05), it is checked whether the report has been made, that is, whether the electronic money card ID of the report has been registered in the lost or stolen database (step 3607). If the case has not been registered in the lost or stolen database, it is checked whether this case has been solved, that is, whether or not the electronic money card ID sent to the solution database has been registered (step 3608). Only when not registered in both the lost and stolen database and the settlement database, the electronic money card ID sent to the lost and stolen database is registered (step 3609). And
Proceed to step 3610.

If the case has not been registered in the lost and stolen database but has been registered in the solution database, this case has been resolved, and the process is terminated, that is, a state of waiting for the reception of a call signal from the emergency reception apparatus 23.

If the electronic money card ID has been registered in the lost or stolen database as a result of the check in step 3607, it means that the electronic money card ID has already been received. It is in a state of waiting for reception of a call signal from the accepting device 23.

Next, when the received data is the SOS data 160 shown in FIG. 19, that is, when the SOS data 120 is delivered (step 3606), whether the SOS data 160 has been delivered, that is, It is checked whether the electronic money card ID 162 is registered in the lost or stolen database (step 3611). If it is registered in the lost or stolen database, the electronic money card ID 16
2 is deleted from the lost or stolen database (step 3612), and the information related to the electronic money card ID 162 in the SOS data 160 that has been sent is registered in the solution database (step 3613). Then, the process proceeds to step 3610.

If the check at step 3611 reveals that it is not registered in the lost or stolen database,
Further, it is checked whether or not the information related to the electronic money card ID 162 in the SOS data 160 that has been notified is registered in the solution database (step 361).
4). If it is not registered in the solution database, the electronic money card I in the SOS data 160
The information related to D162 is registered in the solution database (step 3615), and the process proceeds to step 3610.

In this case, the electronic money card 10 transmits the SOS data 160 without the holder of the electronic money card 10 having transmitted the delivered SOS data 160 noticing that the electronic money card 10 is lost or stolen,
The electronic money card 10 that has received this has delivered it. But this is not possible. This is because the SOS data transmission instruction is issued from the artificial satellite 25 upon receipt of the report of the loss and theft, and the SOS data is transmitted only by this. However, this is a fail-safe procedure just in case.

As a result of the check in step 3614, if it is found that the SOS data 160 has been registered in the solution database, the SOS data 160 means that the SOS data 160 has already been notified, and the processing ends without performing anything, that is, the emergency reception It is in a state of waiting for a call signal from the device 23.

Next, the operation of the lost and stolen center 24 after step 3610 will be described.

First, a session is established with the artificial satellite 25 (step 3610). There are two types of subsequent operations: loss and theft notification and SOS120 notification.

Hereinafter, each operation will be described individually.

First, in the case of a lost or stolen report (step 3616), the SOS transmission instruction data 80 shown in FIG. 15 is transmitted to the electronic money card 10 of the electronic money card ID that has been notified, in order to transmit the SOS data 160. The session is transmitted to the artificial satellite 25 (step 3617), and then the session with the artificial satellite 25 is released (step 361).
8). Next, a session is established with the issuing financial institution 26 of the electronic money card 10 of the electronic money card ID of the notified electronic money card 10 (step 3619), and the electronic money card 10 of the electronic money card ID of the notified electronic money card ID is lost and stolen. (Step 3620), and when the communication is completed, the issuing financial institution 2
6 is released (step 3621), and thereafter, the session is terminated, that is, a state of waiting for a call signal from the emergency reception apparatus 23 is awaited.

Next, in the case of notification of SOS120,
(Step 3622), Electronic Money Card I Received
In order to cause the electronic money card 10 of D to stop transmitting the SOS data 160, the SOS stop instruction data 100 shown in FIG. 17 is transmitted to the artificial satellite 25 (step 362).
3) Then, the session with the artificial satellite 25 is released (step 3624). Next, the issuing financial institution 2 of the electronic money card 10 of the electronic money card ID that has been notified
6 (step 3625), and transmits the electronic money and other data held by the electronic money card 10 having the lost and stolen electronic money card ID to the issuing financial institution 26 (step 3626). , Release the session with issuing financial institution 26
(Step 3627) Thereafter, the state is terminated, that is, a state of waiting for the reception of a call signal from the emergency reception apparatus 23.

FIG. 38 is a flowchart showing the operation of the artificial satellite 25.

