WO2012157199A1 - Automatic transaction device and automatic transaction system - Google Patents

Abstract

Provided is a technology capable of improving security in an automatic transaction device without using a pattern file containing the characteristics of viruses. This automatic transaction device is equipped with: a main body control unit that controls the various units of the automatic transaction device; a personal information control unit that acquires the personal information of users; a cash control unit that dispenses and receives cash; and a fraud detection unit that transitions the automatic transaction device to an alarm state which differs from a normal state wherein normal transactions are possible when it is detected, using the type of processing request that has been input to the personal information control unit or the cash control unit via the main body control unit, and using the internal state of the automatic transaction device during a series of transaction processes, that a request is from a fraudulent program that is present in the automatic transaction device.

Description

Automatic transaction apparatus and automatic transaction system

The present invention relates to a technique for improving security in an automatic transaction apparatus.

In recent years, many automated teller machines (ATMs) are equipped with a CPU, RAM, hard disk, etc., and are designed by applying general-purpose personal computer technology. In such an automatic teller machine, there is a widespread movement to create software built in the automatic teller machine in accordance with a standard specification. Software created in accordance with standard specifications has the advantage of high versatility and low cost, but has the problem of being susceptible to viruses.

To solve such problems, a pattern file that contains a program on the hard disk of an automated teller machine, a specific character string included in a virus, and a characteristic operation pattern of a program infected with a virus. Is known to detect a virus mixed in software built in the automatic teller machine (see, for example, JP-A-2004-362012).

However, there is a problem that it is difficult to cope with a new virus by the method of comparing the program existing in the hard disk with the pattern file.

In addition, such a problem is not limited to automatic cash transaction apparatuses, but is a problem common to all automatic transaction apparatuses designed by applying personal computer technology such as various vending machines and ticket vending machines. .

An object of the present invention is to provide a technology capable of improving security in an automatic transaction apparatus without using a pattern file including virus characteristics.

The present invention has been made to solve at least a part of the problems described above, and can be realized as the following forms or application examples.

The automatic transaction apparatus as one embodiment of the present invention is:
A main body control unit for controlling each part of the automatic transaction apparatus;
A personal information control unit for acquiring personal information of the user;
A cash control unit for sending and receiving cash;
Using the type of processing request input to the personal information control unit or the cash control unit via the main body control unit, and the internal state of the automatic transaction apparatus in a series of transaction processing, the request is the A fraud detection unit that transitions the automatic transaction apparatus to a warning state different from a normal state in which a normal transaction is possible, when it is detected that it is due to an unauthorized program inherent in the automatic transaction apparatus;
Is provided.
With such a configuration, the fraud detection unit uses the type of processing request input to the personal information control unit or cash control unit and the internal state of the automatic transaction apparatus in a series of transaction processing, When an automatic transaction device is detected to be caused by a malicious program inherent in the automatic transaction device, the automatic transaction device is shifted to a warning state different from the normal state in which the normal transaction is possible. Security can be improved without using a pattern file that contains.

In another embodiment, the automatic transaction device further comprises:
A communication unit that is connected to an external device via a network and exchanges information with the external device;
The fraud detector further includes:
When the issuer of the request for processing input to the personal information control unit or the cash control unit via the main body control unit is confirmed, and it is detected that the request is due to unauthorized access via the communication unit In addition, the automatic transaction apparatus may be shifted to the alert state.
With such a configuration, the fraud detection unit further confirms the issuer of the processing request input to the personal information control unit or the cash control unit, and the request is due to unauthorized access via the communication unit. If the automatic transaction apparatus is detected to be present, the automatic transaction apparatus is transitioned to the alert state, so that the security can be further improved in the automatic transaction apparatus.

In another embodiment, the fraud detector of the automatic transaction apparatus further includes:
The structure of a message used for a request for processing input to the personal information control unit or the cash control unit via the main body control unit is confirmed, and the standard interface used for the request is an invalid standard interface. The automatic transaction apparatus may be transitioned to the alert state.
With such a configuration, the fraud detection unit further confirms the structure of the message used for the request for processing input to the personal information control unit or the cash control unit via the main body control unit, and uses it for the request. When it is detected that the standard interface being used is an unauthorized standard interface, the automatic transaction apparatus is transitioned to the alert state, so that the security can be further improved in the automatic transaction apparatus.

In another embodiment, the automatic transaction device further comprises:
Information used for processing in the fraud detection unit, method information relating to a method for detecting at least one of the fraudulent program, the fraudulent access, and the fraudulent standard interface; You may provide the memory | storage part by which the process information regarding the content of the process performed in the said alert state was previously linked | related and memorize | stored.
With such a configuration, method information related to a method for detecting at least one of an unauthorized program, unauthorized access, and an unauthorized standard interface, and processing related to the contents of processing executed in the alert state And a storage unit that stores information in association with each other in advance, and the fraud detection unit performs processing using the information. As a result, the fraud detection unit can also execute separate processes according to the method information in the alert state, and the process flexibility can be improved.

In another embodiment, the fraud detector of the automatic transaction apparatus further includes:
The processing request for the personal information control unit or the cash control unit is an unknown type, issued from an unknown issuer, or an unknown message structure. In some cases, the request may be learned.
With such a configuration, the fraud detection unit further determines that the processing request for the personal information control unit or the cash control unit is of an unknown type, issued from an unknown issuer, and unknown. The request can be learned when the message structure is at least one of the message structures.

In another embodiment, the process executed in the alert state of the automatic transaction apparatus may be any one of a pause process of the automatic transaction apparatus and a trace recording process of each process in the automatic transaction apparatus Good.
With such a configuration, when the fraud detection unit detects at least one of the fraudulent program, the fraudulent access, and the fraudulent standard interface, the state of the automatic transaction apparatus is changed to the dormant state, Transition to any of the trace recording states can be made.

In another embodiment, the automatic transaction device further comprises:
You may provide the clerk operation part for receiving the change of the said processing information from the manager of the said automatic transaction apparatus.
With such a configuration, it is possible to accept a change in processing information from an administrator of the automatic transaction apparatus. As a result, the convenience of the automatic transaction apparatus can be improved.

In another embodiment, the fraud detector of the automatic transaction apparatus further includes:
When at least one of the unauthorized program, the unauthorized access, and the unauthorized standard interface is detected, the external device may be notified that the unauthorizedness has been detected.
With such a configuration, the fraud detection unit further detects fraud with respect to the external device when detecting at least one of an illegal program, unauthorized access, and an unauthorized standard interface. In order to notify the fact that it has been done, it is possible to alert the outside of the automatic transaction apparatus.

