KR20020071309A - A method for preventing withdrawal from automatic teller without permission - Google Patents

Abstract

PURPOSE: An illegal withdrawal prevention method is provided to let a user notify a criminal of a disguised secret number in a case that the user is threatened to say a secret number of a cash or credit card, to delay a money withdrawal process at an ATM(Automatic Teller Machine) if the disguised secret number is input and to dispatch a security guard to a site where the ATM is installed. CONSTITUTION: The method comprises steps of a bank server and a credit card company server waiting for a withdrawal or account transfer request at an ATM(S110), the bank server and the credit card server reading an ID from the ATM if there exists a withdrawal or account transfer request from an ATM(S120, S130), the servers waiting for an input of a secret number at the ATM(S140), the servers reading card or account related data such as private personal data, an account number, a secret number and a disguised secret number if a secret number is input at the ATM(S150, S160), the servers comparing the input secret number with the stored disguised secret number(S170), the servers comparing the input secret number with the stored secret number in a case that the input secret number is different from the stored disguised secret number(S180), the servers processing the withdrawal or account transfer request if the input secret number is the same as the stored secret number(S190), the servers transmitting an error message to the ATM if the input secret number is different from the stored secret number(S200), the servers delaying the process of a service request, and dispatching a security manager to the ATM if the input secret number is the same as the stored disguised secret number(S210, S220).

Description

A method for preventing withdrawal from automatic teller without permission}

The present invention relates to a method for preventing withdrawal of money by unauthorized persons through an automated device of a financial institution, and more particularly, by detecting a security when attempting to withdraw money through an automated device from an unauthorized person's card or account. The present invention relates to a method for preventing unauthorized withdrawal of money by an automated device of a financial institution that can take security measures against a person who attempts to withdraw illegally by calling a person in charge.

In general, to withdraw money deposited from a financial institution such as a bank or conduct a transaction, such as a bank transfer, bring a bankbook and a stamp of an account opened in your name and fill out and submit a payment application or transfer application. It is.

In recent years, in order to ease the inconvenience of banking and to make transactions more convenient, banks issue cash cards or debit cards, and users can use cash dispensers or ATM machines with these cards. It makes it possible to make transactions such as deposit and withdrawal, transfer and inquiry easily.

In addition, a credit card can be used to receive cash lending services through banks' automatic tellers and cash machines.

However, the above-mentioned cash / debit card and credit card, etc. are convenient to use, but if the person holding the card only knows the password of the card, the owner of the original card can withdraw money at will. Leaving cards and passwords in a state of being confined and suppressed by criminals such as robbers or gangsters can cause a lot of property damage as well as threat to body and life.

Accordingly, the present invention has been made to solve the problems described above, when registering a password and a separate camouflage password when issuing a card that can use a bank automation device, the password entered when the payment request using the card in advance The purpose is to provide a method for preventing unauthorized withdrawal of money by unauthorized persons through an automated device of a financial institution that can call a security officer to take security measures against anyone attempting to make an illegal withdrawal if it is a registered camouflage password. There is this.

1 is a schematic structural diagram of hardware for carrying out the present invention;

2 is a flowchart illustrating an information input process when applying for card issuance or phone banking according to a preferred embodiment of the present invention;

3 is a flowchart for explaining a process of confirming a user's identity when payment processing is requested through an automated device according to a preferred embodiment of the present invention.

<Explanation of symbols for the main parts of the drawings>

10-1 to 10-n: Bank information terminal 20-1 to 20-n: Phone banking processing terminal

30-1 to 30-n: Cash dispenser 40-1 to 40-n: Cash dispenser

50: bank computer center server 60: bank database

70: security call terminal 110-1 to 110-n: credit card company information terminal

120: credit card company server 130: credit card company database

200: gateway

A method for preventing the withdrawal of money by another person through an automated device of a financial institution according to a preferred embodiment of the present invention for achieving the above object is the identity of the user when issuing a card capable of processing payment of money using the automated device. Entering and storing a password and a random camouflage password to verify the server in the database, and if the password is entered together with the payment request using the card from the automated device, the server is based on the card information reported from the automated device Searching and reading the password and the camouflage password associated with the card and matching the password with the input password; if the input password in the matching step matches the password registered in the database, performing the requested payment processing; The secret entered at the control step If the call is consistent with the gastrointestinal password registered in the database server, is characterized by not permit the requested payments, it transmits a signal to a security call terminal for being a step of calling the guard in charge.

