JP4051960B2 - Automatic transaction apparatus and automatic transaction method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an automatic transaction apparatus that executes a predetermined transaction by a user's own operation using a recording medium possessed by the user, and an automatic transaction method using this type of apparatus.
[0002]
[Prior art]
Conventionally, as this type of automatic transaction apparatus, for example, ATM (automatic teller machine) and CD (cash dispenser), convenience stores and airports used in financial institutions such as banks Various devices such as automatic ticket issuing machines used at stations and the like have been put into practical use.
[0003]
In such an automatic transaction apparatus, a cash card, a credit card or other recording medium is inserted into a predetermined place, and a password is entered to confirm that the user is an authorized user (owner of the recording medium). A predetermined transaction such as cash withdrawal, ticket purchase, or settlement is executed.
[0004]
While automatic transactions using credit cards, etc. are convenient, there is always the risk of unauthorized use with counterfeit / stolen cards. Therefore, in recent years, researches on high-security IC card technology mounted with an IC chip and authentication technology using biometric information have been extensively conducted.
[0005]
Biometric information refers to biological information such as face, fingerprint, palm shape, retina, iris, voice print, auricle, vein, handwriting, DNA, and the like. Since such biometric information is not universal and is difficult to duplicate, high security can be realized. Especially in the system using face recognition, since the face image of the card user is taken, not only high reliability as personal authentication but also the effect of preventing unauthorized use is obtained by recording the face image as evidence. It is attracting attention.
[0006]
[Problems to be solved by the invention]
However, many people feel resistance to acquiring biometric information, and taking a face or collecting fingerprints without notification may lead to problems of infringement of personal privacy and portrait rights. is there. This has hindered the spread of identity authentication systems using IC cards and biometric information.
[0007]
As a means for solving such a problem, Japanese Patent Laid-Open No. 10-55470 proposes an apparatus having a function of allowing a user to select whether or not to take a face image. However, although it is possible to protect the privacy of legitimate users by giving the user the right to select whether or not to capture images, it is naturally expected that unauthorized users themselves will refuse to capture images. The effect to do is not obtained.
[0008]
The present invention has been made in view of the above circumstances, and its purpose is to provide a highly secure automatic system that can prevent unauthorized use by a third party while protecting the privacy of the user. It is to provide a transaction apparatus and an automatic transaction method.
[0009]
[Means for Solving the Problems]
  In order to achieve the above object, the automatic transaction apparatus of the present invention provides:Provided with operator information acquisition means for acquiring biometric information from the user in operation,An automatic transaction apparatus that executes a predetermined transaction by a user's own operation.ThePermission information on whether or not to allow users to obtain biometric informationAnd determining whether to acquire the biometric information of the user based on the information, and a guide means, wherein the guide means obtains biometric information by the permission information determination means. Even if it is decided not to do so, a configuration is adopted in which a guide is provided to obtain the user's biometric information. The guide means guides dummy contents (to acquire) not only when actually acquiring but also when not acquiring. According to this configuration, it is impossible to determine whether or not biometric information is acquired even in the operation stage of the apparatus. Therefore, unauthorized use by a third party can be effectively suppressed.
[0010]
  In the above-described configuration, it is preferable to include a recording medium reading unit that reads permission / rejection information as to whether or not to allow the user to acquire biometric information from a recording medium possessed by the user.In this configuration, whether or not to permit the acquisition of biometric information is selected in advance by the user himself at the time of registration or update of the user, and the permission information is recorded on a recording medium. Therefore, since the user has the right to select whether or not to obtain biometric information, there is no problem of privacy infringement associated with obtaining biometric information without permission.
[0011]
In addition, since the permission / refusal information recorded on the recording medium cannot be recognized with the naked eye, a third party who illegally acquires the recording medium may be a recording medium that is permitted to acquire biometrics information or a prohibited recording. It cannot be easily identified as a medium. The third party has the risk of using his / her authorized recording medium to retain his / her biometrics information as a record. I must give up. Therefore, it is possible to prevent unauthorized use by a third party. In addition, when an unauthorized use is actually performed, it is possible to quickly find an unauthorized use and identify an unauthorized user based on the acquired biometric information.
