JPS603664B2 - transaction processing equipment - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a transaction processing device that performs a predetermined transaction using a card on which various data including a customer's unique PIN number are recorded, such as an automatic cash dispensing device installed in a financial industry such as a bank. Related to transaction processing devices such as cash machines and automatic teller machines.

This type of transaction processing device compares the PIN data magnetically recorded on the card with the PIN keyed in by the customer, or stores the PIN in the device in advance. The card user's personal identification number is compared with the personal identification number keyed in by the customer, and when these numbers match, it is confirmed that the card user is the person who is eligible for the transaction.

After this confirmation, a predetermined transaction is executed. In financial industries such as banks, transaction processing devices for cash payments and deposits are already widespread.

It is no exaggeration to say that the magnetic recording format of the card used in this transaction processing device is already widely known. Since encoders for recording data on cards are also commercially available, counterfeiting of cards has become relatively easy. In particular, with devices that do not store the PIN number in the device and compare the read data of the card's PIN number with the keyed-in PIN number, a counterfeiter can set the PIN number arbitrarily. Moreover, transactions can be made using this arbitrarily set PIN number.
The purpose of this invention is to detect the use of counterfeit cards at an early stage, and to prevent fraudulent transactions caused by counterfeit cards.

Another object of the present invention is to provide a transaction processing device that can sufficiently deal with failures in the means for preventing fraudulent transactions and that can enable subsequent legitimate transactions. shall be.

Throughout this specification, a "keyword" is one of the codes used to determine whether a recording medium (for example, a magnetic card) used in a transaction processing device is genuine, and is updated every time a transaction is processed. This is the code with . Keywords are recorded on the recording medium, and keywords that have a predetermined correspondence with the keywords on the recording medium are also stored in the memory of the transaction processing device, which is accessed by discussion data (for example, account number) on the recording medium. are recorded for each user (for example, by account number). For each transaction process, the correspondence between the keywords on the recording medium and the keywords in the memory is examined to determine whether the recording medium is being used continuously and correctly. A transaction is permitted only when both keywords have a predetermined correspondence relationship, and a new keyword is created, thereby updating the keywords in the recording medium and memory. DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to a transaction processing device whose terminal device is an automatic cash dispensing machine will be described in detail below with reference to the drawings.

FIG. 1 shows the overall configuration of a transaction processing barrel.

The transaction processing devices are control center 1 and center 1.
It consists of a large number of terminals connected online. Examples of terminals include an automatic cash dispensing machine (hereinafter abbreviated as CD) 2 and a counter processing device (hereinafter abbreviated as WM) 3. The center 1 includes a central processing unit (hereinafter referred to as CPU) 10 that controls communication with each terminal and processes transaction data transmitted from the terminals, and a customer-specific information file (hereinafter referred to as CPU) that stores customer transaction data. A communication controller 12 and a modem 13 are provided for communication with a terminal device.

In processing transaction data, the CPUIO inspects the card, determines whether or not a transaction is possible, performs transaction calculation processing, as will be shown later.
Performs CIFII rewriting, card issuance processing, card inquiry processing, etc. A large number of terminals are connected to the center via a modem 5 and a terminal controller 4, and communications with the center 1 are controlled by these.

The CD2, which is one of the terminals, includes an operation procedure display 22 that sequentially displays the operations that a customer must perform for a payment transaction, a keyboard for inputting a PIN number, a billed amount, etc., a card insertion slot, a cash discharge slot, etc. Customer service panel 2 with
3. A card reader and writer (hereinafter simply referred to as a card reader) 24, which reads the card data attached to the inserted card in the card insertion slot and writes predetermined data to the card, for each transaction. A slip issuing machine 25 that prints transaction data on a journal and a slip, imprints the emboss on the card, and issues the slip, and a bill dispensing machine 2 that counts and carries out the bill for the amount to be paid.
6 as input/output equipment. The CPU 2 executes predetermined transactions by controlling these input/output devices and communication with the center 1. CPU2
0 is equipped with a memory 21 that stores transaction data and the like. The CPU 2 is connected to the terminal controller 4 by an input/output control circuit 27. In this example, the WM 3 has the functions of card issuing and card inquiry, and includes a CPU 3 which is equipped with a memory 31 and is connected to the terminal controller 4 by an input/output control circuit 37.
It has a built-in value of 0.

