JPH0315785B2 - - Google Patents

Description

[Detailed Description of the Invention] This invention relates to a transaction processing device that performs a predetermined transaction using a card or passbook that records various data including a customer's unique PIN number, such as an automated system installed in a financial industry such as a bank. cash dispenser, automatic teller machine,
This invention relates to a method for preventing fraud in a transaction processing device using an automatic teller machine or the like as a transaction terminal, and in particular to a method for preventing fraud due to forgery of cards and bankbooks.

Various methods and devices have been developed to prevent fraudulent transactions caused by counterfeiting of cards and passbooks, especially cards. However, countermeasures against counterfeiting of cards by bank employees and the like (hereinafter referred to as operators) who are familiar with card production procedures, such as the production of cards identical to those owned by customers, have not been sufficient. In particular, there is a risk of being discovered if fraudulent transactions of large amounts are frequently carried out within a short period of time, so if an operator creates a large number of fraudulent cards and fraudulent transactions are made in small amounts over a relatively long period of time, , its fraud is difficult to discover. Of course, it is possible to set an expiration date on the card, and this is well known, but since it is necessary to set a very long expiration date, the above is not possible by setting only the expiration date. It is not possible to prevent such fraudulent transactions.

The purpose of the present invention is mainly to prevent fraudulent creation of cards and bankbooks by operators as described above, and fraudulent transactions caused thereby.

This invention has a transaction terminal, a recording medium issuing machine for creating a recording medium such as a passbook or card, in which customer-specific data is recorded, and a memory storing transaction data for each customer, and controls the transaction terminal. a central control unit; a customer-specific code (e.g. a PIN number) read from a storage medium or a customer-specific code (e.g. a PIN number) read from a memory accessed by read data of the storage medium; It is applied to a transaction processing device that verifies a genuine customer by checking a code (for example, a personal identification number) keyed in by the customer at a transaction terminal. When a recording medium is issued by a recording medium issuing machine for a customer's account, data regarding the compulsory use expiration date for customer confirmation indicating the deadline by which the recording medium must be used at least once is added to the recording medium and It is recorded in at least a recording medium in the memory, and when the recording medium is used in a transaction terminal, data regarding the expiration date determines whether the use is within the expiration date and whether or not it is the first use according to a confirmed code. and if it is determined to be the first use within the expiration date, the data regarding the expiration date will be erased and the verified code associated with the customer's account will be stored in at least the memory of the storage medium and memory. It is characterized by writing.

It is preferable that the expiration date is relatively short, for example, about two months. Once the data regarding the expiration date is erased from the recording medium or memory and at least the verified code is written into the memory, the recording medium can then continue to be used as a regular one. It is a good idea to print a message to that effect when erasing the data regarding the expiration date and writing the confirmed code. If necessary, the printed version will be mailed to the customer at a later date.

When a recording medium such as a card is created, a customer performs some kind of transaction using a transaction terminal within the expiration date. This erases the data regarding the expiration date of the recording medium and writes the verification code into the memory, so that the customer can thereafter conduct transactions using the recording medium at any time. Even if the operator creates the recording medium illegally,
The operator is forced to use the recording medium once within a short term of validity. If the operator attempts to conduct some kind of transaction using a fraudulent card, if the customer has already used a storage medium for that account, a confirmation code will have been recorded, and by checking this record, the storage medium will be verified. It turns out that it was used fraudulently. In this way, the first use of a recording medium for one account is prevented from occurring more than once.
Furthermore, when a legitimate customer is notified of the fact that an operator or the like uses an unauthorized recording medium, the customer discovers that a card identical to his or her own card has been forged.

Hereinafter, an embodiment in which the present invention is applied to a transaction processing device in which the transaction terminal is an automatic cash dispensing machine will be described.
This will be explained in detail with reference to the drawings.

FIG. 1 shows the overall configuration of the transaction processing device. The transaction processing device is composed of a control center 1, a large number of transaction terminals 2 and consoles 3 connected online to the center 1, and a teller processing device (hereinafter referred to as WM) 4.
An example of a transaction terminal is an automatic cash dispensing machine (hereinafter referred to as CD).
) is shown. Although WM4 is not connected online to center 1 in this example, it may of course be connected online.

The center 1 includes a central processing unit (hereinafter referred to as CPU) 10, which controls communication with each terminal and processes transaction data transmitted from the terminal.
a memory 11 for storing data for processing 0;
A customer information file (hereinafter referred to as CIF) 12 that stores customer transaction data, a transaction file 13 that stores all transaction data, and a communication control device 14 and modem 1 for communicating with terminals.
5 is provided. In processing transaction data
The CPU 10 performs processing such as checking the expiration date or confirmed code, determining whether a transaction is possible, processing transaction calculations, rewriting the CIF 12, and writing transaction data to the transaction file 13, as will be described later.

