KR100994187B1 - Automatic transaction system and automatic transaction machine - Google Patents

Abstract

When changing the password in the automatic transaction device by the operation of the customer, the number that is easy to be guessed by a third party and is not visible to the customer is not visible to the customer, and when the customer specifies a new password, the customer only knows the result of rejection or permission. can not do it. As a result, if the change is denied, a new password must be specified and the procedure must be repeated. Passwords that are likely to be guessed by a third party are registered in a database connected to the host computer, and are displayed on the customer operation display section of the automatic transaction apparatus during the password change transaction. In addition, it allows the customer to additionally register the desired prohibition password.

Automated Transactions, Password Changes, Prohibited Passwords

Description

AUTOMATIC TRANSACTION SYSTEM AND AUTOMATIC TRANSACTION MACHINE}

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an automatic transaction system having an automatic transaction device that performs a transaction by a customer's operation. The present invention relates to an automatic transaction system capable of changing a password in an automatic transaction device.

When performing a withdrawal transaction using an automatic transaction device, it is required to enter a password for identity verification.However, when changing the password registered at the time of opening an account, it is also necessary for the financial institution to apply at the counter of the store of the financial institution. It is cumbersome and burdensome for the person in charge. Therefore, a password change system that has a password change function has been proposed.

Japanese Patent Laid-Open No. 2007-34409 (Patent Document 1) tends to change and register a password that can be associated with information related to the user so that the customer can easily remember when changing the password in the automatic transaction apparatus by the operation of the customer. Considering this, if the customer has specified a password that is likely to be guessed from the personal information of the customer, the designation should not be accepted.

[Patent Document 1] Japanese Patent Laid-Open No. 2007-34409

However, the password change system of Patent Literature 1 registers a number which is easy to be guessed by a third party and which is inappropriate as a password in a database connected to a host computer, or is stored in a temporary storage unit of an automatic transaction device (paragraph 0028). When the new passwords are assigned, they are invisible to the customer. When the new password is specified, the customer knows only the result of "deny change" or "permit change" (paragraph 0029). As a result, when the change is rejected, the user has to specify a new password again and perform the procedure again.

In view of such a situation, it is an object of the present invention to display a password, which is likely to be guessed to a third party, to a customer when the password is changed, and to quickly register the password.

The present invention relates to an automatic transaction system for changing a password by an automatic transaction device in order to solve the above problems, wherein a password that is likely to be guessed by a third party is registered in a database connected to a host computer, and the password is changed. At the time of registration, these are displayed on the customer operation display section of the automatic transaction apparatus.

The automatic transaction system according to claim 1 has a customer operation display portion comprising a display portion and an input portion, and includes an automatic transaction apparatus for performing a password change transaction by a customer's operation, and a host apparatus for managing customer account information including a password. In the automatic transaction system, the host apparatus has a database for storing a forbidden password forbidding the registration of the password, and the automatic transaction apparatus accepts a password change transaction by a customer's operation, The prohibition password is received and the prohibition password is displayed on the customer operation display unit. Accordingly, the customer can make a password change transaction while viewing the prohibition password displayed on the customer operation display unit.

In the automatic transaction system according to claim 2, in the automatic transaction system according to claim 1, the prohibition password displayed on the customer operation display portion is a list format of a plurality of prohibition passwords. As a result, the prohibition password is easy for the customer to see, and the operability is improved.

The automatic transaction system of claim 3 is the automatic transaction system according to claim 1, wherein the host apparatus creates the prohibition password from the customer account information. Although it may be prepared in advance or may be created each time, the accuracy of the password which is likely to be guessed by a third party increases.

The automatic transaction system according to claim 5, in the automatic transaction system according to claim 3, adds or changes the prohibited password in accordance with the addition or change in the customer account information. Thereby, even if there is a change in customer account information, it is possible to respond.

