KR20070021700A - Method for authenticating user and automatic teller machine for executing the method - Google Patents

Abstract

The present invention can set the one or more passwords according to the difference of the withdrawal limit amount, so that the withdrawal limit amount can be limited when the withdrawal limit is not directly with the user, and thus the method for performing the financial transaction safely and performing the method It relates to a financial automation device. The user authentication method in the automated teller machine according to the present invention comprises maintaining at least one password for each user in the financial transaction server and a withdrawal limit corresponding to the password in a user information database, and receiving the card from the user in the automated teller machine. Receiving a password and a withdrawal amount corresponding to the card, requesting a password of the card to the financial transaction server at the automated teller machine, withdrawing the password from the user information database at the financial transaction server; Identifying and transmitting a limit amount to the automated teller machine; and receiving the withdrawal limit amount from the financial transaction server at the automated teller machine, if the input withdrawal amount is less than the received withdrawal limit amount; Provide It includes the steps:

ATM, Password, Withdrawal Limit, User Verification, Biometrics

Description

TECHNICAL FOR AUTHENTICATING USER AND AUTOMATIC TELLER MACHINE FOR EXECUTING THE METHOD}

1 is a flowchart illustrating a user authentication method in an automated teller machine according to an embodiment of the present invention.

2 is a diagram showing the structure of a user information database of a financial transaction server according to one embodiment of the present invention.

3 and 4 are flowcharts illustrating a method for additional user verification according to an embodiment of the present invention.

5 is a flowchart illustrating a user authentication method in a financial transaction server according to an embodiment of the present invention.

6 is a block diagram showing the configuration of an automatic teller machine according to an embodiment of the present invention.

7 is a block diagram showing the configuration of a financial transaction server according to an embodiment of the present invention.

8 is an internal block diagram of a general purpose computer device that may be employed to perform a user authentication method in an automated teller machine according to the present invention.

<Explanation of symbols for the main parts of the drawings>

600: automatic teller machine

610: user input unit 620: server interface unit

630: user confirmation request unit 640: withdrawal amount providing unit

The present invention can set the one or more passwords according to the difference of the withdrawal limit amount, so that the withdrawal limit amount can be limited when the withdrawal limit is not directly with the user, and thus the method for performing the financial transaction safely and performing the method It relates to a financial automation device.

Compared to the traditional financial transaction that was performed by direct contact with the clerk through the window in the conventional financial institution, the introduction of ATMs has greatly eased the restriction of time and place, enabling more various financial transactions. . The ATM (Automated Teller Machine) is an automated machine that quickly processes financial transactions such as cash deposits and withdrawals anytime, anywhere, even during bank hours.

In order to conveniently use such an ATM, a user can conveniently perform a financial transaction using a cash card, a debit card or a credit card without a bankbook. However, if the user does not carry out a financial transaction directly and the family or someone withdraws the cash, the user does not know the withdrawal amount. Thus, the user had to check the withdrawal amount after confirming the user authentication by accessing the homepage of a bank or a card company in order to confirm the withdrawal amount.

In addition, if the card is lost, before the other person to use the card, the user must quickly report the theft or loss to prevent possible withdrawal accidents. In addition, if the password is leaked by being robbed of the card, it is possible to withdraw all the amount that the suspect can withdraw. In addition, credit cards that can be used without a separate password can cause enormous damage to the user in case of theft or loss.

In order to reduce the damage of the use of the card, a withdrawal limit based on a password is set so that a user can be identified when the withdrawal limit is exceeded, and a method of safely performing a financial transaction is required.

The present invention has been made in order to solve the problems of the prior art as described above, it is possible to set one or more passwords according to the difference in the withdrawal amount, so that the password is limited to the withdrawal limit amount when not withdrawn directly It is an object of the present invention to provide a method for limiting the amount of the withdrawal by telling only and a financial automation device for performing the method.

In addition, when the withdrawal amount to be withdrawn exceeds the withdrawal limit amount for the password, by requesting a representative password for identity verification or requesting user biometric information, it is possible to provide a withdrawal amount through user confirmation It is an object of the present invention to provide a method for enabling secure financial transactions and a financial automation device for performing the method.

