KR20090125576A - Counterfeiting card usage preventing system and method - Google Patents

Abstract

PURPOSE: A duplicated cards access protection system and a method thereof for protecting a depositor by preventing use of an illegally copied card are provided to prevent the illegal usage of the illegally copied financial card by determining the illegally copied card through a copy verification key. CONSTITUTION: A card authentication unit(200) is connected to a financial transaction database(100). The card authentication unit determines whether a credit card of a user is a copied card or a damaged card through a verification key or a card number. A financial transaction processor(300) performs the financial transaction through the authenticated financial card. A communication unit offers network access environment through wire and wireless internet. A financial device is connected through information network(400). The banking equipment offers the financial transaction through credit-card to the user.

Description

Duplicate card prevention system and method {COUNTERFEITING CARD USAGE PREVENTING SYSTEM AND METHOD}

The present invention relates to a system and method for preventing the use of a copy card, and more particularly, protects the depositor by preventing a bank card from being illegally copied from another person, and in the transition period of a card infrastructure from an MS card to an IC card. The present invention relates to a system and method for preventing the use of a copy card that can maintain a service while inducing a transaction to an IC card.

In general, credit cards are widely used because they are easier to carry and use than real money, and are used by many people. You can use the reader to make inquiries, transfers, withdrawals, and deposits.

That is, the user who received the financial card inserts the financial card into the automated device or the card reader to provide the user's information recorded on the magnetic tape or the IC chip, and the automated device or the card reader provides the read information to the server of the financial institution. Send a request to confirm the transaction. After that, the automated device or card reader that receives the approval of the financial transaction from the server of the financial institution performs transaction processing such as cash withdrawal, account transfer, and financial settlement according to the result.

However, in the transaction method using the conventional financial card as described above, an MS card using a magnetic stripe card (MS) as a storage medium is particularly easy to copy and illegally caused by copying thereof when a loss accident and information leakage occur. The use case is occurring and the risk is very high. In addition, the magnetic strip of the financial card is recorded in the financial institution information, bank account information, etc. The depositor may suffer a huge financial damage due to illegal copying.

Accordingly, the present invention was created to solve the above problems, and an object of the present invention is to provide an illegal copy card use prevention system and method for an automated device which can prevent illegal use of illegally copied financial cards. It is.

In order to achieve the above object, an illegal copy card use prevention system of an automated device according to the present invention includes a financial transaction DB in which personal credit information such as a card number and a copy verification key are stored, and a card number or copy in connection with the financial transaction DB. A card authentication unit that determines whether the financial card possessed by the user through the verification key is a duplicate card or a damaged card, a transaction approval unit that determines whether to approve a transaction when the card is normal, a network connection environment through wired or wireless Internet, etc. It includes a communication unit for providing a, and a financial terminal associated with the transaction approval unit through the communication unit for processing a transaction at the request of the user.

The card authentication unit includes an IC chip determination unit determining whether the IC card is mounted on the financial card.

In addition, the IC reader for reading the credit information stored in the IC chip mounted on the financial card in accordance with the determination of the IC chip determination unit, for reading the credit information stored in the magnetic strip formed on the financial card in accordance with the command of the IC chip determination unit It is preferable to include an MS reader, and a verification key comparison unit for comparing each IC card and each card number stored in the magnetic strip or comparing the copy verification key of the financial card with the copy verification key of the financial transaction DB. .

Preferably, the verification key uses a financial transaction code.

The card authentication unit may further include an MS transaction limiting unit for authenticating a user of the financial card in which only a magnetic strip is formed.

In the method for preventing the use of a duplicate card according to the present invention, when a financial card having a magnetic stripe is input to an automated device, it is determined whether an IC chip is mounted on the financial card before determining whether to register an account from the magnetic strip, If it is determined that the chip is mounted, the IC chip is read to determine whether or not an account is registered, to induce a transaction from an account registered to the IC chip, and the IC chip is mounted, but a transaction is made from the magnetic strip. If it is necessary to perform a transaction after comparing the information on the magnetic strip and the information of the IC card, and if it is determined that the IC chip is not mounted, it is checked whether the magnetic strip is duplicated with a copy verification key, Determining whether the account is registered and performing a transaction.