In another embodiment, the storage unit of the automatic transaction apparatus further includes:
Request trend information is stored in advance for each of the types of request for the processing, which indicates whether the processing can be executed or not, with respect to the plurality of internal states that the automatic transaction apparatus can take in the series of transaction processing. ,
The fraud detector
The type of processing request input to the personal information control unit or the cash control unit via the main body control unit is not possible with respect to the current internal state of the automatic transaction apparatus in the request trend information. If the request is associated with the program, it may be detected that the request is due to the malicious program.
With this configuration, the fraud detection unit responds that the type of processing request input via the main body control unit is not possible with respect to the current internal state of the automatic transaction apparatus in the request trend information. In order to detect that the request is due to a fraudulent program, in other words, a processing request that is impossible in the current internal state of the automatic transaction apparatus, in other words, the current automatic transaction apparatus It is possible to detect that a request for processing that is not scheduled in the internal state is caused by an unauthorized program.

In another embodiment, the fraud detector of the automatic transaction apparatus is
When a request for processing input to the personal information control unit or the cash control unit via the main body control unit is input from a communication port different from a regulation, the personal information control unit via the main body control unit Alternatively, when the issuer of the process request input to the cash control unit is different from the issuer permitted in advance, the request may be detected as being due to the unauthorized access.
With such a configuration, the fraud detection unit performs processing when the request for processing input via the main body control unit is input from a communication port different from the regulation and when input via the main body control unit. If the issuer of the request is different from the issuer authorized in advance, unauthorized access is detected using the input port information of the request and the issuer information of the request in order to detect that the request is due to unauthorized access. Can be detected.

In another embodiment, the storage unit of the automatic transaction apparatus further includes:
For each standard interface, I / F recognition information that associates the characteristics of the structure of the message with permission / non-permission of processing execution is stored in advance,
The fraud detector
The structure of a message used for a request for processing input to the personal information control unit or the cash control unit via the main body control unit is associated with being not permitted in the I / F recognition information. If it is, the standard interface used for the request may be detected as an invalid standard interface.
With this configuration, the fraud detection unit is associated with the structure of the message used for the processing request input from the main body control unit being not permitted in the I / F recognition information. In addition, since it is detected that the standard interface used in the request is an unauthorized standard interface, the unauthorized standard interface can be detected using the characteristics of the structure of the message.

An automatic cash transaction system as one embodiment of the present invention is:
An automatic transaction device;
Server,
With
The automatic transaction apparatus is
A main body control unit for controlling each part of the automatic transaction apparatus;
A personal information control unit for acquiring personal information of the user;
A cash control unit for sending and receiving cash;
With
The server
Using the type of processing request received by the personal information control unit or the cash control unit and the internal state of the automatic transaction apparatus in a series of transaction processing, the request is an improper in the automatic transaction apparatus It is equipped with a fraud detector that detects whether it is a program,
The personal information control unit and the cash control unit are:
When receiving a processing request from the main body control unit, the server is inquired whether the request is due to the unauthorized program,
The fraud detector
When it is detected that the request is due to the unauthorized program, the automatic transaction apparatus may be shifted to a warning state different from a normal state in which a normal transaction is possible.
With such a configuration, the same effect can be obtained even in an automatic transaction apparatus provided with an fraud detection unit in an external server. Furthermore, with such a configuration, since the malicious program is collectively detected by the external server, it is possible to reduce the processing load on the automatic transaction apparatus and to centralize information regarding the detected malicious program.

Note that the present invention can be realized in various modes. For example, the present invention provides an automatic transaction device (cash automatic transaction device, automatic vending machine, automatic ticket vending machine, etc.), automatic transaction system, control method of automatic transaction device, and a function of those methods or devices. The present invention can be realized in the form of a computer program, a non-transitory medium storing the computer program, and the like.

It is explanatory drawing which shows roughly the hardware constitutions of the automatic teller machine as one Example of this invention. It is explanatory drawing which shows the software structure of ATM roughly. It is explanatory drawing which shows an example of fraud detection information. It is explanatory drawing which shows an example of request | requirement tendency information. It is explanatory drawing which shows an example of I / F recognition information. It is a sequence diagram which shows a mode that a fraud detection process is performed in a series of transaction processes which a main body control part performs. It is a flowchart which shows the procedure of a fraud detection process. An example of request tendency information updated by learning of request tendency is shown. It is a flowchart which shows the procedure of a standard I / F recognition process. It is explanatory drawing which shows an example of the setting screen used for the change of the process information in a fraud detection process. It is explanatory drawing which shows schematic structure of the automatic cash transaction system in 2nd Example.

Next, embodiments of the present invention will be described in the following order based on examples.

A. First embodiment:
(A-1) Hardware configuration:
FIG. 1 is an explanatory diagram schematically showing a hardware configuration of an automatic teller machine as an embodiment of the present invention. Automatic cash transaction apparatus 10 (hereinafter also referred to as “ATM”) ATM 10 is installed in, for example, a financial institution, a retail store, a public facility, etc., and provides services such as cash accounting provided by the financial institution according to user operations. This is an automatic device. ATM10 is also called an automatic teller machine.

The ATM 10 includes a card mechanism 22, a passbook mechanism 24, a statement slip mechanism 26, a coin mechanism 32, a bill mechanism 34, a customer operation unit 42, a staff operation unit 44, a control unit 50, and a journal printing mechanism 60. With. In FIG. 1, illustration of other components that are not necessary for the description is omitted. This also applies to the drawings described later.

The card mechanism 22 is a mechanism for reading information such as a user's account number from a cash card inserted from a card slot. The passbook mechanism 24 is a mechanism for reading information such as a user's account number from a passbook inserted from a passbook slot and printing transaction contents on the passbook. The statement slip mechanism 26 is a mechanism for issuing a statement slip on which the transaction details of the user are printed.

The coin mechanism 32 is a mechanism that exchanges coins with users. The bill mechanism 34 is a mechanism that exchanges bills (hereinafter also referred to as “paper sheets”) with a user. The banknote mechanism 34 identifies the banknote inserted from the user at the time of money_receiving | payment, and stores it after classifying for every money type. Further, at the time of withdrawal, banknotes for the amount instructed by the user are paid out and delivered from the deposit / withdrawal port to the user.

The customer operation unit 42 is a user interface for displaying information necessary for the transaction and accepting an operation from the user via a touch panel provided on the front surface of the ATM 10. The clerk operation unit 44 is a user interface for displaying information for managing the ATM 10 and accepting operations from the administrator via a touch panel provided on the back of the ATM 10. The customer operation unit 42 and the clerk operation unit 44 may be configured with a display, a push button, and the like instead of the touch panel.