The automatic transaction apparatus according to claim 6 has a customer operation display portion comprising a display portion and an input portion, performs a password change transaction by a customer's operation, and manages customer account information including a password, and information for a password change transaction. An automatic transaction apparatus for transmitting and receiving a message, comprising: accepting a transaction for changing a password by a customer's operation, receiving information for the password change transaction received from the host apparatus, including a prohibition password forbidding registration, and And a control unit for controlling the display of the prohibition password on the customer operation display unit. Thereby, the customer can obtain the automatic transaction apparatus which can perform the password change transaction while watching the customer operation display portion.

The automatic transaction apparatus according to claim 7 is displayed in the automatic transaction apparatus according to claim 6 including the reason for prohibition in the display of the prohibited password. Thereby, operability improves in a customer.

An automatic transaction apparatus according to claim 9 has a customer operation display portion comprising a display portion and an input portion, performs a password change transaction by a customer's operation, and manages customer account information including a password, and information for a password change transaction. An automatic transaction apparatus for transmitting and receiving a message, comprising: receiving a transaction for changing a password by a customer's operation, and receiving, in the information for the password change transaction received from the host apparatus, a first prohibited password forbidding registration; And displaying the first prohibition password on the customer manipulation display unit and accepting an input of a second prohibition password that prohibits separate registration by a customer's operation, and adds the second prohibition password to the first prohibition password. Control the transmission of the second prohibited password to the host device. Has a control unit. In this way, the prohibition password can be added at the request of the customer, so that the next time the password is changed, it is displayed on the customer operation display section even if the customer forgets.

An automatic transaction apparatus according to claim 10 has a customer operation display portion comprising a display portion and an input portion, performs a password change transaction by a customer's operation, and manages customer account information including a password, and information for a password change transaction. An automatic transaction apparatus for transmitting and receiving a message, comprising: accepting a password change transaction by an operation of a customer, receiving information for the password change transaction received from the host apparatus, including a prohibited password forbidding registration, and Displaying the prohibition password on the customer operation display unit, sending the new password specified by the customer to the host device, receiving an input of a permission password for allowing registration by the customer's operation, and sending the permission password to the host device. It has a control unit for controlling this. As a result, the customer decides in advance for the next password change, so that the password is not changed freely by a malicious third party.

According to the present invention, when a customer attempts to change his / her password using an automatic transaction device, the number can be easily guessed by a third party, and can also be specified by referring to the list of prohibited passwords. It is possible to prevent the registration of a number which is easy to guess as a password in advance.

Further, according to the present invention, it is considered that a customer can add a forbidden password on his own basis to the list of forbidden passwords registered in the database connected to the host computer, that is, the customer himself is likely to be guessed by a third party. Since the password to be used can be registered as a prohibition password in advance, it is possible to prevent the registration of a password that is likely to be guessed. Moreover, in financial institutions, more seamless services can be provided to customers.

In addition, according to the present invention, since the customer can create a list of permission passwords (next scheduled password) separately from the prohibition password, the password may be changed by a malicious third party due to theft of the card. Disappears.

Moreover, according to the present invention, not only the password of one card can be changed, but also the password of a plurality of cards can be changed continuously.

Best Mode for Carrying Out the Invention The best mode for carrying out the invention is described below with reference to the drawings. First, a description will be given of the automatic transaction system that is the premise of the present invention. 1 is an external view of an automatic transaction apparatus of the present invention. 1 is an automatic transaction apparatus (hereinafter referred to as ATM), which is connected via a communication line with a host computer described later managed and maintained by a financial institution. The ATM 1 is installed in a business store of a financial institution, a gas station, a supermarket, or the like.

In the figure, reference numeral 11 denotes a customer operation display unit for a customer's transaction operation, which includes a transaction induction display unit for a customer to perform a transaction operation and a touch panel for operation input. The numeric keypad described later is displayed on the touch panel.

