KR20090016327A

KR20090016327A - Method and system for limiting input in atm

Info

Publication number: KR20090016327A
Application number: KR1020070080877A
Authority: KR
Inventors: 김기진; 윤현진
Original assignee: 노틸러스효성 주식회사
Priority date: 2007-08-10
Filing date: 2007-08-10
Publication date: 2009-02-13

Abstract

An input limiting method and a system thereof in an ATM to avoid security accidents are provided to limit inputting through a mouse and a keyboard, which are basic input devices, thereby offering minimal security functions even when a desktop of an OS or a PC is exposed. A limiting table for registering usage limiting elements regarding driving limitation of a control program associated with an ATM is maintained. A type of an input signal inputted from a user for using the control program is identified. If the identified type is matched with the usage limiting elements within the limiting table, driving of the control program is limited. When the type of the input signal is identified, it is decided whether the input signal is generated by the user's pressing action on a key button including a set limiting key button. If so, a type of the limiting key button is identified.

Description

Method and system for limiting input in financial automation equipment {METHOD AND SYSTEM FOR LIMITING INPUT IN ATM}

The present invention relates to a method and a system for restricting input in a financial automation device, which can avoid security accidents by restricting input using a keyboard and a mouse, which are basic input devices.

With respect to traditional financial transactions that have been carried out by banks in direct contact with the clerks, the emergence of Automatic Teller Machines (ATMs) has revolutionized in many ways. The customer's waiting time has been significantly reduced, and even after the financial institution is closed, the customer can benefit from financial transactions whenever they want. Not only the customers, but also the financial institution's processing time is reduced, and the workforce is reduced due to the reduction of manpower and cost.

Currently, most financial automation devices are PC-based systems and are built with Windows-based OS. Such general-purpose systems offer convenience for development, operation and maintenance, but have the disadvantage of being easily exposed to risk. That is, when the PC is exposed to the outside due to the external case or safe lock of the financial automation device being released, or the desktop of the operating system is exposed due to an application error, a security accident such as leaking financial information or installing a hacking program occurs. Can be.

Accordingly, the present invention is to propose a new technology to limit the input through the keyboard and mouse as a basic input device, to provide a minimum security function even when the desktop of the operating system or the PC is exposed.

The present invention has been made to solve the above problems, by limiting the input through the keyboard and mouse as a basic input device, to provide a minimum security function even when the operating system desktop or PC is exposed An object of the present invention is to provide a method and system for limiting input in a financial automation device.

In addition, an object of the present invention is to provide a method and system for restricting input in a financial automation device, by providing a list of control programs available for each user's authentication level, so that the management of the financial automation device can be more easily performed. .

In addition, the present invention to properly hide or display the start button, task bar, desktop icon, etc. that may cause a security incident for each user's authentication level, it is possible to perform a more thorough security maintenance for financial automation devices It is an object of the present invention to provide a method and system for restricting input in a financial automation device.

In order to achieve the object of the present invention as described above, the input limiting method in the financial automation device according to an embodiment of the present invention, a restriction table for registering a usage restriction element regarding the driving restriction of the control program associated with the financial automation device Maintaining the control unit; identifying a type of an input signal input from a user who wants to use the control program; and if the identified type corresponds to a usage restriction element in the restriction table, driving the control program. It is characterized in that it comprises a limiting step.

In addition, the input restriction system in a financial automation device according to an embodiment of the present invention, table holding means for holding a restriction table for registering a usage restriction element relating to the driving restriction of the control program associated with the financial automation device, the control program A type identification means for identifying a type of an input signal input from a user who wants to use the data, and drive limiting means for limiting driving of the control program when the identified type corresponds to a usage restriction element in the restriction table. Characterized in that.

According to the present invention, it is possible to provide a minimum security function even when the desktop or the PC of the operating system is exposed by limiting input through a keyboard and a mouse which are basic input devices.

In addition, according to the present invention, by providing a list of the control program available for each user authentication level, it is possible to more easily manage the financial automation device.

