JP4835102B2 - Automatic transaction equipment - Google Patents

Description

  The present invention relates to an automatic transaction apparatus that performs transactions such as cash deposit / withdrawal transactions by a customer's operation in a financial institution such as a bank, and more particularly to an automatic transaction apparatus that improves security.

  2. Description of the Related Art Conventionally, in financial institutions such as banks, automatic transaction apparatuses that automatically perform cash deposit / withdrawal transactions and transfer transactions by customer operations have become widespread. When an automated transaction apparatus executes a transaction, it performs identity verification to confirm whether the customer executing the transaction is the true owner of the cash card inserted into the apparatus. For example, the customer is requested to input a personal identification number registered in advance, the input personal identification number and the registered personal identification number are collated, and if they match, the identity is confirmed and the transaction is permitted.

  However, when a malicious third party illegally obtains the customer's cash card and personal identification number, the third party can impersonate the customer and withdraw the deposit from the automatic transaction apparatus. In normal transactions, it is necessary to enter a PIN for identity verification, so when a customer is entering a PIN, the PIN can be stolen by, for example, looking into the input operation diagonally from behind. There is sex.

In order to prevent such illegal transactions, for example, in WO2002 / 075676, transactions were performed under conditions different from the predetermined transaction conditions registered or defined in advance, in addition to the check by the normal password. In some cases, it is disclosed to perform a check with a second password. If there is a transaction under conditions different from normal transaction conditions, it is presumed that the transaction is likely to be conducted by a third party, and attempts to prevent unauthorized transactions at that time .
WO0202 / 075776

  However, in the automatic transaction apparatus disclosed in the above document, when a transaction is performed under conditions different from the predetermined transaction conditions, it is necessary for the genuine customer to input the password twice. Therefore, it was necessary to memorize two kinds of passwords, which put a burden on customers. In addition, even if two passwords are remembered, there is a problem that customers may be confused about which password to enter first.

In order to solve the above problems, the present invention provides an automatic transaction apparatus that executes a transaction after confirming the identity of a customer.The automatic transaction apparatus is connected to an upper apparatus having information of an automatic transaction apparatus. Based on the information of the automatic transaction apparatus, the automatic transaction apparatus used by the customer or the corner where the automatic transaction apparatus used by the customer is installed is determined to be used for the first time by the customer , and predetermined When the number of transactions in the period is equal to or greater than the predetermined number of times, unlike the above-described identity verification, another identity verification is performed consisting of a question created based on the customer's personal information, and with the other identity verification, discontinue the transaction if it is not confirmed, the question in the other personal identification is more prepared, if the transaction within the predetermined time period is performed continuously, our transactions made after The Te is characterized in that to change the contents of the question.

According to the present invention, when it is determined that the customer is using the automatic transaction apparatus used by the customer or the corner where the automatic transaction apparatus used by the customer is installed for the first time by the customer, Since the question is displayed and the identity is verified by answering the question, there is no burden on the customer and there is no need to remember two passwords. In addition, there are multiple types of questions in other identity verifications. If transactions are conducted continuously within a predetermined period, the contents of the questions are changed in later transactions. Can be strengthened.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an automatic transaction apparatus and a host computer according to the first embodiment of the present invention. In FIG. 1, an automatic transaction apparatus 1 is connected to a host computer 2 that is a host apparatus. The host computer 2 is provided with a control unit 3, a communication unit 4 and a customer database 5.

  The control unit 3 performs transactions such as a process of collating a PIN number transmitted from the automatic transaction apparatus 1 while communicating with the automatic transaction apparatus 1 via the communication unit 4 and a process of creating a transaction history and storing it in the customer database 5 Perform management operations. The customer database 5 stores customer data such as an address, name, telephone number, date of birth, and personal identification number registered when the customer opens an account, and usage history data of the automatic transaction apparatus 1 for each customer. The usage history data includes the identification number of the automatic transaction apparatus 1 normally used by the customer or the identification number of the branch normally used by the customer.

  The automatic transaction apparatus 1 is provided with a control unit 6, a communication unit 7, a display unit 8, a card processing unit 9, an input unit 10, a printing unit 11, and a cash processing unit 12. The control unit 6 processes each transaction such as a deposit transaction and a withdrawal transaction while communicating with the host computer 2 via the communication unit 7. The display unit 8 displays guidance information such as selection of transaction type, input of a personal identification number, and input of money. The card processing unit 9 reads customer data from a customer's cash card inserted from a card insertion slot (not shown), notifies the control unit 6, and writes transaction information to the cash card.