In addition, the present invention allows to set the maximum payment amount for the card, to limit the amount of payment even if you do not directly use the card to reduce the useless card use and financing to perform the method An object is to provide an automated device.

In order to achieve the above object and solve the above-mentioned problems of the prior art, the user authentication method in the automated teller machine according to an embodiment of the present invention corresponds to one or more passwords for each user and the password in the financial transaction server Maintaining a withdrawal limit amount in a user information database, receiving a card from a user at the automated teller machine, inputting a password and withdrawal amount corresponding to the card, and depositing the password of the card at the automated teller machine; Requesting a transaction server, identifying a withdrawal limit amount for the password from the user information database at the financial transaction server, and transmitting the withdrawal limit amount from the financial transaction server at the automated teller machine; By receiving the above Ryeokdoen when withdrawn amount is less than the received withdrawal limit amount, and a step of providing the amount of money withdrawn.

A user authentication method in a financial transaction server according to another embodiment of the present invention includes maintaining a maximum payment amount corresponding to a user-specific card in a user information database, receiving a payment amount for a card from a predetermined card terminal, and Identifying a maximum payment amount for the card from a user information database, and if the payment amount is less than the maximum payment amount, transmitting a payment approval message to the card terminal.

Hereinafter, various embodiments of the present disclosure will be described in detail with reference to the accompanying drawings.

1 is a flowchart illustrating a user authentication method in an automated teller machine according to an embodiment of the present invention.

In step 101, the financial transaction server may maintain one or more passwords for each user and a withdrawal limit amount corresponding to the password in the user information database.

A description with reference to FIG. 2 is as follows. 2 is a diagram showing the structure of a user information database of a financial transaction server according to one embodiment of the present invention.

The user information database maintains a user identifier, password, withdrawal limit amount corresponding to the password and user biometric information.

The user identifier may be an identifier for identifying a user performing a financial transaction. For example, the user identifier may be an account number or a card number of a bank account owned by the user. In addition, the password is a number required for user authentication when performing a financial transaction. In general, the password can be set by selecting four numbers from 0 to 9.

The withdrawal limit amount is an amount that a user can withdraw at one time corresponding to the password. For example, the user may set the withdrawal limit amount corresponding to the first password 1234 to 200,000 won and the withdrawal limit amount corresponding to the second password 0258 to 500,000 won. Accordingly, when the user does not directly perform a financial transaction, the user may inform different passwords according to the financial transaction amount.

In addition, the user biometric information is information about a user's voice, fingerprint, iris, vein, face, and the like used for user identification. The financial transaction server may request a user confirmation from the user when the amount of the withdrawal request amount exceeds the withdrawal limit amount for the password, thereby receiving the biometric information from the user and performing the user confirmation.

Again, in step 102 with reference to Figure 1, the automated teller machine can receive a card from the user, and input the password and withdrawal amount corresponding to the card. The card may be one of cash, debit or credit card. The automated teller machine may transmit the password of the card to the financial transaction server to identify whether the withdrawal amount corresponding to the password exceeds the withdrawal limit amount.

In step 103, the financial transaction server may receive the password from the automated teller machine and identify the withdrawal limit amount for the password from the user information database. The financial transaction server may transmit the identified withdrawal limit amount to the automated teller machine. In addition, according to an embodiment of the present invention, the financial transaction server may identify whether the withdrawal amount exceeds the withdrawal limit amount, and transmit the identification result to the automated teller machine.

In step 104 and 105, the automated teller machine can receive the withdrawal limit amount from the financial transaction server and determine whether the withdrawal amount is less than the withdrawal limit amount. Thus, when the withdrawal amount is less than the withdrawal limit amount, the ATM may control to withdraw the withdrawal amount.

For example, when the user tells the family only the password "1234" and lends the card, since the withdrawal limit is limited to 200,000 won for the password 1234, the family does not exceed 200,000 won. You can withdraw cash.

As described above, according to the present invention, it is possible to set one or more passwords according to the difference in the withdrawal limit amount so that the withdrawal amount can be limited by informing only the password having a limit on the withdrawal limit amount if the withdrawal amount is not withdrawn.