The CPU 30 includes, as its input/output devices, an office key 32 that can only be operated by a person in a specific position, a keyboard 33 for inputting items necessary for card issuance, a printer 34, and key-input data. CRT that displays etc.
It includes a display 35 and a card reader and writer (hereinafter simply referred to as a card reader) 36. Second
The figure shows the data recording format of a card used in a transaction processing device. The card has a magnetic stripe, and the magnetic stripe includes an ID code that indicates that the card is used at a bank, a bank approval code that indicates the usage category of the card, a customer's unique PIN number, bank number, store number, and the customer's ID code. account number, keyword KI for determining whether the card is genuine, etc. are magnetically recorded. FIG. 3 shows the contents of CIFII provided in the center 1.

C'11 is constituted by, for example, a magnetic disk. CIFII has a storage area for transaction data for each customer with an account, and this area stores the account number, balance, etc.
A password, keyword K2, and inquired flag F are stored. Keywords K1 and K2 are mutually converted numerically by a predetermined algorithm, so even if the account number is the same, the card keywords KI and CIFII
does not match the keyword K2, but they are related by the above algorithm. This algorithm is
It may be any arithmetic expression or one in which digits are exchanged. Keywords K1 and K2 are updated for each transaction as shown later. Figure 4 shows the customer's operations on CD2 and C
The procedure of transaction processing of D2 is shown. The customer first inserts the card into the card slot (step 41) and then enters the password using the keyboard (step 42).
The data recorded on the inserted card is read by the card reader 24, and the PIN number in the card data is compared with the keyed-in PIN number (step 43). If the two numbers match, an instruction to input the amount to be paid is displayed on the display 22, and the customer inputs the amount to be paid (step 44). If the two passwords do not match, the card is returned (step 71) and the process ends. Instead of immediately returning the card, the user may be asked to enter the password again. In this case, if the answer in step 43 is NO multiple times in a row, the card is returned. When the requested payment amount is input, data necessary for the payment transaction is prepared, and communication with the center 1 is started (steps 45 and 46).

In parallel with this center communication, the slip issuing machine 25 imprints the emboss of the card onto the journal (step 47). The message sent from CD2 to Sesota 1 includes the terminal code of CD2, a code indicating the type of message (in this case, a withdrawal message), a keyed-in PIN number, the amount to be paid, and a card containing the keyword KI.・Contains data. Upon receiving the message from CD2, Center 1 determines whether the transaction is possible, inspects the card, creates a new keyword, and processes the CIF, as will be detailed later.
II is updated, and a message indicating these processing results is transmitted to CD2. The message sent from center 1 to CD 2 includes the terminal address of CD 2, operation instructions (withdrawal allowed, return of non-withdrawal card, collection of non-withdrawal card), card write data including new keywords, and account number. ,
Contains the withdrawal amount and new balance. After communication with the center and card imprint processing, whether there was a transmission error or reception error,
It is checked whether there is an imprint error ((steps 48 to 50). Regarding transmission errors and reception errors, normally, if an error still occurs even after repeating transmission and reception with the center 1 a required number of times, step 48, 49
The answer is YES. Imprint errors include, for example, a case where a card gets stuck in a conveyance path and imprinting is not performed, and a completion signal is not output. In the case of a transmission error, since no transaction data has been sent to the center 1, the transaction is unsuccessful and the card is returned (step 71). In the case of reception errors and imprint errors, CIFII has already been updated, so
Generally, transactions are completed. In this case, writing to the card (step 53), especially new keywords, is not possible, and the previous data remains on the card. Then, since it is generally possible to negotiate the previous card data, a fault code is displayed (step 72) in order to perform card inquiry processing, which will be described later. A message to that effect is printed (step 73). After this, the process is left to the staff. The fault code indicates the type of fault, and is displayed on the internal panel of the CD 2, the remote monitor, and the like. If there are no errors in steps 48 to 50, and withdrawal is possible according to the operation instructions in the message sent from center 1 (step 51), print the transaction data on the slip (step 52), The writing of card data including a new keyword to the card (step 53), and the withdrawal and counting of cash equivalent to the withdrawal amount (step 54) are performed in parallel. , since the card is collected or returned (step 55).
), the card is collected (step 56) or the card is returned (step 71) according to the instructions.
After printing the slip, writing the card, and counting the cash line, it is checked whether an error has occurred in these processes (steps 57 to 59).