The journal printing mechanism 60 is a mechanism for sequentially printing transaction contents with the user on predetermined journal paper. Note that the journal printing mechanism 60 may employ an electronic journal method that leaves a record using an electronic medium such as a database or a file, instead of the method of printing on a paper medium.

The control unit 50 controls each mechanism described above. The control unit 50 is configured as a computer including a CPU, a memory, a hard disk, a network interface, and the like.

(A-2) Software configuration:
FIG. 2 is an explanatory diagram schematically showing the software configuration of the ATM 10. Various control programs for realizing the functions of the control unit 50 are installed in a hard disk (not shown) of the control unit 50. The CPU 51 of the control unit 50 functions as each functional unit shown in FIG. 2 by using the memory 300 as a work area and executing these various control programs.

The control unit 50 includes a main body control unit 100, a fraud detection unit 110, a touch panel control unit 200, a storage unit 300, a communication unit 400, a card mechanism control unit 500, a passbook mechanism control unit 510, and a statement slip mechanism. A control unit 520, a bill mechanism control unit 600, a coin mechanism control unit 610, and a journal control unit 700 are provided as functional units.

The main body control unit 100 has a function of executing various transaction processes of the ATM 10 while controlling each functional unit of FIG. 2 according to an instruction from the user. The fraud detection unit 110 has a function of executing fraud detection processing (details will be described later) for detecting a fraud program inherent in the ATM 10, illegal access to the ATM 10, and an illegal standard interface.

In this embodiment, the “illegal program” is a program other than a legitimate program provided by the manufacturer of ATM 10, and is an unauthorized program unexpected by an ATM 10 user, administrator, financial institution operating ATM 10, or the like. It means a program that performs withdrawal operations and personal information acquisition operations. “Unauthorized access” means access to the ATM 10 from a communication port different from the default communication port, or access to the ATM 10 from a device other than a device permitted in advance. The “illegal standard interface” means access to the ATM 10 using a standard interface other than the standard interface permitted in advance. Here, the “standard interface” means a rule defined for a structure of a message (command command) exchanged between each function unit of the ATM 10.

The touch panel control unit 200 controls the operation of the touch panel used in the customer operation unit 42 and the staff operation unit 44. Specifically, the touch panel control unit 200 displays information on the touch panel and acquires input from the user and the administrator on the touch panel.

The storage unit 300 stores information used in fraud detection processing by the fraud detection unit 110. Specifically, in the storage unit 300, in order to detect unauthorized programs existing in the ATM 10, unauthorized detection information 310 and request trend information 330 used to detect unauthorized access to the ATM 10, and unauthorized standard interfaces. I / F recognition information 320 to be used. Details will be described later.

The communication unit 400 includes a network interface (not shown), and exchanges information with an external device (various devices provided outside the ATM 10, such as a management device or a server of the ATM 10) according to a predetermined protocol. Do. In this embodiment, the communication unit 400 includes a 100BASE-T network interface, and performs communication with an external device according to the TCP / IP protocol.

The card mechanism control unit 500 has a function of controlling the card mechanism 22. Similarly, the passbook mechanism control unit 510 is the passbook mechanism 24, the statement slip mechanism control unit 520 is the statement slip mechanism 26, the bill mechanism control unit 600 is the bill mechanism 34, the coin mechanism control unit 610 is the coin mechanism 32, and the journal. The control unit 700 has a function of controlling the journal printing mechanism 60.

FIG. 3 is an explanatory diagram showing an example of the fraud detection information 310. The fraud detection information 310 is information used for countermeasures against fraudulent programs and unauthorized access in the fraud detection processing executed by the fraud detection unit 110, and is held in a table format. The fraud detection information 310 includes fields of a number, a detection method, and a state.

In the number field, a unique number is assigned as identification information for mutually identifying information stored in each entry. The detection method field stores a malicious program inherent in the ATM 10 and a method for detecting unauthorized access to the ATM 10. The state field stores a state to which the ATM 10 should transition when an unauthorized program or unauthorized access is detected by the method stored in the detection method.

For example, the entry identified by number 1 in FIG. 3 indicates that “is it consistent with the request tendency” as a detection method. The request tendency will be described later. In addition, if fraud is detected as a result of the confirmation, it indicates that the ATM 10 is put into a “permitted transaction while recording trace”. Furthermore, for example, the entry identified by the number 2 indicates that “whether the port that received the processing request is a port to which TCP / IP communication is assigned” is confirmed as a detection method. In addition, if fraud is detected as a result of the confirmation, it indicates that the ATM 10 is put in a “transaction canceled” state. Further, for example, in the entry identified by the number 3, as the detection method, “the IP address or MAC address of the device that is the processing request source matches the IP address or MAC address of the device that is permitted to access the ATM 10. It is shown to confirm. In addition, if fraud is detected as a result of the confirmation, it indicates that the ATM 10 is put in a “transaction canceled” state.

In FIG. 3, information related to a method for detecting an unauthorized program and unauthorized access stored in the detection method field is also referred to as “method information”. Information stored in the state field and indicating the state to which the ATM 10 should transition is also referred to as “processing information”. Furthermore, it is also said that the ATM 10 is in the “warning state” that the ATM 10 is in the “transaction aborted” state or the “transaction permission while recording trace”. The alert state is a state different from the normal state in which normal transactions are possible in the ATM 10.

FIG. 4 is an explanatory diagram showing an example of the request trend information 330. The request tendency information 330 is information used to detect a fraudulent program by monitoring transaction processing executed by the main body control unit 100 in fraud detection processing executed by the fraud detection unit 110, and is held in a table format. Has been. The request tendency information 330 includes fields of a number, an internal state, and a function unit.

In the number field, a unique number is assigned as identification information for mutually identifying information stored in each entry. In the internal state field, the name of the internal state of the ATM 10 in a series of transaction processes is stored. “Internal state” means a step in a series of transaction processes (for example, a series of withdrawal processes, a series of deposit processes, etc.) executed by the main body control unit 100 based on a user request for the ATM 10. To do.

In the functional part field, among the functional parts (FIG. 2) included in the ATM 10, a functional part (cash control part) that transfers and receives cash, and a functional part (personal information control) that acquires personal information of the user A field indicating the name of each part). Note that, among the functional units illustrated in FIG. 4, the personal identification number control unit and the transaction selection control unit are control units included in the main body control unit 100. In each field entry, information indicating whether or not processing in each functional unit is possible or impossible is stored in correspondence with the internal state of the ATM 10 in a series of transaction processing executed by the main body control unit 100. ing. Specifically, when the process in a certain functional unit is possible, the number of the internal state to which transition is made after performing the process in the functional unit is stored (FIG. 4: area without hatching). Further, when the processing in a certain functional unit is impossible, a null value is stored (FIG. 4: hatched hatching area).

