WO2006043585A1

WO2006043585A1 - Authentication system

Info

Publication number: WO2006043585A1
Application number: PCT/JP2005/019186
Authority: WO
Inventors: Makoto Tsuyuzaki
Original assignee: Makoto Tsuyuzaki
Priority date: 2004-10-22
Filing date: 2005-10-19
Publication date: 2006-04-27
Also published as: JP2006119936A

Abstract

The rights and properties of authenticated users are protected even if combinations of authentication identifiers comes usable by other persons against the users, and the danger of lives of the possessors can be avoided. As combinations of identifiers, a normal combination for acquiring normal data and a false combination for acquiring other data than the normal data are determined. The post-processing contents of when the normal combination is used is different from those of when the false combination is used.

Description

Specification

Authentication processing system

Technical field

[0001] In the present invention, a combination of a plurality of identifiers such as an ID and a password is used to access specific data or acquire specific data, and according to the data, product purchase, deposit withdrawal and other processing are possible. Is related to the system.

Background art

[0002] Authentication systems that use passwords, such as bank cash cards, credit cards, and computer logins, verify the identity by a combination of user ID (ID) and password (password), and withdraw cash. Is authenticating. In such a system, in many cases, authentication is not performed if the ID or password is different, and erroneous input and illegal input are dealt with by stopping the execution of the processing (Japanese Patent Laid-Open No. 2003-23488, (See paragraph 0106, Figure 10).

For this reason, if the ID and password are different, authentication is not possible, and personal property and personal information can be protected. However, if only the ID and password match, there is a drawback that even if the ID and password are not matched, authentication is possible even for anyone other than the person. For example, if a cash card is stolen, the PIN may be decrypted (by analogy such as date of birth) and a deposit may be withdrawn. In recent years, the number of violent crimes has increased, and it is possible that the threat of a robber will correct you and give you a password (you will not get an error even if you enter it).

On the other hand, in conventional systems, one password is usually set for one ID. As described in Japanese Patent Laid-Open No. 2002-32279, although there are those that set multiple IDs for each user according to the course of use, one user has multiple passwords for the same object, V, even if a misplaced password is used, it is processed (not excluded!), There is no one! ,.

Disclosure of the invention

[0004] Therefore, the present invention allows a plurality of settings (for example, a password) among a combination of identifiers for authentication, and the other (for example, a cash card) On the other hand, even if it goes into the hands of others, for example, a user's profile card can be easily accepted as a dummy number and a password that can be easily inferred (without eliminating errors). The user of the dummy number is given the authority of the legitimate user by allowing the legitimate user to perform a process that gives a profit limited to the profit that the legitimate user should receive, or making an emergency call. It is intended to protect the property and avoid the danger of the owner's life.

[0005] The following inventions have been made to achieve the above-described object.

(First invention)

The first invention relates to an authentication processing system that acquires individual data by a combination of a plurality of identifiers set for each individual and executes processing based on the acquired data. Then, as the individual data, normal data based on normal content and other data different from the normal data are provided, and a normal combination capable of acquiring normal data and other data are acquired as a combination of the plurality of identifiers. If an illegal combination is used, the execution process based on the regular data is performed.If the illegal combination is used, the execution process based on other data is performed. It is characterized by being possible.

[0006] Here, the "combination of a plurality of identifiers" includes the same kind of combination such as two passwords that are not only a different kind of combination such as an ID and a password. “Individual data” is data that can be obtained or accessed by a combination of a plurality of identifiers, and is mainly assumed to be data related to the property owned by the person to be authenticated (customer, user). This includes, for example, deposit account balance data and online stock trading holdings data.

Here, “regular data” is data that directly represents the contents of individual data (such as deposit balance), and “other data” is so-called dummy data that does not represent the contents of individual data. . “Other data” may be determined in advance regardless of the content of the individual data, or may be set based on the content of the individual data. Taking a deposit account as an example, for example, regular data is actual deposit balance data, and other data includes deposit balance 0 data. Furthermore, “execution process based on regular data” is a normal process, and for example, cash can be withdrawn by inputting a cash card and a personal identification number. On the other hand, the “execution process based on other data” is not an ordinary process, but is an execution process that does not involve exclusion such as the process being interrupted or stopped due to the use of an illegal combination. Should be a process that gives a limited profit and authority rather than a profit and authority that the certifier should receive in the execution process based on regular data. For example, the operation itself involves handling errors, not accepting it, but making sure that the deposit balance is zero and cash cannot be withdrawn, or that only a small amount can be withdrawn.