12 is a card processing unit that reads information of a customer identification card (hereinafter referred to as a cache card) not shown. The cash card stores customer information such as a code (number) for each financial institution, an account number of a user, a name, and the like. By the card insertion return port connected to the front side of the card processing unit 12, the above cash card is inserted and returned at the end of the transaction.

13 is a seat processing unit that issues a booklet (receipt) issued to a customer. The spreadsheet processing unit 13 performs transaction processing of a spreadsheet issued to a customer by printing a transaction specification. 14 is a money deposit and withdrawal unit for processing banknotes and coins, and authenticity, counting and returning money as a medium to be deposited by a customer and storing it in a cassette section of a gold type not shown or paid to a customer; Will be sent out from the cassette section of the gold type.

15 is an access detector which detects that the customer has accessed the ATM 1. Usually, when the said access detector 15 detects the customer's approach, the transaction selection screen mentioned later is displayed on the customer operation display part 11. As shown in FIG.

2 is a configuration diagram of an automatic transaction system composed of an automatic transaction apparatus and a host computer. In description of FIG. 2, description is abbreviate | omitted as a same component about the code | symbol part common to FIG.

18 in the figure is a control unit for controlling each part of the ATM 1. It has a memory unit 16 as a storage unit composed of RAM, ROM, hard disk, or the like, in which a control program is stored, and an interface unit (not shown) that is a connection port with a host computer.

21 is a host computer which is a host device of the ATM 1, which is connected to the ATM 1 via a communication line, and communicates with the ATM 1 to execute various transactions such as deposit transactions, payment transactions, and exchange rate transactions. 22 is a database connected to the host computer 21 and systematically manages and stores the name, address, deposit balance, password, etc. of the customer as customer account information.

3 and 4, the operation of the password change transaction will be described. 3 is an explanatory diagram of a display example of the customer operation display unit 11. 4 is a flowchart for explaining the flow of processing of a password change transaction.

First, when a customer approaches the ATM 1, the control unit 18 detects this by the access detector 15, and displays a screen for selecting a trading subject (Fig. 3A) on the customer operation display unit 11. (S101).

In FIG. 3A, a screen example for transaction selection will be described. On the transaction selection screen, as shown, a payment key, deposit key, balance inquiry key, payment key, bank book key and password change key are displayed. In addition, the following message is displayed to prompt the customer to start a transaction.

Here, when the customer presses the password change key 31 of Fig. 3A, the control unit 18 starts a password change transaction (S102). Subsequently, the control unit 18 displays the current password input screen (Fig. 3 (b)) on the customer operation display unit 11 for inputting the password currently being used in order to confirm that the customer is himself (S103). ).

On the current password input screen (FIG. 3 (b)), a message "Please enter the current password" for prompting the input of the current password is displayed, and the customer enters using the numeric keys 19. FIG. . The input password is displayed in the password display area 34 of FIG. 3B. At this time, there is a method of changing the password to a symbol such as "*", a method of displaying the input number as it is, etc., but the same figure shows the former method. The customer can correct the password using the correction key 33.

When the input of the current password is finished, the customer presses the confirmation key 32. When the confirmation key 32 is pressed, the control unit 18 creates a transmission electronic document in front of the host computer 21 and transmits it to the host computer 21 (S104). At the host computer 21, password matching is performed and whether a password match or a mismatch is sent to the ATM 1, and the ATM 1 receives this (S105). When the result of the password matching is inconsistency, the control unit 18 performs the card return processing (S107).

When the result of the password verification matches, the ATM 1 receives a list of prohibited passwords held by the host computer 21 from the host computer 21. The prohibition password is a number that can be easily guessed by a third party, such as the date of birth, address, telephone number, e-mail address, and vehicle number of the customer. These are created in advance in the host computer 21 from the date of birth of the customer, address, telephone number, e-mail address, vehicle number, etc., which are customer account information stored in the database 22, and are registered in the database 22, or Or, at the time of a password change transaction, you may make it from the date of birth of a customer which is the customer account information memorize | stored in the database 22, an address, a telephone number, an e-mail address, a vehicle number, etc. every time. The control unit 18 stores the list of prohibited passwords in the memory unit 16 (S108).

