WO2007074510A1

WO2007074510A1 - Service suspension system with unauthorized card use

Info

Publication number: WO2007074510A1
Application number: PCT/JP2005/023871
Authority: WO
Inventors: Yasuka Akino; Kazuya Nagai
Original assignee: Mars Technology Institute Co., Ltd.
Priority date: 2005-12-27
Filing date: 2005-12-27
Publication date: 2007-07-05

Abstract

A system in which even if a card such as an RFID card, an IC card, a cash card or a credit card and the related data is stolen and used, the service institution determines whether to continue or to suspend the service by confirming the card holder's intention to use the card. The card holder uses a total of two cards to ask the service institution for service: one as a holder card issued to himself/herself and the other as a user card of conventional type issued by the service institution. The service institution accesses a card communication device placed under the control of the card holder and suspends the service if it fails to confirm the locations of the two cards.

Description

Specification

Service stop system due to unauthorized card use

Technical field

[0001] The present invention relates to a method by which a service organization confirms the intention of a cardholder when using a card such as an RFID (Radio Frequency Identification System) card, an IC (Integrated Circuit) card, a cash card, or a credit card. is there.

Background art

[0002] Conventionally, a general method of pre-authentication for starting a service using a card has data notified to the service organization and a force code number stored in the authentication center of the service organization. It was consistent with the data on the person.

[0003] For example, when a conventional cardholder visits a service institution, the cardholder remembers the card PIN required for authentication, reports the card PIN to the service institution, and performs pre-authentication to provide strength. Was started.

[0004] Therefore, if the information is stolen together with the card, the service organization keeps it at the authentication center and provides the service by regarding the card holder as the card owner until the data to be received is changed. Therefore, it was difficult to prevent damage.

[0005] Also, if the card is illegally copied and the information about the card is stolen, the cardholder will not recognize that the tangible card has been lost or stolen, so the damage to the cardholder will be long. Continuing over time!

[0006] Now that the Internet has become a general-purpose line communication means, there are cases where a service organization starts a service to a force information provider even if it is not a card holder. In other words, the service organization matches the data sent by the card information provider with the data related to the cardholder stored at the authentication center, and starts the service assuming that the cardholder himself / herself has sent it. It was.

[0007] Therefore, if the intangible authentication data is stolen by skimming or the like, the cardholder will receive an invoice for unused service from the service organization, or the deposit balance will be in spite of the untrusted service. Intangible data for authentication until you notice The power to know that it was stolen. For this reason, the scale of damage was larger than when tangible cards were stolen.

Here, “card owner”, “card user”, “card holder”, and “data storage person” in this specification are clarified.

[0009] A "card holder" is a person who has received a plurality of user cards and has owned a user card under a contract with a service organization. Cardholders include not only natural persons but also corporations. However, in the case of a corporation, it is assumed that the representative stores the user card.

[0010] A “card user” is a natural person who acts to seek service from a service organization.

, “Card holder” and “data storage person”.

[0011] A "card holder" is a natural person who presents a user card to a service organization and acts to seek service. In general, the cardholder and the cardholder are the same person, but there may be different persons, such as a parent lending a card to a child.

[0012] A "data storage person" is a natural person who acts to seek services by presenting the contents and related data described in a user card to a service organization. In other words, the card memorizer is the same person as the card holder because the card memorizer is a natural person who acts for service without presenting a tangible card. If they are different, the card memorizer is a criminal such as skimming.

[0013] Conventional card authentication enhancement measures have been to prevent unauthorized card copying and to enhance data that only the cardholder can know.

[0014] Therefore, in a service to a data storage person who does not use a card even in regular use, the cardholder has a means to ask the service organization to stop the service against the act of a criminal whose data has been stolen. I could not have it.

[0015] In addition, if the cardholder and the cardholder are different, the cardholder is said to be a fraudulent card user, so the parent can lend the card to the child or the owner's He was unable to delegate the use of the card to his agent.

Disclosure of the invention

[0016] The present invention allows a service organization to use a cardholder's card even if a card such as an RFID card, an IC card, a cash card, or a credit card and related data are stolen and used. It is the provision of a system that decides whether to continue or stop the service by confirming the intention to use.

[0017] According to the present invention, the cardholder issues one owner card to himself / herself, and the cardholder answers the inquiry from the service organization via the card communication device managed by the owner. It is.

[0018] The card user may act as a card holder or act as a data storage person. Each of these cases will be described in detail.

[0019] Regarding the behavior of the parties concerned when the card user acts as a card holder

This will be described below.

[0020] The cardholder inserts one owner card into the card communication device and lends one user card to the cardholder.