[0008] According to the present invention, when a combination of a plurality of identifiers is an illegal combination, a process not based on regular data is executed, and a limited benefit is given to a specific user, for example, an unauthorized user. It is possible to give only authority. In addition, since illegal combinations themselves are not excluded, for example, if an illegal combination is presented when dealing with threats, personal risks can be avoided with minimal loss.

(Second invention)

According to a second aspect of the present invention, there is provided an authentication processing system that acquires individual data by a combination of a plurality of identifiers set for each individual, and executes processing based on the acquired data. Processing means that can create force data that can be modified to normal data based on the contents of the Possible illegal combinations are set, execution processing based on regular data is performed when regular combinations are used, and execution processing based on machining data is possible when illegal combinations are used It is characterized by that.

The present invention has a function of processing data based on regular data. As a processing method of the processing means, for example, when the regular data is a numerical value, a predetermined calculation process can be performed to obtain the cache data. According to the present invention, it is possible to provide appropriate dummy data according to the contents of data.

(Third invention)

In a third invention, in addition to the features of the first or second invention, the plurality of identifiers are: D and password, which are a combination of a regular ID and a regular password as a regular combination, and a combination of a regular ID and a parallel password as an illegal combination.

[0010] The present invention limits the types of identifiers.

(Fourth invention)

The fourth invention relates to an automatic cash payment system in which deposit and savings account data is accessed by an authentication number recorded on a record carrier and an externally entered personal identification number, and cash can be paid and dispensed within the range of the deposit and savings balance. Then, as savings and savings account data of the savings and savings, regular balance data based on the regular deposit and saving amount and limit balance data set to an amount lower than the regular balance data are provided, and the regular balance data is accessed as the PIN. Provide a valid PIN and a parallel PIN that can access the restricted balance data. If a regular record carrier and a regular PIN are used, the cash is paid based on the balance of the regular balance data. When a regular record carrier and a parallel PIN are used, cash can be paid and taken out based on the balance of the restricted balance data.

The present invention is limited to an automatic cash payment system as an authentication processing system, and corresponds to the first invention. Here, the “record carrier” includes a magnetic card such as a cash card or a credit card.

According to the present invention, for example, a number that can be easily estimated as a parallel password is registered as a parallel password, and even if the cash card is stolen, the parallel password can be easily used to minimize the number. It can be done with damage.

(Fifth invention)

The fifth aspect of the invention is a system for automatic cash payment that allows access to deposit and savings account data by using an authentication number recorded on a record carrier and an externally entered personal identification number, and pays and issues cash within the range of the deposit and savings balance. The processing unit is provided with processing means capable of creating processing balance data that has been processed into an amount that is lower than the amount of the regular balance data by modifying the regular balance data based on the regular deposit and savings amount of the depositor. If a regular record carrier and regular PIN are used, a regular PIN that can access regular balance data and a parallel PIN that can access processed balance data are provided. Based on The cash can be paid out based on the balance of the processed balance data processed by the above-mentioned manufacturing method when the cash is paid out and the regular record carrier and the parallel password are used. And

[0012] The present invention is limited to an automatic cash payment system as an authentication processing system, and corresponds to the second invention.

[0013] Since the present invention is configured as described above, when an unauthorized user uses an unauthorized combination for authentication, processing different from when an authorized combination for authentication is used. To protect the authority and property of legitimate users and thus avoid the danger of the owner's life.

Brief Description of Drawings

FIG. 1 is a block diagram showing an outline of an automatic cash payment system according to an embodiment of the present invention.

FIG. 2 is a flowchart showing an outline of the operation of the automatic cash payment apparatus according to the embodiment of the present invention.

FIG. 3 is a block diagram showing another example of the automatic cash payment system according to the embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

A preferred embodiment of the present invention will be described with reference to the drawings, taking an automatic cash payment system as an example.

(Explanation of drawings)

1 to 3 show an embodiment of the present invention.

Fig. 1 is a block diagram showing the outline of the automatic cash payment system, Fig. 2 is a flowchart showing the outline of the operation of the automatic cash payment apparatus, and Fig. 3 is a block diagram showing another example of the automatic cash payment system.

As shown in FIG. 1, the automatic cash payment system according to the present embodiment is a host computer by inserting a cash card or credit card and inputting a password from an automatic cash payment apparatus 1 such as ATM or CD. The deposit management device 2 can access the V, deposit balance data, and withdraw cash from the deposit account. It is what.