[0012]
  In the above configuration, a configuration in which the permission / rejection information is recorded on a recording medium possessed by the user is adopted, but a configuration in which the permission / rejection information is held on the automatic transaction apparatus side is also suitable. Ie, InterestPermission / rejection information storage means for storing permission / rejection information as to whether or not to allow acquisition of biometric information of the user, and recording medium reading means for reading identification information for identifying the user from a recording medium possessed by the user; Permission information acquisition means for acquiring permission information of the corresponding user from the permission information storage means based on the read identification information;TheThe structure provided can also be employ | adopted suitably.
[0013]
In this configuration, whether to permit the acquisition of biometric information is allowed to be selected in advance by the user himself at the time of user registration or update, and the permission information is stored in permission / rejection information storage means on the device side. Remember. Therefore, since the user has the right to select whether or not to obtain biometric information, there is no problem of privacy infringement associated with obtaining biometric information without permission.
[0014]
In addition, since the permission / rejection information is held on the device side, a third party who illegally acquires the recording medium can know whether the recording medium is permitted or prohibited to acquire biometric information. Can not. Furthermore, even when the recording medium is forged, it is impossible to know whether the user himself / herself permits the acquisition of biometric information. Therefore, the third party has a risk that his / her biometrics information will remain as a record if he / she uses a recording medium that he / she is permitted to acquire. I have to give up using it. Therefore, it is possible to prevent unauthorized use by a third party. In addition, when an unauthorized use is actually performed, it is possible to quickly find an unauthorized use and identify an unauthorized user based on the acquired biometric information.
[0015]
The recording medium is preferably an IC card, a magnetic card or an optical card. If this type of recording medium is used, permission information or identification information can be recorded electronically or magnetically, so that a third party who illegally obtains the recording medium can easily recognize the contents of the permission information. become unable. Among these, it is more preferable to use a contact type IC card or a non-contact type IC card as the recording medium. If this type of recording medium is used, it is difficult to forge the recording medium itself or to access the inside of the recording medium, so that it is possible to prevent unauthorized reading or falsification of permission / reject information, and further increase the reliability and safety of the device. be able to.
[0016]
The recording medium is also preferably a storage unit built in a portable electronic device such as a mobile phone or a portable information terminal. When reading permission / rejection information from this type of recording medium, for example, information is transmitted / received by connecting a portable electronic device and an automatic transaction apparatus with a cable or using wireless communication. The recording medium is not limited to the ones exemplified here, and various recording media can be suitably used as long as permission information can be recorded.
[0017]
The biometric information refers to biological information such as face, fingerprint, palm shape, retina, iris, voice print, auricle, vein, handwriting, DNA, and the like. In particular, it is preferable to use an imaging unit such as a camera, a video camera, or a CCD camera as the operator information acquisition unit to acquire (capture) a face image as the biometric information. In this case, it is possible to acquire biometric information (face image) without being known to the user who is operating and without causing discomfort. A configuration using a fingerprint or a palm as the biometric information and an input means such as a touch panel as the operator information acquisition means is also suitable. In this case, the biometric information can be acquired at the same time when the user inputs the information related to the transaction, so the biometric information can be acquired without being noticed by the user who is operating and without causing discomfort. It becomes possible to do. Further, a configuration using a voice print as the biometric information and a voice input means such as a microphone as the operator information acquisition means is also suitable.
[0018]
In the above-described configuration, a determination unit that compares the acquired biometric information with a user's biometric information registered in advance and determines whether to execute the process related to the transaction based on the comparison result Is preferably provided.
[0019]
According to this configuration, since the biometric information of the person who is actually operating is compared with the biometric information of the authorized user, highly reliable identity authentication can be performed and unauthorized use is reliably prevented. It becomes possible to do.
[0020]
In addition, first personal authentication processing means for performing personal authentication based on the acquired biometric information and pre-registered user biometric information, and second personal authentication processing means for performing personal authentication using a password, A configuration including these is also suitable. According to this configuration, personal authentication is performed in two stages, so that reliability and safety are further improved.
[0021]
It is preferable that the biometric information of the user registered in advance is recorded on a recording medium possessed by the user. Many users feel resistance to registration of biometric information due to the risk of leaking, diverting or theft of biometric information, but the biometric information is stored on a recording medium owned and managed by the user. If it is a structure, such worries can be eliminated and utilization of the said apparatus can be aimed at.