In the operation of the artificial satellite 25, it waits in an event waiting state, and starts operating when this waiting state is released. Then, what event has occurred is identified. By this separation, a call from the lost and stolen center 24 (step 380)
1) The occurrence event of the timer timeout (steps 3802, 3803) is determined.

Hereinafter, each occurrence will be described individually.

First, in the case of calling from the lost and stolen center 24 (step 3801), a session is established with the lost and stolen center 24 (step 3804), and data is received from the lost and stolen center 24 (step 3805). , Release the session with the lost and stolen center 24
(Step 3806). Thereafter, the data received from the lost and stolen center 24 is the SOS transmission instruction data 8 shown in FIG.
It is checked whether it is 0 (step 3807). If the data is the SOS transmission instruction data 80, the SOS transmission instruction broadcast data 90 shown in FIG. 16 is broadcast.
(Step 3808). Then, set the timer T12
(Step 3809) End, that is, the lost and stolen center 24
Waiting for a call from.

If the result of the check in step 3807 is that the received data is not SOS transmission instruction data 80,
That is, if the data is the SOS stop instruction data 100 shown in FIG. 17, the SOS stop instruction broadcast 110 shown in FIG. 11 is broadcast (step 3810).
Thereafter, the timer T13 is set (step 3811),
The process is terminated, that is, a call waiting state from the lost and stolen center 24 is established.

Next, the timeout is classified into a timeout for broadcasting the SOS transmission instruction broadcast data 90 and a timeout for broadcasting the SOS stop instruction broadcast 150.

The following is an explanation for each time-out.

First, if the timer T12 for broadcasting the SOS transmission instruction broadcast data 90 has timed out (step 3802), the SOS transmission instruction broadcast data 90 is broadcast (step 3812). Thereafter, the timer T12 is set (step 3813), and the end, that is, the lost / theft center 2 is set.
4 is in a call waiting state.

Next, a timer T13 for broadcasting the SOS stop instruction broadcast data 150
If the timeout is reached (step 3803), the SOS stop instruction broadcast data 150 is broadcast (step 3814). Thereafter, the timer T13 is set (step 3815), and the process is terminated, that is, a call waiting state from the lost and stolen center 24 is set.

Note that, instead of using the artificial satellite 25,
An SOS transmission instruction or the like may be performed using a base station of the PHS telephone network or an idle time such as a vertical retrace period of a television signal.

[0255]

As is apparent from the above description, according to the present invention, a lost or stolen electronic currency transaction machine or the electronic currency and other data stored in the electronic currency transaction machine can be easily obtained. Can be recovered.

Further, it is possible to prevent the electronic currency transaction machine from being dropped from the body or lost due to being left behind after use.

Further, the function of the electronic currency transaction machine is temporarily stopped every time the specified time has elapsed, and the function stop of the electronic currency transaction machine can be canceled by inputting a password changed every time the specified time. The security of the currency exchange machine can be improved.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram showing an embodiment of the present invention.

FIG. 2 is a diagram illustrating a configuration of an operation surface of the electronic currency transaction machine.

FIG. 3 is a block diagram showing an internal configuration of the electronic currency transaction machine.

FIG. 4 is a diagram illustrating an outline of a process when a transaction is performed between an electronic currency transaction machine and a POS.

FIG. 5 is a system configuration diagram showing a configuration of a main part of a loss / theft prevention function.

FIG. 6 is a functional block diagram illustrating a configuration of a counter part.

FIG. 7 is a diagram showing a first example of a 24-hour valid password.

FIG. 8 is a diagram showing Example 2 of a 24-hour valid password.

FIG. 9 is a configuration diagram of existence confirmation inquiry data (counter parts → electronic money card).

FIG. 10 is a configuration diagram of presence confirmation response data (electronic money card → counter part) by inquiry.

FIG. 11 is a configuration diagram of function restart data (counter parts → electronic money card).

[FIG. 12] Presence confirmation spontaneous transmission data without inquiry
It is a block diagram of (electronic money card-> counter parts).

FIG. 13 is a configuration diagram of function stop data (counter parts → electronic money card).

FIG. 14 is an explanatory diagram showing the contents of a transaction function suspension.

FIG. 15 is a configuration diagram of SOS transmission instruction data (lost and stolen center → artificial satellite).

FIG. 16 is a configuration diagram of SOS transmission instruction broadcast data (artificial satellite → electronic money card).

FIG. 17 is a configuration diagram of SOS stop instruction data (lost and stolen center → artificial satellite).

FIG. 18 is a configuration diagram of SOS stop instruction / SOS discard instruction data (artificial satellite → electronic money card).