[0016] (Deposit Management Device 2)

The deposit management device 2 is for managing deposits and withdrawals for each deposit account. As shown in FIG. 1, at least an ID set for each customer and a plurality of PINs determined by the customer ( And a table that stores deposit balance data provided corresponding to each PIN.

Here, among the plurality of passwords, one password indicated by “PW1” is a regular password, and constitutes a regular combination by combination with an ID. This corresponds to regular balance data representing regular deposit details. On the other hand, the other personal identification number indicated by “PW2” is a parallel personal identification number, and constitutes an illegal combination by combination with the ID. This corresponds to limit balance data set in advance so that the deposit balance becomes lower than the regular deposit content.

As the restricted balance data, for example, “0” or “5000” can be set. In addition, the limit balance may be set to an amount desired by the customer. It is also possible to set multiple parallel PINs and make them correspond to multiple restricted balance data.

The deposit balance data is appropriately rewritten according to the withdrawal and deposit of the deposit. Of these, it is natural that the regular balance data is rewritten, but the restricted balance data can be kept unchanged. Alternatively, the limited balance data may be rewritten only when a deposit is withdrawn using “PW2”.

(Cash automatic payment device 1)

As shown in FIG. 1, the automatic teller machine 1 has an external input unit 10, a process determination unit 20, and a process execution unit 30. The automatic cash payment apparatus 1 may have a configuration other than the above.

[0018] (External input unit 10)

The external input unit 10 is an operation unit that can input a combination of identifiers for authentication, and includes a card slot 11 and a numeric input unit 12 force. When a cash card or credit card is inserted into the card slot 11, the ID recorded on them is read out. The number input unit 12 is a numeric keypad or a liquid crystal touch panel, and can input a password. . The number input unit 12 can also input the amount to be paid out and other necessary items numerically.

(Processing judgment unit 20)

The process determination unit 20 is for determining a process based on the input authentication number, and includes a determination unit 21 and an output unit 22. The determination unit 21 determines the validity of the ID read from the card and the entered PIN, determines which deposit balance data of the deposit management device 2 is accessed, and applies the corresponding deposit Balance data is acquired. The output unit 22 outputs the acquired deposit balance data to the processing execution unit 30 based on the determination of the determination unit 21, and outputs the cash withdrawal processing information from the processing execution unit 30 to the deposit management device 2. It is.

[0019] (Processing execution unit 30)

The processing execution unit 30 is for causing processing related to cash payout and other processing based on the determination of the processing determination unit 20, and includes at least an image display processing unit 31, a cash payout processing unit 32, and an emergency call processing unit. 33. The processing execution unit 30 may have a configuration other than the above.

The image display processing unit 31 is for displaying an image relating to payout such as a deposit balance and an input screen on a liquid crystal screen or the like. The cash withdrawal processing unit 32 performs processing for cash withdrawal based on the acquired deposit balance data. Specifically, the cash withdrawal processing unit 32 performs cash withdrawal processing within the range of the deposit balance data amount, and if the input withdrawal amount is larger than the deposit balance data, the cash withdrawal processing unit 32 performs the withdrawal. Instead, the image display processing unit 31 displays a predetermined display. When the cash payout process is performed, the payout amount data is output to the deposit management device 2 and the deposit balance data is rewritten.

[0020] The emergency call processing unit 33 is for making a predetermined report to a police, a security company, a financial institution or the like in a given case. Here, the predetermined case can be a case where a parallel password is used, but whether or not to report in this case should be made when the customer wants to set the notification in advance. Can do. Also, if you receive a predetermined report, you can identify the user of the parallel PIN with a surveillance camera, or use the card after that. You can take action to disable it.

(Explanation of the operation of cash dispenser 1)

An example of the operation relating to the automatic cash payment having the above configuration, the apparatus 1! And the cash payout will be described based on the flowchart of FIG.

First, when a card is inserted into the card slot 11, it is determined in step 100 whether or not the ID is authenticated. That is, it is determined whether or not the ID of the registered customer is registered. If the ID is not registered, predetermined error processing such as returning a card is performed. If ID is authenticated, go to the next step 101.

In step 101, it is determined whether or not a password has been entered. If no password is entered, the process returns to step 101. If the security code is entered, go to the next step 102.

In step 102, it is determined whether or not the input is a regular password. If it is a regular password, go to the next step 103.

[0022] In step 103, it is determined whether or not there is a balance display instruction (for example, operation of a balance inquiry button). If there is a balance display instruction, the process proceeds to the next step 104.