For example, in the example of FIG. 4, from the entry identified by the number 1, when the internal state of the ATM 10 in a series of transaction processes executed by the main body control unit 100 is in an idle state, the card mechanism control unit and the transaction selection control It is understood that the processing by the control unit is possible and the processing by other control units (banknote mechanism control unit or the like) is impossible. Moreover, after the card reading process by the card mechanism control unit is performed, it can be seen that the ATM 10 shifts to a transaction selection waiting state of number 3. Similarly, it is understood that after the reading process by the transaction selection control unit is performed, the ATM 10 shifts to a card insertion waiting state of number 2.

From the entry identified by the number 2, it can be seen that when the internal state of the ATM 10 is a card insertion waiting state, only the processing by the card mechanism control unit is possible and the processing by the other control units is impossible. Also, after the processing by the card mechanism control unit, it can be seen that the ATM 10 shifts to the number 4 password input waiting state. From the entry identified by the number 3, it is understood that when the internal state of the ATM 10 is in the transaction selection waiting state, only the processing by the transaction selection control unit is possible, and the processing by other control units is impossible. . Moreover, after the process by the transaction selection control part, it turns out that ATM10 changes to the password number input waiting state of the number 4.

From the entry identified by the number 4, it can be seen that when the internal state of the ATM 10 is waiting for the PIN number input, only the processing by the PIN number control unit is possible, and the processing by other control units is impossible. . Further, it can be seen that after the processing by the personal identification number control unit, the ATM 10 shifts to a withdrawal amount input waiting state of No. 6. From the entry identified by the number 5, it can be seen that when the internal state of the ATM 10 is waiting for the PIN number acquisition, only the processing by the PIN number control unit is possible and the processing by other control units is impossible. . Further, it can be seen that after the processing by the personal identification number control unit, the ATM 10 shifts to a withdrawal amount input waiting state of No. 6.

From the entry identified by number 6, if the internal state of the ATM 10 is waiting for the withdrawal amount input, only the processing by the personal identification number control unit is possible and the processing by other control units may not be possible. Recognize. Further, it can be seen that after the process by the personal identification number control unit, the ATM 10 transits to a withdrawal request waiting state of number 7. From the entry identified by the number 7, when the internal state of the ATM 10 is a withdrawal request waiting state, only the processing by the banknote mechanism control unit or the coin mechanism control unit is possible, and the processing by other control units is impossible. It can be seen that it is. Moreover, after processing by the bill mechanism control unit or the coin mechanism control unit, it can be seen that the ATM 10 transitions to a card / detail extraction waiting state of number 8.

From the entry identified by the number 8, when the internal state of the ATM 10 is in the card / detail extraction waiting state, only the processing by the card mechanism control unit is possible, and the processing by other control units may not be possible. Recognize. Further, after the processing by the card mechanism control unit, it can be seen that the ATM 10 shifts to a withdrawal medium withdrawal waiting state of No. 9. From the entry identified by the number 9, when the internal state of the ATM 10 is the withdrawal medium withdrawal waiting state, only the processing by the banknote mechanism control unit or the coin mechanism control unit is possible, and the processing by other control units is not possible. It turns out that it is possible. Moreover, it turns out that ATM10 changes to the idle state of No. 1 after the process by a banknote mechanism control part or a coin mechanism control part.

As described above, the request trend information 330 shown in FIG. 4 includes the internal state of the ATM 10 in a series of transaction processing executed by the main body control unit 100 and the types of control units capable of executing processing in the internal state ( In other words, the types of permitted processing requests) are stored in association with each other.

FIG. 5 is an explanatory diagram showing an example of the I / F recognition information 320. The I / F recognition information 320 is information used for countermeasures against an illegal standard interface in the fraud detection processing executed by the fraud detector 110, and is held in a table format. The I / F recognition information 320 includes fields of a number, a standard interface type, a feature, a version, and a state.

The number is given a unique number as identification information for mutually identifying information stored in each entry. In the standard interface type, the name of the standard interface is stored. The version stores the version of the standard interface. In the I / F recognition information 320, a standard interface is uniquely specified by a combination of a standard interface type and a version. The feature stores the feature of the structure of the message (command command) for each standard interface uniquely specified by the combination of the standard interface type and the version. In the state, the transition destination state of the ATM 10 is stored for each uniquely specified standard interface.

For example, in the entry identified by the number 1 in FIG. 5, as a feature of version 2.0 of the standard interface 1, “the first activation (OPEN command) has X input parameters, and the Xth argument of the input parameters is“ XXXXXX ”. "And the key" XXXX "is stored in XXXX \ XXX of the registry". In addition, as a result of the confirmation, it is indicated that the ATM 10 is set in the “transaction permitted” state when it is determined that the standard interface is applicable.

Further, in the entry identified by the number 4, as a feature of version 2.0 of the same standard interface 1, “one input parameter of the bill withdrawal command (BCKB command) is one, and the first argument of the input parameter is“ XXXXXXX ”. It shows “+ denomination”. In addition, as a result of the confirmation, it is indicated that the ATM 10 is set in the “transaction permitted” state when it is determined that the standard interface is applicable. Further, for example, if the entry identified by the number n does not satisfy the characteristics stored in all the entries identified by the numbers 1 to n−1, the ATM 10 is set in the “transaction aborted” state, that is, the alert state. It is shown that. An arbitrary value can be entered in X in the figure.

As described above, the I / F recognition information 320 shown in FIG. 5 includes information for uniquely identifying the standard interface, the characteristics of the message structure of the standard interface, the transition state of the ATM 10 (in other words, the ATM 10 Are stored in association with each other. In FIG. 5, the feature of the message structure stored in the feature field is also referred to as “method information” relating to a method for detecting an unauthorized standard interface. Information indicating the transition destination state of the ATM 10 stored in the state field is also referred to as “processing information”.

(A-3) Fraud detection processing:
(A-3-1) Processing sequence:
FIG. 6 is a sequence diagram showing how the fraud detection process is executed in a series of transaction processes executed by the main body control unit 100. In the example of FIG. 6, the banknote mechanism control unit is cited as an example of the cash control unit, the card mechanism control unit is cited as an example of the personal information control unit, and the main body control unit 100 reads the card inserted from the user. After that, a case where banknotes are withdrawn will be described as an example.