As described above, the system and method for preventing illegal copy card use of an automated device according to an exemplary embodiment of the present invention compares a card number stored in an IC chip with a card number stored in a magnetic strip or uses an illegal copy card using a copy verification key. In this way, illegal use of the illegally copied financial card can be prevented.

In addition, the system and method for preventing illegal copy card use of an automated device according to an embodiment of the present invention can gradually induce a transaction with a secure IC card, and the card infrastructure and automation device from the MS card to the IC card. In the transitional transition period, even when the MS card should be used, it is possible to continue the card transaction, and to prevent illegal use of the MS card to prevent illegal use.

Hereinafter, with reference to the accompanying drawings, preferred embodiments of the present invention will be described in detail as follows.

1A and 1B are a plan view and a rear view of a card according to an embodiment of the present invention.

Figure 2 is a block diagram showing the configuration of a copy card use prevention system according to an embodiment of the present invention.

As shown in Figs. 1A and 1B, a card 1 according to an embodiment of the present invention includes a financial transaction IC chip 3 having a applet for financial transactions in front, a card number 4, and a card. Type (5), card expiration date (6a), and user's English name (6b), etc., on the back of the authentication code of the card, for example CVC code or CVV2 code (7), card number, card validity It may include an MS unit 7 for storing user information for financial transactions such as period, account number.

As shown in Figure 2, the duplicate card use prevention system 10 according to an embodiment of the present invention, the card number, card password, card expiration date, card verification result, authorization code, transaction information, credit rating, available state Financial transaction DB for storing and managing information about card users and information for financial transactions such as financial transaction identification code, card identification code, financial device location information, emergency contact information, replication verification key, use authentication key, etc. And the card authentication unit 200 and the financial transaction DB (10) for determining whether the financial card possessed by the user is a duplicate card or a damaged card through a replication verification key or a copy card number in connection with the financial transaction DB 100. And the communication unit 400 having a financial transaction processing unit 300 for interfacing with the 100 and an information communication network for providing a network connection environment through wired or wireless Internet, and the communication. A financial device 500 that is linked to the card authentication unit 200 and the financial transaction processing unit 300 to link a financial transaction using a financial card through the 400, that is, an automated device (ATM, 510), a financial terminal ( 520, and a financial card issuer 530.

Here, the automation device 510 is a device that can process cash, withdrawal, transfer, etc. using a financial card in a financial institution including a bank, and the financial terminal 520 is a card transaction in a merchant, an internet shopping mall, or the like. Means a terminal for other financial transactions that can be purchased and approved, the financial card issuer 530 is a device for issuing a financial card according to the user's application, through which the financial transaction DB 100 is created or updated do.

In addition, the card identification code is a financial transaction means 500 used by a user to withdraw cash, that is, a compact disc (CD) card, a magnetic stripe (MS) card, an integrated circuit (IC) card, and a mobile phone (MP). Code information for identifying a card, financial transaction identification code is code information for identifying a transaction type, such as the application for cash payment according to the type of card, the financial transaction DB (100) may occur in a financial transaction through the card Various identification codes can be stored.

As described above, the automated device according to the embodiment of the present invention includes a card authentication unit that determines whether to approve and process a financial transaction by determining whether a card or a damaged card is used illegally or illegally. This will be described in detail with reference to FIG. 2.

2 is a block diagram showing in more detail the configuration of the card authentication unit in the copy card prevention system of FIG.

As shown in FIG. 2, the card authenticator 200 according to an exemplary embodiment of the present invention includes an MS reader 220, an IC chip reader 230, and a card determiner that are entirely controlled by the central controller 210. 240, the MS transaction authenticator 250, the MS transaction limiter 260, and the verification key comparison unit 270.

When the magnetic strip 8 is disposed on the financial card, the MS reader 220 reads personal credit information stored therein, and the IC reader 230 includes an IC chip mounted on the financial card. If so, the personal credit information relating to the financial transaction recorded on the financial IC chip 3 is read.