A printing error is detected, for example, when a printing completion signal is not output. Card write errors include cases where the card is jammed and writing to the card is not performed at all or only partially, and cases where the card is detected by a read check after writing. Examples of cash line counting errors include jammed banknotes. In either case, the transaction has already been completed. In the case of a printing error or a cash line counting error, since writing of data including a new keyword to the card has been completed, a fault code is displayed (step 79) and the processing is left to the clerk. The clerk hands over the customer's card and cash to complete the transaction. 2 for card write errors
There are different types. The first is an error that occurs before writing to the card is performed. This is the case, for example, if a card jam occurs before the card reaches the head of the card reader 24, and the card still has previous data that can be discussed. be. The other type of error is an error that makes it impossible to discuss the card, such as when a card jam occurs during writing to the card, or when writing is not performed due to a power outage.
This is a case where it is determined that the offer cannot be taken due to the read check after posting. In the case of a write error in step 57, it is determined whether or not card discussion is possible (step 74), and if it is not possible, a fault code is displayed (
Step 75), and a message indicating that the card needs to be reissued is printed on the slip (step 76). If card negotiation is possible, a failure code is displayed (step 77), and a message indicating that card inquiry is required is printed on the slip (step 7).
8). In any case, after this, we move on to the staff processing, and WM3
Card reissue or card inquiry is performed using .
If there are no errors, the card is returned (step 60), the printed slip and cash are released (step 62), and the transaction is completed.

If a card return error (step 64) or a cash/slip release error (step 63) occurs, a fault code is displayed (step 79) and then processing is performed by an attendant.
In the above example, after updating the CIFII of center 1, the transaction is determined to be successful, but if the CIFII is restored to its original value, the transaction can be determined to be unsuccessful.

FIG. 5 and FIG. 6 show the operation of the staff member on the WM3 and the processing procedure of the WM3.

FIG. 5 shows the card issuing process, and FIG. 6 shows the card inquiry process. The WM3 becomes operational only when the officer key is operated (steps 81, 91). This provides tight control over card issuance and card inquiries. Card issuance includes initial issuance, in which a card is issued for the first time for a certain user (account), and reissue. In FIG. 5, a key is input to select either initial issue or reissue (step 82), and in FIG. 6, a key is input to select card inquiry (step 92).
), then the card is inserted (steps 80, 93)
. In the case of card issuance (FIG. 5), items necessary for card issuance, such as a personal identification number, bank number, store number, account number, etc., are entered using the keyboard 33 (step 84).

The input data is displayed on the CRT 35. When issuing a card for the first time, the PIN number is a number specified by the customer, and the account number is the number of the account to which the card is issued. Banks have a ledger that records the necessary information about all opened accounts. Since the PIN number is also recorded in this ledger, if the card is to be reissued, the PIN number can be found from this ledger. Further, the user can also know the password by inputting the account number into the WM 3 and inquiring the center 1 through account inquiry. However, even in the case of reissuance, the keywords cannot be known from the ledger, nor are they known to the customer or bank staff.

