JP2008129647A - Security code operation system - Google Patents

Abstract

To provide a password management system capable of reducing the risk of fraudulent transactions when a password is leaked due to peeping or the like.
A biometric authentication compatible automatic transaction apparatus 201 provided with a biometric authentication apparatus for acquiring ecological information and a biometric authentication non-compatible automatic transaction apparatus 202 not provided with the biometric authentication apparatus are connected to the corresponding automatic transaction. In the personal identification number operation system including a server 204 that manages a personal identification number used by each of the apparatus and the non-compatible automatic transaction apparatus, the server includes a first personal identification number used by the corresponding automatic transaction apparatus, A storage unit 205 for storing a second personal identification number used in the corresponding automatic transaction apparatus; and a personal identification number control unit 208 for managing the validity of the second personal identification number stored in the storage unit. The unit sets the second personal identification number stored in the storage unit to be valid or invalid according to the input from the corresponding automatic transaction apparatus.
[Selection] Figure 1

Description

  The present invention relates to a password management system, and more particularly to a password management system with enhanced security using a biometric authentication device.

  In recent years, the usage forms of automatic transaction apparatuses used in financial institutions and the like have been diversified. For this reason, technical development for ensuring the safety of transactions is required. However, the personal authentication unit of the automatic transaction apparatus often uses an ID card and a personal identification number as usual (a biometric authentication-incompatible automatic transaction apparatus). In personal authentication using an ID card and a personal identification number, there is a problem that the other person impersonates the original user and executes a transaction due to theft or forgery of the personal identification card or leakage of the personal identification number.

  For such problems, it is possible to improve safety by using biometric authentication means, which is a general technique. The biometric authentication unit is a personal authentication unit that uses different physical characteristics for each individual, and palmprint authentication, finger vein authentication, and the like are known. The safety of personal authentication can be improved (biometric authentication type automatic transaction apparatus) by combining authentication by such biometric authentication means and authentication by ID card and password.

In addition, Patent Document 1 discloses that when an automatic transaction apparatus is used to perform transactions exceeding the limit amount, automatic transactions cannot be performed unless the identity is confirmed by an automatic service machine that performs identity verification. It has been shown to be restricted.
JP 2005-339192 A

  In the conventional technology, one type of personal identification number is used for both transactions using a biometric authentication type ATM (automatic transaction apparatus) and transactions using a biometric authentication non-compatible ATM. For this reason, in the case of transactions using a high-security biometric authentication ATM, for example, if a PIN is leaked by peeping, there is a possibility that an illegal transaction is made using a biometric non-compatible ATM There is.

  The present invention has been made in view of such problems, and provides a password management system that can reduce the risk of fraudulent transactions when a password leaks due to peeping or the like.

  In order to solve the above problems, the present invention employs the following means.

  Connected to a biometric authentication-compatible automatic transaction apparatus equipped with a biometric authentication device that acquires biometric information and a biometric authentication-incompatible automatic transaction apparatus that does not include the biometric authentication apparatus, and the corresponding automatic transaction apparatus and non-compatible automatic In a password management system comprising a server for managing a password used by each transaction device, the server is used by the first password used by the corresponding automatic transaction device and the non-compatible automatic transaction device. A storage unit for storing the second personal identification number, and a personal identification number control unit for managing the validity of the second personal identification number stored in the storage unit, wherein the personal identification number control unit includes the corresponding automatic transaction apparatus In accordance with the input from, the second password stored in the storage unit is set to be valid or invalid.

  Since the present invention has the above-described configuration, it is possible to reduce the risk of fraudulent transactions when a password is leaked due to peeping or the like.

  Hereinafter, the best embodiment will be described with reference to the accompanying drawings. FIG. 1 is a diagram for explaining a password management system. As shown in FIG. 1, the personal identification number operation system includes a biometric authentication-compatible ATM 201, a biometric authentication-incompatible ATM 202, a server 204, and a network 203 that connects them.

  Reference numeral 201 denotes a biometric authentication ATM, a biometric authentication unit 2011 such as palm print authentication and finger vein authentication, a card reader unit 2011 for reading a transaction card inserted by a user at the time of transaction, and a transaction operation input such as a password. An input unit 2013 is provided.

