JPS605032B2 - transaction processing device - Google Patents

Description

[Detailed description of the invention] Hereinafter, the present invention will be explained in detail in the following order.

[1 Background of the invention] 1.1 Technical field 1.2 Description of the prior art [2 Summary of the invention] 2.1 Purpose of the invention 2.2 Structure, operation, and effects of the invention [3 Description of embodiments] 3.1 Configuration of transaction processing device 3.2 Card data recording format 3.3 Customer-specific information file (CIF) at the center 3.4 Operation of automatic cash dispensing machine 3.5 Processing at the center 3.6 Functions and effects of the embodiment 3 .7 Modifications [1 Background of the Invention] 1.1 Technical Field This description is applied to a transaction processing device that performs a predetermined transaction using a card on which various data including a customer-specific PIN number are recorded, such as a financial system such as a bank. It relates to transaction processing equipment such as automatic cash dispensers and automatic teller machines installed in businesses.

1.2 Description of the Prior Art This type of transaction processing device compares the collection data of the PIN number magnetically recorded on the card with the PIN number keyed in by the customer, or stores the PIN number in the device. The memorized PIN number is compared with the PIN number keyed in by the customer, and when the two numbers match, the card user is eligible for the transaction. Make sure that.

After this confirmation, a predetermined transaction is executed. In financial industries such as banks, transaction processing devices for cash payments and deposits are already widespread.

It is no exaggeration to say that the magnetic recording format of the card used in this transaction processing device is already widely known. Since encoders for recording data on cards are also commercially available, counterfeiting of cards has become relatively easy. In particular, if the PIN is not stored in the device and the PIN data of the card is compared with the keyed-in PIN, the counterfeiter may set the PIN arbitrarily3. , and transactions can be made using this arbitrarily set PIN number. [2 Summary of the Invention] 2.1 Purpose of the Invention The purpose of the present invention is to detect the use of a counterfeit card at an early stage3 and to prevent fraudulent transactions using a counterfeit card.

Another object of the invention is to enable legitimate transactions even if a failure occurs in the means for preventing fraudulent transactions.

42.2 Structure, operation, and effect of the invention This invention uses a recording medium in which user-specific data is recorded, and the discussion data on the recording medium or the discussion from the memory accessed by this discussion data. In a transaction processing device that verifies the genuine user by comparing the data with the data keyed in by the user,
A storage area for keywords is provided in the recording medium, and the transaction processing device includes a memory for storing keywords for each user, and a Kendo writing device for reading data from the recording medium and writing data to be updated into the recording medium. arithmetic means for checking the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memory or the past keyword for the keyword of the memory; and the keyword of the recording medium and the memory. It is characterized by comprising a control means that permits a transaction only when there is a predetermined correspondence relationship with any of the keywords in the keyword, and also creates a new keyword and updates the keyword in the memory and recording medium accordingly. shall be.

Here, the "keyword" is one of the codes used to determine whether the recording medium (for example, a magnetic card) used in the transaction processing device is genuine, and is updated every time a transaction is processed. This code is characterized by:

Keywords are recorded on the recording medium, and keywords that have a predetermined correspondence with the keywords on the recording medium are also stored in the memory of the transaction processing device, which is accessed by discussion data (for example, account number) on the recording medium. are stored for each user (for example, for each account number). For each transaction process, the correspondence between the keywords on the recording medium and the keywords in the memory is examined to determine whether the recording medium is being used continuously and correctly. That is, if both keywords have a predetermined correspondence relationship, the transaction is permitted, a new keyword is created, and the keywords in the recording medium and memory are thereby updated.

If both keywords do not have a predetermined correspondence relationship, the transaction is prohibited. Therefore, it is difficult to forge a recording medium, and even if the recording medium is forged, the keyword in the memory will have already been updated if the authorized power code has already been used even once before the counterfeit recording medium is used. Therefore, transactions cannot be conducted using counterfeit recording media. In this way, counterfeit recording media can be detected at an early stage, and fraudulent transactions can be clearly prevented. The invention also examines the correspondence between the keyword read from the recording medium and the past (eg, previous) keyword of the user of the recording medium stored in the memory.