3 and 4 will be described a process performed when the withdrawal amount exceeds the withdrawal limit amount.

3 and 4 are flowcharts illustrating a method for additional user verification according to an embodiment of the present invention.

As shown in FIG. 3, in steps 301 and 302, the automated teller machine requests a user confirmation when the withdrawal amount exceeds the withdrawal limit amount. Since the withdrawal amount is greater than the withdrawal limit amount for the password, the financial automatic device determines that the user does not directly withdraw the money and requests the user confirmation. For example, if the user requested a withdrawal amount of 600,000 won in step 102, and the password known by the user is "0258", the withdrawal amount exceeds the withdrawal amount amount for the password "0258", The automated teller machine may request a second password.

In step 303, the automated teller machine may receive a second password from the user who requested the withdrawal amount. The second password is additionally input to authenticate the user for the use of the card, and may or may not be a representative password. The representative password is a number that only the owner of the card can know, and unlike other passwords, the withdrawal limit amount may not be set. Therefore, you can withdraw cash as much as you can within the account balance or card limit.

For example, the card owner may not tell the family or other people, but not the representative password for the card (0078), only the password (1234, 0258) limiting the withdrawal limit. In this case, if the user who requested the withdrawal amount is not the user, since the second password is not the representative password, user authentication cannot be performed. However, when the user (the person) of the card directly requests the withdrawal amount, the withdrawal amount can be withdrawn through user confirmation by inputting the representative password as the second password.

That is, the cardholder knows only the representative password of "0078" and can additionally set passwords of "1234" and "0258". Further, the withdrawal limit amount corresponding to the password of "1234" can be set to 200,000 won, and the withdrawal limit amount corresponding to the password of "0258" can be set to 500,000 won. Thus, when the user is not the card owner, one of the "1234" or 0258 "is input as the second password, and thus user authentication fails. However, when the user is the card owner, the second password is entered. By entering a representative password of "0078" as a password, the withdrawal amount can be withdrawn through user authentication.

The automated teller machine may transmit the input second password to the financial transaction server.

In step 304, the financial transaction server may receive the second password from the automated teller machine and identify from the user information database whether the second password is a representative password. Referring to FIG. 2, the representative password may be “0078” in the user information database. The financial transaction server may determine whether the identified representative password is the same as the second password and transmit the same to the financial automatic device.

In step 305, the automated teller machine may control to withdraw the withdrawal amount if the second password is the same as the representative password.

As shown in FIG. 4, in steps 401 and 402, the automated teller machine requests a user confirmation when the withdrawal amount exceeds the withdrawal limit amount.

In step 403, the automated teller machine may receive biometric information from the user who requested the withdrawal amount. The biometric information may be information about a user's voice, fingerprint, iris, vein, face, and the like. The automated teller machine may transmit the input biometric information to the financial transaction server.

In step 404, the financial transaction server may receive the biometric information from the automated teller machine and identify whether the biometric information is the same as the user biometric information from the user information database. Referring to FIG. 2, the user biometric information may be a "fingerprint". The financial transaction server may determine whether the biometric information is the same as the identified user biometric information and transmit the biometric information to the automated teller machine.

In step 405, the automated teller machine may control to withdraw the withdrawal amount if the biometric information is the same as the user biometric information.

5 is a flowchart illustrating a user authentication method in a financial transaction server according to an embodiment of the present invention.

In step 501, the financial transaction server may maintain the maximum payment amount corresponding to the user-specific card and the maximum payment amount usage period in the user information database. The maximum payment amount may be set within the usage limit of the card, and is an amount that can be settled only during the maximum payment amount use period. The maximum payment period may be one day, one week, or limited to one time.

For example, when the maximum payment amount usage period is one day and the maximum payment amount is 500,000 won, the user may pay less than 500,000 won per day. This is to help you use the card because if you lose the limit of 10 million cards, you will only lose up to 500,000 won.

