KR100968393B1 - Transaction apparatus and data input method in the transaction apparatus - Google Patents

Abstract

(Problem) By performing personal authentication of each inputter who inputs component data for generating master data, the master data is generated only when a plurality of different inputters respectively input the component data, so that high security can be maintained.

(Solution means) When a plurality of component data for generating a master data for encryption of the password is input from the input means, immediately before each component data is input, the ID card of the inputter of each component data by the personal authentication information acquisition device. Personal authentication information is obtained from the storage device and stored in the storage device, and when it is determined that the inputter is different based on the personal authentication information, the input of the component data is permitted.

Master Data, Component Data, Personal Authentication, Security

Description

Transaction device and data input method in the transaction device {TRANSACTION APPARATUS AND DATA INPUT METHOD IN THE TRANSACTION APPARATUS}

The present invention relates to a trading device, in particular a trading device having a password input device, and a data input method in the trading device.

In the past, deposits and withdrawals were made by operating automatic trading devices such as ATMs (Automatic Teller Machines) and CDs (Cash Dispenser) formed at branches of financial institutions such as banks, credit boxes and post offices. When conducting financial transactions such as bank transfer, deposit, transfer, and remittance, a customer uses a card such as a cash card and enters a password. In addition, when the payment is made at a store such as a restaurant or a store, when the payment is made using a debit card or a credit card, the customer uses the card and places it at the checkout counter of the store. A password is input by operating a terminal such as a POS (Point of Sales) terminal, a credit card terminal, or an accessory device thereof.

The automatic transaction apparatus and the terminal transmit the card information read from the card and the input password together with information such as the amount of money to a host apparatus such as a host computer connected via a communication line, and perform financial transactions and settlement transactions. The transaction of such a transaction is performed. In this case, if the password is transmitted to the host apparatus without the encryption processing, i.e., in plain text, the password may be interpreted by a third party from the communication contents.

Therefore, recently, a device called a pin pad has been adopted as a password input device for encrypting an input password. Since the encrypted password can be transmitted to the host apparatus by connecting or inserting the pin pad to the automatic transaction apparatus and the terminal, the password is not interpreted by the third party from the communication contents.

It is also known that a pin is required for encryption on the pin pad, and ANSI (American National Standard Institute) 9.24 is specified as a key handling protocol. According to the convention, in order to generate the master key which is the most significant key, a number string called a plurality of key components, that is, a component, is input, and the component is calculated to generate the master key. In the PCI (Payment Card Industry) standard, in order to maintain a high level of security, a component for generating a master key receives data input from a plurality of inputs as a seal and inputs it from a pin pad based on the input data. It is prescribed to carry out (see, for example, Non-Patent Documents 1 and 2).

[Non-Patent Document 1] http://partnernetwork.visa.com/dv/pin/main.jsp

[Non-Patent Document 2] http://www.ecom.jp/qecom/about'wg/wg05/cr-swg/code-4. html

However, in the conventional automatic transaction apparatus and terminal using the pin pad, when inputting a component, only an input unit derivation means for simply inputting a string of numbers is provided, and there is no means for clarifying what another person has input. Do not. Therefore, for example, even if the same person inputs a plurality of components, there is a problem that the master key can be generated and security is not maintained.

The present invention solves the above-mentioned problems and performs personal authentication of each inputter for inputting component data for generating master data, so that master data is generated only when a plurality of different inputters respectively input component data. It is an object of the present invention to provide a trading device capable of maintaining high security and a data input method in the trading device.

Therefore, in the transaction apparatus of the present invention, personal identification information can be obtained from a password input device including an input means for inputting a password, and encryption processing means for encrypting the password input by the input means. A personal authentication information acquisition device, and a storage device for storing personal authentication information acquired by the personal authentication information acquisition device, and a transaction device that transmits an encrypted password to a higher level device to conduct a transaction. When a plurality of component data for generating data is input from the input means, immediately before each component data is input, the personal authentication information acquisition device acquires personal authentication information from the ID card of the inputter of each component data. To the storage device and store the personal authentication information. And when it is determined that the different input characters, the permission of the input of the component based on the data.