[0022]
On the other hand, a configuration in which the pre-registered user biometric information is stored in a storage unit included in the automatic transaction apparatus can be suitably employed. According to this configuration, it is possible to counter clever counterfeiting that falsifies the biometric information itself inside the recording medium.
[0023]
The permission / rejection information and the biometric information are preferably recorded in an encrypted state. This improves reliability and safety.
[0026]
  In addition, the automatic transaction method of the present invention isProvided with operator information acquisition means for acquiring biometric information from the user in operation,An automatic transaction method using a device for executing a predetermined transaction by a user's own operation,ThePermission information on whether or not to allow users to obtain biometric informationPermission information discrimination that determines whether or not to acquire biometric information of the user based onSteps,A guide step, and the guide step performs a guide to acquire the user's biometric information even when it is determined in the permission / rejection information determination step that the biometric information is not acquired.It is characterized by that.
[0027]
In the above method, the step of comparing the acquired biometric information with biometric information of a user registered in advance and determining whether to execute the process related to the transaction based on the comparison result. It is preferable to include.
[0028]
  In the above method,A step of reading permission / refusal information as to whether or not to allow acquisition of biometric information of the user from a recording medium possessed by the user;Is preferably included.
[0029]
In the above method, a method including a step of reading permission / rejection information from a recording medium possessed by the user is adopted. However, a method of reading permission / rejection information from the automatic transaction apparatus side is also suitable. That is, a step of reading identification information for identifying the user from a recording medium possessed by the user, and permission information on whether to permit acquisition of the user's biometric information based on the read identification information It is also preferable to include a step of acquiring permission / rejection information of the corresponding user from permission / rejection information storage means for storing.
[0030]
DETAILED DESCRIPTION OF THE INVENTION
Exemplary embodiments of the present invention will be described in detail below with reference to the drawings.
[0031]
Here, an example in which the present invention is applied to an automatic ticket issuing machine used in a convenience store or the like will be described. The scope of application of the present invention is not limited to this. For example, ATMs and CDs used in financial institutions such as banks, automatic ticket issuing machines used in airports and stations, and other similar automatic transaction apparatuses It can be suitably applied to.
[0032]
(First embodiment)
First, with reference to FIG. 1 and FIG. 2, the hardware configuration of an automatic ticket issuing machine as an automatic transaction apparatus according to the first embodiment of the present invention will be described.
[0033]
FIG. 1 is a perspective view schematically showing the external appearance of the automatic ticket issuing machine 1 according to the present embodiment, and FIG. 2 is a block diagram schematically showing the internal configuration of the automatic ticket issuing machine 1.
[0034]
The automatic ticket issuing machine 1 is roughly configured to include a touch panel 10, a card reader 11, a CCD camera 12, a ticket issuing machine 13, a communication unit 14, a ROM 15, a RAM 16, a hard disk 17, and a CPU 18. These components are connected to each other via a bus 19.
[0035]
The touch panel 10 is an MM (man machine) input / output means for exchanging information between the automatic ticket issuing machine 1 and a user. That is, the touch panel 10 functions as an output unit that displays an operation procedure to the user, and also functions as an input unit that receives an input from the user. In addition to the touch panel, the input means may be of any type as long as it can receive user operations as input information, such as a keyboard, numeric keypad, mouse, and microphone. In addition to the touch panel, any type of output means may be used as long as it can transmit information to the user, such as a display, a printer, and a speaker.
[0036]
The card reader 11 is a recording medium reading means for reading various information recorded on the card 20 as a recording medium possessed by the user. The device housing is provided with a card insertion slot 11a, and the user inserts the card 20 into the card insertion slot 11a according to the guide displayed on the touch panel 10, whereby the card 20 is set in the card reader 11. .
[0037]
In the present embodiment, a combined card of an IC card and a magnetic card is used as the card 20. The card 20 incorporates an IC (Integrated Circuit) chip 20a and a magnetic stripe 20b, and various information is electronically or magnetically recorded on the IC chip 20a and the magnetic stripe 20b.
[0038]
Information recorded on the card 20 (information read by the card reader 11) includes, for example, identification information for identifying a user (user number, name, address, telephone number, etc.), user biometric information (Face image information, fingerprint information, palm shape information, etc.), permission information indicating whether or not to permit acquisition of biometric information from the user who is operating the device during operation is included. These pieces of information are recorded based on information provided by the user himself at the time of user registration or update (when a card 20 is newly issued or updated). That is, the user can determine whether or not to obtain biometric information in his / her selection. Note that these pieces of information are preferably recorded in an encrypted state.