In steps 502 and 503, the financial transaction server receives the payment amount for the card from a predetermined card terminal and identifies the maximum payment amount usage period and the maximum payment amount for the card from the user information database. can do. When the maximum payment amount usage period is one week and the maximum payment amount is 200,000 won, the financial transaction server determines whether the point in time at which the payment amount is received corresponds to the maximum payment amount usage period and the remaining maximum payment amount usage period To determine whether the payment amount is less than the maximum payment amount.

If the point in time at which the payment amount is received corresponds to the maximum payment amount usage period and the payment amount is less than the maximum payment amount, in step 504, the financial transaction server may transmit a payment approval message to the card terminal. have. Accordingly, the card terminal may receive the payment approval message and pay the payment amount for the card.

If the point in time at which the payment amount is received does not correspond to the maximum payment amount usage period or the payment amount exceeds the maximum payment amount, in step 505, the financial transaction server sends a payment rejection message to the card terminal. Can be transmitted. Thus, the card terminal may not receive the payment rejection message and pay the payment amount for the card. For example, if the maximum payment amount that can be paid per day is set to 100,000 won, even if the father lends the card to the child, the child can use the card for only 100,000 won during the day, thereby reducing the useless card.

6 is a block diagram showing the configuration of an automatic teller machine according to an embodiment of the present invention.

The automated teller machine 600 includes a user input unit 610, a server interface unit 620, a user confirmation request unit 630, and a withdrawal control unit 640.

The user input unit 610 may receive a card from a user and receive a password and a withdrawal amount corresponding to the card.

The server interface 620 may transmit the input password to a predetermined financial transaction server. 2, the financial transaction server is received from the server interface unit 620 of the automated teller machine 600, including a user information database for maintaining one or more passwords for each user and withdrawal limit amount corresponding to the password; Password can be identified from the user information database. Accordingly, the financial transaction server may transmit the identification result to the server interface 620, and the server interface 620 may receive the withdrawal amount corresponding to the password from the financial transaction server.

The withdrawal control unit 640 may control to withdraw the withdrawal amount when the withdrawal amount input from the user is less than the identified withdrawal limit amount.

The user confirmation request unit 630 may request user confirmation when the withdrawal amount input from the user exceeds the identified withdrawal limit amount. Accordingly, the user input unit 610 may receive a second password from the user, and the server interface unit 620 may transmit the second password to the financial transaction server.

The financial transaction server may include a representative password (* 0078) for checking a user for each user in the user information database. The financial transaction server may receive a second password from the automated teller machine 600 to identify whether the second password is the same as the representative password from the user information database. Accordingly, the financial transaction server may transmit the identification result to the automated teller machine 600.

The server interface 620 may receive whether the second password corresponds to the representative password from the financial transaction server. The withdrawal control unit 640 may control to withdraw the withdrawal amount when the second password corresponds to the representative password.

In addition, in response to a user confirmation request from the user confirmation request unit 630, the user input unit 610 may receive biometric information from the user, and the server interface unit 620 may transmit the biometric information to the financial transaction server. have.

The financial transaction server may include user biometric information for user confirmation for each user in the user information database. The financial transaction server may receive the biometric information from the automated teller machine 600 and identify whether the biometric information is the same as the user biometric information from the user information database. Thus, the financial transaction server may transmit the identification result to the automated teller machine 600.

The server interface 620 may receive whether the biometric information is the same as the user biometric information from the financial transaction server. The withdrawal control unit 640 may control to withdraw the withdrawal amount when the biometric information is the same as the user biometric information.

7 is a block diagram showing the configuration of a financial transaction server according to an embodiment of the present invention.

The financial transaction server 700 includes a user information database 710, a payment amount identification unit 720, and a terminal interface unit 730.

The user information database 710 may maintain a maximum payment amount corresponding to a user-specific card and the maximum payment amount usage period. The maximum payment amount may be set within the usage limit of the card, and is an amount that can be settled only during the maximum payment amount use period. The maximum payment period may be one day, one week, or limited to one time. According to an embodiment of the present invention, the user information database 710 may have a structure as shown in FIG. 2, and may further include the maximum payment amount and the maximum payment amount usage period.