The keyword is only stored in the C flower 11 of the center 1. In the case of first publication, keywords are created at the center. When the key input for each item is completed, the key input data including the account number is transmitted to the center 1 along with the terminal code of the WM 3, a code indicating card issuance, etc. (step 85). Then, as will be described later, the card write data including the keyword is sent from the center, so when this is received (step 86), it is checked whether it is an error message or a reception error (step 8).
7). If there is no error, the write data sent from the center 1 is written to the card by the card reader 36, and the card is returned (step 88).
In the case of an error message or reception error, the card is returned without writing data to the card (step 89). In the case of a card inquiry (FIG. 6), when a card is inserted, the card data is transferred to the card reader 36.
(step 93).

Then, it is checked whether there is a read error (step 94), and if there is a read error, the card is returned immediately (step 98). In this case, the card is generally reissued. If there is no read error, the captured card data is sent to the center along with the WM3 terminal code and card inquiry information (step 95).
). No key input is required for various items. At the center, the corresponding inquiry completion flag F of CIFII is set as shown later, and a message indicating that the inquiry processing has been completed is sent from the center (step 96). This message contains data indicating whether or not the inquiry process was carried out normally, so when the center message is received, the printer 34
Whether the card inquiry was completed normally (OK or NG)
) is printed (step 97). No writing is done to the card. FIG. 7 shows the processing procedure at the center 1.

After receiving the message from the terminal, the message is classified (step 101). If it is a withdrawal message (step 10)
2) Proceed to the withdrawal process from step 106. In the case of a card issue message (step 103), the process moves to the card issue process from step 121, and in the case of a card inquiry message (step 104), the process moves to the card inquiry process from step 131. In the case of a deposit message (step 105)
, predetermined deposit transaction processing is performed (step 136).
. If the received message is another message, processing corresponding to that message is executed. In the withdrawal transaction process, the format of the received withdrawal message is first checked, and the keyword KI in the message is converted into a numerical value using a predetermined algorithm.

Further, Cmll is searched from the account number included in the message (step 106). If there is an error in the contents of the received withdrawal message (step 107), for example,
If there is no corresponding account number, an error message containing an instruction to return the non-transactionable card is sent to CD2 (step 108). If there is no error, then the keyed-in password included in the message from CD2 and
The password is compared with the password stored in the corresponding account of the C flower 11 (step 109), and if they match, it is then checked whether the inquired flag F is set (step 110). If flag F is not set, the numerically converted keyword in the message is compared with keyword K2 stored in the corresponding account of CIFI 1 (
Step 111). If the PIN numbers do not match in step 109 or the keywords do not match in step 111, the card has been used fraudulently or a fraudulent card (counterfeit card) has been used, so a message containing instructions to collect the non-transactionable card will be sent. is sent to CD2 (step 112). In step 109, the card in the message is
The password included in the data and the password in CIFII may be compared. Also, to check the PIN number, please use the CD2
Since step 10 has already been performed in center 1,
Processing in step 9 is not necessarily necessary. If the PIN and keyword match, the requested payment amount will be compared with the balance in C'11, and if the balance is larger, the withdrawal will be possible (
Step 113).

If the inquired flag F is set (step 11)
0), the process moves to step 113 without performing keyword comparison processing. If the balance is insufficient in step 113, a message containing an instruction to return the non-withdrawal card is sent to CD2 (step-114). If the withdrawal is possible, the balance of the account number that is the subject of the transaction in C "11" and the keyword K2 will be updated.
Flag F is reset (step 115).

The new balance is determined by subtracting the requested payment amount (withdrawal amount) from the stored balance. The simplest keyword to use is the number of times a card is used.
In this case, a new keyword is created by adding 1 to K2. Other keyword updating methods include calculating using a predetermined function using the previous keyword as a variable, and using random numbers. In the above function, the number of uses, time, etc. can also be used as parameters. The random number is obtained by random number generation using a pulse generator and a counter that counts the generated pulses. In this way, when new keywords are sought,
This new keyword is stored in the corresponding area of C'11 and is numerically converted using a predetermined algorithm (step 116). Then, this new numerically converted keyword replaces the keyword in the card data to create card write data. Finally, the message containing the created write data, account number, withdrawal amount, and new balance is edited, and the CD2
(step 117). In CD2, the write data of the card transmitted from the center 1 as described above is written to the card (step 53), so the keyword KI of the card is the new data newly created and numerically converted at the center. Become a keyword.