  The input unit 10 is constituted by a numeric keypad, a touch panel provided on the display unit 8 or the like, and the customer inputs data such as a personal identification number and a transaction amount according to the guide information on the display unit 8, and the input information is the control unit 6 is notified. The printing unit 11 prints transaction details and issues a receipt with the transaction details printed to the customer. The cash processing unit 12 performs a process of paying out a cash amount requested by a customer from a storage unit (not shown) or storing it in the storage unit.

  When a customer opens an account at a financial institution, he / she applies for personal information such as his / her address, name, phone number, date of birth, occupation, etc. and a personal identification number to be used when executing transactions on an automatic transaction device. . The applied information is registered in the customer database 5 of the host computer 2 by the financial institution. When the account opening procedure is completed, a cash card for using the automatic transaction apparatus 1 is issued to the customer.

  Next, the operation of the present embodiment will be described. FIG. 2 is a flowchart showing the operation of the first embodiment. Here, the withdrawal transaction will be described. When the customer goes to the automatic transaction apparatus 1, the automatic transaction apparatus 1 detects the approach of the customer and displays guidance information on the display unit 8. The customer inserts a cash card into a card insertion slot (not shown) according to this guide. When insertion of a cash card is detected by the card processing unit 9 (step 1), information stored in the cash card is read by the card processing unit 9 and notified to the control unit 6. Further, a transaction selection screen is displayed on the display unit 8, and the customer uses the input unit 10 to select a withdrawal transaction (step 2).

  When the withdrawal transaction is selected, a guidance for entering a personal identification number is displayed on the display unit 8, and the customer inputs the personal identification number using the input unit 10 in accordance with this guidance (step 3). Subsequently, a guide for inputting the amount is displayed on the display unit 8, and the customer inputs a withdrawal amount using the input unit 10 in accordance with this guide (step 4).

  Here, the information of the cash card read by the card processing unit 9, the transaction information input so far by the customer, and the identification information of the automatic transaction apparatus 1 used by the customer are the control unit 6 of the automatic transaction apparatus 1. To the host computer 2 via the communication unit 7 (step 5).

  The host computer 2 sends information from the automatic transaction apparatus 1 to the control unit 3 via the communication unit 4 (step 6). First, the control unit 3 confirms whether the information on the cash card and the password entered by the customer match the information registered in the customer database 5 (step 7). If the password entered by the customer does not match the password registered in the customer database 5, the automatic transaction apparatus 1 is notified that the transaction has not been established (step 8). Moreover, the control part 3 records the transaction failure history in a customer database.

  When the automatic transaction apparatus 1 receives a notification indicating that the transaction is not permitted (step 9), the transaction unit 9 displays that the transaction is not possible (step 10), and the card processing unit 9 discharges the cash card and returns it to the customer. (Step 11).

  When the control unit 3 of the host computer 2 determines in step 7 that the information on the cash card and the password entered by the customer match the information registered in the customer database 5, the next use by the customer is next. Or the branch of a financial institution where the automatic transaction apparatus 1 currently used by the customer is installed has been used by the customer. The transaction history data of the automatic transaction apparatus in the customer database 5 is checked against the identification information of the automatic transaction apparatus 1 transmitted from the control unit 6 of the automatic transaction apparatus 1 (step). 12).

  Here, when a plurality of automatic transaction apparatuses are installed in the installation corner of a branch of a financial institution, the use history is confirmed for each corner, and if there is a history of using any of the automatic transaction apparatuses 1 in the corner, It is judged that there is use.

  As a result of the verification, the automatic transaction apparatus 1 currently used by the customer has been used by the customer in the past, or the financial institution where the automatic transaction apparatus 1 currently used by the customer is installed When it is determined that the corner has been used by the customer so far, the control unit 3 notifies the automatic transaction apparatus 1 of transaction permission (step 13).

  When the automatic transaction apparatus 1 receives the transaction permission notification (step 14), the cash payout process of the amount designated by the cash processing unit 12 is executed (step 15), and the receipt on which the transaction details are printed by the printing unit 11 is executed. And a cash card is returned by the card processing unit 9 (step 16).