[0039]
A CCD (Charge Coupled Device) camera 12 is operator information acquisition means for acquiring biometric information from a user who is operating the apparatus. Specifically, the user's face being operated is imaged to acquire face image information. Note that the operator information acquisition means for acquiring the face image information may be of any type as long as it can capture an operator such as a video camera or a digital camera in addition to a CCD camera and import it into the apparatus as digital data. Absent. In the present embodiment, a face image is used as biometric information. However, an upper body image, a whole body image, and the like can also be suitably used.
[0040]
The ticket issuing machine 13 is means for issuing a box office ticket (ticket for movies, plays, concerts, sports, etc.) 21 as a transaction object. The apparatus housing is provided with a ticket take-out port 13a, and when the transaction process is normally performed, the entertainment ticket 21 created by the ticket issuing machine 13 is output to the ticket take-out port 13a.
[0041]
The communication unit 14 is a communication unit for controlling data communication using a computer network such as the Internet or an intranet, and corresponds to, for example, a network adapter, a terminal adapter, or a modem. The automatic ticket issuing machine 1 can send and receive data to and from a server and other automatic ticket issuing machines via the communication unit 14.
[0042]
The ROM 15 is a read-only storage unit. The ROM 15 stores a program necessary for achieving the purpose of use of the apparatus, that is, a program necessary for executing a series of processes described later. In addition, basic software such as an operation system and a device driver is also stored in the ROM 15. In addition, as ROM15, it is preferable to use PROM (ProgrammableROM) which can change the memory content.
[0043]
The RAM 16 is a readable / writable storage means and refers to all of the addressable storage space used to execute program instructions in the device. The RAM 16 temporarily stores and holds programs and data to be executed by the CPU 18.
[0044]
The hard disk 17 is a so-called auxiliary storage device, and is a storage unit that supplements the storage capacity of the ROM 15 and the RAM 16. For example, magnetic disk devices (hard disks, floppy disks, etc.), optical disk devices (CD-ROM, CD-R, CD-R / W, DVD-ROM, DVD-RAM, etc.), magneto-optical disk devices (MO, etc.), semiconductor disks A device (such as a memory card) is applicable. The hard disk 17 stores information other than programs stored in the ROM 15. For example, the usage history information of the device is stored, or the face image information acquired by the CCD camera 12 (biometric information acquired by the operator information acquisition means) is stored.
[0045]
The CPU 18 stores the data stored in the ROM 15, the data input from the touch panel 10 or the data received via the communication unit 14, or the program stored in the ROM 15 or the program received via the communication unit 14 in the RAM 16. It is an arithmetic means for reading and performing arithmetic processing based on the read contents. The CPU 18 is also a control unit that controls internal devices such as the touch panel 10, the card reader 11, the CCD camera 12, and the ticket issuing machine 13 based on the result of the arithmetic processing.
[0046]
Next, the functional configuration of the automatic ticket issuing machine 1 will be described with reference to FIG. FIG. 3 is a functional block diagram of the automatic ticket issuing machine 1 according to the present embodiment.
[0047]
As shown in the figure, the automatic ticket issuing machine 1 includes an outline, an operation guide unit 31, a permission / rejection information determination unit 32, a comparison unit 33, a similarity determination unit 34, a password determination unit 35, a transaction processing unit 36, and operator information. Functional blocks such as a recording unit 37 and an operator information reference unit 38 are included.
[0048]
These functional blocks are realized by a program and data stored in the ROM 15 or the hard disk 17 being read into the RAM 16 and processed by the CPU 18. The program for realizing these functional blocks may be configured by a single program or may be realized by combining a plurality of module programs.
[0049]
The operation guide unit 31 displays a predetermined operation screen on the touch panel 10 at each stage of the transaction process, thereby prompting the user who is operating the function of guiding the operation procedure and requesting input of information related to the transaction. It has a function.
[0050]
The permission / rejection information determination unit 32 controls the card reader 11 to read permission / rejection information recorded on the card 20 and whether to capture the face of the user who is operating according to the contents of the read permission / rejection information. Has a function to determine.