In a transaction apparatus other than the present invention, a password input device including an input means for inputting a password, and encryption processing means for encrypting a password input by the input means, and biometric authentication information capable of acquiring biometric information. A transaction apparatus having an acquisition device and a storage device for storing biometric information obtained by the biometric authentication information acquisition device, wherein the encrypted password is transmitted to a higher level device to conduct a transaction. When a plurality of component data are inputted from the input means, immediately before each component data is input, the biometric authentication information of the inputter of each component data is acquired by the biometric authentication information acquisition device and stored in the storage device. Different inputters based on biometric information When it is determined, the permission of the input of the component data.

In another trading device of the present invention, further, if there is an additional printing part for issuing a certificate, input of all the component data is permitted, and master data is generated from the inputted component data, the input of each component data is different. Issue a certificate that has been printed.

In another trading device of the present invention, if the device further has means capable of outputting data to an external storage device, inputting of all component data is permitted, and generating master data from the inputted component data, Data of the certificate indicating that the inputter is different is output to the external storage device.

According to another trading device of the present invention, further comprising means for transmitting an e-mail, inputting of all component data is permitted, and when generating master data from the inputted component data, inputting of each component data A certificate indicating that the self is different is transmitted by electronic mail.

In the data input method of the present invention, personal authentication information can be acquired from a password input device having an input means for inputting a password, and encryption processing means for encrypting the password input by the input means, and an ID card. As a data input method in a transaction apparatus which has a personal authentication information acquisition device and a storage device for storing personal authentication information acquired by the personal authentication information acquisition device, and transmits an encrypted password to a higher level device to conduct a transaction. When a plurality of component data for generating the master data for encryption of data is input from the input means, immediately before each component data is input, the personal authentication information is obtained from the ID card of the inputter of each component data by the personal authentication information acquisition device. Acquire information and store it in the storage device And, when it is determined that different input characters on the basis of the personal identification information, the permission of the input of the component data.

In a data input method other than the present invention, a password input device having an input means for inputting a password and encryption processing means for encrypting a password input by the input means, and a biometric device capable of acquiring biometric authentication information. A data encryption method in a transaction apparatus having a authentication information acquisition device and a storage device for storing biometric information acquired by the biometric information acquisition device, and transmitting an encrypted password to a higher level device to conduct a transaction. When a plurality of component data for generating the master data for input is input from the input means, immediately before each component data is input, the biometric authentication information of the inputter of each component data is acquired by the biometric authentication information acquisition device, and Stored in the storage device, the biometric authentication information When it is determined that the inputter is different based on the input, the input of the component data is allowed.

According to the present invention, the trading device performs personal authentication of each inputter who inputs component data for generating master data. As a result, the master data is generated only when a plurality of different inputs respectively input the component data, so that high security can be maintained.

EMBODIMENT OF THE INVENTION Hereinafter, embodiment of this invention is described in detail, referring drawings.

1 is a block diagram of a trading device in a first embodiment of the present invention.

In the figure, reference numeral 10 denotes a transaction apparatus according to the present embodiment, for example, an automatic transaction apparatus such as ATM, CD, etc., which is arranged at branches of financial institutions such as banks, credit vaults, post offices, convenience stores, supermarkets, department stores and the like. Multifunctional terminals such as kiosk terminals, restaurants, bars, etc., which are formed in stores, underground shopping malls, etc., and have a ticket reservation function, a product purchase application function, a credit card loan confirmation function, and facility information guidance function, etc. It is a terminal such as a POS terminal and a credit card terminal which are formed at the checkout counter of a restaurant or a store in Japan, and uses a card such as a cash card, a debit card, and a credit card to deposit, withdraw, deposit, transfer, and transfer money. When conducting various transactions such as transaction or settlement of price, any type of equipment that is formed at any place if it is a device that authenticates by entering a password It may be a tooth.