In addition, according to the present invention, by properly hiding or displaying the start button, task bar, desktop icon, etc., which may cause a security accident, according to the user's authentication level, the security maintenance of the financial automation device is more thoroughly performed. You can do it.

Hereinafter, with reference to the accompanying drawings, it will be described in detail the input limiting method and system in a financial automation device according to the present invention.

The term "financial automated machine" used in the present invention, as well as ATM (Automated Teller Machine), as well as cash dispenser (CD: Cash Dispenser) or bank, insurance, credit card, etc. It is broadly interpreted as a concept that includes a series of unmanned automated devices such as a kiosk that includes a complex automated device that provides a service and provides various additional services such as utility billing, ticket issuance, and point accumulation. .

1 is a view showing the structure of a financial automation device according to an embodiment of the present invention.

The financial automation device 100 includes an operation terminal 110, a banknote 120, a bankbook 130, and a card reader 140.

The operation terminal 110 receives menu selections and operations for financial transactions from the user, and provides various financial services or additional services to the user through the GUI screen. Banknotes and withdrawals 120 of the bill counts and stores the bill, and the bankbook 130 reads the bankbook and performs the bankbook cleaning task. The card reader 140 reads a card according to a user's financial transaction card input and performs a card related task. The card reader 140 may read not only a financial transaction card but also an accumulation card or an ID card for other tasks. In addition, the financial automation device 100 may include a communication unit for accessing a financial automation server, a control unit for controlling the overall operation of the financial automation device, a memory for storing various data, and a printing module for printing on a bankbook or a statement table. It may further include.

2 is a diagram illustrating a configuration of an input restriction system in a financial automation device according to an embodiment of the present invention.

The input restriction system 200 may be configured to include a table holding means 210, a type identifying means 220, a driving limiting means 230, and an authentication means 240.

The table holding means 210 serves to maintain a restriction table that registers a usage restriction element relating to the driving restriction of the control program associated with the financial automation device.

The table holding means 210 is provided in hardware, such as a safe of a financial automation machine, the operation terminal 110, the deposit and withdrawal part 120 of a banknote, the bankbook 130, and the card reader 140, and a financial automation device. A restriction table may be maintained that registers various usage restriction elements that restrict the running of control programs of financial automation devices such as software (e.g., OSs such as Winsows, task managers, display properties, etc.).

The table holding means 210 can register the special keys in the keyboard such as the Window key, the Ctrl key, the Alt key, the Delete key, the Esc key, the Tab key, and the right mouse button in the restriction table as the usage restriction elements. That is, when the special key and the right button input registered in the restriction table are received from the user, driving of the control program related to the input may be restricted.

In addition, the table holding means 210 is installed on the financial automation device hacking program is installed so that the financial transaction information that must be kept confidential is not leaked, the start button of the OS, task bar, base on the monitor of the financial automation device The screen icon or the like may also be registered in the restriction table as the usage restriction element. In addition, the table holding means 210 may restrict the use of the control program such as the operation manager of the OS installed in the financial automation device. Can be registered in the restriction table as an element.

The kind identifying means 220 serves to identify the kind of the input signal input from the user who wants to use the control program.

The input signal may be information about an input value input from a user through an input device such as a mouse or a keyboard, and the type of the input signal may be a special key, a numeric key, a general key, a direction key, or a mouse of a keyboard. You can say the same kind as the left and right buttons.

For example, when a user who wants to use the control program simultaneously inputs the Ctrl key and the numeric key 1 in the keyboard, the type identifying means 220 determines the type of the input signal containing the information about the Ctrl key and the numeric key 1. , Special keys (Ctrl) and numeric keys (1).

The type identification means 220 determines whether an input signal is generated by the user's pressing operation on a key button including a set limit key button, and as a result of the determination, the input signal is generated in association with the limit key button. In this case, the type of the limit key button input can be identified.

The input restriction system 200 may download a restriction key button (for example, an Alt key and a Delete key) for limiting driving when input from a user, and store the same in a buffer provided in the financial automation device.