The main body control unit 100 that has detected the insertion of the card from the user transmits a message (command command) requesting reading of the inserted card to the card mechanism control unit 500 (step S12). Upon receiving the request from the main body control unit 100, the card mechanism control unit 500 requests the fraud detection unit 110 to execute fraud detection processing (step S14). The fraud detection unit 110 that has received the request executes fraud detection processing (details will be described later) (step S16). The fraud detector 110 places the ATM 10 in a warning state when fraud is detected in the fraud detection process, and does nothing if no fraud is detected. The fraud detection unit 110 notifies the caller that the process has been completed after the fraud detection process is completed (step S18). Upon receiving the notification, the card mechanism control unit 500 performs a reading process for the inserted card (step S20). Thereafter, the card mechanism control unit 500 notifies the main body control unit 100 of personal information (for example, account holder name, card number, etc.) obtained as a result of the card reading process (step S22).

Thereafter, for example, further operation by the user such as selection of a processing menu or input of a personal identification number is performed, and the main body control unit 100 performs processing according to the operation content. Details are omitted.

Receiving the withdrawal instruction from the user, the main body control unit 100 transmits a message (command command) requesting the banknote mechanism control unit 600 to withdraw the banknote of the instructed amount (step S24). ). The banknote mechanism control unit 600 that has received the request from the main body control unit 100 requests the fraud detection unit 110 to execute fraud detection processing (step S26). The fraud detection unit 110 that has received the request executes fraud detection processing (step S28). Details are the same as in step S16. The fraud detection unit 110 notifies the caller that the process has ended after the fraud detection process ends (step S30). Receiving the notification, the bill mechanism control unit 600 executes a bill withdrawal process for the amount of money instructed by the main body control unit 100 (step S32). Thereafter, the bill mechanism control unit 600 notifies the main body control unit 100 of the withdrawal result (step S34).

(A-3-2) Fraud detection processing flowchart:
FIG. 7 is a flowchart illustrating the procedure of fraud detection processing. The fraud detection unit 110 refers to the fraud detection information 310 and performs confirmation of “matches with request tendency”, which is the detection method stored in the first entry (step S102). Specifically, the fraud detection unit 110 determines the current internal state of the ATM 10 and the type of request actually made from the main body control unit 100 to the function unit (for example, a card reading command, a password reading command, a withdrawal command). Etc.) with the request tendency information 330, it is determined whether or not the request made from the main body control unit 100 to the function unit matches the type of request allowed.

For example, in the case where the current internal state of the ATM 10 is an idle state and a card reading command is issued from the main body control unit 100 to the card mechanism control unit 500 (FIG. 6: step S12), as shown in FIG. When the internal state is the idle state, the processing by the card mechanism control unit and the processing by the transaction selection control unit are possible, so it is determined that the request for the processing should be permitted (correct). On the other hand, for example, in the case where the current internal state of the ATM 10 is an idle state and a withdrawal command is issued from the main body control unit 100 to the bill mechanism control unit 600, the internal state of the ATM 10 is an idle state as shown in FIG. In this case, since the processing by the control unit other than the card mechanism control unit and the transaction selection control unit is impossible, it is determined that the request for the processing is not permitted (illegal).

If it is determined in step S102 that the request for processing should be permitted, the fraud detector 110 determines that the request tendency matches (that is, fraud is not detected) (step S104: NO), the process proceeds to step S106.

The fraud detector 110 determines whether confirmation has been made to the end of the detection method stored in the fraud detection information 310 (step S106). If confirmation has not been performed to the end of the detection method (step S106: NO), the fraud detection unit 110 shifts the processing to step S102, and confirms the detection method stored in the next entry of the fraud detection information 310. That is, the confirmation of “whether the port receiving the processing request is a port to which TCP / IP communication is assigned” is continued.

On the other hand, when the confirmation has been completed to the end of the detection method (step S106: YES), the fraud detection unit 110 shifts the process to step S108 and learns the request tendency (step S108). Specifically, the fraud detector 110 is a combination in which the combination of the actual request type used for determination in step S102 and the internal state of the ATM 10 is unknown (that is, not registered in the request trend information 330). If there is, the content of the request trend information 330 is updated using the information. In this update, the existing information of the request trend information 330 may be overwritten, or new information may be added while the existing information of the request trend information 330 remains unchanged. FIG. 8 shows an example of the request tendency information 330 updated by learning of the request tendency. In the example of FIG. 8, the information in the area NF is updated in order to enable handling of the bankbook from the idle state.

The fraud detection unit 110 executes standard I / F recognition processing (details will be described later) (step S110).

After completion of the standard I / F recognition process, the fraud detection unit 110 notifies the function unit that is the caller that the process has been completed (step S112). Thereafter, the transaction process is continued as shown in FIG.

If it is determined in step S102 that the processing request is not permitted, the fraud detection unit 110 determines that the request tendency does not match (that is, fraud has been detected) (step S104: YES), and the process is stepped. The process proceeds to S114.

The fraud detection unit 110 refers to the contents of the status field of the corresponding entry in the fraud detection information 310 (step S114). The fraud detector 110 determines whether or not the content of the status field is “transaction permitted” (step S116). When the transaction is permitted (step S116: YES), the fraud detector 110 requests the journal controller 700 to record a transaction processing trace (step S118), and the process proceeds to step S110. On the other hand, when the transaction is not permitted (step S116: NO), the fraud detection unit 110 requests the main body control unit 100 to place the ATM 10 in a transaction suspension state (step S120), and ends the process.

As described above, the fraud detection unit 110 uses the request tendency information 330 to check the detection method “whether it matches the request tendency” of the fraud detection information 310, and performs the individual It confirms whether the request | requirement of the process with respect to an information control part or a cash control part is permitted. When the fraud detection unit 110 receives a request that is not permitted (in other words, a request that does not match the tendency of the request), the request is an unexpected request in an unexpected order issued by the malicious program (that is, It is determined that fraud has been detected), and the ATM 10 can be shifted to the alert state.

The fraud detection unit 110 also detects the detection method of the fraud detection information 310 “whether the port that received the processing request is an assigned port for TCP / IP communication” and “the IP of the device that is the processing request source. In confirming whether the address and MAC address match the IP address and MAC address of the device that is permitted to access the ATM 10, the origin of the request received by the main body control unit 100 is confirmed. When the main body control unit 100 receives a request that does not match the above condition, the fraud detection unit 110 is an unexpected request due to an unauthorized access from an unauthorized issuer (that is, fraud is detected). It is possible to make the ATM 10 transition to the alert state.

(A-3-3) Standard I / F recognition processing flowchart:
FIG. 9 is a flowchart showing the procedure of the standard I / F recognition process. Standard I / F recognition processing is a subroutine of fraud detection processing. The fraud detection unit 110 has a structure of a message (command command) in which at least one of the features stored in the first entry of the I / F recognition information 320 is transmitted as a request from the main body control unit 100 to each function unit. (Step S202).