Therefore, if the updated keywords are not recorded in the recording medium due to some kind of failure and the past keywords remain as they are, normal transactions will be possible by checking the correspondence between these past keywords, and troubleshooting measures will be taken. is absolutely safe. [3 Description of Embodiments] Hereinafter, an embodiment in which the present invention is applied to a transaction processing device whose terminal device is an automatic cash dispensing machine will be described in detail with reference to the drawings.

3.1 Structure of transaction processing device FIG. 1 shows the overall configuration of the transaction processing device.

The transaction processing devices are control center 1 and center 1.
It consists of a large number of terminals connected online. One of the terminals is an automatic cash dispensing machine (hereinafter abbreviated as CD) 2. The center 1 includes a central processing unit (hereinafter referred to as CPU) 10 that controls communications with each terminal and processes transaction data transmitted from the terminals, and customer-specific information that stores customer transaction data. A communication control device 12 and a modem 13 are provided for communication with a file (hereinafter referred to as CIF) 11 and a terminal.

In processing transaction data, the CPUIO inspects the card, determines whether a transaction is possible, performs transaction calculation processing, and rewrites CIFII, as will be described later. A large number of terminals are connected to the center 1 via a modem 5 and a terminal controller 4, and communication with the center 1 is controlled by these.

The CD2, which is one of the terminals, includes an operation procedure display 22 that sequentially displays the operations that a customer must perform for a payment transaction, a keyboard for inputting a PIN number, a billed amount, etc., a card insertion slot, a cash discharge slot, etc. Customer service panel 2 with
3. The card inserted into the card slot is recorded. A card/IJ reader/writer (hereinafter simply referred to as a card reader) 24 reads data and writes predetermined data to the card, and prints transaction data on a journal and slip for each transaction and embosses the card. A slip issuing machine 25 that prints and issues slips.
, is equipped with a banknote dispensing machine 26 as an input/output device, which calculates and discharges banknotes corresponding to the amount to be paid. The CPU 20 executes predetermined transactions by controlling these input/output devices and communication with the center 1. C
The PU 20 includes a memory 21 that stores transaction data and the like. The CPU 20 is connected to the terminal controller 4 through an input/output control circuit 27. In FIG. 1, the memories that store the programs of CPUI0 and 20 are not shown. 3.2 Card Data Recording Format Figure 2 shows the card data recording format used in the transaction processing device.

The card has a magnetic stripe, and the magnetic stripe includes an ID card indicating that the card is used at a bank, a bank authorization code indicating the usage category of the card, a customer's unique PIN number, bank number, store number, and the customer's ID card. account number, keyword KI for determining whether the card is genuine, etc. are magnetically recorded. 3.3 Customer Information File (CIF) at the Center FIG. 3 shows the contents of the CIF II provided at the center 1.

CIFII' is constructed by, for example, a magnetic desk. Cbi11 has a storage area for transaction data for each customer with an account, and this area stores the account number, balance, etc.
The password, keyword K2, and if necessary, the previous keyword K20 are stored. Keywords K1, K2
are mutually converted numerically by a predetermined algorithm, so even if they have the same account number, the keyword KI of the card and the keyword K2 of Cmll do not match.
They are related by the algorithm above. This algorithm may be any arithmetic expression or one that exchanges digits. Keyword KI. K2 is updated for each transaction as shown later. 3.4 Operation of automatic cash dispensing machine FIG. 4 shows the customer's operation on CD2 and the procedure for transaction processing on CD2.

The customer first inserts the card into the card slot (step 3).
1) Enter the password using the keyboard (step 32). The data recorded on the inserted card is read by the power reader 24, and the PIN number in this card data is compared with the keyed-in PIN number (step 33). If both numbers match, display 2
2, an instruction to enter the amount to be paid is displayed, so the customer key-inputs the amount to be paid (step 34). If the two passwords do not match, the card is returned (step 56) and the process ends. Instead of immediately returning the card, the user may be asked to enter the password again. In this case, once the requested payment amount for which the card will be returned if the answer is NO multiple times in a row in step 33 is entered, the data necessary for the payment transaction is prepared.
The process moves to communication with center 1 (steps 35 and 36).