[0021] The card holder requests a service by presenting a single user card to the service organization.

[0022] The service organization starts the service for the cardholder. However, if the cardholder needs to confirm his / her intention such as pay service or handing the cash to the cardholder, the service organization will Notify the card communication device to be managed that the cardholder is requesting service.

[0023] If only the owner card is inserted, the card communication device transmits data in which the service range approved by the owner is entered in advance. In the case of a card communication device that is a natural card holder and owned by an individual! /, The card owner must register the keystroke code for the card communication device to notify the authentication device. When the cardholder enters the password, the card holder inserts a card into the card communication device and sends a message indicating that the service range has been approved.

[0024] In the normal case, the service organization knows that only one owner card has been inserted into the card communication device, confirms a total of two cards with the presented user card, and the card owner Continue the service within the suggested service range.

[0025] In the case of illegal card use, the card owner has not inserted the owner card into the card communication device, so the service organization can confirm a total of two cards, the user card and the owner card. Stop the service.

[0026] If the requested service range of the cardholder exceeds the permission range of the cardholder, the service is stopped. This mechanism allows parents to entrust services to children to a service organization.

[0027] Next, the operations of the parties concerned when the card user acts as a data storage person will be described below. Examples of this include accessing the service organization via the Internet and receiving content services, and requesting remittances from financial institutions.

[0028] The card holder accesses a service organization after inserting a single user card into a card communication device that he / she manages.

[0029] The service institution starts the service for the data storage person who has accessed it, but if the card holder's authentication is required, such as a paid service or remittance to a third party, the service institution will use the card communication device. To inform the data store that they are seeking service.

[0030] The card communication device displays a message specifying the notified service organization.

[0031] The cardholder confirms the message and inserts the owner card into the card communication device.

In the case of a card communication device that is a natural cardholder and is owned by an individual, the card owner must register a keystroke PIN number to notify the authentication device in advance in the card communication device, and By tapping the number, it is considered that two cards have been inserted into the card communication device.

[0032] When the owner card is inserted, the card communication device transmits data in which the service range approved by the owner is entered in advance.

[0033] In the normal case, the service institution has inserted one user card in advance and the owner card has been inserted within a certain time in response to the inquiry, that is, a total of two cards have been inserted. After confirming that it exists in the communication device, continue the service required by the data store within the service range presented by the cardholder.

[0034] In the case of unauthorized access, the service organization cannot confirm the total of two cards within a certain time from the inquiry, and therefore stops the service.

[0035] Further, the service request of the data storage person exceeds the service permission range of the cardholder. If so, the service organization determines that the data storage person and the cardholder are different persons, and considers it as unauthorized access and stops the service.

Brief Description of Drawings

[0036] FIG. 1 is an overall system diagram of the present invention.

[Figure 2] Conventional authentication; Flow of operations when a cardholder visits a service organization.

[Figure 3] Conventional authentication; the flow of operations when the data store enjoys the service.

圆 4] Flow of authentication operation when a card user visits a service organization.

[Figure 5] Flow of authentication operation when a data store enjoys the service.

[0037] 11: User card detector of service organization, 12: Authentication device of service organization,

13: Server of service organization, 21, 22: Private line communication means,

31: PC, 32: Card communication device,

33: Owner card insertion slot, 41, 42: General line communication means,

43: Public line communication means, 50, 51: Operation with the cardholder,

60, 61: Card holder and operation, 70, 71: Data store and operation. BEST MODE FOR CARRYING OUT THE INVENTION

FIG. 1 is an overall system diagram of the present invention. The configuration consists of equipment and communication means possessed by 11-22 service institutions, equipment possessed by 31-33 card holders, and connection between 41-44 service institutions and the owner's equipment. It consists of communication means and 50 to 71 cardholders 'card users' and card memorizer operations. 33 is a part attached to 32.

[0039] 11 to 22 related to the service institution, the card detector 11, the authentication device 12, the equipment of the server 13 and the dedicated line communication means 21, 12 and 13 for connecting 11 and 12 Communication means 22. The service organization that owns these 11-22 may be a single company or multiple companies.

[0040] An example of a single company service organization is a bank. For example, 11 is an ATM (Automatic tic Teller Machine), 12 is an authentication center, 13 is a deposit account input / output management server connected to a computer 31 for HB (Home Banking), 21 and 22 by 11 Connect ~ 13 within the bank. [0041] 11-22 are examples of different companies. 11 is a card reader installed at a retail store, 12 is a credit card company's authentication device, 13 is an article search server of a newspaper company, 21 is a dedicated line of a telephone company, and 22 is a communication established by an Internet provider. A federation system of different companies such as lines.