Here, the trading device 10 includes a control unit 11, a display unit 12, a pin pad 13 as a password input device, a card lead unit 14 as a personal authentication information acquisition device, and a storage unit 15 as a storage device. And a host computer such as a host computer not shown in the figure through various communication line networks such as a telephone line network, a local area network (LAN), an intranet, an online network, and the Internet. The card information read from the IC, magnetic stripe, etc. and the inputted password of the card are transmitted to the host apparatus together with the information such as the amount of money, and the transaction such as financial transaction, settlement transaction and the like are executed.

The control unit 11 is a type of computer that includes a computing means such as a CPU, an MPU, a storage device such as a semiconductor memory, a magnetic disk, a communication interface, and the like, and operates according to a program. The operations of the entire trading device 10 including the operations of the pad 13, the card lead unit 14 and the storage unit 15 are collectively controlled.

Moreover, the said display part 12 is equipped with a CRT, a liquid crystal display, a light emitting diode (LED) display, etc., and displays the screen for a customer to perform the operation required for a transaction by the instruction | indication of the control part 11. As shown in FIG. In addition, it is preferable that the said display part 12 is a touch panel etc. which have a function as an input means, and can input.

The pin pad 13 is a device for inputting a password by a customer, and has a numeric pad as an input means for inputting a password, and encrypts the input password to transmit an encrypted password. Have the means. In addition, the pin pad 13 may be inserted into the trading device 10, may be configured separately from the trading device 10, and may be connected to the trading device 10 via a communication cable or the like.

In addition, the said pin pad 13 is based on ANSI 9.24 as a standard of the pin pad demonstrated in the term of "background art." Therefore, in order to generate the master key as the master data which is the most significant key, the master key must be generated by inputting a plurality of components as the component data. In addition, since it complies with the PCI standard, a plurality of components must be input by a plurality of different inputters operating the pin pad 13.

The card lead section 14 is an apparatus for reading data of an ID card possessed by an inputter who inputs the component, and reads personal authentication information stored in an IC, magnetic stripe, or the like included in the ID card. Further, the card lead portion 14 may be used to read card information of the customer card.

The storage unit 15 is made of a semiconductor memory, a magnetic disk, or the like, and can store various data.

In the present embodiment, when a plurality of components for generating a password encryption master key are input from the pin pad 13, the card lead portion 14 inputs each component immediately before each component is input. The personal authentication information is acquired from the child's ID card and stored in the storage unit 15, and when it is determined that the inputter is different based on the personal authentication information, the input of the component is permitted.

Next, operation | movement of the transaction apparatus 10 of the said structure is demonstrated. Here, only the operation in the case of generating a master key will be described.

Fig. 2 is a flowchart showing the operation of the transaction apparatus in the first embodiment of the present invention.

Here, it is assumed that the inputters are two persons of the first inputter and the second inputter, and the input component is two of the first component and the second component.

First, the control unit 11 confirms the component input completion status, inquires the pin pad 13 of the input completion status of the component, and determines whether or not the first component is not input based on the result of the inquiry.

And when the 1st component is not input, the control part 11 displays the screen which prompts ID card reading on the display part 12, and requests the 1st inputter to perform ID card reading. In doing so, the first inputter reads the data of the ID card possessed by the card lead unit 14. In this way, when the first inputter ID card is read, the control unit 11 causes the card lead unit 14 to store the personal authentication data read from the ID card of the first inputter in the storage unit 15.

Subsequently, the first component is input, and the first inputter operates the pin pad 13 to input the first component.

When the input of the first component is completed, the control unit 11 determines whether or not the second component is not input. In addition, it is determined whether the first component has not been input, and when the first component has been inputted, it is determined whether or not the second component has not been input. When the second component has been input, the control unit 11 ends the master key generation processing as it is.