The CIF 12 has an area for storing transaction data for each customer's account, and this area stores the account number, expiration date or confirmed code, PIN number, balance, and other data regarding the customer. The expiration date is the time limit by which the card must be used at least once when the card is issued. If the card is used once within the expiration date, the expiration date is replaced with a confirmed code.
Since expiration dates are generally expressed in numbers, this verified code is also expressed in numbers that are not used as expiration dates, such as 9999.

Many terminals have a modem 6 and a terminal
It is connected to the center 1 via the controller 5, and communication with the center 1 is controlled by these. The CD2, which is one of the terminals, includes an operation procedure display 22 that sequentially displays the operations that a customer must perform for a payment transaction, a keyboard for inputting a PIN number, a billed amount, etc., a card insertion slot, a cash dispensing slot, etc. a customer service panel 23 provided with a card reader and writer (hereinafter simply referred to as a card reader) 24 that reads card data recorded on a card inserted into a card insertion slot and writes predetermined data on the card; A slip issuing machine 25 that prints transaction data on a journal and a slip for each transaction and imprints the emboss on the card to issue the slip, and a bill ejecting machine 26 that counts and carries out the bills of the amount to be paid. It is equipped as an input/output device. The CPU 20 executes predetermined transactions by controlling these input/output devices and communication with the center 1. CPU2
0 is equipped with a memory 21 that stores transaction data and the like. The CPU 20 is connected to the terminal controller 5 by an input/output control circuit 27.

In this example, the console 3 is used to transmit account opening data and card issuance data recorded in the magnetic recording device 48 of the WM 4 to the center 1.
Magnetic recording media, such as magnetic tapes, disks,
It is equipped with a reading device such as a drum, a keyboard, and a CRT display (all not shown). When WM4 is connected online with center 1,
This console 3 is unnecessary.

In this embodiment, the WM 4 is used for opening a customer's account and issuing a card, and has a built-in CPU 40 with a memory 41. CPU40 has
Its input/output devices include an office key 42 that can only be operated by a person in a specific position, a mode changeover switch 43, a keyboard 44 for inputting items necessary for account opening and card issuance, a printer 45, and keys. Display input data etc.
It includes a CRT display 46, a card reader and writer (hereinafter simply referred to as a card writer) 47, and a magnetic recording device 48. The memory 41 includes a nonvolatile memory area 41a that stores a set expiration date. The modes selected by the mode changeover switch 43 include an expiration date setting mode, a customer card issuing mode, and the like.

FIG. 2 shows the data recording format of a customer's card used in a transaction processing device. The card has a magnetic stripe, and various data are magnetically recorded on the magnetic stripe. The magnetic stripe on a customer card includes an ID code that indicates that the card is used by a bank, a bank approval code that indicates the usage category of the card, a customer-specific PIN number, bank number, branch number, account number, and for customer verification. The expiration date for forcing someone to use the card, a valid code indicating the number of incorrect password inputs, and other data are magnetically recorded. As the expiration date data, years and months are used for simplicity.

FIG. 3 shows the expiration date setting processing procedure using WM4. Setting the expiration date requires operation of the office key 42. The operator or the person in charge first selects the expiration date setting mode using the changeover switch 43 (step (51)), and turns on the office key 42 (step (52)). Then, use the numeric keypad of the keyboard 44 to enter the year and month obtained by adding the required validity period (for example, about two months) to the year and month when this setting operation is being performed, as the expiration date (step (53)). After this, the end key on the keyboard 44 is pressed (step (54)). Then, the key-input expiration date is stored in the area 41a of the memory 41 (step (55)), and the printer 45 prints out the fact that the expiration date has been set (step (56)). . As in this example, when the unit of expiration date is a month, this expiration date setting operation only needs to be performed once a month. Of course, the expiration date can also be set in days or weeks. Further, if the WM4 has a built-in clock that measures the year, month, or year, month, and day, and the expiration date is calculated based on the output of this clock when issuing the card, this expiration date setting operation is not necessary. It is preferable that the expiration date setting operation be performed by a person in charge who is qualified to hold the office key.

