JP2006018672A - Automatic transaction system and automatic transaction device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To clearly show, in the event of extortion or the like, that an event of payment rejection is not caused by at least a user-side operation to encourage him to give up an illicit transaction. <P>SOLUTION: In an automatic transaction system including the automatic transaction device 1 performing transactions by input of secret information by a user and a host device 3 storing and managing user information for performing transactions, which are mutually connected through a communication line 2, the user information stored and managed by the transaction device 1 contains at least emergency secret information. A customer part 17 for inputting secret information and an information reading part 12 reading, upon inserting a medium 5 recording user information, the user information are arranged on the automatic transaction device 1. After the medium 5 is inserted, the secret information is inputted through customer part 17. When this secret information is matched to the emergency secret information, transaction rejection is reported as the medium 5 is left within the automatic transaction device 1. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an automatic transaction system that is installed in a financial institution such as a bank and performs transactions by a user's operation, and a crime prevention function of an automatic transaction apparatus.

  For a service using an automatic transaction apparatus (ATM), a cash card or a passbook distributed in advance is used. Further, in the withdrawal transaction, a personal identification number is input, and whether or not the inputted personal identification number matches the pre-registered personal identification number is verified, and the withdrawal transaction is allowed only when they coincide. This ATM is installed in unmanned corners such as stations, shopping centers, and convenience stores, etc., and is also installed in unmanned stores of financial institutions to provide 24/7 non-stop services.

Many transactions using ATMs can be withdrawn with a relatively simple operation of using a cash card and entering a PIN. Done. In the case of a transaction contrary to the intention of the user, there is one that facilitates subsequent investigation while ensuring its safety by reading a password for an abnormality (for example, Patent Document 1).
JP 2003-168147 A (page 6, paragraph 0042 and FIG. 3)

  Recently, transactions with cash cards have been used not only for financial institutions but also for settlement of commercial transactions at home electronics stores, restaurants and even gas stations. At the time of the settlement of the commercial transaction, the account settlement is performed by causing the machine to read the financial institution code and the account number recorded on the cash card and inputting the personal identification number by the user. There is a case where a malicious one at the time of payment makes an illegal copy of card information called so-called skimming. Then, a crime has occurred in which this illegally copied card information is recorded on another card and impersonated as an account opener to conduct a withdrawal transaction. In addition, a vacant nest that has entered a residence sometimes does not take out the cash card itself, but copies only the card information and uses it for fraudulent transactions.

  For malicious ones, it is necessary to obtain the code number after illegally obtaining the card information recorded on the cash card. Observing the input operation of a legitimate user and guessing it from the user's birthday, telephone number, etc. have been developed into social problems. Therefore, since it is possible to change the PIN number that cannot be seen by others or to change the PIN number using ATM, those who think about robbing threaten legitimate users and conduct withdrawal transactions by ATM. Sometimes it is done. In addition, if the personal identification number can be grasped, a plurality of illegally copied cash cards may be prepared, which may be used for illegal withdrawals at ATMs in various places and for illegal use for settlement of commercial transactions. The present invention has been made in view of the above problems, and even in the event of a depression, it is clarified and convinced that the withdrawal refusal event is not at least a user operation problem. , To give up fraudulent transactions.

In order to solve the above-described problems, the present invention provides an automatic transaction apparatus that performs transactions by inputting personal identification information by a user, a host apparatus that stores and manages user information for performing the transactions, and the automatic transaction apparatus. In the automatic transaction system in which the host device is connected by a communication line,
The user information stored and managed by the host device includes at least emergency password information, and the automatic transaction device includes a customer service unit for inputting the password information, and the user information. An information reading unit that reads the user information when the recorded medium is inserted is arranged, and the personal identification information is input from the customer service unit after the medium is inserted, and the personal identification information is the emergency personal identification information. When they match, the transaction rejection is notified while the medium remains in the automatic transaction apparatus.

Automatic transaction apparatus for performing transaction by inputting personal identification information by a user, upper apparatus for storing and managing user information for performing the transaction, and automatic transaction in which the automatic transaction apparatus and the upper apparatus are connected by a communication line In the system,
The user information stored and managed by the host device includes emergency password information and normal password information, and the automatic transaction apparatus includes a customer service unit for inputting the password information. The password information is input from the customer service section, and when the password information matches the emergency password information, the password information is requested again, and the re-entered password information is used for the normal time. Allow transactions when they match.