  202 is a biometric authentication incompatible ATM, and includes a card reader unit 2021 for reading a transaction card inserted by a user and a input unit 2022 for receiving a transaction operation input such as a password.

  Reference numeral 204 denotes a server, which manages passwords used by the corresponding ATM 201 and the non-compatible ATM 202, respectively. Reference numeral 205 denotes a storage unit, which is a first password (password (1)) used by the biometric authentication type ATM 201 and a second password (password (2)) used by the non-biometric authentication type ATM 202. Remember.

  Reference numeral 206 denotes a personal identification number authentication unit, which performs authentication by reading the personal identification number (1) input from the input unit 2013 of the biometric authentication type ATM 201 via the network 203. Also, authentication is performed by reading the recitation number (2) input from the input unit 2022 of the biometric authentication-incompatible ATM 202 via the network 203. 207 is a transaction control unit that executes a transaction operation when authentication is successful, 209 is a set value storage unit that stores a set value (valid period, use limit, etc.) set in the personal identification number (2), and 208 is a unit that stores the above-described units It is a code number control unit to be controlled.

  The personal identification number (1) is stored in the storage unit 205 of the server 204 when a transaction card such as a cash card is created. When the biometric authentication-compatible ATM 201 is used, the transaction operation is enabled only when the biometric authentication and the authentication by the password (1) are successful and the transaction card media are prepared. The password (2) for the biometric authentication non-compatible ATM 202 can be registered by an operation from the biometric authentication compatible ATM 201. The number information of the password (2) input from the input unit 2013 of the biometric authentication type ATM 201 is stored in the storage unit 205 of the server 204 via the network 203.

  The validity period, the use limit number, and the transaction limit amount of the personal identification number (2) are set by being stored in the set value storage unit 209 in the server through the network 203 by an operation from the biometric authentication type ATM 201. The personal identification number (2) is normally invalidated by the control unit 208 of the personal identification number (2) of the server, and is appropriately validated and used via the network 203 by an operation from the biometric authentication type ATM 201.

  The validity period of the personal identification number (2) is determined by determining the elapsed period in the personal identification number control unit 208 from the time when the personal identification number (2) is registered, and after the validity period has elapsed, the personal identification number stored in the storage unit 205 ( Disable 2). The number of use times of the personal identification number is registered in the personal identification number control unit 208 after the personal identification number (2) is registered, and the number of uses of the personal identification number (2) by the biometric authentication non-compatible ATM 202 is counted. After exceeding, the password (2) stored in the storage unit 205 is invalidated. The transaction limit is stored in the server 204 after setting the personal identification number (2) in the server 204, and when the total withdrawal exceeds the transaction limit, the transaction controller 207 The transaction at the ATM 202 that does not support biometric authentication is cancelled.

  When conducting a transaction using the biometric authentication non-compatible ATM 202, after confirming the transaction card, it is confirmed in the server 204 that the personal identification number (2) is valid, and the personal identification number input from the biometric authentication non-compatible ATM 202 The personal identification number (2) stored in the storage unit 205 is compared and authenticated by the personal identification number authentication unit 206, and then the transaction is started.

  FIG. 2 is a diagram for explaining the use conditions of the biometric authentication-compatible ATM and the biometric authentication-incompatible ATM.

  In the case of performing a transaction using a biometric authentication type ATM, when performing identity verification, three types of authentication consisting of biometric authentication, authentication using a personal identification number (1), and authentication using a transaction card (cash card) are performed. I need. In addition, when performing a transaction using an ATM that does not support biometric authentication, two types of authentication consisting of authentication using a personal identification number (2) and authentication using a transaction card are required when performing identity verification.

  As described above, the password (2) is registered by an operation from the biometric authentication type ATM. The personal identification number (2) can be set to any number or letter and can be valid or invalid. The personal identification number (2) is invalid by default.