In step 104, the regular balance is displayed. For example, if the deposit balance is 100,000 yen, 100,000 yen is displayed. Then go to step 108. If there is no balance display instruction in step 103, the process proceeds to step 108.

If it is determined in step 102 that the entered password is not a regular password, the process proceeds to step 105.

In step 105, it is determined whether or not the input is a parallel password. If it is not a parallel security code, the process proceeds to step 111 to perform error handling as an input error. If it is a parallel PIN, go to the next step 106.

[0023] In step 106, it is determined whether there is a balance display instruction. If there is a balance display instruction, the process proceeds to the next step 107.

In step 107, a correction screen is displayed. That is, the amount of restricted balance data corresponding to the parallel password is displayed. For example, even if the deposit balance is 100,000 yen, a preset amount such as “0 yen” or “5,000 yen” is displayed. Then the next step 108 Proceed to If there is no balance display instruction in step 106, the process proceeds to step 108.

In step 108, it is determined whether or not a payout amount has been input. If there is no input of the amount to be paid out, the cash-out process is terminated on condition of “cancel” or “end” instruction (button operation, etc.). If a payout amount has been entered, proceed to the next step 109.

[0024] In step 109, it is determined whether or not the input value is within the deposit balance range. Here, automatic cash payment, device 1 recognizes as “deposit balance”, and if the regular PIN is used, it is the amount of regular balance data (in the above example, 100,000 yen). Yes, if a parallel PIN is used, it is the amount of limit balance data (0 yen or 5,000 yen in the above example). If the input value exceeds the deposit balance, a message indicating that the deposit balance is insufficient is displayed and error processing is performed. That is, even if you actually have a deposit of 100,000 yen, if you use a parallel PIN, if the restricted balance data is “0 yen”, no cash will be withdrawn, and the restricted balance data In the case of “5,000 yen”, the amount cannot exceed the amount of 5,000 yen. On the other hand, if the input value is within the deposit balance range, the process proceeds to the next step 110.

[0025] In step 110, a cash payout process is performed according to the input value of the payout instruction. And cash-out processing is ended.

Here, cash is discharged from the inside of the apparatus, and the payout amount data is output to the deposit management apparatus 2, and the deposit balance data is rewritten accordingly. Specifically, for example, if 3,000 yen is withdrawn using a regular PIN, the regular balance data will be 97,000 yen, which is subtracted 3,000 yen from 100,000 yen (considering fees, etc.). On the other hand, when 3,000 yen is withdrawn using a parallel password, there are the following two processing methods.

One is that the normal balance data is 97,000 yen, which is a deduction of 3,000 yen from the 100,000 yen force, and the remaining limit data (5,000 yen) can be left unchanged. The other is that the regular balance data is ¥ 97,000, which is subtracted ¥ 3,000 from ¥ 100,000, and the restricted balance data is ¥ 2,000, which is subtracted ¥ 3,000 from ¥ 5,000. According to the latter, the balance of the payment statement is displayed and the balance when the next cash is withdrawn is 2,000 yen, and since there is reality, it is difficult to detect dummy data with a parallel PIN. There are advantages. [0026] Furthermore, if the emergency notification is set to be used when the parallel password is used, the emergency notification process is performed simultaneously with the cash payout process.

Thus, according to the present embodiment, it is possible to make a difference in the amount that can be actually paid out by using the regular password and the parallel password. For example, as a parallel PIN, a number that can be used to estimate the profile power, such as the date of birth, address, and telephone number of a legitimate account holder, is set, and in the unlikely event that the cash card is against the owner's will ( Even if it is in the hands of others, the use of the card and the parallel PIN number will display a false deposit balance and can only withdraw cash less than that amount. Damage can be minimized. This is especially useful if your life is dangerous if you are threatened and don't give your real PIN. Also, not only in such a troubled situation, for example, a parallel PIN is provided for children, and limit balance data is set to 5,000 yen or 10,000 yen so that the child cannot withdraw a large amount of cash. It can be used for educational purposes.

[0027] When using a credit card in this system, it is possible to display dummy data with a maximum maximum withdrawal amount set low so that no more than that amount can be withdrawn.

(Other examples of this system)

In the above system, predetermined limit balance data is stored as deposit balance data, and the limit balance data can be accessed by using a card and a parallel password, but the deposit balance data Stores only the regular balance data, and when the card and parallel PIN are used, the regular balance data is processed as appropriate so that payment and withdrawal processing can be performed based on the processed balance data. Oh, it is a thing.