The equipment possessed by the card owner is 31 and the card communication device 32. Note that 31 may be a PC (Personal Computer) or PDA (Personal Digital Assistants), or a computer that can be operated personally by installing a hotel or airport for shared use.

[0043] 32 is equipment necessary for the system of the present invention, which can identify a plurality of cards, has at least a numeric input function and a display function, and has a function of receiving and transmitting data communication of a service organization. Have. Therefore, 32 is a general-purpose electronic telephone with multiple card readers, a mobile phone with multiple card readers, a PDA with multiple card readers and an ISDN (Integrated Services Digital Network) connection terminal. And personal computers.

[0044] The communication means 41 to 42 connect the owner's PCs 31 to the equipment 13 and 12 of the service organization. Accordingly, the communication means 41 to 42 include general-purpose line communication means such as the Internet, public telephone lines, and dedicated lines.

[0045] The 43 communication means must connect 32 under the control of the owner to the authentication device 12 of the service organization and satisfy the condition that 12 can specify 32 at any time and start communication. Must be. Therefore, 43 communication means include public telephone lines, dedicated lines, and network transmission lines described in WO03 / 092221.

[0046] The cardholder 50 performs an operation 51 of the card communication device 32 under self-management.

The use of one owner card issued to yourself means that you are inserted into the owner card insertion slot 33.

[0047] It is normal for the card holder 60 to be given a card from the card owner 50 and bring the card to the card detector 11 of the service organization to perform the operation operation 61. That is, it is normal if 60 and 50 are the same person or different persons. However, the use of a stolen or picked up card was not loaned by the cardholder 50. 61 illegal card use.

[0048] If the data storage person 70 is the same person as the card holder 50, it is legitimate. Therefore, the cardholder cannot perform operation operation 51 and operation operation 71 at the same time, but performing operations 51 and 71 together is a normal operation. Therefore, it is emphasized that the illegal operation 71 of the data store 70 who stole the data is not related to the behavior of the cardholder 50.

FIG. 2 and FIG. 3 show a conventional operation method using a part of the overall system diagram. In order to clearly understand the present invention, a conventional authentication operation flow will be described.

FIG. 2 shows a conventional authentication operation when a card holder visits a service organization.

[0051] The card detector 11 recognizes the presence of the card by making the card brought by the card holder 60 access the card detector 11 of the service organization (Sl). For example, an IC card in an ITS (Intelligent Transport Systems), where an IC card with an R FID tag is brought close to the detector 11 and a credit card is inserted into the card detector 11 installed in a retail store. Is inserted into the vehicle-mounted device 11.

[0052] The detector 11 reads out the contents written on the card and verifies the validity of the card.

(S2). Examples include card expiration dates, authentication data that identifies cardholders, and an array of read data.

At this time, if the card verification fails, the subsequent service is stopped, and if the card verification succeeds, the service contents desired by the card holder are notified by the operation operation 61 and an authentication request is sent to the authentication device 12 (S3). If the service details desired by the cardholder are clear, data entry in operation 61 may be omitted. For example, train card holders pass through the ITS toll gate.

[0054] The dedicated line means 21 checks the card and the service request data of the cardholder with the data stored in the authentication device 12 (S8).

At this time, if the data verification fails, the subsequent service is stopped, and if the data verification is successful, the service desired by the card holder is continued.

[0056] An example of the closest distance of the dedicated line 21 connecting 11 and 12 is in-gateway communication for ITS trains. On the contrary, the farthest example is a hotel accommodation fee by credit card This is the case when 11 and 12 installed in different countries are connected.

FIG. 3 shows a conventional authentication operation when the data writer enjoys the service.

[0058] The server 13 recognizes that the data passed through the communication means 41 accesses the service organization by operating 31 of the data storage person 70 (Sl). Examples of this include operation of a dedicated terminal at HB (Home Banking), operation of a PC that downloads information content, and orders using merchandise distributors over the Internet.

[0059] In order to confirm the validity of the data storage person 70, ID (identification) verification including password verification registered in the server 13 held by the service organization and the data that has passed 41 is performed (S2).

At this time, if the ID collation fails, the subsequent service is stopped, and if the ID collation succeeds, the service contents desired by the data storage person are notified by the operation operation 71 and an authentication request is sent to the authentication device 12 (S3). Generally, a service organization requests a credit company for authentication in order to start a paid service.

The authentication device 12 makes an inquiry to the data storage person 70 through the data communication 42 regarding the contents and related data described on the card. Examples of inquiries include the card expiry date and the number on the user card.