For example, when an input signal of 'Alt key' and A is simultaneously input from the user, the type identification means 220 pushes the user to a key button including a limit key button 'Alt key' to which the input signal is set. If it is determined by the operation, and as a result of the determination, when an input signal is generated in association with the limit key button 'Alt key', the type identifying means 220 may identify a type related to the limit key button input.

The type identification means 220 determines whether an input signal is generated by the user's simultaneous pressing operation on a plurality of set limit key buttons, and as a result of the determination, the input signal is generated in association with the plurality of limit key buttons. In this case, the type of the limit key button input can be identified.

For example, when an input signal of 'Alt key' and 'Delete key' is simultaneously input from a user, the type identification means 220 may include a plurality of limit key buttons 'Alt key' and 'Delete key' having the input signal set. If the input signal is generated in association with the plurality of restriction key buttons 'Alt key' and 'Delete key' as a result of the determination, the type identification means 220 is limited. The type of key button input can be identified.

The driving limiting means 230 serves to limit the driving of the control program when the identified kind corresponds to the usage limiting element in the limitation table.

For example, since the identified type of the input signal is a special key (Ctrl) and a numeric key (1), and the special key (Ctrl) corresponds to the usage restriction element in the restriction table, the driving restriction means 230 It is possible to restrict the running of the control program associated with the input of the Ctrl key and the numeric key 1.

For example, since the identified type of the input signal is a special key (Alt key) and a character key (A), and the special key (Alt key) corresponds to the usage restriction element in the restriction table, the driving restriction means 230 is It is possible to limit the running of the control program associated with the input of the Alt key and the letter key A.

For example, since the identified type of the input signal is a special key (Alt key) and a special key (Delete key), and the special keys (Alt key and Delete key) correspond to usage restriction elements in the restriction table, drive limiting means 230 may limit driving of the control program associated with the input of the Alt and Delete keys.

The type identifying unit 220 may check an authentication level for the user who inputs the input signal, and identify the type of the unacceptable level when the identified authentication level is less than the reference level.

For example, when an input signal for driving the control program is received, the type identification unit 220 checks the authentication level of the user who wants to drive the control program, the safe lock device is S-class, the job manager is A-class, The display registration information may identify the type of the non-permissible class in which the driving of the control program is restricted when the identified authentication level is less than the standard level compared to the reference level set for each control program as the B class.

The driving limiting unit 230 may adjust the possible execution programs in the control program according to the identified authentication level, list the adjusted possible execution programs, and provide them to the user.

For example, if the authenticated user's authentication level is S-level and higher-level administrator, the user may execute a control program (eg, safe lock device, task manager, display property) whose reference level is S-class or less. And, if the confirmed user's authentication level is Class A as an intermediate manager, the user can execute a control program (eg, a job manager, display registration information) whose reference level is A or less, and confirms If the authenticated user's authentication level is a B-level administrator, the user can execute a control program (for example, display registration information) whose reference level is B-class or less.

The driving limiting means 230 adjusts the possible execution program in the control program when the confirmed authentication level is S-class, and adjusts the adjusted possible execution program, for example, '1. 2. Task manager ctrl + alt + delete, 3.Display properties (right mouse button-property) can be listed and provided to the user.

In addition, the driving limiting means 230 adjusts the possible execution program in the control program when the confirmed authentication level is Class A, and the adjusted execution program is changed to, for example, '1.Job manager ctrl + Alt'. Key + Delete key, 2.Display Properties (Right-Button Properties) to list and provide them to the user.

In addition, the driving limiting means 230 adjusts the possible execution program in the control program when the confirmed authentication level is Class B, and the adjusted execution program is adjusted to, for example, '1. Display registration information (mouse right). Button-attributes), and provide it to the user.

The authentication means 240 serves to authenticate the user who inputs the input signal. The driving limiting means 230 can completely restrict the driving of the control program for the user who is not approved as a result of the authentication process.

3 is a diagram illustrating an example of a restriction table in an input restriction system in a financial automation device according to an embodiment of the present invention.

3 shows a restriction table 300 in which various usage restriction elements are registered to restrict the operation of the control program of the financial automation device.