In order to prevent the unauthorized withdrawal of money through an automated device of a financial institution according to another embodiment of the present invention for achieving the above object, a user identification password and arbitrary camouflage password using the phone banking database of the server In the step of storing and inputting an identifier and a password together with the payment request from the phone banking terminal, the server searches the database according to the identifier reported from the phone banking terminal and reads the password and camouflage password associated with the identifier. A step of matching this with the input password; if the password entered in the matching step matches a password registered in the database; performing the requested payment processing; and the password entered in the verification step is registered in the database. Camouflage password and If there is a match, the server transmits a signal to the security call terminal without permitting the requested payment process, and comprises a step of calling a security officer.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a schematic block diagram of hardware for carrying out the present invention. As can be seen from the drawings, the hardware for carrying out the present invention includes information terminals 10-1 to 10- used in banknotes. n), phone banking processing terminals (20-1 to 20-n), ATM machines (30-1 to 30-n), ATM machines (40-1 to 40-n), bank computer center servers (50), and bank computerization Center database 60, banking security call terminal 70, credit card company information terminal (110-1 ~ 110-n), credit card company server 120, credit card company database 130 and card company security It comprises a call terminal 140, the first network (N1), the second network (N2) and the gateway 200.

The information terminal 10-1 to 10-n used in the banknote is a computer terminal device for inputting related information and deposit and withdrawal details when a bank account, debit or cash card is newly opened at a bank window or the like.

The phone banking processing terminals 20-1 to 20-N include an automatic answering service means for providing voice guidance through a telephone, and are connected to a public telephone network (PSTN) and toned signals transmitted from telephones connected through the public telephone network. Receives a signal) and recognizes it as an input number, and determines the identifier and password input by the user, the type of service and the account number according to the recognized number, and performs phone banking processing.

The ATM (30-1 to 30-n) reads account information and card information recorded on the magnetic record surface of the cash card and the bankbook, and identifies the user's identity according to a password input through a keypad (or a touch screen). Check and perform payment processing (cash and check withdrawal and bank transfer, etc.) requested by the user.

The ATMs 40-1 to 40-n read the account information and the card information recorded on the magnetic record surface of the cash card and the bankbook in addition to performing the functions of the above-described automatic teller machine, and through the keypad (or touch screen). The user's identity is verified according to the password entered, and the cash and check received through the cash / check receipt machine are processed.

The computer center server 50 includes information terminals 10-1 to 10-n, phone banking processing terminals 20-1 to 20-n, cash dispensers 30-1 to 30-n, and a cash dispenser 40. -1 through 40-n) approve and process all bank-related business such as issuing cards and bankbooks, creating and destroying accounts, deposit and withdrawal and transfers, and inquiring, and storing all data related to the process in the database 60 Manage.

In addition, the computer center server 50 stores a password and an arbitrary camouflage password for verifying the user's identity in the database 60 when issuing a card capable of payment processing using an automated device, namely, an automatic device, that is, phone banking. If the camouflage password is entered together with the payment request from the processing terminal 20-1 to 20-n, the cash dispenser 30-1 to 30-n, and the cash dispenser 40-1 to 40-n, the secure call terminal 70 ) Sends a control command to indicate the security call. The computer center server 50 may be a plurality.

The bank computer center database 60 stores accounts and cards and all deposits and withdrawals, and the bank computer center database 60 may be plural.

The security call terminal 70 is a computer terminal device for calling a security officer, that is, a petition police officer or a police officer or a security person in a bank, and displays a unique number and location of an automated device that has performed a expenses processing by inputting a disguised password. Or, if a fake password is input through phone banking, information of the corresponding phone banking user (eg, home address, home phone number, work address, work phone number, etc.) is displayed.