The data transmitted by the data storage person 71 is collated with the data of the cardholder stored in the authentication device 12 (S8).

At this time, if the data verification fails, the subsequent service is stopped, and if the data verification is successful, the service desired by the data storage person is continued.

[0064] When the conventional communication means 22 is strong, the inquiry of the communication means 42 may be omitted. In this case, the S8 cardholder data will always be correct and service will continue. For example, the settlement method in ETC (Electronic Toll Collection System) in Japan.

As described above, the function of the authentication device 12 is to authenticate the card holder and the data storage person to be the same person as the card owner.

[0066] The flowcharts of FIGS. 4 and 5 show the verification operation of the cardholder by using the card communication device 32 under the control of the cardholder in the authentication operation of the conventional FIG. 2 and FIG. The work is added.

[0067] The added part is that the authentication device 12 communicates with the card communication device 32 (S4), the card communication device 32 displays the access of the authentication device power (S5), and is inserted into the card communication device 32. The number of cards to be received and the service range data to be described (S6) are transmitted, and the authentication device 12 determines the service range setting (S7) of the cardholder 50.

[0068] The present invention is a system for confirming the intention of the cardholder 50, and will be described in detail.

[0069] S1 to S3 in FIG. 4 are the same as the conventional authentication operation. Of particular emphasis is that cardholder 60 is using one card.

[0070] S1 to S3 in Fig. 5 are the same as the conventional authentication operation. It is particularly important to note that data logger 70 does not use a single card. In other words, 0 force cards are used.

Since S4 to S8 in FIGS. 4 and 5 have the same operation flow, they will be described collectively.

S4 is that the authentication device 12 directly accesses the card communication device 32 under the control of the force owner 50 by using the public line communication means 43 in order to acquire information.

[0073] S5 is an access display from the authentication device 12. The displayed contents are data that can identify the access time and the notified service organization. For example, the service organization's device number.

[0074] If the cardholder 50 grants permission to the legitimate cardholder 60, or if the cardholder 50 is the data store 70, the display of S5 is as expected. However, if operation 61 or 71 is an unauthorized operation, it is unexpected! Observe access display S5.

S6 is data transmission in which the card status detected by the card communication device 32 and the service range approved by the cardholder 50 are entered.

[0076] The card status transmitted by the card communication device 32 immediately transmits that one card is present if one owner card is inserted in 33. If one user card is inserted, a message is sent indicating that a total of two cards are present when one owner card is inserted into 33 within a certain period of time. [0077] Examples of service areas permitted by bullish cardholder 50 are ATM cash payment limit for the card, face value range for accepting paid services, date of service acceptance, day of the week, The range of the number of people who can enjoy the service at the same time.

[0078] S7 sets a service coverage area based on the service area data received by the service organization as well as the card communication device 32.

[0079] S8 does not proceed with the service if the presence of the two cards cannot be confirmed in preparation for collating with the data stored in the conventional authentication device 12.

[0080] In the following, it will be described in detail that if there are two cards, the cardholder can be considered willing to enjoy the service.

[0081] The card communication device 32 is installed under the control of the cardholder. The communication means 43 is a condition that 12 can start communication by specifying 32 at an arbitrary time. Therefore, the act of confirming the cardholder's intention through communication is guaranteed.

[0082] In the case of FIG. 4, the card owner inserts one owner card into the 33 card communication device, and then the card holder uses the one user card. Confirms the intention of the cardholder with the presence of two cards.

[0083] In the case of Fig. 4, if the user card is lost, the cardholder must insert the owner card in 33 until the service organization invalidates the card. Since the service organization cannot confirm the presence of the two cards, the service is deemed to be illegal and the service is suspended.

[0084] In the case of FIG. 5, the cardholder inserts one user card into the card communication device 32, accesses the service organization, confirms the message that identifies the notified service organization at 32, and owns it. The service organization will continue the service only if the presence of the two cards in the force communication device 32 is confirmed.

[0085] The operation when the card holder and the data storage person request service from the service organization almost simultaneously will be described.

[0086] If there is an illegal act of the data storage person of Fig. 5 during the action of the legitimate card holder of Fig. 4, the authentication device 12 of Fig. 5 owns one card inserted into the card communication device 32. Card Only the existence is recognized, and it is regarded as an illegal card use act and the service is stopped. However, the authentication device 12 in FIG. 4 can confirm the presence of the two cards and continue the service.

