JPH06187290A - Online terminal device in computer system - Google Patents

Abstract

PURPOSE:To prevent a personal identification number from being known to a third party on the way of a communication line by using a memory card storing the personal identification number and an identification number and allowing the memory card to access to a central computer based on the stored identification number only when the inputted personal identification number and the stored personal identification number coicide. CONSTITUTION:When the personal identification number that a customer inputs is imparted to a memory card 20 from a device main body 10, the card confirms that the personal identification number and a stored personal identification number coincide and transmits a stored identification number to the device main body 10. Then, the device main body 10 is capable of accessing to a central computer CP based on the identification number from the memory card 20 and the central computer CP performs a designated service job. At this time, the memory card 20 is capable of judging that the customer is a normal possessor from the coincidence of the personal identification number The device main body 10 may transmit the only identification number to the central computer.

Description

Detailed Description of the Invention

[0001]

This invention uses a personal identification number,
The present invention relates to an online terminal device in a computer system that allows only a specific customer to access a central computer.

[0002]

2. Description of the Related Art In a financial institution, an online terminal device (hereinafter simply referred to as a terminal device) is used to automate various service operations including cash payment operations and bookkeeping operations.
Are often installed.

Such a terminal device comprises a device body, a keyboard and a display. Therefore, the customer can receive a predetermined service by inserting a passbook into the apparatus body and operating the keyboard according to the display on the display.

When using the terminal device, the customer must first enter the personal identification number via the keyboard. The input personal identification number is sent to the central computer together with the number for recognizing the customer read from the passbook (hereinafter referred to simply as the identification number), and the central computer identifies the personal identification number thus transmitted. By comparing the number with the number, it is determined that the operating customer is a legitimate holder of the passbook, and thereafter, the designated service operation is performed. In general, since the identification number must individually identify all the customers registered in the central computer, the identification number is composed of a number string or character string of 10 or more digits, while the personal identification number is suitable for human memory. Moreover, in order to prevent the same number from being easily obtained, it is composed of a 4-digit number string arbitrarily selected by the customer.

[0005]

According to the prior art, when the personal identification number is input to the main body of the apparatus through the keyboard, the personal identification number is transmitted to the central computer together with the identification number and is compared by the central computer. In the middle of the communication line connecting the device and the central computer, or on the side of the central computer, the personal identification number is known to a third party, and it cannot be said that there is no risk of misuse of it. There was a problem of incomplete protection.

Therefore, in view of the problems of the prior art, an object of the present invention is to eliminate the necessity of transmitting the personal identification number to a central computer by using a memory card which stores both the personal identification number and the identification number. It is an object of the present invention to provide an online terminal device in a computer system that can eliminate the possibility that the personal identification number is known to a third party.

[0007]

The structure of the present invention for achieving the above object comprises an apparatus main body connected to a central computer and a memory card which is inserted into the apparatus main body and is capable of bidirectionally communicating with the apparatus main body. The memory card sends the stored identification number to the device body when the secret code from the device body matches the stored secret code number, and the device body discriminates from the memory card. The main idea is to access the central computer based on the number.

It should be noted that the memory card can be disposed of when the mismatch of the personal identification number exceeds the specified number.

[0009]

According to the structure of the invention, when the personal identification number entered by the customer is given from the main body of the memory card, it is confirmed that the personal identification number and the stored personal identification number match. , The stored identification number is sent to the apparatus body. Therefore, the main body of the apparatus can access the central computer based on the identification number from the memory card, and the central computer only has to perform the designated service task. That is, in the memory card at this time, since the input personal identification number matches the stored personal identification number, it is possible to determine that the customer who is operating the memory card is a legitimate owner of the memory card. Further, the device body need only transmit the identification number to the central computer, and need not transmit the personal identification number at all.

By discarding the personal identification number when the number of discrepancies exceeds the specified number, it is possible to effectively prevent a customer who is not a legitimate holder from repeatedly attempting to search for the personal identification number. can do.

[0011]

Embodiments Embodiments will be described below with reference to the drawings.

The online terminal device in the computer system comprises a device body 10 and a memory card 20 which can be inserted into the device body 10 (FIG. 1).

The apparatus main body 10 comprises a controller 11, a keyboard 12 and a display 13 attached to the controller 11. The control device 11 is bidirectionally connected to the central computer CP via a communication line.

The memory card 20 is a card-shaped microcomputer device that is convenient to carry, and when the memory card 20 is inserted into a not-shown insertion slot of the control device 11, the control device 11 is provided.
On the other hand, it is automatically connected in both directions via the connector CN. However, the connector CN is not limited to an electrical contact connector, and may be a contactless connection type connector such as an optical communication means made of infrared rays or a magnetic communication means by magnetic coupling. In addition, memory card 2
In a terminal device for cash payment business in a financial institution, it is convenient to incorporate 0 into the cover of a customer's passbook and integrate it with the passbook.

The memory card 20 mainly comprises a confirmation means 21 and a memory means 22 (FIG. 2).

The confirmation means 21 is connected via a connector CN,
The personal identification number Na from the control device 11 is input. However, it is assumed that the personal identification number Na is input to the control device 11 by the customer via the keyboard 12.