Subsequently, the control unit 18 edits the new password input screen and displays a list of the prohibited passwords 25 on the customer operation display unit 11 as shown in FIG. 3C (S109).

In the new password input screen (FIG. 3C), the message "Please enter a new password" prompting you to enter a new password avoiding the prohibition password. However, please avoid the following prohibited passwords.

Here, the list of prohibited passwords shown in Fig. 3C will be described. The prohibition password 25 and its prohibition reason 26 which cannot be used as a password are displayed in a list. For example, "0429" of the prohibition password 25 is April 29 at the birthday of the customer, and the message "Happy birthday" is displayed at the prohibition reason 26. As for "8765" of the prohibition password 25, a part of customer's telephone number is used, and the message "It is a telephone number" is displayed in prohibition reason 26. A part of the vehicle number of the customer is used for "4321" of the prohibition password 25, and the message "It is the number of a car" is displayed for the prohibition reason 26.

The customer enters a new password by using the numeric key (19) to circumvent the forbidden password (25). The inputted new password is displayed in the password display area 34 of FIG. 3C, but at this time, the password is replaced with a symbol such as "*" and displayed. The customer can perform the correction using the correction key 33 when the password is corrected. When the input of the new password is finished, the customer presses the confirmation key 32.

When the confirmation key 32 is pressed, the control unit 18 reads the list of prohibited passwords received from the host computer 21 and stored in the memory unit 16 in the above step. Then, in step 109, the new password inputted against the list of prohibited passwords is collated (S110), and when the new password entered matches any of the prohibited passwords, the control unit 18 displays a warning message " The new password is a forbidden password. Enter another number again ”is displayed on the customer operation display unit 11 (S111), and a new password input screen is displayed again on the customer operation display unit 11 (S109).

When the new password entered does not match any of the prohibited passwords, the control unit 18 transmits the new password to the host computer 21 (S112). When the host computer 21 receives the new password, it registers it in the customer account information stored in the database 22 as the password.

Here, in S109, when the input of a new password is ended and the customer presses the confirmation key 32, the control unit 18 does not check the inputted new password with the prohibited password received from the host computer, and inputs it. There is also a method in which the new password is transmitted to the host computer 21 and a collating process is performed in the host computer 21.

As described in step 108, the forbidden password is created from the customer account information in the host computer 21, but there are changes in the customer's address, telephone number, e-mail address, vehicle number, and the like. If so, the customer account information in the database 22 is updated, and the prohibition password is also updated.

According to the above description, when a customer attempts to change his / her password using an automatic transaction device, the user may notice a number that is likely to be guessed by a third party, thereby preventing the user from registering a number that is likely to be guessed as a password. It becomes possible.

In the above description, the case where there is only one cache card has been described. However, in the case where the password change transaction is carried out continuously for two sheets, the control of the control unit 18 controls the completion of the second cache card after the completion of the first password change transaction. A screen of whether or not to perform a password change transaction is displayed on the customer operation display unit 11. As a result, a plurality of passwords can be continuously changed. In addition, in the case of changing the password of the cash card of another bank at that time, it is possible to change it by performing the change transaction under the control of the control unit 18 similarly.

Example 1

In the above description, the host computer 21 creates a prohibition password, and lists it on the customer operation display section 11 of the ATM 1 at the time of the password change transaction, and the customer cannot use it as a new password. Explained the behavior of password change transactions to inform customers. In Embodiment 1, it is assumed that the customer's address, telephone number, vehicle, etc. are renewed, and the customer can add the prohibition password himself.

An example of the transaction of the first embodiment will be described with reference to FIGS. 5 and 7A. Fig. 5 is a flowchart for explaining the flow of processing forbidden password addition desired inquiry transaction. 7A is an explanatory diagram of a display example in which the prohibition password addition desired inquiry screen is displayed on the customer operation display unit 11.