In the case of a card issue message (step 103), the format of this message is first inspected, and CIFI I is searched using the account number included in the message (
Step 121).

Then, if there is an error in the message, or if the card is being reissued and there is no corresponding account number in CIFI I (step 122), the error message is sent to WM3 (step 123). If there are no errors, the keyword is read or created (step 1).
24).

In the case of card reissue, since the keyword should already be stored in C'11, the keyword of the corresponding account number is read out. When a card is issued for the first time, if there is no account in CBI 11, an area for that account will be created. Then, a new keyword is created using an appropriate function using the account number and time as variables, or a random number, and is stored in the area of the corresponding account number in C-11 or in the newly created area. A new keyword may also be created when a card is reissued. In this case, of course, the created keyword is stored in the corresponding area in CIFII. He was expelled from the C-11.
Alternatively, the created keyword is converted into a numerical value using a predetermined algorithm (step 125), and added to each data transmitted from WM3 as card write data.
M3 (step 126).

As mentioned above, this write data is written to the card in WM3 (step 88), so there is a predetermined correspondence between the keyword in the issued card and the keyword of the corresponding account stored in C-11. Transactions can be made using this issued card.

In the case of a card inquiry message (step 104), the format of this message is similarly checked, and the Cmll is searched using the account number included in the message (step 131).

And if there is an error in the telegram, and CIFI I
If there is no corresponding account number in (Step 13)
2), an error message is sent to WM3 (step 13
3). In this case, NG is printed in step g7 of FIG. If there is no error, the inquired flag F of the corresponding account number in CIFII is set (step 134).

After this, WM received a message stating that the card inquiry was successful.
3 (step 135). As a result of this message transmission, OK is printed in the WM3 (FIG. 6, step 97). A customer-specific keyword KI is recorded on the card.

In C'11, a keyword K2 corresponding one-to-one with the keyword KI is stored in the storage area for the customer's account number. Then, when the card is used, it is checked whether the keywords KI and K2 have a correct correspondence relationship, and the keywords K1 and K2 are updated. If the keywords KI and K2 do not have a correct correspondence relationship, the transaction is prohibited. Since keywords are recorded in addition to conventional card data, the format of the card is difficult to understand, making it difficult to counterfeit the card. Even if a card is forged, if a legitimate card is used at least once before this counterfeit card is used, the Cmll keyword K2 will be updated, so the keyword for the counterfeit card will no longer be used for CIFII. There is no correct correspondence with the keyword, and the transaction will be immediately prohibited. Even though the keyword of C11 was updated by using the correct card, the updated keyword was not written to the card due to an error in CD2, and the previous keyword of the card remained. In this case, card inquiry processing is performed.

In this card inquiry process, CIFII is searched using the remaining account number of the card, and the corresponding inquiry completed flag F in Cmll is set. If this flag F is set, keyword checking is not performed. Therefore, even if a card whose keyword has not been updated due to an error in CD2 is used, a normal transaction is possible. Furthermore, if the card becomes unnegotiable, the WM3 reissues the card.

The keyword for the reissued card is the center's CIF
It has a correct correspondence with the keyword of the corresponding account number in II. Therefore, normal transactions are possible using this reissued card. In the above example, the card inquiry process is performed in the case of errors in steps 49 and 50, and in the case of an error in step 57, when the input card can be read, but the card inquiry is also performed in the case of an error in step 48. Good too.

Also, in the deposit processing (step 136), the above-mentioned password check and keyword check may be performed.

However, in the case of depositing money, fraudulent use of the card or use of a counterfeit card is unlikely, and even if there is, the customer will not suffer any disadvantage, so this is not necessarily necessary. In the above example, the keywords are converted into numerical values only in the center 1, but a numerical conversion program or a numerical conversion circuit may be provided in both the center and the CD 2, and the numerical conversion of the keywords may be performed in both.