The information terminal 110-1 to 110-n of the card company is a computer for inputting personal information of a credit card user, credit card related information (for example, type, etc.), a password, and a fake password when issuing a credit card. It is a terminal device.

The credit card company server 120 stores the personal information of the credit card user, the credit card related information, and the disguised password entered through the information terminal (110-1 to 110-n) in the database 130 and from the server of the banknote Perform authorization processing for the requested cash advance service.

In addition, the credit card company server 120 checks the password inputted with the authorization request for the cash lending service from the server of the banknote against the password stored in the database 130, if the password entered as a matching result matches the camouflage password information To the computer center server 50 of the bank.

The database 130 of the credit card company stores all the information on the use of the credit card, such as the details of each user and the card information (card type, serial number, etc.) generated by each user and the card usage history.

The first network (N1) is a terminal 10-1 to 10-n and withdrawal and withdrawal-related automation equipment (20-1 to 20-n, 30-1 to 30-n, 40-1 to 40-n) in a bank. ) Is a communication network connecting the computer center server 50, for example, the first network N1 may be a local area network (LAN).

The second network N2 is a communication network connecting the respective terminals 110-1 to 110-n of the card company with the credit card company server 120. For example, the second network N2 may be a LAN.

The gateway 200 connects the first network N1 and the second network N2 and mediates the authorization process between the bank's computer center server 50 and the credit card company server 120.

An operation example of the present invention through the hardware configured as described above will now be described with reference to the accompanying drawings.

First, the process of issuing a card (bank debit and debit card, credit card company credit card) that can use the automated devices to the bank and credit card companies will be described.

When a bank or credit card company issues a debit card, a cash card, or a credit card, the personal information (for example, name, resident registration number, address, contact phone number, etc.) of the person to be issued, that is, the user, is input using the terminal (S10). .

In the case of a bank, the personal information of the user is input through the bank information terminals 10-1 to 10-n. The user input through the bank information terminals 10-1 to 10-n, that is, a debit card and cash. The personal information of the card issuer is transmitted to the computer center server 50 through the first network N1.

In the case of a credit card company, the personal information of the user is input through the credit card company servers 110-1 to 110-n, which is a user input through the information terminal 110-1 to 110-n of the card company, that is, a credit card issuance. The personal information of the subject is transmitted to the credit card company server 120 through the second network N2.

If the bank has a business agreement with the bank to issue credit card, the personal information of the credit card issuer is input through the bank information terminal 10-1 to 10-n. The personal information of the credit card issuing subject entered through the terminals 10-1 to 10-n is transmitted to the computer center server 50 through the first network N1, and again from the computer center server 50. It is transmitted to the credit card company server 120 via the network (N1), the gateway 200 and the second network (N2).

Next, input the password selected by the user (S20).

In the case of a bank, a user inputs a password selected by the user through the bank information terminals 10-1 through 10-n. The user entered through the bank information terminals 10-1 through 10-n, that is, a debit card and cash. The password selected by the card issuer is transmitted to the computer center server 50 through the first network N1.

In the case of a credit card company, a password selected by a user is input through the credit card company servers 110-1 to 110-n. The user entered through the information terminal 110-1 to 110-n of the card company, that is, a credit card issuance The password selected by the subject is transmitted to the credit card company server 120 through the second network N2.

If the bank has a business agreement for the issuance of a credit card, the bank inputs a password selected by the credit card issuing person through the bank information terminals 10-1 to 10-n. The password of the credit card issuing subject entered through the terminals 10-1 to 10-n is transmitted to the computer center server 50 through the first network N1, and again from the computer center server 50 to the first network. It is transmitted to the credit card company server 120 via the (N1), the gateway 200 and the second network (N2).

Next, enter the spoof password (S30), wherein the spoof password may be selected by the user, but the password associated with the password entered in the step (S20) (for example, only the last digit or the first digit) or Any password can be determined by the bank or credit card company and informed to the user.