FIG. 19 is a configuration diagram of SOS data (electronic money card → electronic money card).

FIG. 20 is a configuration diagram showing data contents of an emergency part.

FIG. 21 is a flowchart showing a basic operation related to prevention of loss and theft of an electronic money card.

FIG. 22 is a flowchart showing a transaction process with the emergency reception device.

FIG. 23 is a flowchart illustrating another machine / in-machine transaction processing.

FIG. 24 is a flowchart showing a shock detection corresponding process.

FIG. 25 is a flowchart showing a process when receiving a self card ID.

FIG. 26 is a flowchart showing a continuation of FIG. 25;

FIG. 27 is a flowchart showing a process when another card ID is received.

FIG. 28 is a flowchart illustrating a timeout process.

FIG. 29 is a flowchart showing a continuation of FIG. 28;

FIG. 30 is a flowchart showing common processing.

FIG. 31 is a flowchart showing a continuation of FIG. 30.

FIG. 32 is a flowchart showing the operation of the counter part.

FIG. 33 is a flowchart showing a continuation of FIG. 32;

FIG. 34 is a flowchart showing a continuation of FIG. 33.

FIG. 35 is a flowchart showing the operation of the emergency reception device.

FIG. 36 is a flowchart showing the operation of the lost and stolen center.

FIG. 37 is a flowchart showing a continuation of FIG. 36;

FIG. 38 is a flowchart showing the operation of the artificial satellite.

[Explanation of symbols]

10, 11a to 11c, 12 ... electronic currency exchange machine, 13,
14 POS terminal, 15 network, 143, 14
4,145 ... Transceiver, 146 ... GPS, 21 ... Counter parts, 22 ... Emergency parts, 23 ... Emergency reception device, 2
4: Lost and stolen center, 25: satellite.

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁶ Identification code FI H04L 9/32 H04B 7/26 109R H04L 9/00 673B (72) Inventor Hideo Yamada 6-81 Onoecho, Naka-ku, Yokohama-shi, Kanagawa Prefecture Address Hitachi Software Engineering Co., Ltd. In-house (72) Inventor Yuichi Takimoto 6-81 Onoecho, Naka-ku, Yokohama-shi, Kanagawa Prefecture Hitachi Software Engineering Co., Ltd. In-house

Claims (5)

[Claims] Claims 1. A method for preventing the loss and theft of an electronic currency transaction in which a pair of electronic currency transaction machines, which are issued from a teller machine of a financial institution and store an electronic currency, trade electronic currency. A device that sends and receives presence confirmation signals via weak radio waves to and from the electronic currency exchange machine and issues a warning to the owner of the electronic currency exchange machine in a state where the existence confirmation signal from the electronic currency exchange machine is no longer received A method for preventing the loss and theft of an electronic currency transaction machine, wherein the method is carried by the owner of the electronic currency transaction machine to prevent loss or theft of the electronic currency transaction. 2. An electronic currency transaction machine, which is issued from a cash machine of a financial institution and exchanges an electronic currency between a pair of electronic currency exchange machines storing an electronic currency, wherein the electronic currency exchange machine is a first electronic currency exchange machine. When receiving an instruction to transfer the electronic currency held by itself to another electronic currency transaction machine through the wireless line of the carrier frequency, encrypts the data including the electronic currency held as transfer data, the transfer instruction and Transmit on a radio line of a different second carrier frequency
And transfer data holding means for holding transfer data from another electronic currency transaction machine when receiving encrypted transfer data from another electronic currency transaction machine via the wireless line of the second carrier frequency. Transfer processing means for transmitting the transfer data held in the transfer data holding means to a predetermined financial institution via a network and transferring the transfer data; and instructing transfer from the lost and stolen rescue organization via the wireless line of the first carrier frequency. An electronic currency transaction machine, comprising: when receiving a stop instruction, stopping transmission of transfer data and discarding the electronic currency held by the electronic currency transaction machine. 3. The electronic currency transaction machine according to claim 2, wherein, when transmitting the transfer data over a wireless line of a second carrier frequency, the transfer data is transmitted after the transaction is disabled. 4. The system according to claim 2, further comprising means for setting itself in a transaction-disabled state at predetermined time intervals, and for canceling the transaction-disabled state by inputting a password.
Electronic currency exchange machine described. 5. The electronic currency transaction machine according to claim 2, further comprising means for changing a password when the user is in a transaction disabled state at predetermined time intervals.