FIG. 4 shows the customer card issuance processing procedure. No office key is required when issuing customer cards. However, an office key may also be required. The operator first selects the customer card issuing mode (step (61)), and then inserts a card with no data recorded on the magnetic stripe (step (62)). Next, the operator enters the branch number, account number, account number, etc. (step (63)), and then enters the customer's desired PIN (step (64)), and the data shown in Figure 2 is displayed. is recorded on the card (step (65)). Please enter your ID, authorization code, and bank number in advance.
In the memory 41 of the WM 4, the expiration date is set in the area 41a as described above. The number of input errors of 0 is recorded as a valid code. After this,
The fact that the card has been issued, its account number, expiration date, etc. is printed by the printer 45 (step (66)), and the fact that the card has been issued, the account number, expiration date, and PIN number recorded on the card are printed. The included card issuing data is stored in the magnetic recording device 48.
The card is recorded on a magnetic recording medium such as a magnetic tape (step (67)), and finally the card is returned (step (68)). If the WM4 has a built-in clock, the expiry date is recorded on the card as the expiration date, which is the sum of the year, month, and day output from the clock and the predetermined expiration period.

Thereafter, the magnetic recording medium of the magnetic recording device 48 is read by the console 3, and the card issuing data is transmitted to the center 1. If the customer's account has already been opened, a customer card has been issued, and the center 1 stores the expiration date and password in the transaction data storage area of the customer's account in the CIF 12. It is preferable that until the card is issued, a code indicating that the card has not been issued is stored in the storage location for the expiration date.

Generally, a card is issued at the same time as an account is opened. In such a case, the operator uses the WM4 to key-in the account number and other data to open an account. This key-input account opening data is recorded in the magnetic recording device 48. The operator can also use the WM
4 is used to issue the card, the card issue data is also recorded in the magnetic recording device 48. and,
Thereafter, the recording medium of the magnetic recording device 48 is read by the console 3, and the account opening data and card issuing data are transmitted to the center 1. In the center 1, a transaction data area for the customer is created in the CIF 12, and necessary data including the account number, password, and expiration date are written therein.

Account opening data and card issuance data are temporarily stored in the magnetic recording device 48, and then stored in the printer 45.
In the batch system, in which data is printed on the printer 45 and then transmitted to the center 1 using the console 3, a person in a specific position looks at the data printed on the printer 45 and confirms that the operator has opened an account and issued a card. , these data can be sent to the center 1, which is excellent in terms of operator management. If WM4 is connected online to center 1, the account opening and card issuance data entered at WM4 is immediately transmitted to center 1.

Cards issued in this manner are typically mailed to the customer. The customer must then use the card to conduct at least one transaction using CD2 within the expiry date. CD2
The transaction processing procedure in is shown in FIG.
When the customer inserts the customer card according to the instructions on the operating procedure display 22 (step (71)), the card data is read by the card reader 24, and the ID, authorization code, bank code, and valid card data are read by the card reader 24. By checking the code, etc., it is determined whether the inserted card is valid (step (72)). If the card is valid, the card data is then checked for a verified code (step (73)). If the confirmed code is recorded on the card, the card has already been used correctly within the expiration date after card issue, and the process proceeds to steps (81) to (87) for normal transaction processing. If the card is not valid at step (72), the card is returned immediately (step (76)).

If what is recorded on the card is expiration date data rather than a confirmed code, the date set on the CD2 date setter etc. is compared with this expiration date (step ( 74)). If it is within the expiration date, then it is checked whether the difference between the expiration date and the current date is greater than or equal to a predetermined period (for example, the above-mentioned validity period, two months) (step (75)). If the expiration date is not a predetermined period of time or more in the future, the card is normal and the transaction processing proceeds.

In step (74), if the expiration date has passed, the card is deemed to have expired, and the clerk is called and the card is returned (step (77)). In this case, after confirming that the customer is a genuine person who is eligible for the transaction, processing such as reissuing the card will be performed.
Step (75) is to deal with cases where the card's expiration date has been illegally changed and a long validity period has been set. , the card is collected as abnormal or fraudulent (step (78)). Then, if necessary, a staff member will be called.

The transactions that are possible with CD2 are generally withdrawals and balance inquiries. Steps (81) to (87) are examples of withdrawal transactions. When the customer keys in a PIN number (step (81)), the keyed-in PIN number is compared with the PIN read from the card, and if they match, the customer is deemed to be genuine. The verification of this password may be performed by the center 1. Next, the customer key-inputs the amount to be paid (step (82)). Now that the data necessary for the payment transaction has been prepared, the card data and the amount to be paid are transmitted to the center (step (83)).