[0051]
The comparison unit 33 controls the card reader 11 to read face image information recorded (registered) on the card 20, and controls the CCD camera 12 to pick up the face of the user who is operating, It has a function of acquiring image information, a function of extracting feature amounts from face image information, and a function of calculating the degree of similarity by comparing feature amounts of two pieces of face image information.
[0052]
The feature amount is, for example, a parameterization of the size, position, relative arrangement of parts constituting the face such as eyebrows, eyes, nose, mouth, and the face outline. Since a technique for extracting the feature amount and a technique for calculating the degree of similarity can be applied, a detailed description is omitted here.
[0053]
The similarity degree determination unit 34 has a function of determining whether or not the two face image information compared are of the same person based on the similarity degree calculated by the comparison unit 33. Specifically, when the digitized similarity is greater than a predetermined threshold, it is determined that the person is the same person, and when the degree of similarity is smaller than the threshold, the person is different.
[0054]
That is, the comparison unit 33 and the similarity degree determination unit 34 compare the face image information acquired by the CCD camera 12 with the user's face image information registered in advance in the card 20, and perform a transaction based on the comparison result. The determination means (1st person authentication means) which determines whether the process which concerns on is performed is comprised.
[0055]
The password determination unit 35 compares the password (password) registered by the user in advance with the password input from the touch panel 10 by the operator, and determines whether the user is a legitimate user. It has a function as a means.
[0056]
The transaction processing unit 36 controls the ticket issuing machine 13 based on the function of allowing the user to input information related to the transaction (type of ticket to be purchased, performance date, settlement method, etc.) and the input information. It has a function to generate.
[0057]
The operator information recording unit 37 has a function of storing face image information acquired by the CCD camera 12 in the hard disk 17. The operator information reference unit 38 has a function of displaying the face image information stored in the hard disk 17 on the touch panel 10, transmitting it to a server, and outputting it to an external device. A database is constructed in the hard disk 17, and the face image information is stored and managed in association with information such as the acquisition date and time and the name of the apparatus installation store.
[0058]
Next, an example of an automatic transaction method according to the ticket automatic issuing machine 1 having the above configuration will be described with reference to FIGS.
[0059]
4 and 5 are flowcharts showing the flow of transaction processing of the automatic ticket issuing machine 1. FIG. Moreover, FIGS. 6-13 is a figure which shows the operation screen displayed on a touch panel in each step of transaction processing.
[0060]
When the automatic ticket issuing machine 1 is activated, the CPU 18 reads the program and data stored in the ROM 15 or the hard disk 17 into the RAM 16 and starts processing. This automatic ticket issuing machine 1 provides ticket purchase services of various genres such as movies, plays, concerts, sports, etc., and a genre selection screen is displayed on a standby screen at the time of activation (not shown). ).
[0061]
When the user selects a desired genre, the operation guide unit 31 displays the top menu screen shown in FIG. 6 on the touch panel 10 and waits for the next input from the user. On this top menu screen, an “application” button 61 and a “return” button 62 are displayed.
[0062]
The operation guide unit 31 periodically checks whether or not the “apply” button 61 has been pressed (step S401). If the button has not been pressed, the operation guide unit 31 displays advertisement information on the screen or guides with other voices. Processing is executed (step S402). On the other hand, when it is detected that the “apply” button 61 has been pressed by the user, the operation screen shown in FIG. 7 is displayed on the touch panel 10 to request the user to insert the card 20 (step S403). . Here, an example is shown in which a credit card is used for price settlement and identity verification.
[0063]
When it is detected that the card 20 has been inserted into the card insertion slot 11a, the card 20 is transported and set in the card reader 11, and the operation screen shown in FIG. Then, the permission / rejection information determination unit 32 reads permission / rejection information from the card 20, and the comparison unit 33 reads face image information registered from the card 20 (step S404). Whether the comparison unit 33 succeeds in reading the face image information registered from the card 20 (whether the face image information is registered in the card 20) or not, and whether or not the face imaging is permitted. It is also possible to use permission / denial information.
[0064]
The permission / rejection information determination unit 32 checks whether or not the user is permitted to capture a face (whether or not face image information is registered) (step S405). A process of acquiring face image information from the operating user is executed.
[0065]
At this time, the operation guide unit 31 displays the operation screen shown in FIG. 9 on the touch panel 10 to guide the operation procedure (step S406). When the “shoot” button 91 is pressed, the comparison unit 33 images the face 22 of the user who is operating with the CCD camera 12, and acquires face image information of the user who is operating (step S407). The operator information recording unit 37 records the acquired face image information in the database 23 in the hard disk 17 (step S408).