The output of the confirmation means 21 is connected to the memory means 22 via the erasing means 23, and the memory means 22
The output of is individually connected to the confirmation means 21 and the output means 24. Further, another output of the confirmation means 21 is also connected to the output means 24, and the output of the output means 24 is
It is connected to the control device 11 via a connector CN.

The memory card 20 may be operated by a built-in battery power source, and when the memory card 20 is turned on to the control device 11, for example, an oscillator built in the control device 11 and an electric, optical or magnetic device may be used. Alternatively, the control device 11 may be supplied with required energy to operate.

Now, each customer has his or her own dedicated memory card 20, and the memory means 22 of the memory card 20 has a personal identification number Na1 and an identification number N unique to the customer.
It is assumed that b1 is stored. Therefore, when the customer inserts the memory card 20 into the control device 11 of the device body 10 and inputs the personal identification number Na through the keyboard 12, the personal identification number Na is transferred from the control device 11 to the confirmation means 21 of the memory card 20. Sent out, which causes the memory card 2
0 can operate according to the program flow chart of FIG.

The program first reads the personal identification number Na1 stored in the memory means 22 (program step (1) in FIG. 3, hereinafter referred to simply as (1)).
Next, the program compares the input personal identification number Na with the stored personal identification number Na1, and when they match (2), reads the identification number Nb1 stored in the memory means 22 ( 3).

Therefore, the program can output the identification number Nb1 thus read out to the control device 11 via the output means 24 (4). Therefore, after that, the control device 11 sends the identification number Nb1 from the memory card 20. The identification number Nb1 is transmitted to the central computer CP, and the central computer CP
By opening a predetermined file data, the control device 11
Through the, it is possible to carry out the service business instructed by the customer. The control device 11 sends the identification number Nb1 to the central computer CP and displays an appropriate instruction message on the display unit 13, and the customer follows the instruction message and uses the keyboard 12 to obtain the desired service work content. To the central computer CP.
That is, the device main body 10 at this time is the memory card 2
Based on the identification number Nb1 from 0, the central computer CP
Can be accessed.

On the other hand, the program consists of personal identification numbers Na and Na1.
If they do not match (2), an output instruction of an error message is sent to the control device 11 (5). Control device 1
In response to this, 1 can perform processing such as displaying a predetermined error message on the display 13 and automatically returning the inserted memory card 20. When the program subsequently detects that the passwords Na and Na1 do not match each other for the Nth time (6), it erases the memory contents of the memory means 22 (7) and ends. That is, the program detects that the customer who is not the legitimate owner of the memory card 20 has made more than the specified number (N-1) of attempts to operate by inputting an inappropriate personal identification number Na. Then, by erasing the memory contents of the memory means 22 of the memory card 20, the memory card 20 cannot be reused and can be disposed of.

By comparing the program flow chart of FIG. 3 with the block diagram of FIG. 2, the former program steps (1), (2) and (6) show the latter confirmation means 2
Corresponds to 1. Further, the former program steps (3) to (5) correspond to the latter output means 24,
The former program step (7) is the latter erasing means 2
It corresponds to 3.

In the above description, the memory card 20
May be separate from the customer's passbook. In that case, for example, first, the memory card 20 is inserted into the apparatus main body 10.
, Enter the correct password Na, and then display 1
According to the instruction message from the control device 11 displayed on the screen 3, the passbook may be inserted through a dedicated insertion slot.

The erasing means 23 in FIG. 2 and the program step (7) in FIG. 3 are examples of means for discarding the memory card 20. That is, the erasing means 23,
The program step (7) includes, for example, locking the microcomputer included in the memory card 20 so that the microcomputer cannot be restarted, the memory card 2 in the control device 11, and the like.
When 0 is thrown in, it can be replaced with any other disposal means including a display such that it can be automatically returned immediately as a defective card.

Further, such an online terminal device can be effectively applied to the application such that the central computer CP is provided with arbitrary pay information or the central computer CP is used for pay. However, in this case, since the passbook is not necessary, the memory card 20 may be configured in a simple card shape, and the central computer CP may be configured to complete the designated service work,
For example, the customer specified by the identification number Nb1 can be charged with a predetermined fee.

[0027]

As described above, according to the present invention, a memory card for storing a personal identification number and an identification number is used, and the memory card has the input personal identification number and the stored personal identification number. Since it is possible to allow access to the central computer based on the stored identification number only when there is a match, there is no need to transmit the personal identification number to the central computer, and thus, in the middle of the communication line, or On the side of the central computer, there is an excellent effect that there is no fear that the personal identification number is known to a third party.

[Brief description of drawings]

[Figure 1] Overall block system diagram

[Fig. 2] Detailed block system diagram of main parts

[Figure 3] Program flow chart

[Explanation of symbols]

 CP ... Central computer Na, Na1 ... PIN number Nb1 ... Identification number 10 ... Device body 20 ... Memory card

Claims (2)

[Claims] 1. An apparatus main body connected to a central computer, and a memory card which is inserted into the apparatus main body and is capable of bidirectionally communicating with the apparatus main body. The memory card includes a personal identification number from the apparatus main body. When the stored personal identification number matches, the stored identification number is sent to the device body, and the device body accesses the central computer based on the identification number from the memory card. An online terminal device in a computer system characterized by the above. 2. The online terminal device in a computer system according to claim 1, wherein the memory card discards the memory card when the mismatch of the personal identification number exceeds a predetermined number.