The card determining unit 240 is the MS reading unit 220 or the IC reading unit 230 when the MS reads the access to the storage medium, magnetic strip (3) or the financial IC chip (8) 220 or whether the IC chip 3 is mounted on the financial card 1 or the magnetic strip 8 is formed according to whether the IC reader 230 reads the MS reader. 220, the IC reader 230, the MS transaction authenticator 250, the MS transaction limiter 260, and the verification key comparator 270 prevent the use of an illegal copy card.

The MS transaction authentication unit 250 may include an IC chip, although the financial card 1 includes only the magnetic strip 8 or the financial card 1 includes both the magnetic strip 8 and the IC chip 3. The magnetic strip 8 is damaged when the IC chip 3 cannot be traded due to damage to the IC chip 3 or a condition necessary for financial transactions, for example, an account number or the like, on the IC chip 3. Through various channels, authentication can continue to provide services during the transition of card infrastructure from MS financial transactions to IC financial transactions, and prevent financial transactions from being made by illegally copied magnetic strips.

The MS transaction limiting unit 260 is a magnetic strip that facilitates illegal copying when the financial card 1 is equipped with not only a financial transaction applet capable of financial transaction but also a transaction condition, for example, an account number. By limiting the financial transaction using (8), the financial transaction using the IC card can be induced by performing the financial transaction using the more secure IC chip (3).

The verification key comparing unit 270 reads user information of the financial card 1 through the MS reading unit 220 and performs the MS financial transaction by the MS transaction authentication unit 250. By judging whether the duplication verification key included in the card 1 and the duplication verification key stored in the financial transaction DB 100 are the same, the transaction can be performed by the financial transaction processing unit 300, thereby illegally replicating the finance. Transactions can be prevented through the card.

In this case, the financial transaction processing unit 300 includes an IC financial processing unit 301 and an MS financial processing unit 302, and the financial transaction using the IC chip or the financial using the magnetic strip based on the signal of the control unit 210. When selecting a transaction, the transaction is processed.

Now, with reference to Figure 4 will be described in detail with respect to the method of preventing the use of a duplicate card according to an embodiment of the present invention using the duplicate card use prevention system of FIG.

4 is a flowchart illustrating a method of preventing the use of a duplicate card according to an embodiment of the present invention.

Here, for example, a cash withdrawal transaction through an ATM machine which is most concerned with a duplicate card among various transactions will be described as an example, but the transaction is not limited to a cash withdrawal transaction.

First, when the financial card is input to the financial device 500, for example, the ATM 510 (S110), the card determination unit 240 of the card authentication unit 200 is the MS reader 220 or the IC It is determined whether the financial IC chip is embedded in the financial card input by the user through the ATM 510 according to whether the reader 230 is accessible (S120).

Subsequently, when the card determining unit 240 determines that the IC chip 3 is embedded in the financial card (YES), the personal credit stored in the IC chip 3 through the IC reading unit 230 is then determined. The information is read and the financial transaction DB 100 checks whether the user's financial card is applied for a cash withdrawal transaction (S130). At this time, the controller 210 reads the personal information of the user recorded in the IC chip through the IC reader 230 to check the financial transaction identification code by comparing with the information stored in the financial transaction DB (100) or In addition, the information stored in the IC chip can be used to determine whether to apply for a transaction.

Subsequently, when it is confirmed that the user can make a cash withdrawal transaction through the financial transaction identification code (YES), the controller 210 stores information of the user stored in the IC chip 3 read through the IC reader 230. It is determined whether the user's account is registered at (S140).

Subsequently, if the user's account is registered (YES), the controller 210 processes the user to withdraw cash using the financial IC chip 3 through the IC financial transaction processing unit 301 (S150). ).

On the other hand, if the user's account is not registered (NO), the controller 210 is the IC chip (3) of the financial card (1) read through the MS reader 220 and the IC reader 230 The MS transaction authentication unit 250 compares the card number embedded in the card number with the card number stored in the magnetic strip 8 (S160).

If both the information such as the card number embedded in the IC chip 3 and the information such as the card number recorded in the magnetic strip 8 coincide (YES), the controller 210 reads the MS reader 220. On the basis of the information stored in the magnetic strip 8 read through), the MS financial processing unit 303 causes the user to process a cash withdrawal transaction (S170).