[0066]
When the imaging is completed, the operation guide unit 31 displays the operation screen illustrated in FIG. 10 on the touch panel 10 and notifies the user that the personal identification process is being performed. The comparison unit 33 compares the face image information of the user in operation acquired in step S407 with the pre-registered face image information read in step S404, and calculates the degree of similarity (step S410). Subsequently, the similarity degree determination unit 34 determines whether or not the similarity degree is larger than a predetermined threshold value. If the similarity degree is large, the user who is operating is regarded as a valid holder of the card 20. Then, the process proceeds to step S412. If the degree of similarity is smaller than the threshold value, the process returns to step S406 again (step S411).
[0067]
On the other hand, if it is determined in step S405 that the user does not permit imaging of the face (face image information is not registered), the permission / rejection information determination unit 32 determines the face image information of the user who is operating. Execute the process that does not get
[0068]
However, at this time as well, the operation guide unit 31 displays the operation screen shown in FIG. 9 on the touch panel 10 and then performs a process of switching to the operation screen shown in FIG. 10 when the “shoot” button 91 is pressed (step S409). . That is, an operation procedure having exactly the same contents as the processes in steps S406 to S411 is guided. The “shooting” button 91 in this case is a dummy button, and it goes without saying that even if the user presses the “shooting” button 91, face image information is not acquired. It should be noted that the owner of the card 20 has been notified in advance that such dummy processing is to be performed.
[0069]
After the first personal authentication process using biometric information (face image) is normally performed in steps S410 and S411, the second personal authentication process using a password (password) is executed (step S412). Similarly, after the dummy process in step S409 is performed, the process proceeds to step S412.
[0070]
In the second personal authentication process, first, the operation guide unit 31 displays the operation screen shown in FIG. 11 on the touch panel 10 and requests input of a user-specific password. When the user inputs the password and presses the “Done” button 111, the password determination unit 35 determines whether or not the input password is correct. If the password is not correct, the process returns to step S412 again (step S413). ).
[0071]
It should be noted that in the first personal authentication process and the second personal authentication process, the process is repeated assuming an input error of face image information or a password. However, even if the process is repeated several times, the personal authentication is normally performed. If not, the operation screen shown in FIG. 12 is displayed and the transaction process is interrupted.
[0072]
When the personal authentication is normally performed through the first personal authentication process and the second personal authentication process, the transaction processing unit 36 executes a process related to the ticket purchase transaction. For example, the operation screen shown in FIG. 13 is displayed on the touch panel 10 to prompt the user to select a purchase desired ticket, or to request input of other information related to transactions such as the performance date, seat, and payment method (step S414). ). When all the information is input, the transaction processing unit 36 generates print data to be printed on the ticket, issues a ticket with the ticket issuing machine 13, generates payment data relating to payment, and transmits it to the server. This completes the transaction process.
[0073]
According to the configuration of the present embodiment described above, since the user has the right to select whether or not to allow facial imaging during operation, privacy infringement and portraits associated with obtaining facial image information without permission There are no problems such as infringement of rights.
[0074]
In addition, since the permission / refusal information recorded on the card 20 cannot be recognized with the naked eye, a third party who illegally acquires the card 20 determines whether the card 20 is permitted to capture a face or is prohibited. It cannot be easily identified. Then, the third party fears that his / her face image information will remain as a record when using the card 20 that is permitted to capture images, and unauthorized use regardless of whether or not the imaging is actually permitted. I must give up. Therefore, it is possible to prevent unauthorized use by a third party. In addition, when unauthorized use is actually performed, it is possible to quickly find unauthorized use and identify an unauthorized user based on the acquired face image information.
[0075]
Furthermore, in this embodiment, since the same operation procedure is guided when a face is imaged and when it is not captured, an unauthorized user determines whether or not face image information is acquired even in the operation stage. Can not do it. Therefore, unauthorized use by a third party can be more effectively suppressed.
[0076]
In particular, since the face image is acquired by using the CCD camera 12, it is possible to acquire biometric information without being known to the user who is operating and without causing discomfort.
[0077]
In addition, since the face image information of the person who is actually operating is compared with the face image information of the legitimate user, highly reliable identity authentication can be performed, and unauthorized use can be reliably prevented. It becomes.