In the case of a bank, a debit card and a debit card of a debit card is issued through a bank information terminal (10-1 to 10-n). The debit entered through a bank information terminal (10-1 to 10-n) The disguised password of the card and the cash card issuer is transmitted to the computer center server 50 through the first network N1.

In the case of the credit card company enters the fake password of the credit card issuance subject through the credit card company server (110-1 ~ 110-n), the credit card issuance entered through the card company's information terminal (110-1 ~ 110-n) The subject's fake password is transmitted to the credit card company server 120 through the second network (N2).

If the bank has a business agreement to act as a credit card issuing agent, enter the fake password of the credit card issuer through the bank information terminal (10-1 to 10-n). The disguised password of the credit card issuing subject entered through the terminals 10-1 to 10-n is transmitted to the computer center server 50 through the first network N1, and again from the computer center server 50. It is transmitted to the credit card company server 120 via the network (N1), the gateway 200 and the second network (N2).

Next, the information input at the steps S10 to S30 is stored in the database (S40).

In the case of banks, personal information, passwords and fake passwords, and card information to be issued (for example, types of cards, serial numbers and related account numbers, etc.) of debit and cash card issuing subjects entered in the computer center server 50 Is stored in the bank's database 60.

In the case of a credit card company, the personal information, password and fake password and credit card information (for example, the type and the serial number of the credit card) of the credit card issuer entered in the credit card company server 120 are issued. Stored in database 130.

Then, banks and credit card companies issue debit cards, cash cards, credit cards and the like according to the information entered in steps S10 to S30.

On the other hand, even when the user applies for phone banking, the procedure is the same as the card issuing process in steps S10 to S40, except that an identifier (ID) for identifying the user is provided during phone banking. This identifier is a combination of numbers due to the nature of phone banking, and may be a value selected by a user or a value determined and determined by a bank.

Next, the process of verifying the identity of the user when the user performs the payment processing through the automated device with the card issued above will be described.

The bank computer center server 50 and the credit card company server 120 respectively wait for the reception of the payment processing request information from the automated devices (phone banking processing terminal, cash dispenser, cash dispenser) (S110).

If there is a payment request (for example, cash and check withdrawal, bank transfer, credit card loan, etc.) from an automated device (phone bank processing terminal, cash dispenser, cash dispenser) (S120), the computer center server 50 and credit Card company server 120 reads identification information from the automated device that sent the payment request (S130)

For example, a user may use a debit card or a cash card to pay cash or withdraw money or transfer money to a cash dispenser 30-1 to 30-n or a cash dispenser 40-1 to 40-n. When a debit card or a cash card is inserted, the ATMs 30-1 to 30-n and the ATM machines 40-1 to 40-n identify information (for example, from the magnetic recording surface of the debit card or cash card inserted by the user). , Serial number of the card, account number, etc.) is read and transmitted to the computer center server 50 through the first network N1.

As another example, a user uses a credit card with a cash dispenser (30-1 to 30-n) or a cash dispenser (40-1 to 40-n) to perform payment processing such as credit card loan or bank transfer. When inserted, the ATMs 30-1 to 30-n and the ATMs 40-1 to 40-n read identification information (e.g., serial numbers of cards, etc.) from the magnetic recording surface of the credit card inserted by the user. It is transmitted to the computer center server 50 through the first network N1, and the computer center server 50 trusts this through the first network N1, the gateway 200, and the second network N2. It transmits to the card company server 120.

As another example, when a user connects to the phone banking processing terminals 30-1 to 30-n by phone and inputs an identifier (ID) to perform payment processing such as account transfer through phone banking, the phone banking processing terminal 30- 1 to 30-n transmit the identifier ID entered by the user via telephone to the computer center server 50 via the first network N1.

The computer center server 50 and the credit card company server 120 receive the identification information transmitted from the automated device that sent the payment request in step S130, and then wait for input of a password from the automated device that transmitted the identification information. (S140).

At this time, when the password is input from the automated device (S150), the computer center server 50 and the credit card company server 120 searches the database according to the identification information read in the step (S130), the payment card or phone banking account requested Read related information (user's personal information, account number, password, fake password, etc.) (S160).