The input restriction system according to the present invention registers special keys in the keyboard such as Window key, Ctrl key, Alt key, Delete key, Esc key, Tab key, and the right mouse button in the restriction table 300 as the usage restriction elements. Can be. That is, when the special key and the right button input registered in the restriction table 300 are received from the user, driving of the control program related to the input may be restricted.

In addition, the input restriction system includes a start button, a task bar, and a desktop icon on the monitor of the financial automation device in order to prevent the leakage of financial transaction information that must be kept confidential by installing a hacking program in the financial automation device. What is displayed may also be registered in the restriction table 300 as the usage restriction element. In addition, the input restriction system may restrict execution of a control program such as a task manager of an OS installed in a financial automation device as the usage restriction element. You can register at 300.

4 is a table illustrating an example of a reference grade of a user for each control program in an input restriction system in a financial automation device according to an embodiment of the present invention.

4 shows an authentication grade, i.e., a reference grade 400, of a user capable of executing each control program in a financial automation device.

When an input signal for driving the control program is received, the input limiting system according to the present invention checks the authentication level of the user who wants to drive the control program, and considers the reference level 400 shown in FIG. It may be determined whether the driving of the motor is a non-allowable level.

That is, the input restriction system checks the authentication level of the user who wants to run the control program, and the safe lock device is S-level, the job manager is A-level, and the display registration information is B-level, and compared with the reference level 400 set for each control program. Thus, when the identified authentication level is less than the reference level 400, it is possible to identify the type related to the non-allowed level in which the control program is restricted.

For example, if the authenticated user's authentication level is S-level and higher-level administrator, the user may execute a control program (eg, safe lock device, task manager, display property) whose reference level is S-class or less. And, if the confirmed user's authentication level is Class A as an intermediate manager, the user can execute a control program (eg, a job manager, display registration information) whose reference level is A or less, and confirms If the authenticated user's authentication level is B-level administrator, the user can execute a control program (for example, display registration information) whose reference level is B-class or less.

5 to 7 are examples of a list of possible execution programs for each authentication level in an input restriction system in a financial automation device according to an embodiment of the present invention.

5 shows a list of possible execution programs in the case where the confirmed certification level is S-class. As a result of checking the user's authentication level, the input restriction system adjusts the possible execution program in the control program in the case of S class, and adjusts the adjusted execution program in the adjusted mode as follows: '1. It can be provided to the user by listing it as administrator ctrl + alt + delete, 3.Display Properties (Right-Button).

6 shows a list of possible execution programs when the confirmed certification level is Class A. FIG. As a result of checking the user's authentication level, the input restriction system adjusts the possible execution program in the control program in the case of A class, and adjusts the adjusted execution program as' 1. Task manager ctrl + Alt key + Delete key, 2. You can list these as 'Display Properties (Right-Button Properties)' and provide them to the user.

7 shows a list of possible execution programs when the confirmed certification level is Class B. FIG. As a result of checking the user's authentication level, the input restriction system adjusts the possible execution program in the control program in the case of Class B, and displays the adjusted possible execution program as '1. Display Properties (Right Button-Properties)'. It can be provided to the user by listing it as follows.

8 is a flowchart illustrating a procedure of an input restriction method in a financial automation device according to an embodiment of the present invention.

The input restriction method in the financial automation device may be implemented by the input restriction system of the present invention. In addition, in the following description of FIG. 8, FIG. 8 will be described with reference to FIG. 2.

In step S810, the input restriction system maintains a restriction table that registers a usage restriction element relating to the driving restriction of the control program associated with the financial automation device.

In addition, the table holding means 210 is installed on the financial automation device hacking program is installed so that the financial transaction information that must be kept confidential, so as not to leak, the start button of the OS, task bar, base on the monitor of the financial automation device The screen icon or the like may also be registered in the restriction table as the usage restriction element. In addition, the table holding means 210 may restrict the use of the control program such as the operation manager of the OS installed in the financial automation device. Can be registered in the restriction table as an element.

In step S820, the input restriction system identifies the type of input signal input from the user who wants to use the control program.