When transaction data is transmitted from CD2, center 1
Then, CIF12 is searched, and it is checked whether the corresponding account exists and whether the billed amount is within the balance.If the transaction is possible, CIF12 is updated and a message to that effect is transmitted to CD2. Ru. Further, transaction data is recorded in the transaction file 13. Furthermore, it is preferable that the center 1 compares the card data with the expiration date or confirmed code of the corresponding account, and the personal identification number. While the expiration date is recorded on the card, if a confirmed code is stored in the corresponding account of CIF12 of Center 1, the card is considered to have been created fraudulently.
Send a message to CD2 to that effect. CD2 then collects the card and calls an attendant if necessary. If it is confirmed that both the card data and the CIF 12 data have expiration dates and that the card is used for the first time, the expiration date of the corresponding account in CIF 12 is replaced with a confirmed code. If both the card data and the CIF12 data are confirmed codes, the transaction is of course possible.

In CD2, when receiving a message from the center,
It is determined whether payment is possible based on the contents of the message,
If the payment is acceptable, cash for the requested amount is taken out from the cash storage box, counted, and then temporarily put on hold. Then, the transaction data is printed on the customer's receipt, which serves as a copy, and the transaction data and, if the card is used for the first time, a statement to that effect is printed on the copy journal in the CD 2 (step (84)). Furthermore, if the card is being used for the first time, the card's expiration date data is rewritten to a confirmed code (step (85)). Through this process, if you want to use this card next time, select YES in step (73).
Normal transactions are possible. Finally, the card is returned (step (86)) and the cash and receipt are released to complete the transaction (step (87)). If the result of decoding the message from the center is that payment is not approved, the card is returned or collected in accordance with instructions from the center.

If the card is being used for the first time, a notice to that effect will be printed on the journal as described above, and the journal may be mailed to the customer at a later date. This allows the customer to discover that someone else has fraudulently created their card if it was not the one they used. Since the journal is a copy, if it is inconvenient to give it to the customer, print it on a separate sheet of paper.

Steps (81) to (87) described above are the procedures for payment transactions, but also for balance verification transactions, checking the expiry date or verified code at the center 1 and/or transaction terminal, and checking the card and/or Needless to say, the confirmed code is written to the CIF12. Further, the card recording process in step (85) may be performed between steps (75) and (81). Furthermore, in the above embodiment, steps (73) to
Although the expiration date check in (75) is performed on CD2, it can also be performed on center 1.

The above is an example of using a CD as a transaction terminal, but in deposit transactions and other transactions using an automatic teller machine, the expiry date is recorded on the card or at the center, checked, and after the first use. Needless to say, the code will be rewritten to the verified code. It is also possible to provide a special verification device for the first use of the card after it has been issued, which checks the expiry date and rewrites the expiration date to a verified code. Alternatively, each transaction terminal may be provided with a card confirmation mode selection switch, and when this switch is turned on, only the expiry date is checked and its rewritten.

Additionally, in the example above, the card and center
The PIN number and confirmed code are recorded in both CIFs, but the PIN number is not the same as the card or
A confirmed code may be provided in at least one of the CIFs. It is clear that the invention does not preclude recording a long-term card expiration date on the card.

[Brief explanation of drawings]

Figure 1 is a block diagram showing the configuration of the transaction processing device, Figure 2 is a diagram showing the card format, Figure 3 is a flow chart showing the procedure for setting the expiration date, and Figure 4 is the procedure for issuing a customer card. FIG. 5 is a flow chart showing an example of transaction processing. 1... Control center, 2... Automatic cash dispensing machine, 3... Console, 4... Counter processing device, 10, 20, 40... CPU, 11, 21,
41...Memory, 12...Customer-specific information file.

Claims (1)

[Scope of Claims] 1. A transaction terminal, a recording medium issuing device that creates a recording medium in which customer-specific data is recorded, and a central processing center that has a memory that stores transaction data for each customer and controls the transaction terminal. a control device, comprising a customer-specific code read from a storage medium or a customer-specific code read from a memory accessed by read data of the storage medium, and a customer-specific code keyed in by the customer at the transaction terminal. When issuing a recordable medium for a customer's account by a recordable medium issuing machine in a transaction processing device that verifies the genuine customer by checking the code against the customer's code, the time limit by which the recordable medium must be used at least once is set. data regarding the compulsory use expiry date for customer confirmation shown in the data is recorded in at least the recording medium and the memory, and when the recording medium is used in a transaction terminal, the data regarding the expiration date indicates that the data is used within the expiration date. If it is determined that it is the first use within the expiration date, the data regarding the expiration date will be erased and the data on the recording medium and memory will be deleted. A fraud prevention method in a transaction processing device that writes, at least in memory, a verified code associated with the customer's account. 2. When a recording medium is used, it is checked whether the data regarding the expiration date is set as a value longer than a predetermined period, and if it is longer than a predetermined period, the recording medium is determined to be fraudulent. A method for preventing fraud in a transaction processing device according to scope 1.