In step 112 similarly to the flow of FIG. 4 described above, the control unit 18 transmits a new password to the host computer 21 (S112). The control unit 18 then displays the prohibition password addition desired inquiry screen shown in FIG. 7A on the customer operation display unit 11 (S201). On the Inquiry Prohibited Password Addition Inquiry screen (Fig. 7A), a message indicating that additional registration of the Prohibited Password can be performed. It will be helpful the next time you change it. ”Is displayed.

When the customer does not want this transaction, he presses the "do not add" key 35 to terminate the transaction. If desired, the customer enters a forbidden password to be added using the numeric keys 19. The inputted password is displayed in the prohibition password display area 36 of FIG. 7A as "1213", but at this time, the password is changed to a symbol such as "*", a method of displaying the input number as it is, or the like. There is this.

In addition to the additional input of the prohibition password, the prohibition reason can be input using the prohibition reason key 37. Reasons for prohibition include, but are not limited to, new addresses, new telephones, new cars, etc. 33 is a correction key. When the input of the prohibition password to be added and the input of the prohibition reason are completed, the customer presses the confirmation key 32.

When the confirmation key 32 is pressed, the control unit 18 transmits the added prohibition password to the host computer 21 (S202). When the host computer 21 receives the prohibition password, the host computer 21 additionally registers the prohibition password in the customer account information of the database 22 as the prohibition password.

According to the above Embodiment 1, since the customer himself or herself can register the password which is thought to be easy to be guessed by a 3rd party in advance as a prohibited password with respect to the list of the prohibited password registered in the database connected to the host computer, It is possible to prevent the registration of easy-to-use passwords. Moreover, in financial institutions, more seamless services can be provided to customers.

[Example 2]

In the first embodiment, it is assumed that the customer's address, telephone number, vehicle, etc. are new, and the prohibition password can be added to the customer himself. In the second embodiment, a number string that can be used as a password in advance is registered by the automatic transaction apparatus as an authorization password. The customer registers a password to be changed at the next password change transaction as a permission password in advance. That is, the next time the password change transaction is executed, the password can be changed only within the range of the allowed password.

Example 2 will be described using Figs. 6 and 7B. Fig. 6 is a flowchart for explaining the flow of the processing of the permit password request query. FIG. 7B is an explanatory diagram of a display example in which the screen for permit password request is displayed on the customer operation display unit 11. FIG.

If the customer has lost or stolen the cache card and the malicious third party knows the current password by some means, the password may be changed to an arbitrary number by the password change system. This embodiment assumes such a case.

As in the flow of FIG. 4 described above, in step 112, the control unit 18 transmits a new password to the host computer 21, and ends the password change transaction (S112). The control unit 18 then displays the permission password request inquiry screen shown in FIG. 7B on the customer operation display unit 11 (S301).

In the permission password request inquiry screen (Fig. 7 (b)), a message indicating that additional permission can be registered in advance for the next time the password is changed. Yes, it is possible ”(S301). When the customer does not want this transaction, he presses the "do not decide" key 38 to terminate the transaction.

If desired, the customer enters the permission password using the numeric keys 19. The inputted password is displayed in the permission password display area 39_ as shown by "4567" in Fig. 7B, but at this time, the password is changed to a symbol such as "*", a method of displaying the entered number as it is, or the like. A customer can correct a password using the correction key 33. When input of the permission password to register is complete | finished, a customer presses the confirmation key 32. As shown in FIG.

When the confirmation key 32 is pressed, the control unit 18 transmits the input permission password to the host computer 21 (S302). When the host computer 21 receives the permission password, the host computer 21 registers it in the customer account information stored in the database 21 as the permission password. At this time, although the permission password display area 39 is shown to display one password, a plurality of areas may be provided and a plurality of permission passwords may be input in one transaction.