In parallel with this center communication, the slip issuing machine 25 imprints the card on the Essbos's journal. (Step 37). The message sent from CD2 to Center 1 includes the terminal code of CD2, a code indicating the type of message (in this case, a withdrawal message), the keyed-in PIN number, the requested payment amount, and the keyword KI. Contains card data. Upon receiving the message from CD2, the center determines whether the transaction is possible, inspects the card, creates a new keyword,
The IFII is updated, etc., and a message indicating these processing results is transmitted to the CD2. The message sent from the center to CD2 includes the terminal address of CD2, operation instructions (withdrawal allowed, return of non-withdrawal card, collection of non-withdrawal card), card write data including new keywords, account number, withdrawal Contains the gold amount and the new balance. After communication with the center and card imprint processing, it is checked whether there was a transmission error, whether there was a reception error, and whether there was an imprint checker (steps 38-40).

Regarding transmission errors and reception errors, normally, if an error still occurs even after the transmission and reception with the center 1 has been repeated the required number of times, YES will be returned in steps 38 and 39. Imprint errors include, for example, a case where a card is stuck on a conveyance path and imprinting is not performed, and a completion signal is not output. In the case of a transmission error, the transaction data is not sent to the center, so the transaction is unsuccessful and the card is returned (step 55). In the case of a reception error or an imprint error, the Cmll has already been updated, so generally a transaction is completed, but writing to the card (step 43), especially writing a new keyword, is impossible. In either case, it will be left to the processing of the staff. If there is no error in any of steps 38 to 40 and withdrawal is possible according to the operation instructions in the message sent from the center (step 41
), printing transaction data on the slip (step 42), writing write data including a new keyword on the card (step 43), and drawing out a line of cash equivalent to the withdrawal amount,
A counting process (step 44) is performed in parallel.

If withdrawal is not possible, the card must be collected or returned (step 45), and the card is either collected (step 46) or returned (step 55) according to the instruction. After the slip printing, card writing and cash withdrawal counting, it is checked whether an error has occurred in these processes (steps 47-49).

A printing error is detected, for example, when a printing completion signal is not output. Card write errors include cases where the card has written and the card's write is not performed at all or only partially, and cases where the card is detected by a read check after writing. Examples of cash dispensing calculation errors include jammed banknotes. In either case, the transaction has already been completed. In the case of printing errors and cash dispensing counting errors, writing of data including new keywords to the card has been completed. In the case of a card write error, the keyword of the card is not updated. In either case, it will be left to the processing of the staff. The clerk hands over the customer's card and cash to complete the transaction. If a card write error occurs, such as when the card becomes jammed during writing, the card is unreadable and must be reissued. If there are no errors, the card is returned (step 50), the printed slip and cash are released (step 52), and the transaction is completed. If a card return error (step 51) or a cash or slip release error (step 53) occurs, the process will be handled by the staff member. In the above example, after updating the center's Cmll, the transaction is determined to be successful, but if the CIFll is restored to its original value, the transaction can be determined to be unsuccessful.

3.5 Processing at the center FIG. 5 shows the processing procedure of the center 1.

After receiving the message from the terminal, the message is classified (step 61). If it is a withdrawal message (step 62)
, proceed to the withdrawal transaction processing from step 65. In the case of a deposit message (step 63), predetermined deposit transaction processing is performed (step 78). If the received message is another message, processing corresponding to that message is executed. Now, in the withdrawal transaction process, first the format of the received withdrawal message is checked, and the keyword KI in the message is converted into a numerical value using a predetermined algorithm. Further, CIFII is searched from the account number included in the message (step 65). If there is an error in the contents of the received withdrawal message (step 66), for example, if there is no corresponding account number in CIF11, an error message including an instruction to return the transaction-unable card is sent to CD2 (step 67). ).
If there is no error, the keyed-in password included in the message from CD2 is compared with the password stored in the corresponding account of C-11 (step 68).
). If the passwords match, the next step is to check the keyword. If the PIN numbers do not match, it means that the card was used fraudulently or a fraudulent card was used, and a message containing an instruction to collect the non-transactionable card is sent to the CD 2 (step 72). In step 68, the password included in the card data in the message and the password in the CM 11 may be compared. Also, to check the PIN number, please use the CD2
Step 68 has already been done in Center 1.
processing is not necessarily necessary. In the keyword inspection, first, the numerically converted keyword in the message (corresponding to the card keyword KI) is compared with the keyword K2 stored in the corresponding account in CIFII (step 6).
9).