If any of the information such as the card number embedded in the IC chip 3 and the information such as the card number recorded on the magnetic strip 8 does not match (NO), the financial card input by the user is duplicated. It is determined that the transaction is rejected (S180).

Therefore, according to one embodiment of the present invention, the ATM machine compares the user information stored in the IC chip 3 with the user information stored in the magnetic strip 8 to duplicate the financial card provided by the user. It can be determined.

In this case, the financial transaction code of the information includes the case where the IC chip 3 is embedded, the IC chip 3 is embedded, but the transaction application is not applied, and the IC chip 3 is embedded. If the transaction is made only with the magnetic strip 8, it is preferable to set differently, and through this, it is possible to authenticate the duplication of the financial card 1, which will be described in detail later.

In addition, since the IC chip 3 is built-in but the user's transaction application is not applied, when the IC chip reader 230 cannot read the financial transaction identification code, that is, the cash withdrawal transaction is not applied. If not (NO), the control unit 210 is the user information such as the card number read through the MS reader 220 and the IC reader 230, similar to the condition that the user's account is not registered Is compared with the MS transaction authentication unit 250 to determine whether the cash withdrawal transaction approval (S160, S170).

In operation S120, when the card determining unit 240 determines that the IC chip 3 is embedded in the financial card 1 input by the user to the ATM 510 (NO), the controller 210 ) Determines that the financial card is a magnetic stripe exclusive card and reads the magnetic stripe of the financial card through the MS reader 220 (S230).

The MS reader 220 checks the service code stored in the "Track II" stored in the magnetic strip (S240).

At this time, when the MS reading unit 220 determines that the service code stored in the "Track II" is a magnetic stripe dedicated card, the control unit 210 transmits to the "Track II" through the verification key comparison unit 270. When a stored service code, for example, a financial transaction code is compared with a financial transaction code stored in the financial transaction DB 100, if the financial transaction code matches a code corresponding to a magnetic stripe exclusive card, for example, “101” The financial card 1 provided by the user is verified with a magnetic stripe dedicated card (S250), and the MS financial transaction processing unit 303 processes cash withdrawal (S260).

However, when the MS reading unit 220 cannot read the "Track II" or the "Track II", the financial transaction code indicating that the financial IC chip 3 and the magnetic stripe card are combined, for example, "201". (International) ”or“ 601 (Local) ”is read, it is determined that the card is duplicated or damaged (S255), and the cash withdrawal transaction is rejected (S270).

In addition, in the step S250, when the service code stored in the "Track II", for example, the financial transaction code is compared with the financial transaction code stored in the financial transaction DB 100, the financial transaction DB (100) If the financial card is an IC chip card or IC chip card, and the financial transaction code does not match, for example, “201” or “601”, the card provided by the user is regarded as an illegally copied card and the financial transaction is rejected. (S270).

Although the financial transaction code has been described as an example of the verification key in the MS transaction condition providing step (S250), the MS transaction restriction unit 260 may provide various channels for restricting other MS transactions. By this method, duplication of the financial card 1 can be prevented, and illegal use of the duplicated financial card can be prevented by a systematic cross check of user information.

As another example of the verification key, the MS transaction limiting unit 260 may determine a card type with respect to a financial card provided by a user, and use the card type as a criterion for determining whether a card is duplicated or not. Recorded recent transactions can be used as a criterion.

In addition, the MS transaction limiting unit 260 may determine whether the financial card is illegally used as a verification key by using a cell phone number or personal identification information recorded when the user visits the bank card or when applying for a transaction. have.

The verification key may be stored in the financial card by converting the user's password into an encryption code according to a predetermined formula, and may be stored in the financial card by converting it into an encryption code based on an encryption program determined by a financial institution. It may be provided to a person personally.

In addition, although not replicated, such as 'CVC' or 'CVV2', the code stored in the financial transaction DB 100 may be used as a storage key.

Through this user authentication step, illegal use can be prevented, and financial transactions using IC cards can be induced by performing financial transactions using IC chips that are more secure than Microsoft.