This situation is shown in FIG. Assume that the keyword recorded on the card is KI=3412. The first and second digits and the third and fourth digits of this keyword are exchanged in CD2, respectively, resulting in K3=4321. This keyword K3 is transmitted between the center 1 and CD2.
Then, in the center 1, the keyword K3 is further rearranged in the reverse order to become K2 1234. This keyword K2 is stored in C-11. In this way, the keyword takes completely different values on the cable 11, on the line, and on the card, so the value of the keyword is completely unknown from the outside. Although a CD is shown as the terminal in the above embodiment, it goes without saying that the present invention can also be applied to automatic teller machines and loan machines. In this case, it is preferable to check keywords for transaction processing such as balance inquiry, transfer, and transfer. In addition, transaction processing devices using cards other than transaction processing devices such as banks, such as POS system terminals such as gas stations and ECRs (electronic cash registers), unmanned supermarket terminals, and other vehicles that handle goods on a daily basis. Needless to say, it can also be applied to vending machines that sell vending machines. This applies not only to terminals that operate online, but also to devices that operate offline. In this case, the keywords are stored in the memory of the device rather than in the center. Furthermore, the present invention can also be applied to passbooks with magnetic stripes on which transaction data is recorded. All you have to do is record the keyword on the magnetic stripe of your passbook. As explained in detail above, in this invention,
The system checks the correspondence between the stored keywords on the storage medium such as a card and the device, and if both keywords meet a predetermined correspondence, the transaction is permitted and the keywords on the storage medium and memory are updated. . Transactions are prohibited if both keywords do not have a predetermined correspondence relationship. Therefore, it is difficult to forge a recording medium, and even if it is forged, it can be detected at an early stage, and transactions cannot be conducted using a forged recording medium, so fraudulent transactions are completely prevented. be done. Further, even if a write error occurs when updating the keyword on the recording medium, if data remains in a readable state on the recording medium, card inquiry processing is performed. In this card inquiry process, the memory is searched based on the data outside the recording medium, and the corresponding inquiry completed flag is set. If this flag is set, the keyword correspondence is not checked. Therefore, if the card is used after the card inquiry has been made, it will be possible to make a transaction, and all possible measures will be taken against the problem.

[Brief explanation of the drawing]

Figure 1 is a block diagram showing the overall configuration of the transaction processing device, Figure 2 is a diagram showing the card format, Figure 3 is a diagram showing the contents of the customer-specific information file, and Figure 4 is a diagram showing the operation of the CD. 5 and 6 are flow charts showing the operation of the WM, FIG. 7 is a flow chart showing the operation of the center, and FIG. 8 is a diagram showing the numerical conversion of keywords. be. 1...Control center, 2...CD, 3...
...WM, 10, 20, 30...CPU, 1
1...Customer information file, 24, 36...
- Card reader and writer, F... Inquiry flag. Fig. 1 Fig. 2 Fig. 3 Fig. 5 Fig. 6 Fig. 4 a Fig. 4 b Fig. 8 Fig. Nuka

Claims (1)

[Claims] 1 Using a recording medium on which user-specific data is recorded, by comparing the data read from the recording medium or the data read from the memory accessed by this read data with the data keyed in by the user, In a transaction processing device for confirming a genuine user, the recording medium has a storage area for keywords, and the transaction processing device has a memory for storing keywords and inquired codes for each user, and a memory for reading and recording data on the recording medium. a reading/writing device for writing data to be updated on a medium; a calculation means for checking the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memory; and both keywords. a first control means that permits the transaction when the reference code is in a predetermined correspondence relationship and when the referenced code is stored in the memory, and creates a new keyword and thereby updates the keyword in the memory and the recording medium; a means for detecting the occurrence of an error that should be used to query a recording medium; a reading device for reading data including a code for identifying a user of the recording medium from the recording medium for querying the recording medium; a second control means for storing the queried code in the memory corresponding to the keyword of the corresponding user;
A transaction processing device equipped with