  In order to validate the personal identification number (2), it is necessary to set a valid period, a use limit number, and a transaction limit. Also, if the PIN is not valid, if the validity period has passed, the transaction limit has been exceeded, or the PIN has been invalidated when the usage limit has been exceeded, biometric authentication is not supported. Cash transactions by ATM 202 are impossible. As described above, according to the present embodiment, when a transaction is performed using a biometric authentication-compatible ATM, even if the PIN (1) is leaked due to a peep from behind, the biometric authentication-compatible ATM transaction is Unauthorized withdrawals cannot be made because personal authentication is required.

  In addition, when performing a transaction using a biometric authentication-incompatible ATM, the personal identification number (2) is required. For this reason, even if the personal identification number (1) is leaked, unauthorized withdrawal using the personal identification number (1) can be prevented. Further, even when the personal identification number (2) is peeped, since the personal identification number (2) is normally invalidated, it is not possible to withdraw money from the biometric authentication non-compliant ATM. Also, even if the PIN (2) is valid, the PIN (2) validity period, usage limit, and transaction limit are set and automatically invalidated when these conditions are exceeded. Therefore, compared with the conventional method, the risk of fraudulent withdrawal can be reduced and security can be enhanced.

  FIGS. 3 and 4 are diagrams illustrating a process of registering the personal identification number (2) used in the biometric authentication non-compatible ATM 202 by using the biometric authentication compatible ATM 201. FIG.

First, when a transaction is started, personal authentication is started (S301, 302). In the personal authentication, only when the biometric authentication and the authentication by the personal identification number (1) are successful and the transaction card medium is presented, the user is authenticated (step S302). If it is not possible to authenticate the person, the card is returned or the card is collected and the transaction is stopped (step S309).
If the personal authentication is successful, a transaction screen is displayed (step S303). If the registration operation for the password (2) (the password used in the biometric authentication non-compatible ATM 202) is not performed on this transaction screen, the process proceeds to a step for performing a normal cash transaction (steps S304 and S310). When the password (2) registration operation is performed, the password (2) number setting operation (steps S305 and 306), the transaction validity period setting operation (steps S307 and 308), and the transaction limit number setting operation (step) S311, 312), transaction limit setting operation (steps S313, 314) is performed. When setting of all items is completed, a registration completion confirmation screen for the personal identification number (2) is displayed to ask for user confirmation.

  When correcting the setting of the personal identification number (2), the item to be corrected is selected and reset. When registering the setting content of the password (2) and completing the process, the setting content of the password (2) is stored in the setting value storage unit 209 (step S316), and the card is returned to complete the processing. (Step S317).

  FIGS. 5 and 6 are diagrams for explaining a withdrawal transaction process using the biometric authentication non-compatible ATM 202.

  When a transaction is performed using the biometric authentication non-compatible ATM 202, it is necessary to perform identity verification using the personal identification number (2). When the transaction is started, the server 204 first determines whether or not the password (2) is valid (steps S401 and S402). If the personal identification number (2) is invalidated, since the transaction is impossible, the transaction card is returned and the process is terminated (step S406).

  When the personal identification number (2) is valid, the personal identification is performed using the personal identification number (2). In the personal authentication, only when the authentication by the personal identification number (2) is successful and the transaction card medium is prepared, the user is authenticated (step S403). If the user cannot be authenticated, the card is returned, or the card is collected and the process is stopped (step S406).

  If the user authentication is successful, a withdrawal amount designation request screen for designating the withdrawal amount is displayed, and a designation input for the withdrawal amount is waited (steps S404 and S405). When the specified input of withdrawal amount is received, the total withdrawal amount (2) is calculated by adding the withdrawal amount entered this time to the total withdrawal amount (total withdrawal amount (1)) after the PIN (2) is activated. It generates (step S407), and compares the generated total withdrawal amount (2) with a preset transaction limit (step S408).

  As a result of the comparison, if the total withdrawal amount (2) is equal to or greater than the transaction limit amount set at the time of registration of the personal identification number (2), for example, the card is returned and the process is terminated (step S413). If the total withdrawal amount (2) is less than the transaction limit amount set at the time of registering the personal identification number (2), the total withdrawal amount (2) is stored in the set value storage unit 209 (step S409).