If it is determined in step S202 that the feature in the I / F recognition information 320 matches the structure of the requested message, the fraud detection unit 110 determines that the feature matches the feature (step S204: YES), and the process is stepped. The process proceeds to S214.

The fraud detector 110 learns the characteristics of the standard interface (step S214). Specifically, if the actual request message used for the determination in step S202 is an unknown message (that is, not registered in the I / F recognition information 320), the fraud detection unit 110 The contents of the I / F recognition information 320 are updated using the structure of the message. In this update, the existing information in the I / F recognition information 320 may be overwritten, or new information is added while the existing information in the I / F recognition information 320 remains unchanged. Also good. Further, the fraud detection unit 110 performs I / F recognition on the actual request message used in the determination in step S202 for the message structure that matches the content of the feature field but has a different version. The contents of the version field of the entry of information 320 may be updated.

In step S202, when it is determined that the feature in the I / F recognition information 320 does not match the structure of the message, the fraud detector 110 determines that the feature does not match the feature (step S204: NO), and the process is stepped. The process proceeds to S206.

The fraud detector 110 determines whether or not confirmation has been made to the end of the feature stored in the I / F recognition information 320 (step S206). If the confirmation has not been performed to the end (step S206: NO), the fraud detection unit 110 shifts the process to step S202 and continues to confirm the feature stored in the next entry of the I / F recognition information 320. .

On the other hand, when the confirmation has been completed to the end of the feature (step S206: YES), the fraud detection unit 110 shifts the processing to step S208, and the structure of the message and the content of the feature field in the I / F recognition information 320. Reference is made to the contents of the status field of the entry that matches (step S208). The fraud detector 110 determines whether or not the content of the status field is “transaction canceled” (step S210). When the transaction is canceled (step S210: YES), the fraud detection unit 110 requests the main body control unit 100 to place the ATM 10 in the transaction stopped state (step S218), and ends the process.

On the other hand, when the transaction is not canceled (step S210: NO), the fraud detector 110 determines whether or not the content of the state field is “transaction permission (trace recording)” (step S212). If the transaction is permitted (trace recording) (step S212: YES), the fraud detection unit 110 requests the journal control unit 700 to record a transaction processing trace (step S216), and ends the processing. On the other hand, when it is not transaction permission (trace recording) (step S212: NO), fraud detection part 110 ends processing.

As described above, the fraud detection unit 110 is received by the personal information control unit or the cash control unit from the main body control unit 100 using the characteristics of the message structure for each standard interface stored in the I / F recognition information 320. Monitor the structure of the message. When the fraud detection unit 110 receives a telegram having an unexpected structure, the personal information control unit or the cash control unit is an unexpected request issued based on an invalid standard interface (that is, the fraud Is detected), and the ATM 10 can be shifted to the alert state.

(A-4) Processing information change:
FIG. 10 is an explanatory diagram illustrating an example of a setting screen used for changing processing information in the fraud detection processing. The setting screen EW is a screen that is displayed on the display of the clerk operation unit 44 by the main body control unit 100 that has acquired the operation by the administrator. The administrator can change the contents (that is, the processing information) of the status fields of the fraud detection information 310 and the I / F recognition information 320 by using the setting screen EW.

The setting screen EW includes an item display section EF, a transaction cancel selection button CB, a transaction permission (trace recording) button OB, a next button NB, and a cancel button BB. The item display portion EF is a field for displaying the contents of the detection method field of the fraud detection information 310 or the contents of the feature field of the I / F recognition information 320. The transaction stop selection button CB and the transaction permission (trace recording) button OB are used to specify which state (processing information) is assigned to the detection method (or feature) displayed on the item display unit EF. It is a button. The next button NB is a button for displaying the next detection method (or feature) on the setting screen EW. The cancel button BB is a button for canceling the change process on the setting screen.

In the example of FIG. 10, the content of the detection method field of the entry identified by the number 2 of the fraud detection information 310 is displayed in the item display portion EF. Further, the entry identified by the number 2 of the fraud detection information 310 is currently “transaction canceled” in the state field, so the corresponding transaction cancellation selection button CB is grayed out. If the administrator of the ATM 10 wants to change the contents of the status field of the entry identified by the number 2 of the fraud detection information 310 to “transaction permission (trace recording)”, he / she presses the transaction permission (trace recording) button OB. Good. By pressing the button, the fraud detector 110 updates the contents of the status field of the corresponding entry in the corresponding table.

In this way, it is possible to accept a change in processing information from the ATM 10 administrator. As a result, convenience in the fraud detection process of the ATM 10 can be improved.

As described above, according to the first embodiment, the fraud detection unit 110 performs the main body control unit during the fraud detection process (confirmation of whether the detection method of the fraud detection information 310 “matches the request tendency”). When the type of processing request to the personal information control unit or cash control unit input via 100 is associated with “impossible” for the current internal state of the ATM 10 in the request trend information 330 In addition, in order to detect that the request is due to a malicious program, a request for processing that is impossible in the current internal state of the ATM 10, in other words, a process that is not planned in the current internal state of the ATM 10. It can be detected that the request is caused by a malicious program. Then, the fraud detection unit 110 transitions the state of the ATM 10 to a warning state (transaction suspension, trace recording) different from the normal state in which a normal transaction is possible when fraud (fraud program) is detected. For this reason, in ATM10, security can be improved without using a pattern file including virus characteristics.

Furthermore, the fraud detection unit 110 performs fraud detection processing (confirmation of the detection method of the fraud detection information 310 “the port that received the request for processing” and “the IP address or MAC address of the device that is the request source of processing”). When a request for processing for the personal information control unit or cash control unit input via the main body control unit 100 is input from a communication port different from the regulation, a request for processing input via the main body control unit 100 In order to detect that the request is due to unauthorized access when the issuer of the request is different from the issuer authorized in advance, the request input port information and the request issuer information are used to detect unauthorized access. Detection can be performed. Then, the fraud detection unit 110 transitions the state of the ATM 10 to a warning state when fraud (unauthorized access) is detected. For this reason, in ATM10, security can be improved more.

Further, in the fraud detection unit 110, in the fraud detection process (standard I / F recognition process), the structure of the message used for the request for the process input from the main body control unit 100 is the I / F recognition information 320. If the standard interface used in the request is an invalid standard interface when it is associated with “non-permitted” in FIG. Detection can be performed. Then, the fraud detection unit 110 causes the ATM 10 to transition to a warning state when fraud (an illegal standard interface) is detected. For this reason, in ATM10, security can be improved more.