For example, if the debit card or cash card password is entered through the keypad or touch screen of the ATMs 30-1 to 30-n or the ATMs 40-1 to 40-n, the entered password is entered. From the ATM 30-1 to 30-n or the ATM 40-1 to 40-n is transmitted to the computer center server 50 through the first network N1, and the computer center server 50 is the above. According to the identification information of the debit card or the cash card read in step S130, information related to the card (user's personal information, account number, password, fake password, etc.) is retrieved from the bank's database 60 and read. .

As another example, when the password of the credit card is input through the keypad or touch screen of the ATM 30-1 to 30-n or the ATM 40-1 to 40-n, the input password is the ATM 30 -1 to 30-n or the cash dispensers 40-1 to 40-n are transmitted to the computer center server 50 through the first network N1, and the computer center server 50 sends the first network ( N1), the gateway 200 and the second network N2 are transmitted to the credit card company server 120 through the medium.

The credit card company server 120 searches for information related to the card (user's personal information, password, fake password, etc.) from the credit card company's database 130 according to the identification information of the credit card read in step S130. Read it.

As another example, when a user inputs a password for phone banking by telephone, the password is input to the phone banking processing terminals 30-1 to 30-n through a public telephone network (PSTN), and the phone banking processing terminals 30-1 to 30-n. n) is transmitted to the computer center server 50 via the first network N1, and the computer center server 50 is related to the corresponding phone banking account according to the identifier ID read in the step S130. (User's personal information, account number, password, fake password, etc.) is retrieved from the bank's database 60 and read.

Next, the computer center server 50 and the credit card company server 120 compares the password inputted from the automated device in step S150 with the spoofed password among the information retrieved from the database in step S160 (S170).

As a result of the comparison in step S170, if the password inputted from the automation device in step S150 does not match the fake password retrieved from the database in step S160, the computer center server 50 and the credit card company server 120 ) Compares the password inputted from the automation device in step S150 with the password among the information retrieved from the database in step S160 (S180).

As a result of the comparison in step S180, if the password input from the automation device in step S150 matches the password retrieved from the database in step S160, the computer center server 50 and the credit card company server 120 The payment process is performed according to the payment processing request selected and input by the user from the automated device (S190). However, debit cards and cash cards will be processed as long as the balance remains in the linked account, and credit cards will be processed only within the limit of usage.

If, as a result of the comparison in step S180, the password inputted from the automation device in step S150 does not match the password retrieved from the database in step S160, the computer center server 50 and the credit card company server ( 120, the user regards the password as incorrectly input and transmits an error message indicating that the password is incorrect to the corresponding automation device (S200).

For example, when an error message is sent from the computer center server 50 to the ATMs 30-1 to 30-n or the ATMs 40-1 to 40-n, the ATMs 30-1 to 30- are displayed. n) or an error message indicating that the password is incorrect is displayed on the display panels of the cash dispensers 40-1 to 40-n. In this case, the user can insert the card again and enter the password again.

As another example, when an error message is transmitted from the computer center server 50 to the phone banking processing terminals 20-1 to 20-n, the phone banking processing terminals 20-1 to 20-n are prerecorded or digitally voiced. Synthesized voice announcement (informing the user that the password is wrong) is transmitted to the user's phone through the public telephone network.

If, as a result of the comparison in step S170, if the password input from the automation device in step S150 matches the fake password retrieved from the database in step S160, the computer center server 50 and the credit card company server ( 120 considers that the person requesting the payment processing is not the actual user but the other person who found the card (or phone banking identifier) and the fake password through the coercive force from the user and delays the requested payment processing (S210). For example, the computer center server 50 and the credit card company server 120 do not respond (approval, disapproval, etc.) for a predetermined time to the payment processing requested from each automated device. On the guide voice), only an indication that the processing is in progress is made and payment processing is delayed.

At the same time, the computer center server 50 and the credit card company server 120 secure the serial number of the automated device that has entered the camouflage password, the device type, the installation location, and the information about the card requesting payment processing. Transfer to, and calls the security officer (S220).