  As a result of the collation in Step 12, the financial transaction in which the automatic transaction apparatus 1 currently used by the customer has not been used by the customer in the past or the automatic transaction apparatus 1 currently used by the customer is installed. When it is determined that the installation corner of the institution has never been used by this customer, the control unit 3 confirms that the customer is the principal based on the customer's personal information registered in the customer database 5 To create a question (step 17). The questions created here relate to the customer's unique information and do not need to be specifically remembered by the customer, for example, using the customer's date of birth or phone number, Create a question pattern. The automatic transaction apparatus 1 transmits the created question via the communication unit 4 (step 18).

  When the control unit 6 of the automatic transaction apparatus 1 receives the question via the communication unit 7 (step 19), the control unit 6 displays the question on the display unit 8 (step 20) and prompts the customer to input an answer to the question. An example of the displayed question is shown in FIG. FIG. 3 (a) is a question using the date of birth, and FIG. 3 (b) is a question using a telephone number. As shown in FIG. 3, in addition to the question 21, the display unit 8 displays an input unit 10 for a customer to input an answer.

  A plurality of questions to be created may be selected in advance by the control unit 3 of the host computer 2 at random, and the selected question may be transmitted to the automatic transaction apparatus 1 to make the customer answer. A plurality of questions may be transmitted to the automatic transaction apparatus 1 and any one may be selected and displayed on the automatic transaction apparatus 1 side.

  When the customer inputs an answer to the displayed question using the input unit 10 (step 21), the input answer is transmitted from the control unit 6 to the host computer 2 via the communication unit 7 (step 22). If the answer is not input from the customer in step 21, the automatic transaction apparatus 1 displays the transaction impossible on the display unit 8 (step 10), and the card processing unit 9 discharges the cash card and returns it to the customer (step 11). . When the control unit 3 of the host computer 2 receives the answer (step 23), it collates with the customer data in the customer database 5 (step 24).

  The control unit 3 of the host computer 2 determines whether or not the answer inputted by the customer matches the data in the customer database 5, and whether or not they match is recorded in the customer database 5. The usage history data of the automatic transaction apparatus 1 is updated (step 25), and the verification result is notified to the automatic transaction apparatus 1 (step 26).

  When the automatic transaction apparatus 1 receives the result of collation from the host computer 2 (step 27), it determines whether the content is transaction permission or transaction non-permission (step 28). A cash payout process of the amount designated by the processing unit 12 is executed (step 15), a receipt printed with transaction details is issued by the printing unit 11, and a cash card is returned by the card processing unit 9 (step). 16). If the transaction is not permitted, the transaction stop is displayed on the display unit 8 (step 10), and the card processing unit 9 discharges the cash card and returns it to the customer (step 11).

  As described above, according to the first embodiment, even if a malicious third party steals a cash card and a personal identification number from a customer, the automatic transaction apparatus 1 that can perform transactions only by collating the personal identification number, Customers are limited to the automated transaction devices that the true owner of the card normally uses, and other automated transaction devices or installation corners need to answer questions based on personal information that only the customer can know. It is possible to prevent fraudulent transactions that impersonate the person and withdraw cash without burdening the customer.

  Next, a second embodiment will be described. The configurations of the automatic transaction apparatus and the host computer in the second embodiment are the same as those in the first embodiment. Therefore, here, the operation of the withdrawal transaction in the second embodiment will be described according to the flowchart of FIG. In the description, each element shown in FIG. 1 is used. The customer database 5 of the host computer 2 has a function of recording the number of transactions in a predetermined period, for example, one day.

  In FIG. 4, the operation from step 31 to step 41 is the same as the operation from step 1 to step 11 shown in FIG. In step 37, if it is determined that the information on the cash card and the password entered by the customer match the information registered in the customer database 5, the control unit 3 of the host computer 2 automatically uses the automatic information currently used by the customer. The transaction apparatus 1 has been used by the customer so far, or the branch of a financial institution where the automatic transaction apparatus 1 currently used by the customer is installed is used by the customer so far It has been confirmed by comparing the usage history data of the automatic transaction apparatus in the customer database 5 with the identification information of the automatic transaction apparatus 1 transmitted from the control unit 6 of the automatic transaction apparatus 1 (step 42). . Also in this case, as in the first embodiment, when a plurality of automatic transaction apparatuses are installed in the installation corner of a financial institution branch, the usage history is confirmed for each corner, and any automatic transaction in the corner is performed. If there is a history of using the device 1, it is determined that there is a use.