  If a malicious user enters an emergency PIN, the transaction will be rejected and the user card will be collected in the automatic transaction device and will not be returned to the user. It is possible to prevent illegal transactions.

  Even if a legitimate user accidentally enters an emergency PIN, if he / she enters a normal PIN at the time of a subsequent re-entry request, normal transactions will be permitted. Recovery can be avoided.

  An embodiment of the present invention will be described. FIG. 2 is a control block diagram of the automatic transaction apparatus of the present invention, and also shows a system system. In the figure, reference numeral 1 denotes an automatic transaction machine (hereinafter referred to as ATM), which is connected to a host computer 3 via a communication line 2. By operating the ATM 1 installed at each business store, a system capable of performing deposit / withdrawal transactions, balance inquiries, and transfer transactions with the user is constructed.

  A storage device 4 is connected to the host computer 3 as a host device, and at least the account ledger file 4a is stored. The contents of the account ledger file 4a include the name of the user who opened the account, the account number, first and second password information (details will be described later), deposit and savings balance information, etc. Each time is performed, the host computer 3 instructs to update the deposit / savings balance information and the like, and the latest information is stored and stored in the storage device 4. The personal identification number as the first personal identification information is normally used, and the personal identification number as the second personal identification information is stored in advance for emergency use. Needless to say, the emergency password is different from that for regular transactions. In the present embodiment, the emergency password from the birthday (January 23) is “0123”, and the normal password is “4567”.

  Reference numeral 5 denotes a user card (so-called cash card) as a medium, which is issued by a financial institution for automatic money transactions with a user. User information such as a financial institution code and a user account number is provided. Has a recording part (magnetic stripe) 5a. Recently, there is an IC (integrated circuit) element embedded, but the description is omitted because it is not directly related to the present application.

  ATM1 will be described. Reference numeral 10 denotes a user guidance section for performing operation guidance by voice or visual display, and reports on the subject items and various information that can be traded by a speaker / microphone, a staff call button, and a plasma display 10a arranged on the front side of the ATM 1. To do. A passbook processing unit 11 performs a printing process on a passbook (not shown) inserted from the passbook insertion / return port 11a. The means for reading or updating magnetic recording information, the means for detecting a printed page line, the page break means, etc. have.

  A card processing unit 12 as an information reading unit is a processing unit for the user card 5 inserted from the card insertion / return port 12a connected to the front side. The card processing unit 12 can read information stored in the recording unit 5 a of the user card 5. Further, the card processing unit 12 can rewrite information in the recording unit 5a. A statement slip issuing unit 14 prints transaction date / time, money amount, balance information, and the like and issues a transaction statement slip 14a (not shown) issued to the user. The issue route of the transaction statement slip 14a is connected to the medium conveyance path in the vicinity of the card insertion / return port 12a of the card processing unit 12, and the transaction statement slip 14a is issued along with the return of the user card 5.

  Reference numeral 15 denotes a bill depositing / withdrawing unit that authenticates and counts bills deposited by the user, conveys them and stores them in a denomination cassette (not shown), or pays out bills paid to the user from the denomination cassette. Is. A coin deposit / withdrawal unit 16 authenticates and counts coins deposited by the user and stores them in a denomination cassette (not shown), or pays out coins paid to the user from the denomination cassette. Banknotes and coins are collectively referred to as money.

  Reference numeral 17 denotes a customer service unit, which includes a color LCD display unit (hereinafter referred to as a display unit) 17a and a touch panel 17b. On the display unit 17a, operation procedures and other information are displayed in illustration characters or words, and the transaction item "payment" or "deposit" is displayed, and a PIN number or transaction amount is input. A numeric keypad screen is displayed. The touch panel 17b is formed by forming a matrix optical line by providing a plurality of light emitting elements and light receiving elements facing each other around the panel. A part touched by the finger is detected by blocking the optical path.

  Reference numeral 18 denotes an approach detector which can detect that the user has approached ATM1. A storage unit 19 includes a program for performing various controls, an emergency transaction limit, transaction guide screen display data, and the like stored in ROM, RAM, or hard disk memory. Reference numeral 20 denotes an interface unit (IF unit) for line connection with the host computer 3. Reference numeral 21 denotes a control unit that controls each of the above-described units. Reference numeral 22 denotes a power supply unit that supplies power to the above-described units.