Here, in the case of the credit card company server 120, the serial number and type of device of the automated device inputting the fake password and information about the installation location and the card requesting the payment processing are transmitted from the credit card company server 120 to the second network (N2). And is transmitted to the computer center server 50 via the gateway 200 and the first network (N1), and is again transmitted from the computer center server 50 to the security call terminal (70).

The serial number of the automated device transmitted from the computer center server 50 and the credit card company server 120, the device type, the installation location, and information about the card requesting the payment processing are displayed on the screen of the security call terminal 70. In this way, according to the information displayed on the screen of the security call terminal 70, the security officer can go to the automated device to arrest or confirm the identity of the person who requested the payment processing or to secure the safety of the victim by following. have.

Here, the security officer may be a petition police officer residing in a bank, a private bodyguard or a security company employee, or a police officer or police detective at a police box or police station.

On the other hand, since the user who uses the phone banking cannot know the place where the phone is used, by displaying the personal information of the user who uses the phone banking and the telephone number currently connected to the phone banking processing terminal on the security call terminal 70. For example, a security officer can run a caller tracking system that has been developed to date to track telephone calls.

The present invention is described above by illustrating specific embodiments, but the present invention is not limited to the above embodiments. Those skilled in the art can easily make various changes and modifications to the present invention, and it should be noted that such variations or modifications are included within the scope of the present invention as long as the features of the present invention are used.

According to the present invention as described above, a user who has a card or a phone banking account that can use an automated device of a financial institution is provided with information on the card or the phone banking account to another person in a situation where the body is restrained and suppressed by a robbery or abduction. If you tell your covert password when it is stolen, if you want to withdraw money through the financial institution's automated device, the financial institution can detect illegal payment processing requests and take necessary measures. Not only can the property be as secure as possible from crime, but it also has the effect of preventing similar crimes in advance.

Claims (8)

When issuing a card that can process payments using an automated device, a step of storing and entering a password and an arbitrary camouflage password for verifying the user's identity in a server database; When the password is input together with the payment request using the card from the automated device, the server searches the database according to the card information reported from the automated device, reads the password and camouflage password related to the card, and compares it with the input password. , Performing the requested payment processing if the input password in the matching step matches the password registered in the database; If the inputted password in the matching step matches the fake password registered in the database, the server delays the requested payment processing and transmits a signal to the security call terminal, which comprises a step of calling a security officer. To prevent unauthorized withdrawals of money by someone else's automated equipment. According to claim 1, wherein the payment process is delayed all the payment process is not authorized through the automated device of the financial institution, characterized in that if there is a payment request in the future again until the separate control input is processed by the server How to prevent others from withdrawing money. The method of claim 1, wherein the withdrawal of the money using the card includes an account transfer. According to any one of claims 1 to 3, wherein the payment process using the automated device is a cash card issued by a bank, characterized in that the money of another person not authorized through the automated device of the financial institution. How to prevent withdrawal? According to any one of claims 1 to 3, the payment process using the automated device is a debit card issued by a bank, characterized in that the money of another person not authorized through the automated device of the financial institution. How to prevent withdrawal? 4. The card according to any one of claims 1 to 3, wherein the card capable of payment processing using the automated device is a credit card issued by a credit card company. How to prevent withdrawals. Inputting and storing an identification password and an arbitrary camouflage password of a user using phone banking, When an identifier and a password are input together with a payment request from the phone banking terminal, the server searches the database according to the identifier reported from the phone banking terminal, reads the password and the camouflage password related to the identifier, and compares it with the input password. and, Performing the requested payment processing if the input password in the matching step matches the password registered in the database; If the inputted password in the check step matches the camouflage password registered in the database, the server delays the requested payment processing and transmits a signal to the security calling terminal to call the person in charge of the financial institution. To prevent unauthorized withdrawals of money by someone else's automated equipment. According to claim 7, The payment is delayed through the phone banking account is not authorized through the automated device of the financial institution, characterized in that all payment processing is stopped by the server until a separate control input. How to prevent withdrawal?