If both keywords match, there is no problem and step 7
Proceed to step 3. If the two keywords do not match, the previous keyword K20 stored in the relevant account is the CIFI
I or created from keyword K2 (step 70). The easiest keyword to use is the number of times a card is used. In this case, as will be described later, a new keyword is created by adding 1 to K2. Other ways to update keywords include calculating using a predetermined function that uses the previous keyword as a variable.
For example, using random numbers. When the keyword is calculated by a predetermined calculation formula, the previous keyword K20 is
It can be easily obtained by back-calculating the above arithmetic expression using the current keyword K2. For example, if the number of times a card has been used is used as a keyword, the previous keyword K20 can be found by subtracting 1 from K2. In addition, if a random number is used as a keyword, as shown in Figure 3, the previous keyword K20
is stored in CIFII, so all you have to do is read it. In any case, once the previous keyword K20 is obtained, this keyword K20 is compared with the keyword in the message (corresponding to the keyword KI of the card) (step 71).

If both keywords match, it is assumed that a legitimate card is being used and the process proceeds to step 73. As mentioned above, reception error (step 39), imprint
(step 40) and write error (step 48)
), the updated keyword is not written to the card. Therefore, the card's keyword remains at its previous value. The processes of steps 70 and 71 are provided to deal with such a situation in which the keyword of the card is not updated due to a failure of the CD 2. Step 7
If the previous keywords do not match in step 1, it is assumed that a fraudulent card (counterfeit card) has been used, and a message containing an instruction to collect the non-transactionable card is sent to the CD 2 (step 72). In addition, if the previous keyword does not match,
You can also get the previous keyword in the same way and compare it with the card's keyword. If the PIN and keyword match, the payment request amount and C
The balance in IFI1 is compared, and if the balance is larger, withdrawal is possible (step 73). If the balance is insufficient in step 73, a message containing an instruction to return the non-withdrawal card is sent to CD2 (step 74). If withdrawal is possible, the balance in the memory of the account number subject to the transaction in CIFII and the keyword K2 are updated (step 75).

The new balance is determined by subtracting the requested payment amount (withdrawal amount) from the stored balance. When the number of times a card is used is used as a keyword, a new keyword is created by adding 113 to K2 as described above. Other keyword updating methods include calculating using a predetermined function using the previous keyword as a variable, and using random numbers. In the above function, the number of uses, time, etc. can also be used as parameters. The random number is obtained by a random number generator consisting of a pulse generator and a counter that counts the generated pulses. In this way, when new balances and new keywords are obtained,
These data are stored in the corresponding area of CIFI I, and if necessary, the keyword K2 is stored in the same area as the previous keyword. Even if the previous keyword K20 matches in step 71, it is preferable that a new keyword is found based on the current keyword K2 (in the case of an arithmetic expression), and in CIFII, the current keyword K2 is the previous keyword is preferably stored as a keyword. Next, the updated keywords are converted numerically using a predetermined algorithm (step 7).
6).

Then, this new numerically converted keyword replaces the keyword in the card data to create card write data. Finally, a message containing the created Lite Data account number, withdrawal amount, and new balance with instructions for withdrawal is edited and sent to the CD2 (Step 7).
7). In CD2, the write data of the card transmitted from center 1 as described above is written to the card (step 43), so the keyword KI of the card is a new value newly created at the center and converted into a numerical value. Become a keyword.

In FIG. 5, the above-mentioned password check and keyword check may also be performed in the deposit processing (step 78).

However, in the case of depositing money, fraudulent use of the card or use of a counterfeit card is unlikely, and even if there is, the customer will not suffer any disadvantage, so this is not necessarily necessary. If necessary, in the case of an error in steps 39, 40, or 48, a message indicating a card write error is sent from the CD 2 to the center 1. When Center 1 receives this card write error message, it sends the card to the Elijah with the corresponding account number of CIFI I.
Remember that it is a write error. Then, the processing in steps 70 and 71 is executed only when there is a memory of this card write error, and if there is no memory of a card write error, if it is ON in step 69, the process immediately moves to step 72. It is desirable to do so. 3
．． 6 Functions and Effects of the Example A customer-specific keyword KI is recorded in the card.