[0087] If there is an illegal act of the card bearer of Fig. 4 during the action of the data store of Fig. 5, the authentication device 12 of Fig. 4 uses one card user's fraudulent user card and the card. The presence of three cards in total, including the two cards inserted into the communication device 32, is recognized, and the service is deemed to be an unauthorized card use act. However, the authentication device 12 in FIG. 5 can confirm the presence of the two cards and continue the service.

[0088] As described above, the service institution can be regarded as having the willingness to enjoy the service only when the presence of the two cards in total including the user card and the owner card can be confirmed.

[0089] Even if there is an illegal act of Fig. 5 during the legitimate act of Fig. 4 or an illegal act of Fig. 4 during the legitimate act of Fig. 5, the card communication device 32 is accessed. A message identifying the authentication devices 12 of all the service institutions will be displayed, allowing the cardholder to provide criminal evidence to the criminal institutions.

Industrial applicability

[0090] According to the present invention, even if the cardholder 50 is issued with a plurality of user cards under contracts with many service organizations, the card communication device 32 under the control of the cardholder 32 Through the use of one owner card, the intention to enjoy the service is displayed. Therefore, each service organization dramatically increases the detection of unauthorized card users, increasing the security and security of cardholders.

[0091] The user card is a card issued by a service organization, while the owner card is a card issued by the card owner to himself / herself. The following explains how to create an owner card.

The owner card in the present invention is used by being inserted into the card communication device 32 33 by the card owner. Therefore, 32 is to detect the owner card.

[0093] The card communication device 32 has at least a numeric input function and a display function, needs to have a function of receiving and transmitting data communication of the service organization, and needs to recognize the presence of the inserted card. However, 32 does not require a mechanism for reading card contents. [0094] Therefore, since the owner card issued to itself needs to be detected in the state of being inserted into 32 33, it is preferable to have a shape that cannot be easily imitated like a key. ,.

Therefore, the low-priced card communication device 32 is a general-purpose electronic telephone to which a limit switch is added as a user card insertion detector and a keyed switch is added as an owner card insertion detector.

[0096] As a matter of course, the personal computer 31 and the card communication device 32 may be integrated because they are under the control of the cardholder!

[0097] If 32 is a mobile phone, the card owner is a natural person and the card communication device is owned by an individual, so that the card owner can make a keystroke to notify the card communication device in advance to the authentication device. By registering a PIN and the cardholder keying in the PIN, one or two cards are reported to the authenticator, and the authenticator 12 confirms the intention of the cardholder himself.

[0098] Finally, an application example for monitoring the behavior of a card holder using a part of the system of the present invention will be described.

[0099] In FIG. 4, if the card possessed by the cardholder is a card having an RFID function, the guardian can monitor the behavior of the child by installing a number of card detectors 11 of the service organization in the city. It becomes a system to do.

[0100] This is because S5 is an access display from the authentication device 12. Since the displayed contents are data that can identify the access time and the notified service organization, the guardian who is the cardholder must be in the order in which the children carrying the RFID card accessed 11 in the city. You will know the turn, that is, the action.

[0101] Furthermore, Japanese Patent 3193363 "Life Monitor System" can be cited as a system in which the RFID function is incorporated in an electrical product and the card detector 11 of a service organization is installed in the home.

[0102] Being able to monitor the behavior of cardholders also makes it possible to monitor the behavior of card users using illegal means, making it easy to identify criminals who use illegal means. Become.

Claims

The scope of the claims

[1] In order to prevent card users from using fraudulent cards,

A. Count the number of cards 0 or 1 that the card user presented to the service organization,

B. The card holder of the service organization uses communication means

Access the card communication device installed under the control of the cardholder,

C. Report the number of cards recognized by the card communication device to the authentication device,

C-1. If the number of cards A and C is two, continue the service. C-2. If the number of cards A and C is other than 2, stop the service. By

A service system that confirms the intention of the cardholder.

[2] Described in Claim 1, characterized in that when the authentication device of the service organization accesses a card communication device installed under the control of the cardholder, a message identifying the service organization is transmitted. Authentication device.

[3] The card communication device according to claim 1, wherein the card communication device has a function of transmitting, to the authentication device, data in which a service range approved by the owner is entered in advance.

[4] The cardholder transmits to the service organization that the card has been inserted within a certain period of time after receiving and displaying the message as claimed in claim 2 in order to indicate the service intent to the service organization. The card communication device according to claim 1, wherein:

[5] As a method for the card communication device to know the number of cards and report it to the authentication device, the card owner pre-registers with the card communication device and registers a keystroke PIN for reporting to the authentication device. 2. The card communication device according to claim 1, further comprising means for notifying one or two cards to the authentication device when the owner keys the personal identification number.