  The case where the user operates ATM 1 to perform a withdrawal transaction is performed using the flowchart of the present invention shown in FIG. 1 and the display example of the operation guidance screen shown in FIG. Here, it is assumed that a fraudulent transaction is carried out by a malicious user, and a legitimate user inputs or teaches a personal identification number “0123” for emergency transactions as a personal identification number. . S means a step.

  When a user (whether malicious or legitimate) approaches ATM1, the proximity detector 18 detects this, and the screen display of the display unit 17a is shown in FIG. 3A from the standby state. Switch to the transaction selection screen display (S1). Here, when the “payment” key 30a is touched, the control unit 21 transmits a process start command to the inside of the main body. The control unit 21 blinks a flicker lamp (not shown) provided in the vicinity of the card insertion / return port 12a to clearly indicate the insertion place of the user card 5. When the user inserts the user card 5 from the card insertion / return port 12a (S2), an insertion detector (not shown) detects this and takes the user card 5 into the card processing unit 12.

  The reading operation of the user information of the user card 5 taken into the card processing unit 12 is performed (S3), and the user card 5 that has completed the reading operation enters a standby state at that position. The control unit 21 temporarily stores the read user information in the storage unit 19 and starts analyzing the information. By this analysis, it is detected that the previously read information includes a financial institution code and account information (number), and the control unit 21 proceeds to a step of inputting a personal identification number.

  The control unit 21 displays an operation guide screen as shown in FIG. 3B on the display unit 17a, and guides the user to input a password (S4). A user inputs a personal identification number from the numeric keypad 30b. Here, the password is assumed to be an emergency password “0123”. When the first password is input, the control unit 21 stores the password information added to the account information read from the user card 5 previously stored in the storage unit 19 and notifies the host computer 3 thereof. (S5).

  The host computer 3 searches for user registration information from the account ledger file 4a based on the received account information (number). As a result of the search, the account ledger file 4a can be used to confirm the deposit and savings balance information including the password. Here, the first password may be different from the password (“0123” and “4567”) stored on the host computer 3 side. First, when the password is different from that for normal or emergency use, that is, when the password is not stored in the account ledger file 4a, the password is requested from the numeric keypad 30b by requesting the ATM 1 to re-enter the password (second time). Let's re-enter.

  When the personal identification number input for the first time is for emergency (0123), the host computer 3 returns a transaction rejection signal to the ATM 1 (S7). The ATM 1 that has received the transaction rejection signal first transports and takes in the user card 5 in a standby state to a collection box (not shown) (S8). In conjunction with the collection of the user card 5, the control unit 21 displays a message indicating that the card has been collected on the display unit 17a and rejects the transaction (S9). This display example is shown in FIG. If the password entered for the first time is for normal use, the process proceeds to step S10.

  When the user presses the clerk call button 30c in the screen display shown in FIG. 3 (c), the clerk responds by voice from a speaker (not shown), and the user responds to the microphone or performs screen operation input. Do. If the processing contents are convinced by the response with the staff, the confirmation button 30d is pressed. The transaction is canceled when the cancel button 30e is pressed, but the user card 5 is not returned and the customer's card will be delivered to the home at a later date on the display unit 17a. Display.

  If the password entered for the first time is for normal use ("4567"), it is determined that the transaction is normal and a withdrawal transaction is executed (S10). During this operation, the banknote deposit / withdrawal unit 15, the coin deposit / withdrawal unit 16, and the statement slip issuing unit 14 operate to perform a withdrawal transaction. In addition, the user card 5 is discharged and returned to the user before the transaction ends. Since these operations are generally known techniques, the description thereof is omitted. When the user leaves ATM1, the proximity detector 18 detects this (S11), and the transaction ends.

  As described above, when an emergency password is input, the transaction is rejected and the user card is not returned, so that it is possible to prevent unauthorized transactions using the user card. Furthermore, if a user's birthday or telephone number can be set as a password for emergency use, the same effect can be obtained even if a malicious user uses a different forged card and enters a password. Can be expected.

  In the first embodiment described above, when the emergency password (0123) is input, the transaction is rejected and the user card is collected. In the second embodiment, it is assumed that an emergency password is erroneously input. In order to prevent security, a user who has used his / her birthday, telephone number, or the like as a personal identification number is inconvenient countermeasures such as performing an input operation without noticing that the personal identification number has been changed. This will be described with reference to the flowchart shown in FIG.