CIFI stores the customer's account number,
A keyword K2 is stored in a one-to-one correspondence with the keyword KI. And when the card is used,
It is checked whether the keywords KI and K2 and the keyword KI and the previous keyword K20 have a correct correspondence relationship, and the keywords K1, K2, and K20 are updated. If the keywords KI and K2 (or K20) do not have a correct correspondence, the transaction is prohibited. Cards have keywords recorded in addition to conventional card data, making the format difficult to understand and making it difficult to counterfeit cards. Even if the card is counterfeit, the CIFII
Since the keywords K2 and K20 have been updated, the keyword of the counterfeit card no longer has a correct correspondence with the keyword of CIF]1, and the transaction is immediately prohibited.
If the CIFII keyword was updated by using the correct card, but the updated keyword was not written to the card due to an error on CD2, the previous keyword will be recorded on the card. It remains as it was.

In this case, the keyword of the card has a predetermined correspondence with the previous keyword K20 of C-11. Therefore, even if a card whose keyword has not been updated due to an error in CD2 is used, a normal transaction is possible. 3.7 Modified example In the above example, the keyword is converted into a numerical value only at the center, but it is possible to provide a numerical conversion program or a numerical conversion circuit in both center 1 and CD2 so that the numerical value conversion of the keyword is performed in both centers. Good too.

This situation is shown in FIG. Assume that the keyword recorded on the card is KI=3412. The first and second digits and the third and fourth digits of this keyword are exchanged in CD2, respectively, resulting in K3=4321. This keyword K3 is transmitted between the center 1 and CD2.
Then, in the center 1, the keywords K3 are further rearranged in the reverse order so that K2=1234. This keyword K2 is stored in CIFI I. In this way, the keyword takes completely different values on the CIFll, on the line, and on the card, so the value of the keyword is completely unknown from the outside. In the above embodiment, the terminal is C
Although D is shown, it goes without saying that this invention can also be applied to automatic teller machines and loan machines.

In this case, it is preferable to also check keywords for transaction processing such as balance verification, transfer, and transfer. Also, transaction processing devices using cards other than transaction processing devices of banks, etc.
For example, it goes without saying that it can be applied to POS system terminals at gas stations and ECRs (electronic cash registers), terminals at unmanned supermarkets, and other vending machines that sell goods by card. This applies not only to terminals that operate online, but also to devices that operate online. In this case, the keywords are stored in the memory of the device rather than in the center. Furthermore, the present invention can also be applied to passbooks with magnetic stripes on which transaction data is recorded. All you have to do is record the keywords on the magnetic stripe. Brief explanation of the drawings Figure 1 is a block diagram showing the overall configuration of the transaction processing device, Figure 2 is a diagram showing the card format, Figure 3 is a diagram showing the contents of the customer-specific information file, and Figure 4. is a flow chart showing the operation of the terminal.
FIG. 5 is a flow chart showing the operation of the center, and FIG. 6 is a diagram showing how keywords are converted into numerical values.

1...Control center, 2...Cash dispenser, 10,20...CPU, 11...
Customer-specific information file, 24...Card reader and writer.

Figure 1 Figure 3 Figure 2 Figure 4a Figure 4b Figure 5 Figure 6

Claims (1)

[Claims] 1. Using a recording medium in which user-specific data is recorded, read data from the recording medium or read data from a memory accessed by this read data, and key input by the user. In a transaction processing device that verifies the genuine user by checking data, the recording medium has a storage area for keywords, and the transaction processing device has a memory that records keywords for each user and a memory that reads the data on the recording medium. and a reading/writing device that writes data to be updated to a recording medium; a keyword read from the recording medium; and a keyword of the user of the recording medium stored in the memory or a past keyword regarding the keyword of this memory. a calculation means for checking the correspondence between the keywords in the recording medium and the keywords in the memory, and permitting the transaction only when there is a predetermined correspondence between the keyword on the recording medium and the keyword in the memory; and a control means for updating a keyword on a recording medium. 2. The transaction processing device according to claim 1, wherein past keywords are stored in the memory. 3. The transaction processing device according to claim 1, wherein the past keywords are calculated from keywords stored in the memory using a predetermined arithmetic expression. 4. The transaction processing device according to claim 1, wherein the past keyword is the previous keyword.