Specifically, as shown in FIG. 3, the deposit management device 2 stores an ID, a plurality of passwords, and regular balance data. The processing determination unit 20 of the automatic cash payment apparatus 1 is provided with a processing unit 23. The processing unit 23 is used to create processing balance data by modifying the acquired deposit balance data (regular balance data) when using a parallel password. Then, the process execution unit 30 performs the image display process and the cash payout process based on the processed balance data! Here, the processing unit 23 creates the processed balance data by performing a predetermined calculation based on the regular balance data so that the amount is lower than the regular balance. For example, 1% of the amount of regular balance data is used as processed balance data (regular balance X O. 01), and the amount less than the regular balance data by a fixed amount (n yen) is used as processed balance data (regular balance data). Balance—n, n (regular balance).

[0029] It should be noted that the normal balance data may be processed by the deposit management device 2. In this case, a processing unit is provided in the deposit management device 2, and the processing judgment unit 20 of the automatic cash payment device 1 outputs a data processing request signal to the deposit management device 2 when the parallel password is used, and based on this. If the processing unit of the deposit management device 2 processes the regular balance data, and the processing determination unit 20 acquires the processed balance data.

Further, in the embodiment shown in FIGS. 1 and 3, the emergency call processing unit 33 is provided in the cash automatic payment apparatus 1, but the installation location of the emergency call processing unit 33 is not limited to this. It may be provided in the computer.

[0030] Regarding the contents of the limited balance data or the processed balance data described above, any of these modes may be used alone, or a plurality of modes may be used in combination.

Further, the present invention can be applied to other than the automatic cash payment system. For example, even in a computer network system that can access specific data using an ID and password without using a physical medium such as a cash card, the regular data can be accessed with a combination of the regular ID and the regular password. A combination of a regular ID and a parallel password can be used to access dummy data.

Industrial applicability

[0031] The present invention can be used in an automatic cash payment system. It can also be used in online banking that does not use physical media such as cash cards, and in computer network systems that can access specific data using IDs and passwords.

Claims

The scope of the claims

[1] In an authentication processing system that acquires individual data by a combination of a plurality of identifiers set for each individual and executes processing based on the acquired data,

As the individual data, regular data based on regular content and other data different from regular data are provided,

As a combination of the plurality of identifiers, a normal combination capable of acquiring normal data and an illegal combination capable of acquiring the other data are provided,

When regular combinations are used, execution processing is performed based on regular data. When illegal combinations are used, execution processing based on other data is possible. Authentication processing system.

[2] In an authentication processing system that acquires individual data by a combination of a plurality of identifiers set for each individual and executes processing based on the acquired data,

Processing means capable of creating cache data in which alterations are made to the regular data based on the regular content of the individual data;

As a combination of the plurality of identifiers, a normal combination capable of acquiring normal data and an illegal combination capable of acquiring the processed data are provided,

When regular combinations are used, execution processing is performed based on regular data.When illegal combinations are used, execution processing can be performed based on machining data. Authentication processing system.

[3] The plurality of identifiers are IDs and passwords, and a combination of a regular ID and a regular password is provided as a regular combination, and a combination of a regular ID and a parallel password is provided as an unauthorized combination. The authentication processing system according to paragraph 1 or 2 of the scope.

[4] An automatic cash payment system for accessing deposit and savings account data using an authentication number recorded on a record carrier and an externally entered personal identification number, and withdrawing cash within the deposit and savings balance range,

As savings and savings account data for savings and savings, regular balance data based on the regular deposit and savings amount and limit balance data set to an amount lower than the regular balance data are provided, As the personal identification number, a regular personal identification number that can access regular balance data and a parallel personal identification number that can access restricted balance data are provided.

If a regular record carrier and a regular PIN are used, cash is paid out based on the balance of the regular balance data! If a regular record carrier and a parallel PIN are used, the limited balance An automatic cash payment system that makes it possible to pay and pay cash based on the balance of data.

An automatic cash payment system that allows users to access deposit and savings account data using an authentication number recorded on a record carrier and an externally entered personal identification number, and withdraw cash within the deposit and savings balance range,

It is equipped with a processing means that can modify the normal balance data based on the regular deposit and savings amount of the savings depositor and create processed balance data processed to an amount lower than the amount of the regular balance data,

As the personal identification number, a regular personal identification number that can access the regular balance data and a parallel personal identification number that can access the processing balance data are provided.

When a regular record carrier and a regular PIN are used, cash is paid out based on the balance of the regular balance data, and when a regular record carrier and a parallel PIN are used, the above processing is performed. An automatic cash payment system characterized in that cash can be paid out based on the balance of the processed balance data processed by means.