  When the password entered for the first time is for emergency use (S41), the host computer 3 requests the ATM 1 to re-enter the password (second time) and re-enters the password from the numeric keypad 30b. A request is made (S42). In step S43, the control unit 21 conveys and takes in the user card 5 in the standby state to a collection box (not shown) when the password entered for the second time is the same as the password for the first time (S44). . When the password entered at the second time is different from the password at the first time, the password entered at the second time is transmitted to the host computer 3 (S45).

  The host computer 3 collates with the stored personal identification number. This personal identification number is not for emergency use but for normal use or other (S46). When the host computer 3 determines that the password is “4567” for normal use, it determines that the transaction is a normal transaction (withdrawal transaction) and returns a transaction permission signal. ATM1 executes the withdrawal transaction according to the procedure described above (S47).

  When it is determined in step S46 that it is not for normal use, the control unit 21 confirms the number of re-inputs (S48). If the number of re-inputs is the first time, as shown in FIG. 5A, the password is requested to be input again (third time) from the ATM 1 and the password is again input from the numeric keypad 30b (S49). Then, the inputted third password is transmitted to the host computer 3 by the above-described procedure, and the password is verified. If the passwords entered at the third time do not match, the transaction rejection signal is returned to ATM 1 as the number of re-inputs is exceeded in the determination at step S48 (S50).

  As described above, even if a legitimate user mistakenly enters the emergency password (0123), if he / she inputs the normal password (4567) at the time of a subsequent re-entry request, the normal transaction Is allowed, and recovery of the user card due to an erroneous operation can be avoided. In addition, although the number of re-inputs of a PIN number was made into 2 times, it is needless to say that it is not limited to this and may be determined appropriately.

  In the first and second embodiments described above, when an emergency PIN is entered, the user card is collected in addition to the withdrawal. Since such an event is unexpected for the threatened person, it is assumed that it will move to extreme action. In the third embodiment, a minimum amount of money is withdrawn and a transaction that is not different from a normal one is executed, and this will be described with reference to the flowchart shown in FIG.

  In step S51, the host computer 3 instructs the ATM 1 to limit transactions when the received personal identification number “0123” is for emergency use. This instruction allows only a predetermined transaction, and for example, determines the upper limit (for example, 200,000 yen) of the withdrawal amount (S52). The control unit 21 starts control different from normal transactions internally. First, a withdrawal limit (200,000 yen) is set. When the withdrawal transaction amount is input by the user, it is determined whether or not it is within the previous withdrawal limit. If the entered withdrawal transaction amount is within the withdrawal limit, allow the amount to be paid, and control the banknote deposit / withdrawal unit 15 and the coin deposit / withdrawal unit 16 to start dispensing and counting money. become.

When the withdrawal transaction amount is greater than or equal to the withdrawal limit, the screen will be displayed as “I am short on cash, so I will accept up to 200,000 yen” and approve the modification of the withdrawal transaction amount. Request. This correction approval request is also for reducing the damage amount of fraudulent transactions and for prolonging the transaction time as a result by spending the judgment time and the operation time.
When the transaction amount “200,000 yen” is approved by the user, the banknote depositing / dispensing unit 15 and the coin depositing / dispensing unit 16 are controlled to start dispensing and counting money. The banknotes fed out from the denomination cassette are subjected to authenticity verification at the discrimination section, and the number of passing sheets is counted and conveyed to the withdrawal port. (S53). The present applicant has already disclosed these techniques in Japanese Patent Application Laid-Open No. 2003-168147.

  On the other hand, the control unit 21 rewrites the information in the recording unit 5 a of the user card 5 by controlling the card processing unit 12. By this rewriting, information for refusing at least the next transaction is recorded in the user card 5 (S54). Then, the user card 5 is transported to the vicinity of the card insertion / return port 12a. Further, the statement slip issuing unit 14 is activated to print the transaction statement slip 14a (S55), and is conveyed to a position where it can be extracted together with the user card 5 (S56). The display unit 17a displays “Sorry for waiting. Please take out the card”. When it is detected that the user card 5 has been pulled out together with the transaction statement slip 14a, the shutter is opened to allow the money to be taken out. When the shutter is opened, it is possible to remove the money accumulated in the withdrawal port.

  When it is confirmed by the detection means (not shown) that the money has been extracted, the control unit 21 closes the shutter. When it is confirmed by the detection means that there is no remaining money in the closed state of the shutter, a transaction completion signal is transmitted to the host computer 3. The host computer 3 updates the record as an account with no withdrawal transaction so as to reject the withdrawal transaction with this account number (S57). Then, the host computer 3 notifies that a withdrawal transaction has occurred to a mail address pre-registered for each customer account (S58). If the normal password “5678” has been input in step S51, a normal withdrawal transaction is performed (S59).