  As a result of the verification, the automatic transaction apparatus 1 currently used by the customer has been used by the customer in the past, or the financial institution where the automatic transaction apparatus 1 currently used by the customer is installed When it is determined that the corner has been used by the customer so far, the control unit 3 performs a check process for the number of transactions (step 43).

  Here, the number of transactions that the customer has made in the automatic transaction apparatus 1 during a predetermined period, for example, on the same day is checked against the history data of the automatic transaction apparatus usage for the customer in the customer database 5. Further, it is determined whether or not the number of transactions in a predetermined period (for example, one day) exceeds a predetermined number determined by the financial institution or the customer. Here, the number of transactions in the same automatic transaction apparatus 1 or the same installation corner is not checked, but transactions in other automatic transaction apparatuses or other installation corners are also counted.

  As a result of the collation, when it is determined that the number of transactions in a predetermined period (for example, one day) exceeds the predetermined number, the number of transactions recorded in the customer database 5 is updated (step 44), and the automatic transaction apparatus 1 is updated. The transaction permission is notified (step 45). When the automatic transaction apparatus 1 receives the transaction permission notification (step 46), it executes a cash payout process of the amount designated by the cash processing unit 12 (step 47), and further receives the transaction details printed by the printing unit 11. And a cash card is returned by the card processing unit 9 (step 48).

  As a result of the collation in step 42, the automatic transaction apparatus 1 currently used by the customer has never been used by the customer in the past, or the financial apparatus in which the automatic transaction apparatus 1 currently used by the customer is installed. When it is determined that the installation corner of the institution has never been used by the customer so far, and as a result of the collation in step 43, the number of transactions in a predetermined period (for example, one day) is not less than the predetermined number When the determination is made, the control unit 3 creates a question for confirming that the customer is the principal based on the customer's personal information registered in the customer database 5 (step 49).

  Thereafter, as in the first embodiment, the question is transmitted to the automatic transaction apparatus 1, and it is checked whether or not the answer inputted by the customer with respect to the question is correct. The transaction history of the transaction device is updated to allow the withdrawal transaction to the automatic transaction device 1, and if the answer is not correct, the withdrawal transaction is not permitted and the history of transaction rejection is recorded in the customer database 5 automatically. The transaction apparatus 1 is notified of the transaction non-permission (Step 50 to Step 60).

  As described above, the second embodiment has the following effects in addition to the effects exhibited by the first embodiment. In other words, even if a malicious third party steals a cash card PIN from a customer, transactions can be made only by verifying the PIN, but only for a predetermined number of times determined by the financial institution or customer. If you try to trade more than the predetermined number of times, you need to answer questions based on personal information that only the true customer knows, thereby minimizing the damage caused by repeated transactions. Can do.

  The present invention is not limited to the above embodiments, and various modifications can be made. For example, when a correct answer is not given to a question and the transaction is not permitted, and the user tries to execute the transaction again, there is a high possibility that the customer will be asked again. At this time, a question having a different content from the previous time is asked.

  For example, if the first question is to enter the customer's phone number, a malicious third party pretending to be the customer will look up the true customer's phone number after being disabled, and then execute the transaction again If the attempt is made, the malicious third party will again not be able to answer the question if the question changes to the customer's date of birth instead of a phone number. As described above, when transactions are continuously performed, it is possible to prevent unauthorized transactions again by making the contents of the questions different.

It is a block diagram which shows the automatic transaction apparatus and host computer of the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of 1st Embodiment. It is explanatory drawing which shows the example of the displayed question. It is a flowchart which shows operation | movement of 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Automatic transaction apparatus 2 Host computer 3 Control part 5 Customer database 6 Control part

Claims (1)

In an automatic transaction device that executes transactions after verifying the identity of the customer,
The automatic transaction device is connected to a host device having information of the automatic transaction device,
In the host device, based on the information of the automatic transaction device, the customer is using the automatic transaction device used by the customer or the corner where the automatic transaction device used by the customer is installed for the first time by the customer. When the number of transactions is determined and the number of transactions within a predetermined period is greater than or equal to the predetermined number of times, unlike the above-described identity verification, other identity verification is performed using a question created based on the customer's personal information. If the confirmation fails to confirm with the customer,
An automatic transaction apparatus characterized in that a plurality of types of questions in the other identity verification are prepared, and when the transactions are continuously performed within the predetermined period, the contents of the questions are changed in the subsequent transactions.

Images