[0078]
Further, since the second personal authentication process using the password is performed in addition to the first personal authentication process using the face image information, the personal authentication is performed in two stages, and the reliability and safety are further improved.
[0079]
In this embodiment, since the permission information, the identification information, and the face image information are electronically or magnetically recorded on the recording medium possessed by the user, the third party who illegally obtained the card is the content of the permission information. Cannot be easily recognized. In particular, when using an IC card, it is difficult to forge the card itself or access the inside of the card, so that unauthorized reading or alteration of permission / denial information can be prevented, and the reliability and safety of the device can be further improved. it can.
[0080]
Many users feel resistance to registration of face image information due to the risk of leakage, diversion, theft, etc. of face image information, but face image information is stored on the card 20 that the user owns and manages. If it is a structure, such worries can be eliminated and utilization of the said apparatus can be aimed at.
[0081]
(Second Embodiment)
FIG. 14 shows a second embodiment of the present invention. In the first embodiment, the configuration in which the permission / rejection information and the face image information are recorded on the card possessed by the user is shown, but in the present embodiment, the configuration in which the information is held on the apparatus side is shown. In the first embodiment, an automatic transaction apparatus is configured by a single ticket automatic issuing machine. However, in this embodiment, an automatic ticket issuing system that is an automatic transaction apparatus is configured by an automatic ticket issuing machine and a server.
[0082]
Since other configurations and operations are the same as those of the first embodiment, the same components are denoted by the same reference numerals, and the description thereof is omitted.
[0083]
FIG. 14 is a system configuration diagram of the automatic ticket issuing system 2 according to the present embodiment.
[0084]
As shown in FIG. 1, the automatic ticket issuing system 2 includes an automatic ticket issuing machine 1 as an operation terminal and a server 3 connected to the terminal via a computer network 4.
[0085]
The server 3 includes an information processing apparatus such as one or a plurality of personal computers, workstations, or host computers, and includes a database 41. The database 41 stores permission / rejection information that stores and manages information related to users registered in the system, that is, identification information for identifying the users, user permission / rejection information, user face image information, and the like. Means.
[0086]
The automatic ticket issuing machine 1 has a functional block called a permission / rejection information acquisition unit 40 instead of the permission / rejection information determination unit 32 of the first embodiment. The permission / rejection information acquisition unit 40 controls the card reader 11 to read the identification information recorded on the card 20 (information for specifying the authorized user of the card 20), and the permission / rejection information of the user from the server 3. And a function of acquiring face image information.
[0087]
Next, an example of an automatic transaction method according to the ticket automatic issuing system 2 having the above-described configuration will be described with reference to FIG. FIG. 15 is a flowchart showing a flow of transaction processing of the ticket automatic issuing system 2.
[0088]
The processing from step S401 to S403 is the same as that in the first embodiment. When the card 20 is inserted, the permission / refusal information acquisition unit 40 reads identification information from the card 20 (step S420). Next, permission / rejection information acquisition unit 40 transmits a request to server 3 using the read identification information as a search key, and receives permission / rejection information of the user and face image information registered in advance from server 3 (step S421). ). Whether or not the permission information acquisition unit 40 succeeds in acquiring face image information from the server 3 (whether or not face image information is registered in the database 41 of the server 3) is permitted to capture a face. It may also be permission / inhibition information as to whether or not it is.
[0089]
The permission / rejection information acquisition unit 40 checks whether or not the user has permitted face imaging (whether or not face image information is registered) (step S422).
[0090]
At this time, if it is determined that the user does not permit the imaging of the face (face image information is not registered), the permission / refusal information acquisition unit 40 immediately shifts the process to step S412.
[0091]
On the other hand, when it is determined that the user is permitted, a process of acquiring face image information from the user who is operating is executed. In the present embodiment, the face is imaged without notifying the user that the image is to be taken. That is, the comparison unit 33 immediately captures an image of the user's face 22 with the CCD camera 12, and acquires the face image information of the user who is operating (step S407). It should be noted that the owner of the card 20 has been notified in advance that the face is to be captured implicitly.
[0092]
The subsequent processing is the same as that of the first embodiment.
[0093]
Even with the configuration of the present embodiment described above, the same effects as those of the first embodiment can be obtained.