According to the present embodiment, a list of permission passwords can be prepared separately from the prohibition password for the next password change transaction, so that when the customer loses or stolen the cash card, If a third party has known the current password by some method, the password can be prevented from being changed to an arbitrary number.

1 is an external view of an automatic transaction apparatus of the present invention.

2 is a configuration diagram of an automatic transaction system composed of an automatic transaction apparatus and a host computer.

It is explanatory drawing of the display example of a customer operation display part.

4 is a flowchart for explaining the flow of processing of a password change transaction.

Fig. 5 is a flowchart for explaining the flow of processing forbidden password addition desired inquiry transaction.

Fig. 6 is a flowchart for explaining the flow of processing of a permission password request query transaction.

It is explanatory drawing of the display example of a customer operation display part.

Explanation of symbols on the main parts of the drawings

1: Automatic Transaction Device (ATM)

11: customer operation display

18: control unit

19: numeric keys

Claims (10)

In the automatic transaction system which has a customer operation display part which consists of a display part and an input part, and has an automatic transaction apparatus which performs a password change transaction by a customer's operation, and a host apparatus which manages customer account information containing a password, The host apparatus has a database for storing a forbidden password forbidding the registration of the password, and the automatic transaction apparatus accepts the password change transaction by a customer's operation and receives the password change transaction received from the host apparatus. And a second prohibition password for receiving registration including a first prohibition password for prohibiting registration, displaying the first prohibition password on the customer operation display section, and prohibiting separate registration by a customer's operation. And a controller for controlling the transmission of the second prohibited password to the host device in order to receive the second prohibited password and to add the second prohibited password to the first prohibited password. In the automatic transaction system which has a customer operation display part which consists of a display part and an input part, and has an automatic transaction apparatus which performs a password change transaction by a customer's operation, and a host apparatus which manages customer account information containing a password, The host apparatus has a database for storing a forbidden password forbidding the registration of the password, and the automatic transaction apparatus accepts the password change transaction by a customer's operation and receives the password change transaction received from the host apparatus. Information for receiving a prohibition password for prohibiting registration, displaying the prohibition password on the customer operation display unit, sending a new password specified by the customer to the host device, and permitting registration by a customer operation. And a control unit which receives an input of a permission password and controls the transmission of the permission password to the host device. The method according to claim 1 or 2, The prohibition password displayed on the customer operation display unit is in the form of a list of a plurality of prohibition passwords. The method according to claim 1 or 2, And the host apparatus creates a forbidden password from the customer account information. The method of claim 4, wherein The customer account information is one or more of the date of birth, address, telephone number, e-mail address, vehicle number of the customer. In the automatic transaction apparatus having a customer operation display unit comprising a display unit and an input unit, which performs a password change transaction by a customer's operation, and transmits and receives information for a password change transaction with a host device that manages customer account information including a password. Receive a transaction for changing a password by a customer's operation, receive the information for the password change transaction received from the host device, including a first prohibited password forbidding registration, and display the first operation on the customer operation display unit. The second prohibition password is displayed in order to display a prohibition password and to accept an input of a second prohibition password for prohibiting separate registration by a customer's operation, and to add the second prohibition password to the first prohibition password. And a control unit for controlling the transmission to the device. In the automatic transaction apparatus having a customer operation display unit comprising a display unit and an input unit, which performs a password change transaction by a customer's operation, and transmits and receives information for a password change transaction with a host device that manages customer account information including a password. Accepting a password change transaction by a customer's operation, receiving information for the password change transaction received from the host device, including a prohibited password forbidding registration, and displaying the prohibited password on the customer operation display unit. And a control unit for transmitting a new password designated by the customer to the host device, receiving an input of a permit password for permitting registration by the customer's operation, and transmitting the permission password to the host device. Automated trading device. The method according to claim 6 or 7, And the control of the controller is performed a plurality of times for each account of the customer. The method according to claim 6 or 7, The automatic trading device, characterized in that the display of the prohibition password including the reason for prohibition. delete

Images