As described above, although malicious users remain dissatisfied with the withdrawal amount, they can obtain a certain amount of money and can suppress the shift to radical action. Moreover, since the same transaction as usual is performed externally, there is no warning. On the other hand, since the user card is rewritten and returned from the recorded information, it cannot be identified in appearance, but the processing by the user card is rejected as shown in FIGS. 5 (b) and 5 (c). Specifically, by notifying the wording shown on the guidance screens 30m and 30n, the transaction is rejected when it is used again. Therefore, the damage amount can be suppressed. Further, since the host computer rejects the transaction after the first withdrawal transaction of this account number, it is not possible to use a plurality of counterfeit cards at a plurality of ATMs.
In addition, since an authorized user is notified that there is a transaction, there is an effect that an early response can be made to unauthorized use.

  In the above embodiment, the withdrawal transaction has been described. However, the present invention can also be applied to the settlement of transactions between accounts and commercial transactions at home appliance mass retailers, restaurants, gas stations, and the like.

It is a flowchart of the automatic transaction apparatus of this invention. It is a control block diagram of the automatic transaction apparatus of this invention. It is explanatory drawing which shows the example of a display of the operation guidance screen of this invention. It is a flowchart of Example 2 of this invention. It is explanatory drawing which shows the example of a display of the operation guidance screen of Example 2 of this invention. It is a flowchart of Example 3 of the present invention.

Explanation of symbols

1 Automatic transaction equipment (ATM)
2 Communication line 3 Host device (host computer)
4 Storage device 5 Medium (user card)
12 Information reading unit (card processing unit)
17 Service section 17a Display section

Claims (8)

An automatic transaction apparatus for performing transactions by inputting personal identification information by a user;
A host device for storing and managing user information for performing the transaction;
In the automatic transaction system in which the automatic transaction apparatus and the host apparatus are connected by a communication line,
The user information stored and managed by the host device includes at least emergency password information,
The automatic transaction apparatus includes a customer service unit for inputting the personal identification information and an information reading unit for reading the user information when a medium on which the user information is recorded is inserted.
After the medium is inserted, the personal identification information is input from the customer service section, and when the personal identification information matches the emergency personal identification information, a transaction rejection is notified while the medium remains in the automatic transaction apparatus. An automatic transaction system characterized by that. In the automatic transaction system according to claim 1,
An automatic transaction system for storing and managing on the higher-level device side when the emergency password information is input, and rejecting subsequent transactions related to the user information. In the automatic transaction system according to claim 1,
An automatic transaction system in which the user information stored and managed by the host device includes user fund information, and the emergency password information rejects at least a withdrawal transaction. An automatic transaction apparatus for performing transactions by inputting personal identification information by a user;
A host device for storing and managing user information for performing the transaction;
In the automatic transaction system in which the automatic transaction apparatus and the host apparatus are connected by a communication line,
The user information stored and managed in the host device includes emergency password information and normal password information,
The automatic transaction apparatus is provided with a customer service section for inputting the personal identification information,
When the password information is input from the customer service section and the password information matches the emergency password information, the password information is requested again, and the re-entered password information is for normal use. An automated trading system characterized by allowing transactions when they match. In the automatic transaction system according to claim 4,
Automatic transaction that rejects the transaction when the re-entered password information is for emergency use, or requests re-input of the password information when it is not for emergency or normal use system. In the automatic transaction system according to claim 4,
The automatic transaction apparatus is provided with an information reading unit that reads the user information recorded on the inserted medium,
An automatic transaction system for rewriting part or all of the user information recorded on the inserted medium when the password information matches the emergency password information. In an automatic transaction apparatus that conducts transactions by inputting password information by a user,
An information reading unit is provided for reading the user information when a medium storing the user information is inserted;
An automatic transaction apparatus characterized in that, when the password information is for emergency use, the transaction is rejected while the medium remains in the automatic transaction apparatus. In an automatic transaction apparatus that conducts transactions by inputting password information by a user,
An information reading unit is provided for reading the user information when a medium storing the user information is inserted;
When the password information related to the user information read by the information reading unit is for emergency use, the user information recorded on the inserted medium is partially or entirely rewritten. Automatic transaction device.

Images