Further, the storage unit 300 stores an unauthorized program, fraud detection information 310 used for detecting unauthorized access, and request tendency information 330, and an I used for detecting an unauthorized standard interface. / F recognition information 320 is stored. In the fraud detection information 310, an illegal program, method information for detecting unauthorized access (detection method field), and processing information (state field) regarding the contents of processing executed in the alert state are stored in association with each other. ing. In the I / F recognition information 320, method information (characteristic field) for detecting an illegal standard interface and processing information (state field) regarding the contents of processing executed in the alert state are stored in association with each other. Yes. As a result, the fraud detector 110 can execute individual processes in the alert state according to the method information used when detecting fraud, and can improve the flexibility of the process. .

Further, in step S108 of the fraud detection process (FIG. 7), the fraud detection unit 110 learns the type and order of the request when the request for processing to the personal information control unit or the cash control unit is an unknown type. To do. In addition, the fraud detection unit 110, in step S214 of the standard I / F recognition process (FIG. 9) of the fraud detection process, when the processing request to the personal information control unit or the cash control unit is an unknown message structure, The message structure of the request is learned. As a result, the fraud detection information 310, the I / F recognition information 320, and the request tendency information 330 can be automatically updated, and the cost required for managing the ATM 10 can be reduced.

Further, when the fraud detection unit 110 detects fraud (illegal program, unauthorized access, unauthorized standard interface), the fraud detection unit 110 changes the state of the ATM 10 to either a dormant state (transaction suspension state) or a trace recording state. Can do.

B. Second embodiment:
In the second embodiment of the present invention, a configuration in which an automatic teller machine is connected to a server provided outside and performs fraud detection processing by the server will be described. Below, only the part which has a different structure and operation | movement from 1st Example is demonstrated. In the figure, the same components as those of the first embodiment are denoted by the same reference numerals as those of the first embodiment described above, and detailed description thereof is omitted.

(B-1) Network configuration:
FIG. 11 is an explanatory diagram showing a schematic configuration of an automatic cash transaction system 1000 in the second embodiment. The automatic cash transaction system 1000 includes an ATM 10 a and a server 20. The ATM 10a and the server 20 are connected by a local area network (LAN) NN.

The ATM 10a differs from the ATM 10 of the first embodiment (FIGS. 1 and 2) in that it does not include the fraud detection unit 110 and the storage unit 300. The server 20 is configured as a server computer including a CPU, a memory, a hard disk, a network interface, and the like (not shown). The server 20 includes a fraud detection unit 110 and a storage unit 300 as functional units. The fraud detection unit 110 and the storage unit 300 have the same functions as in the first embodiment.

(B-2) Fraud detection processing:
In the second embodiment, in the series of transaction processing executed by the main body control unit 100 of the ATM 10a, the server 20 performs only the fraud detection processing portion. Specifically, in step S <b> 14 of FIG. 6, the card mechanism control unit 500 requests the fraud detection unit 110 of the server 20 to execute fraud detection processing via the communication unit 400. Further, in step S18 of FIG. 6, the fraud detection unit 110 of the server 20 notifies the caller (card mechanism control unit 500 of the ATM 10a) that the processing has been completed via a communication unit (not shown). The same applies to steps S26 and S30.

As described above, according to the second embodiment, the same effect as that of the first embodiment can be obtained even in the ATM 10a provided with the fraud detector 110 in the external server. Furthermore, with such a configuration, it is possible to detect unauthorized programs, unauthorized access, and unauthorized standard interfaces all at once with the server 20 provided outside, so that the processing load on the ATM 10a can be reduced. . Furthermore, since information related to unauthorized programs, unauthorized access, and unauthorized standard interfaces (fraud detection information 310, I / F recognition information 320, request tendency information 330) can be centrally managed on the server 20 side, it is considered as a system including a plurality of ATMs 10a. In this case, it is possible to construct an automatic cash transaction system that is easy to operate.

C. Variation:
The present invention is not limited to the above-described examples and embodiments, and can be implemented in various modes without departing from the gist thereof. For example, the following modifications are possible.

C1. Modification 1:
In the said Example, the structure and function of the cash automatic transaction apparatus and the cash automatic transaction system were demonstrated. However, the embodiment shown in the above embodiment is merely an example, and various modifications can be made without departing from the scope of the present invention.

For example, the automatic teller machine may include other configurations such as a USB interface and a wireless communication unit.

For example, the automatic teller machine may be further connected to a monitoring device composed of a personal computer or the like. In this case, when a fraud is detected as a result of the fraud detection process, the fraud detection unit preferably transmits information indicating that the fraud has been detected and necessary information to the monitoring device. If it does so, it will become easy to acquire the information regarding abnormality (detection of fraud) in an automatic teller machine.

For example, the above configuration may be diverted to various types of vending machines, ticket vending machines, currency exchange machines, etc. instead of the cash automatic transaction apparatus.

C2. Modification 2:
In the said Example, an example (FIG. 6) of a mode that a fraud detection process is performed in the series of transaction processes which a main body control part performs was shown. However, the timing at which the fraud detection process is executed is not limited to the case of FIG. Specifically, the fraud detection process is performed when the cash control unit shown in FIG. 4 or the personal information control unit receives a request from the main body control unit, as in steps S14 and S26. Called and executed by the department.

In the example of FIG. 6, if there is a request to the cash control unit or the personal information control unit, the fraud detection process is executed each time. However, for example, the fraud detection process may be executed only at the beginning of a series of transaction processes, and the fraud detection process may be omitted for requests to the subsequent cash control unit or personal information control unit. Furthermore, for example, the execution / non-execution of the fraud detection process may be switched according to the time zone in which the transaction is performed, the congestion situation, or the like.

Also, for example, the IP address or MAC address of the request source device may be checked against a black list created in advance, and the fraud detection process may be executed only for requests corresponding to the black list. Further, for example, the IP address or MAC address of the request source apparatus may be checked against a white list created in advance, and the fraud detection process may be executed only for a request that does not correspond to the white list.

C3. Modification 3:
In the fraud detection process (FIG. 7) and the standard I / F recognition process (FIG. 9) in the above embodiment, the fraud detection unit that detects fraud requests the main body control unit to place the automatic cash transaction apparatus in a vigilance state. To do. However, for example, when the fraud detection unit detects fraud as a result of the fraud detection process, the function unit or the main unit control unit notified of the fact is notified to the calling function unit or the main body control unit. However, the automatic teller machine may be changed from the normal state to the alert state.

C4. Modification 4:
In step S108 of the fraud detection process (FIG. 7) of the above embodiment and step S214 of the standard I / F recognition process (FIG. 9), an unknown request is learned. However, the learning process can be omitted.

C5. Modification 5:
In the fraud detection process (FIG. 7) and the standard I / F recognition process (FIG. 9) in the above embodiment, all method information stored in the fraud detection information and the I / F recognition information is confirmed. Various modifications can be made in this respect. For example, priority may be given to the method information, and confirmation may be performed in order of higher priority.