As described above, in the system and method for preventing copy card use of an automated device according to an embodiment of the present invention, a card number stored in an IC chip and a card number stored in a magnetic strip are compared or duplicated using a verification key or a financial transaction code. The card can be judged, thereby preventing the financial card from being used illegally or illegally.

In addition, user authentication can be prevented from being used illegally or illegally, and a financial transaction using an IC card can be induced.

Although the preferred embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1A and 1B are a plan view and a rear view of a card according to an embodiment of the present invention.

Figure 2 is a block diagram showing the configuration of a copy card use prevention system according to an embodiment of the present invention.

3 is a block diagram showing in more detail the configuration of the card authentication unit of the duplicate card use prevention system of FIG.

Figure 4 is a flow chart for explaining a method of preventing the use of a duplicate card of the automated device according to an embodiment of the present invention.

Claims (13)

A financial transaction DB in which personal credit information such as a card number and a verification key is stored; A card authentication unit determining whether a financial card possessed by a user is a duplicate card or a damaged card by interworking with the financial transaction DB; A financial transaction processing unit for performing a financial transaction through a financial card authenticated through the card authentication unit; Communication unit for providing a network connection environment and the like through the wired and wireless Internet; And A financial device connected to the financial transaction processing unit through the information communication network to provide a financial transaction to a user using the financial card; Replication card use prevention system comprising a. The method of claim 1, The card authentication unit, A card determination unit determining whether the IC card is mounted on the financial card; An IC reader for reading credit information stored in an IC chip mounted on the financial card; An MS reader for reading credit information stored in a magnetic strip formed on the financial card; A verification key comparing unit comparing the verification key stored in the financial transaction DB with the verification key stored in the financial card to verify the financial card; And An MS transaction authentication unit for determining an MS financial transaction comparing the IC chip of the financial card with each piece of information stored in the magnetic strip; Replication card use prevention system comprising a. The method of claim 2, The verification key is one of the financial transaction code, the card type code, the information on the back of the card, and personal identification information applied during the visit. The method of claim 2, The card authentication unit restricts the use of the magnetic stripe when the financial card has both the IC chip and the magnetic stripe, and adds a condition to the MS transaction when a transaction must be performed by the magnetic stripe. Cloning card use prevention system further comprising a restriction. Inputting a financial card having a magnetic strip or an IC chip into the financial device; Determining whether an IC chip is mounted in the financial card before performing a transaction with the magnetic stripe; If it is determined that the IC chip is mounted, reading the IC chip to determine whether a transaction selected by a user has been applied; Determining whether to register an account when the transaction selected by the user is applied; And performing a transaction from an account registered in the IC chip. The method of claim 5, wherein If it is not determined that the IC chip is mounted, reading the magnetic stripe; Comparing the information read from the magnetic strip with information on a financial database; If information read from the magnetic stripe matches information on a financial database, providing a transaction condition that can be performed with the magnetic stripe; And And if the transaction condition is satisfied, performing a transaction selected by the user. The method of claim 6, The step of comparing the information read from the magnetic strip with the information on the financial database includes comparing a financial transaction service code stored in Track II of the magnetic strip with a financial transaction service code of the financial card stored on the financial database. How to prevent unauthorized use of duplicate cards. The method of claim 7, wherein Determining that the financial card is duplicated or damaged when the information read from the magnetic strip and the information on the financial database do not match; And Rejecting a copy card fraud prevention method comprising the step of rejecting the transaction selected by the user. The method of claim 5, wherein In the case where it is determined that the IC chip is mounted and it is determined that the transaction selected by the user is not applied by reading the IC chip, and when the account information of the user is not registered in the IC chip, the Comparing information on an IC chip with information on the magnetic stripe; And And performing a transaction selected by the user when both the information on the IC chip and the information on the magnetic stripe coincide. The method of claim 9, And the IC chip stores a verification key for verifying whether or not the magnetic strip is copied. The method of claim 9, The verification key is encrypted copy card protection. The method of claim 11, The verification key is a financial transaction code, And comparing the financial transaction code stored in the financial card with the financial transaction code stored in the financial transaction database when only the magnetic strip is formed on the financial card. The method of claim 12, After comparing the verification key, And requesting a financial transaction condition from the user to authenticate the user.

Images