In addition, when the second component is not input, the control unit 11 displays a screen prompting the ID card reading on the display unit 12, and requests the second inputter to read out the ID card. In doing so, the second inputter reads the data of the ID card possessed by the card lead unit 14. In this way, when the second inputter ID card is read, the control unit 11 causes the card lead unit 14 to store the personal authentication data read from the ID card of the second inputter in the storage unit 15.

Then, the control unit 11 compares the personal authentication data of the ID card of the first inputter and the personal authentication data of the ID card of the second inputter, stored in the storage unit 15, to compare the first inputter and the second. Determines whether the inputter is someone else.

Here, when the first inputter and the second inputter are different people, the control unit 11 causes the display unit 12 to display a screen prompting the input of the second component, and inputting the second component to the second inputter. Ask to conduct. Then, when the second component is input and the second inputter operates the pin pad 13 to input the second component, the pin pad 13 confirms that all necessary components are input and generates a master key. do. This completes the master key generation process.

On the other hand, if it is determined whether the first inputter and the second inputter are different people, and the first inputter and the second inputter are not different persons, the control unit 11 determines whether the retry is necessary. When the retry is necessary, the display unit 12 again displays a screen prompting the ID card reading, and asks the second inputter to read out the ID card. If no retry is necessary, the control unit 11 ends the master key generation processing as it is.

For example, if it is determined that the retry is not necessary and the component input process ends, the present invention can also be applied to the case where the master key generation process is performed again.

Next, a flowchart is demonstrated.

Step S1 Check the component input completion status.

Step S2 It is determined whether the first component is not input. If the first component has not been inputted, the process proceeds to step S3. If the first component has been inputted, the process proceeds to step S5.

Step S3 The first inputter ID card is read.

Step S4 Enter the first component.

Step S5 It is determined whether or not the second component is not input. If the second component is not input, the process proceeds to step S6. If the second component is in the input state, the processing ends.

Step S6 The second inputter ID card is read.

Step S7 It is determined whether the first inputter and the second inputter are different people. If the first inputter and the second inputter are different people, the process proceeds to step S8. If the first inputter and the second inputter are not different persons, the process proceeds to step S10.

Step S8 Enter the second component.

Step S9, a master key is generated and processing ends.

It is determined whether step S10 retry is necessary. If a retry is required, the process returns to step S6. If the retry is not required, the process ends.

As described above, in the present embodiment, immediately before the first component is input, the ID card of the first inputter is read, the data of the ID card is stored in the storage unit 15, and the first component is input. Immediately before inputting the second component, the ID card of the second inputter is read out, and the data of the ID card is stored in the storage unit 15. Then, based on the data of the ID card stored in the storage unit 15, when it is determined that the first inputter and the second inputter are different persons, the second component is inputted by the second inputter. If it is determined that the first inputter and the second inputter are not different persons, the second component is not input by the second inputter.

Thereby, the master key can be generated only when a plurality of different inputs each input the component data, and the effect of high security on the component input can be expected.

Next, a second embodiment of the present invention will be described. In addition, about the thing which has the same structure as 1st Embodiment, the description is abbreviate | omitted by attaching | subjecting the same code | symbol. In addition, the description is abbreviate | omitted also about the same operation and the same effect as the said 1st Embodiment.

3 is a block diagram of a trading device in a second embodiment of the present invention.

The transaction apparatus 10 in this embodiment has a scanner portion 16 as a biometric authentication information acquisition device instead of the card lead portion 14 described in the first embodiment, and acquires biometric authentication information of an inputter. Based on the biometric information, it is determined whether the plurality of input persons are different people. The biometric information may be, for example, an iris, a fingerprint, a palm vein pattern, a finger vein pattern, or the like, but may be any kind of biometrics authentication information that can identify the user using biological characteristics, that is, biometric information. However, it is assumed here that the scanner unit 16 acquires a palm vein pattern or a finger vein pattern.