C6. Modification 6:
In the said Example, the dormant state (transaction stop state) and the trace recording state were illustrated as a warning state of an automatic teller machine. However, the alert state only needs to be different from the normal state in which normal transactions are possible, and various states can be adopted.

For example, the fraud detection unit that has detected fraud may return a response indicating an error to the main body control unit or the caller function unit, so that only the transaction processing is not continued. Further, the fraud detection unit that has detected fraud may request the main body control unit and the caller function unit to limit the maximum number of withdrawals. Furthermore, the fraud detector that has detected fraud may block the network connection of the automatic teller machine.

10 ... Automatic teller machine (ATM)
DESCRIPTION OF SYMBOLS 20 ... Server 22 ... Card mechanism 24 ... Passbook mechanism 26 ... Statement mechanism 32 ... Coin mechanism 34 ... Bill mechanism 42 ... Customer operation part 44 ... Personnel operation part 50 ... Control unit 60 ... Journal printing mechanism 100 ... Main body control part 110 ... Fraud detection unit 200 ... Touch panel control unit 300 ... Storage unit 310 ... Fraud detection information 320 ... I / F recognition information 330 ... Request tendency information 400 ... Communication unit 500 ... Card mechanism control unit 510 ... Passbook mechanism control unit 520 ... Statement slip mechanism Control unit 600 ... bill mechanism control unit 610 ... coin mechanism control unit 700 ... journal control unit 1000 ... automatic cash transaction system EW ... setting screen

Claims (12)

1. Automatic transaction equipment,
   A main body control unit for controlling each part of the automatic transaction apparatus;
   A personal information control unit for acquiring personal information of the user;
   A cash control unit for sending and receiving cash;
   Using the type of processing request input to the personal information control unit or the cash control unit via the main body control unit, and the internal state of the automatic transaction apparatus in a series of transaction processing, the request is the A fraud detection unit that transitions the automatic transaction apparatus to a warning state different from a normal state in which a normal transaction is possible, when it is detected that it is due to an unauthorized program inherent in the automatic transaction apparatus;
   An automatic transaction apparatus comprising:
2. The automatic transaction apparatus according to claim 1, further comprising:
   A communication unit that is connected to an external device via a network and exchanges information with the external device;
   The fraud detector further includes:
   When the issuer of the request for processing input to the personal information control unit or the cash control unit via the main body control unit is confirmed, and it is detected that the request is due to unauthorized access via the communication unit And an automatic transaction apparatus for causing the automatic transaction apparatus to transition to the alert state.
3. The automatic transaction apparatus according to claim 1 or 2,
   The fraud detector further includes:
   The structure of a message used for a request for processing input to the personal information control unit or the cash control unit via the main body control unit is confirmed, and the standard interface used for the request is an invalid standard interface. An automatic transaction apparatus that transitions the automatic transaction apparatus to the alert state when it is detected.
4. The automatic transaction apparatus according to any one of claims 1 to 3, further comprising:
   Information used for processing in the fraud detection unit, method information relating to a method for detecting at least one of the fraudulent program, the fraudulent access, and the fraudulent standard interface; An automatic transaction apparatus comprising a storage unit in which processing information relating to the content of processing executed in the alert state is stored in association with each other.
5. The automatic transaction apparatus according to any one of claims 1 to 4,
   The fraud detector further includes:
   When the processing request input to the personal information control unit or the cash control unit is an unknown type, issued from an unknown issuer, and at least an unknown message structure An automatic transaction apparatus that learns the request if it is either.
6. The automatic transaction apparatus according to any one of claims 1 to 5,
   The process executed in the alert state is an automatic transaction apparatus that is one of a pause process of the automatic transaction apparatus and a trace recording process of each process in the automatic transaction apparatus.
7. The automatic transaction apparatus according to any one of claims 4 to 6, further comprising:
   An automatic transaction apparatus comprising an attendant operation unit for accepting a change in the processing information from an administrator of the automatic transaction apparatus.
8. The automatic transaction apparatus according to any one of claims 1 to 7,
   The fraud detector further includes:
   An automatic transaction apparatus that notifies the external apparatus that fraud has been detected when at least one of the unauthorized program, the unauthorized access, and the unauthorized standard interface is detected.
9. The automatic transaction apparatus according to any one of claims 1 to 8,
   The storage unit further includes
   Request trend information is stored in advance for each of the types of request for the processing, which indicates whether the processing can be executed or not, with respect to the plurality of internal states that the automatic transaction apparatus can take in the series of transaction processing. ,
   The fraud detector
   The type of processing request input to the personal information control unit or the cash control unit via the main body control unit is not possible with respect to the current internal state of the automatic transaction apparatus in the request trend information. An automatic transaction apparatus that detects that the request is caused by the unauthorized program when it is associated with the program.
10. An automatic transaction apparatus according to any one of claims 3 to 9 dependent on claim 2 or claim 2,
    The fraud detector
    When a request for processing input to the personal information control unit or the cash control unit via the main body control unit is input from a communication port different from a regulation, the personal information control unit via the main body control unit Alternatively, when the issuer of the processing request input to the cash control unit is different from the issuer authorized in advance, the automatic transaction apparatus detects that the request is due to the unauthorized access.
11. An automatic transaction apparatus according to any one of claims 4 to 10 dependent on claim 3 or claim 3,
    The storage unit further includes
    For each standard interface, I / F recognition information that associates the characteristics of the structure of the message with permission / non-permission of processing execution is stored in advance,
    The fraud detector
    The structure of a message used for a request for processing input to the personal information control unit or the cash control unit via the main body control unit is associated with being not permitted in the I / F recognition information. An automatic transaction apparatus that detects that the standard interface used in the request is an invalid standard interface.
12. An automatic cash transaction system,
    An automatic transaction device;
    Server,
    With
    The automatic transaction apparatus is
    A main body control unit for controlling each part of the automatic transaction apparatus;
    A personal information control unit for acquiring personal information of the user;
    A cash control unit for sending and receiving cash;
    With
    The server
    Using the type of processing request received by the personal information control unit or the cash control unit and the internal state of the automatic transaction apparatus in a series of transaction processing, the request is an improper in the automatic transaction apparatus It is equipped with a fraud detector that detects whether it is a program,
    The personal information control unit and the cash control unit are:
    When receiving a processing request from the main body control unit, the server is inquired whether the request is due to the unauthorized program,
    The fraud detector
    An automatic cash transaction system that transitions the automatic transaction device to a warning state different from a normal state in which a normal transaction is possible when it detects that the request is due to the unauthorized program.

Images