  Next, “1” is added to the use frequency history of the personal identification number (2) stored in the set value storage unit 209 (step S410). Next, the usage number history of the personal identification number (2) is compared with the preset usage number of the personal identification number (2), and if the usage number of the personal identification number (2) exceeds the usage limit number, the personal identification number (2) The number (2) is invalidated (steps S411 and 414).

  When the number of uses of the personal identification number (2) does not exceed the maximum number of uses, the process proceeds to cash withdrawal processing. When the cash withdrawal processing is completed, the transaction card is returned and the processing is terminated (steps S412 and 413). ).

  As described above, in the present embodiment, the personal identification number (security code (1)) used in the biometric authentication-compatible ATM and the personal identification number (security code (2)) used in the non-biometric authentication ATM are used. Set. In addition, the validation / invalidation of the personal identification number (2) can be set only by an operation from the biometric authentication type ATM. Further, the validity period, the use limit number, and the transaction limit amount of the personal identification number (2) can be set by an operation from the biometric authentication type ATM.

  As described above, according to the present embodiment, when a transaction is performed using a biometric authentication type ATM, even if the password (1) is leaked due to a peep from behind, the biometric authentication type ATM transaction is Unauthorized withdrawals cannot be made because personal authentication is required.

  In addition, when performing a transaction using a biometric authentication-incompatible ATM, the personal identification number (2) is required. For this reason, even if the personal identification number (1) is leaked, unauthorized withdrawal using the personal identification number (1) can be prevented. Further, even when the personal identification number (2) is peeped, since the personal identification number (2) is normally invalidated, it is not possible to withdraw money from the biometric authentication non-compliant ATM. Also, even if the PIN (2) is activated, the validity period, number of usage limits, and transaction limit are set for the PIN (2) and are automatically disabled when these conditions are exceeded. Therefore, compared with the conventional method, the risk of fraudulent withdrawal can be reduced and security can be enhanced.

It is a figure explaining a PIN code operating system. It is a figure explaining the utilization conditions of a biometric authentication type | mold ATM and a biometrics non-correspondence type | mold ATM. It is a figure explaining the process which registers the PIN used by biometric authentication non-compatible ATM using biometric authentication compatible ATM. It is a figure explaining the process which registers the PIN used by biometric authentication non-compatible ATM using biometric authentication compatible ATM. It is a figure explaining the payment transaction processing using biometrics non-correspondence type ATM. It is a figure explaining the payment transaction processing using biometrics non-correspondence type ATM.

Explanation of symbols

201 ATM for biometric authentication
202 Non-biometric authentication ATM
203 Network 204 Server 205 Storage Unit 206 Password Authentication Unit 207 Transaction Control Unit 208 Password Control Unit 209 Setting Value Storage Unit

Claims (4)

Connected to a biometric authentication-compatible automatic transaction apparatus equipped with a biometric authentication device that acquires biometric information and a biometric authentication-incompatible automatic transaction apparatus that does not include the biometric authentication apparatus, and the corresponding automatic transaction apparatus and non-compatible automatic In a password management system having a server for managing a password used by each transaction device,
The server stores a first password used in the corresponding automatic transaction apparatus and a second password used in the non-compatible automatic transaction apparatus;
A password control unit for managing the validity of the second password stored in the storage unit;
The personal identification number control system, wherein the personal identification number control unit sets the second personal identification number stored in the storage unit to be valid or invalid in accordance with an input from the corresponding automatic transaction apparatus. In the security code operating system according to claim 1,
The server includes a storage unit that stores a validity period of the second password.
The personal identification number control system includes a counter for accumulating the passage of a period, and invalidates the second personal identification number when the count value of the counter reaches the stored valid period. . In the security code operating system according to claim 1,
The server includes a storage unit that stores a use limit number of times of the second password.
The personal identification number control unit includes a counter that accumulates the number of times the second personal identification number is used, and invalidates the second personal identification number when the count value of the counter reaches the stored usage limit number. PIN code operation system. In the security code operating system according to claim 1,
The server includes a storage unit that stores a payout limit amount using the second personal identification number;
The personal identification number control unit includes a counter for accumulating the payout amount by the automatic transaction apparatus, and invalidates the second personal identification number when the count value of the counter reaches the stored payout limit. A password management system.

Images