The payment amount identification unit 720 may receive a payment amount for a card from a predetermined card terminal, and identify a maximum payment amount usage period and a maximum payment amount for the card from the user information database 710. That is, the payment amount identification unit 720 determines whether the time when the payment amount is received corresponds to the maximum payment amount usage period and whether the payment amount is less than the maximum payment amount during the remaining maximum payment amount usage period. To identify.

When the time point at which the payment amount is received corresponds to the maximum payment amount usage period and the payment amount is less than the maximum payment amount, the terminal interface unit 730 may transmit a payment approval message to the card terminal. Accordingly, the card terminal may receive the payment approval message and pay the payment amount for the card.

If the point in time at which the payment amount is received does not correspond to the maximum payment amount usage period or the payment amount exceeds the maximum payment amount, the terminal interface unit 730 may transmit a payment rejection message to the card terminal. . Thus, the card terminal may not receive the payment rejection message and pay the payment amount for the card.

The user authentication method in the automated teller machine according to the present invention can be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tape, optical media such as CD-ROMs, DVDs, and magnetic disks, such as floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. The medium may be a transmission medium such as an optical or metal wire, a waveguide, or the like including a carrier wave for transmitting a signal specifying a program command, a data structure, or the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

8 is an internal block diagram of a general purpose computer device that may be employed to perform a user authentication method in an automated teller machine according to the present invention.

Computer device 800 includes one or more processors 810 coupled with a main memory device including random access memory (RAM) 820 and read only memory (ROM) 830. The processor 810 is also called a central processing unit (CPU). As is well known in the art, the ROM 830 serves to transfer data and instructions to the CPU unidirectionally, and the RAM 820 typically transfers data and instructions bidirectionally. Used to. RAM 820 and ROM 830 may include any suitable form of computer readable media. Mass storage 840 is bidirectionally coupled to processor 810 to provide additional data storage capability, and may be any of the computer readable recording media described above. The mass storage device 840 is used to store programs, data, and the like, and is a secondary memory device such as a hard disk which is generally slower than the main memory device. Certain mass storage devices such as CD ROM 860 may be used. The processor 810 may include one or more input / output interfaces, such as video monitors, trackballs, mice, keyboards, microphones, touchscreen displays, card readers, magnetic or paper tape readers, voice or handwriting readers, joysticks, or other known computer input / output devices. 850 is connected. Finally, the processor 810 may be connected to a wired or wireless communication network through the network interface 870. Through this network connection, the procedure of the method described above can be performed. The apparatus and tools described above are well known to those skilled in the computer hardware and software arts. On the other hand, the hardware device described above may be configured to operate as one or more software modules to perform the operations of the present invention.

As described above, although the present invention has been described with reference to limited embodiments and drawings, the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

If you do not make a withdrawal by yourself, you can limit the amount of withdrawal by telling only the password that limits the withdrawal amount.

In addition, according to the present invention, when the withdrawal amount to be withdrawn exceeds the withdrawal limit amount for the password, it is possible to provide a withdrawal amount through the user confirmation that requires a representative password for identity verification to perform a secure financial transaction I can do it.

In addition, according to the present invention, when the withdrawal amount to be withdrawn exceeds the withdrawal limit amount for the password, the withdrawal amount can be provided through user verification by requesting a representative password for identity verification or requesting user biometric information. To ensure safe financial transactions.

In addition, according to the present invention, it is possible to set the maximum payment amount for the card, it is possible to limit the payment amount even if the user does not directly use the card can reduce the indiscriminate use of the card.

Claims (11)