In the present embodiment, when a plurality of components for generating a master key for encryption of passwords are input from the pin pad 13, the scanner section 16 immediately before each component is inputted by the input unit of each component. The biometric authentication information is acquired and stored in the storage unit 15, and when it is determined that the inputter is different based on the biometric authentication information, the input of the component is allowed.

In addition, about the structure of another point, since it is the same as that of the said 1st Embodiment, the description is abbreviate | omitted.

Next, operation | movement of the transaction apparatus 10 in this embodiment is demonstrated. Here, only the operation in the case of generating a master key will be described.

4 is a flowchart showing the operation of the trading apparatus in the second embodiment of the present invention.

Here, it is assumed that the inputters are two persons of the first inputter and the second inputter, and the input component is two of the first component and the second component.

First, the control unit 11 confirms the component input completion status, inquires the pin pad 13 of the input completion status of the component, and determines whether or not the first component is not input based on the result of the inquiry.

And when the 1st component is not input, the control part 11 displays the screen which prompts acquisition of biometric authentication information on the display part 12, and asks a 1st input user to acquire biometric authentication information. In doing so, the first inputter acquires his or her palm vein pattern or finger vein pattern into the scanner unit 16. In this way, when the first inputter biometric authentication information is acquired, the control unit 11 causes the storage unit 15 to store the biometric authentication information of the first inputter acquired by the scanner unit 16.

Subsequently, the first component is input, and the first inputter operates the pin pad 13 to input the first component.

When the input of the first component is completed, the control unit 11 determines whether or not the second component is not input. In addition, it is determined whether the first component has not been input, and when the first component has been inputted, it is determined whether or not the second component has not been input as it is. When the second component has been input, the control unit 11 ends the master key generation processing as it is.

In addition, when the second component is not input, the control unit 11 displays a screen prompting the display unit 12 to acquire the biometric authentication information, and requests the second inputter to acquire the biometric authentication information. In doing so, the second inputter causes the scanner unit 16 to acquire its palm vein pattern or finger vein pattern. In this way, when the second inputter biometric authentication information is acquired, the control unit 11 causes the storage unit 15 to store the biometric authentication information of the second inputter acquired by the scanner unit 16.

The control unit 11 compares the biometric authentication information of the first inputter and the biometric authentication information of the second inputter stored in the storage unit 15 to determine whether the first inputter and the second inputter are different persons. To judge.

Here, when the first inputter and the second inputter are different people, the control unit 11 displays the screen prompting the input of the second component on the display unit 12, and inputs the input of the second component to the second inputter. Ask to do it. Since the subsequent operation is the same as that of the first embodiment, the description thereof is omitted.

Next, a flowchart is demonstrated.

Step S21 Check the component input completion status.

Step S22 It is determined whether the first component is not input. If the first component has not been inputted, the process proceeds to step S23. If the first component has been inputted, the process proceeds to step S25.

Step S23 Obtain first inputter biometric information.

Step S24 Enter the first component.

Step S25 It is determined whether or not the second component is not input. If the second component has not been inputted, the process proceeds to step S26. If the second component has been inputted, the processing ends.

Step S26 Acquire second inputter biometric information.

Step S27 It is determined whether the first inputter and the second inputter are different people. If the first inputter and the second inputter are different people, the process proceeds to step S28. If the first inputter and the second inputter are not different persons, the process proceeds to step S30.

Step S28 Enter the second component.

Step S29, a master key is generated and processing ends.

It is determined whether step S30 retry is necessary. If a retry is required, the process returns to step S26. If the retry is not required, the process ends.