The input restriction system 200 may download a restriction key button (for example, an Alt key and a Delete key) for limiting driving when input from a user, and store the same in a buffer provided in a financial automation device.

In step S830, the input restriction system determines whether the identified type corresponds to the usage restriction element in the restriction table, and if so, in step S840, the input restriction system limits the driving of the control program.

In step S830, the input restriction system determines whether the identified type corresponds to the usage restriction element in the restriction table. If not, in step S850, the input restriction system permits the execution of the control program and executes it.

In addition, embodiments of the present invention include computer-readable media containing program instructions for performing various computer-implemented operations. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. The medium or program instructions may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts. Examples of computer-readable recording media include hard media, magnetic media such as floppy disks and magnetic tape, optical media such as CD-ROMs, DVDs, and floppy disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like.

While specific embodiments of the present invention have been described so far, various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be defined not only by the claims below, but also by those equivalent to the claims.

200: input limiting system

210: table holding means

220: kind identification means

230: drive limit means

240: authentication means

Claims

Maintaining a restriction table that registers a usage restriction element relating to a driving restriction of a control program associated with the financial automation device;

Identifying a type of input signal input from a user who wants to use the control program; And

If the identified kind corresponds to a usage restriction element in the restriction table, limiting the operation of the control program

Input restriction method in a financial automation device comprising a.

The method of claim 1,

The step of identifying the type of input signal,

Determining whether the input signal is generated by the user's pressing operation on a key button including a set limit key button; And

When the input signal is generated in association with the limit key button as a result of the determination, identifying a type related to the limit key button input

Input restriction method in a financial automation device comprising a.

The method of claim 1,

The step of identifying the type of input signal,

Determining whether the input signal is generated by the user's simultaneous pressing operation on a plurality of set limit key buttons; And

When the input signal is generated in association with the plurality of restriction key buttons, identifying the type of the restriction key button input.

Input restriction method in a financial automation device comprising a.

The method of claim 1,

The step of identifying the type of input signal,

Checking an authentication level of a user who has input the input signal; And

If the identified certification level is less than the reference level, identifying a type regarding an unacceptable level.

Input restriction method in a financial automation device comprising a.

The method of claim 4, wherein

The step of limiting the driving of the control program,

Adjusting a possible execution program in the control program according to the identified authentication level; And

Listing the adjusted possible executable program and providing it to the user

Input restriction method in a financial automation device comprising a.

The method of claim 1,

Further comprising the step of authentication process for the user who input the input signal,

The step of limiting the driving of the control program,

Restricting the operation of the control program for the user who is not approved as a result of the authentication process

Input restriction method in a financial automation device comprising a.

A computer-readable recording medium having recorded thereon a program for performing the method of any one of claims 1 to 6.

Table holding means for holding a restriction table that registers a usage restriction element relating to a driving restriction of a control program associated with the financial automation device;

Type identification means for identifying a type of an input signal input from a user who wants to use the control program; And

Drive limiting means for limiting the drive of the control program when the identified kind corresponds to a use limiting element in the limit table;

Input restriction system in a financial automation device comprising a.

The method of claim 8,

The kind identification means,

It is determined whether the input signal is generated by the user's pressing operation on the key button including the set limit key button,

And a result of identifying the type of restriction key button input when the input signal is generated in association with the restriction key button as a result of the determination.

The method of claim 8,

The kind identification means,

It is determined whether the input signal is generated by the simultaneous pressing operation of the user with respect to a plurality of set limit key buttons,

And a result of identifying the type of restriction key button input when the input signal is generated in association with the plurality of restriction key buttons.

The method of claim 8,

The kind identification means,

Confirming the authentication level for the user who inputs the input signal,

When the identified authentication level is less than the reference level, input restriction system in a financial automation device, characterized in that identifying the type of unacceptable grade.

The method of claim 11,

The drive limiting means,

Adjust possible execution programs in the control program according to the identified authentication level,

And list the adjusted possible executable programs and provide them to the user.

The method of claim 8,

Authentication means for authenticating the user who has input the input signal;

The drive limiting means,

And limiting the driving of the control program to a user who is not approved as a result of the authentication process.