In the user authentication method in the automated teller machine, Maintaining, at the financial transaction server, a plurality of passwords for each user and a withdrawal limit amount corresponding to each of the plurality of passwords in a user information database; Receiving a card from a user at the automated teller machine and inputting a password and a withdrawal amount corresponding to the card; Requesting the financial transaction server for the password of the card from the automated teller machine; Identifying, at the financial transaction server, the withdrawal limit amount for the password from the user information database and transmitting it to the automated teller machine; And Receiving the withdrawal limit amount from the financial transaction server, and controlling the withdrawal amount if the input withdrawal amount is less than the received withdrawal amount; User authentication method comprising a. The method of claim 1, Storing the representative password for checking a user for each user in the user information database at the financial transaction server; If the withdrawal amount input from the user in the automated teller machine exceeds the identified withdrawal limit amount, Requesting user confirmation; Receiving a second password from the user at the automatic teller machine and transmitting the input second password to the financial transaction server; Receiving the second password at the financial transaction server, identifying whether the second password corresponds to a representative password, and transmitting the identified password to the automated teller machine; And Controlling the withdrawal amount to be withdrawn if the second password corresponds to a representative password in the automated teller machine; User authentication method further comprising. The method of claim 1, Storing, by the financial transaction server, user biometric information for user identification in the user information database; Requesting user confirmation when the withdrawal amount input from the user exceeds the identified withdrawal limit amount in the automated teller machine; Receiving biometric information from the user at the automated teller machine and transmitting the biometric information to the teller machine; Receiving the biometric information at the financial transaction server, identifying whether the biometric information is identical to the biometric information from the user information database, and transmitting the biometric information to the automated teller machine; And Controlling the withdrawal amount to be withdrawn if the biometric information is the same as the user biometric information at the automatic teller machine; User authentication method further comprising. In the user authentication method in the financial transaction server, Maintaining a maximum payment amount corresponding to a user-specific card and the maximum payment amount usage period in a user information database, wherein the maximum payment amount is set within a usage limit of the card; Receiving a payment amount for a card from a predetermined card terminal, and identifying a maximum payment amount usage period and a maximum payment amount for the card from the user information database; And Transmitting a payment approval message to the card terminal when the payment amount corresponds to the maximum payment amount usage period and the payment amount is less than the maximum payment amount; User authentication method comprising a. The method of claim 4, wherein Transmitting a payment decline message to the card terminal when the payment amount does not correspond to the maximum payment amount usage period or when the payment amount exceeds the maximum payment amount; User authentication method further comprising. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 1 to 5. In the financial automatic machine, A user input unit receiving a card from a user and receiving a password and a withdrawal amount corresponding to the card; A server interface unit which transmits the input password to a predetermined financial transaction server and receives a withdrawal limit amount corresponding to the password from the financial transaction server; And If the withdrawal amount input from the user is less than the identified withdrawal limit amount, the withdrawal control unit for controlling to withdraw the withdrawal amount, The financial transaction server comprises a user information database for maintaining one or more passwords for each user and withdrawal limit amount corresponding to the password. The method of claim 7, wherein The financial transaction server further includes a representative password for checking a user for each user in the user information database. The automated teller machine further includes a user confirmation request unit requesting user confirmation when the withdrawal amount input from the user exceeds the identified withdrawal limit amount. The user input unit receives a second password from the user, The server interface unit transmits the second password to the financial transaction server, and receives from the financial transaction server whether the second password corresponds to the representative password, And the withdrawal control unit controls to withdraw the withdrawal amount when the second password corresponds to the representative password. The method of claim 7, wherein The financial transaction server further includes user biometric information for user identification for each user in the user information database, If the withdrawal amount input from the user exceeds the identified withdrawal limit amount, further comprising a user confirmation request unit for requesting user confirmation, The user input unit receives biometric information from the user, The server interface unit transmits the biometric information to the financial transaction server, and receives from the financial transaction server whether the biometric information is the same as the user biometric information, And the withdrawal control unit controls to withdraw the withdrawal amount when the biometric information is the same as the user biometric information. A financial transaction server, A user information database for maintaining a maximum payment amount corresponding to a user-specific card and the maximum payment amount usage period, wherein the maximum payment amount is set within a usage limit of the card; A payment amount identification unit for receiving a payment amount for a card from a predetermined card terminal and identifying a maximum payment amount usage period and a maximum payment amount for the card from the user information database; And A terminal interface unit for transmitting a payment approval message to the card terminal when the payment amount corresponds to the maximum payment amount usage period and the payment amount is less than the maximum payment amount Financial transaction server comprising a. The method of claim 10, The terminal interface unit transmits a payment rejection message to the card terminal when the point in time at which the payment amount is received does not correspond to the maximum payment amount usage period or when the payment amount exceeds the maximum payment amount. Financial transaction server.

Images