As described above, in the present embodiment, immediately before the first component is input, the biometric authentication information of the first inputter is acquired, the biometric authentication information is stored in the storage unit 15, and the first component is input. Immediately before inputting the second component, the biometric authentication information of the second inputter is obtained, and the biometric authentication information is stored in the storage unit 15. On the basis of the biometric information stored in the storage unit 15, when it is determined that the first inputter and the second inputter are different persons, the second component is input by the second inputter, and the first input is performed. If it is determined that the inputter and the second inputter are not different persons, the second component by the second inputter is not input.

Thus, even if there is no ID card, it is possible to determine whether the first inputter and the second inputter are different persons, and in addition to the effects of the first embodiment, an additional effect of contributing to the convenience of the inputter of the component is expected. Can be.

Next, a third embodiment of the present invention will be described. In addition, about the thing which has the same structure as 1st and 2nd embodiment, the description is abbreviate | omitted by attaching | subjecting the same code | symbol. In addition, the description is abbreviate | omitted also about the same operation and the same effect as the said 1st and 2nd embodiment.

FIG. 5 is a block diagram of a trading device in the third embodiment of the present invention, and FIG. 6 is a diagram illustrating an example of a certificate issued by the trading device in the third embodiment of the present invention.

After the master key generation process is completed, the transaction apparatus 10 according to the present embodiment prints out and issues a certificate 19 indicating that each component has been input by another person, as shown in FIG. Therefore, the trading apparatus 10 has the printing part 17 in addition to the display part 12, the pin pad 13, the card lead part 14, and the memory | storage part 15. FIG.

The printing unit 17 is a device for printing and issuing a certificate 19 after the master key generation process is completed. The printing unit 17 includes printing heads of various printing methods such as an inkjet method, a thermal method, and an electrophotographic method. The certificate 19 is then printed with the contents certifying that each component is inputted, that the master key has been generated, that the inputter of each component and the inputter of each component are different.

In addition, since the structure and operation | movement of another point are the same as that of the said 1st Embodiment, the description is abbreviate | omitted.

As described above, in the present embodiment, after the master key generation processing is completed, a certificate 19 is issued to prove that each component has been input by another inputter.

As a result, it is possible to obtain proof that the master key generation process has been normally performed. In addition to the effects of the first embodiment, the input of the component can be expected to have an additional effect that higher reliability can be obtained.

In addition, in the said 1st-3rd embodiment, although the case where the number of components input by operating the pin pad 13 was demonstrated was demonstrated, the number of components input is not necessarily limited to two.

For example, in the above first embodiment, when three components are input, the operations of steps S5 and S8 in the flowchart shown in FIG. 2 are performed for the third component, and the steps S6 and S7 are performed. The same effect can be obtained by performing the operation also for the third inputter.

 However, in the operation of step S7, it is necessary to determine that the third inputter is not only the first inputter but also the second inputter.

In the third embodiment described above, when there are three components, it is necessary to print the certificate 19 and the inputter and completion status of the third component.

Moreover, in the said 3rd Embodiment, although the case where the transaction apparatus 10 added the printing part 17 to the transaction apparatus 10 demonstrated in the said 1st Embodiment was demonstrated, said 3rd implementation The transaction apparatus 10 in the form may add the printing unit 17 to the transaction apparatus 10 described in the second embodiment.

In the above first to third embodiments, when the component pad is operated by operating the pin pad 13, the processing for the input of each component to be performed by another inputter has been described. In the case of the apparatus including the card lead portion 14 and the scanner portion 16, it is not limited to the input of the. It can be used as a means to prove that a person performed.

In the third embodiment described above, an example of printing and issuing the certificate 19 has been described. If the transaction device 10 has a means capable of outputting data to the external storage device, the content is printed to the external storage device. The same effect can be obtained by outputting the same data as. In addition, the same effect can be obtained even when the transfer destination address of the certificate 19 is registered and transmitted by electronic mail.

In addition, this invention is not limited to the said embodiment, It can change variously based on the meaning of this invention, and does not exclude them from the scope of this invention.

1 is a block diagram of a transaction apparatus in a first embodiment of the present invention.

Fig. 2 is a flowchart showing the operation of the trading device in the first embodiment of the present invention.

3 is a block diagram of a trading device in a second embodiment of the present invention;

Fig. 4 is a flowchart showing the operation of the trading device in the second embodiment of the present invention.

5 is a block diagram of a trading device in a third embodiment of the present invention.

Fig. 6 is a diagram showing an example of a certificate issued by a trading device in a third embodiment of the present invention.

Explanation of the sign

10: trading device

13: pin pad

14: card lead portion

15: memory

16: scanner unit

17: printing part

19: Certificate

Claims (7)

(a) a password input device comprising input means for inputting a password, and encryption processing means for encrypting the password input by the input means; (b) a personal authentication information acquisition device capable of acquiring personal authentication information from an ID card; (c) a trading device having a storage device for storing the personal authentication information acquired by the personal authentication information obtaining device, and transmitting an encrypted password to a higher level device to conduct a transaction; (d) When a plurality of component data for generating password encryption master data is input from the input means, immediately before each component data is input, the ID of the inputter of each component data by the personal authentication information acquisition device. And acquiring the personal authentication information from the card, storing the personal authentication information in the storage device, and permitting the input of the component data when it is determined that the inputter is different based on the personal authentication information. (a) a password input device comprising input means for inputting a password, and encryption processing means for encrypting the password input by the input means; (b) a biometric authentication information acquisition device capable of acquiring biometric authentication information; (c) a trading device having a storage device for storing biometric information obtained by the biometric information obtaining device, and transmitting an encrypted password to a higher level device to conduct a transaction; (d) When a plurality of component data for generating password encryption master data is input from the input means, immediately before the input of each component data, the biometric authentication information obtaining apparatus obtains the biometrics of the inputter of each component data. And acquiring authentication information, storing the information in the storage device, and permitting the input of the component data when it is determined that the inputter is different based on the biometric authentication information. The method according to claim 1 or 2, And a printing section for issuing a certificate, and issuing a certificate for printing that the input of each component data is different when inputting of all the component data is permitted and generating master data from the inputted component data. The method according to claim 1 or 2, In addition to the means capable of outputting data to an external storage device, input of all component data is permitted, and when generating master data from the inputted component data, the data of the certificate indicating that the inputter of each component data is different from the external Output to memory, trading device. The method according to claim 1 or 2, Further means for sending e-mail, input of all component data is permitted, and when master data is generated from the inputted component data, a certificate indicating that the inputter of each component data is different is sent by e-mail. Trading device. (a) a password input device comprising input means for inputting a password, and encryption processing means for encrypting the password input by the input means; (b) a personal authentication information acquisition device capable of acquiring personal authentication information from an ID card; (c) A data input method in a trading device having a storage device for storing the personal authentication information acquired by the personal authentication information obtaining device, and transmitting an encrypted password to a higher level device to conduct a transaction, (d) When a plurality of component data for generating password encryption master data is input from the input means, immediately before each component data is input, the ID of the inputter of each component data by the personal authentication information acquisition device. And acquiring the personal authentication information from the card and storing the personal authentication information in the storage device and permitting the input of the component data when it is determined that the inputter is different based on the personal authentication information. (a) a password input device comprising input means for inputting a password, and encryption processing means for encrypting the password input by the input means; (b) a biometric authentication information acquisition device capable of acquiring biometric authentication information; (c) A data input method in a trading device having a storage device for storing biometric information obtained by the biometric authentication information obtaining device, and transmitting an encrypted password to a higher level device to conduct a transaction, (d) When a plurality of component data for generating password encryption master data is input from the input means, immediately before the input of each component data, the biometric authentication information obtaining apparatus obtains the biometrics of the inputter of each component data. Acquiring authentication information, storing the information in the storage device, and permitting input of the component data when it is determined that an inputter is different based on the biometric authentication information.

Images