[0094]
In other words, since the user has the right to select whether or not to allow facial imaging during the operation, problems such as invasion of privacy and infringement of portrait rights associated with obtaining face image information without permission do not occur.
[0095]
In addition, since the permission / rejection information is held on the apparatus side, a third party who has illegally acquired the card 20 cannot know whether the card 20 is permitted to capture a face or is prohibited. Furthermore, even when the card 20 is forged, it is impossible to know whether the user himself / herself is permitted to capture a face. Therefore, the third party has a risk that his / her face image information will remain as a record when using the card 20 that is permitted to capture images, and the third party is illegal regardless of whether or not the imaging is actually permitted. I have to give up using it. Therefore, it is possible to prevent unauthorized use by a third party. In addition, when unauthorized use is actually performed, it is possible to quickly find unauthorized use and identify an unauthorized user based on the acquired face image information.
[0096]
Further, in the present embodiment, the permission / rejection information and the face image information are held in the server 3, so that it is possible to counter the tricky forgery that alters the permission / rejection information and the face image information inside the card.
[0097]
The embodiments of the present invention are not limited to the configurations of the first and second embodiments described above, and various ones are conceivable.
[0098]
In each of the above embodiments, the personal authentication is performed using the biometric information. However, the personal authentication is performed only by inputting a password, and only the biometric information of the user who is operating is acquired and stored. A simple configuration may be used. Also in this case, the effect of preventing unauthorized use can be obtained.
[0099]
In each of the above embodiments, the personal authentication process is performed on the ticket automatic issuing machine side. However, the process may be performed on the server side. That is, each function (means) realized by the computer program does not necessarily have to be implemented in a single device, but the functions can be distributed to a plurality of information processing devices and can cooperate with each other. .
[0100]
【The invention's effect】
As described above, according to the present invention, since the user has the right to select whether or not to obtain biometric information, there is no problem of privacy infringement associated with obtaining biometric information without permission.
[0101]
In addition, since a third party who illegally obtained a recording medium cannot easily distinguish whether it is a recording medium for which biometrics information is permitted or prohibited, the third party cannot This can be prevented beforehand. In addition, when an unauthorized use is actually performed, it is possible to quickly find an unauthorized use and identify an unauthorized user based on the acquired biometric information.
[Brief description of the drawings]
FIG. 1 is a perspective view schematically showing an appearance of an automatic ticket issuing machine according to a first embodiment of the present invention.
FIG. 2 is a block diagram schematically showing the internal configuration of the automatic ticket issuing machine in FIG. 1;
FIG. 3 is a functional block diagram of the automatic ticket issuing machine in FIG. 1;
4 is a flowchart showing a flow of transaction processing of the automatic ticket issuing machine of FIG. 1;
FIG. 5 is a flowchart showing a flow of transaction processing of the automatic ticket issuing machine of FIG. 1;
6 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
7 is a view showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine of FIG. 1. FIG.
8 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
9 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
10 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
11 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
12 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine in FIG. 1. FIG.
13 is a diagram showing an operation screen displayed on the touch panel in the transaction processing of the automatic ticket issuing machine of FIG. 1. FIG.
FIG. 14 is a system configuration diagram of an automatic ticket issuing system according to a second embodiment of the present invention.
15 is a flowchart showing a flow of transaction processing of the automatic ticket issuing system of FIG.
[Explanation of symbols]
1 Automatic ticket issuing machine
2 Automatic ticket issuing system
3 servers
4 Computer network
10 Touch panel
11 Card reader
11a Card insertion slot
12 CCD camera
13 Ticket issuing machines
13a Ticket outlet
14 Communication Department
15 ROM
16 RAM
17 Hard disk
18 CPU
19 Bus
20 cards
20a IC chip
20b Magnetic stripe
21 box office tickets
22 User face during operation
23 Database
31 Operation guide
32 Permission information discriminator
33 comparison part
34 Similarity judgment section
35 Password judgment part
36 Transaction Processing Department
37 Operator information recording part
38 Operator information reference section
40 Permission information acquisition part
41 database
61 “Apply” button
62 “Back” button
91 “Shoot” button
111 “Finish” button

Claims (8)

An automatic transaction apparatus comprising an operator information acquisition means for acquiring biometric information from a user in operation, and executing a predetermined transaction by the user's own operation,
Based on whether the permission information to permit the acquisition of biometric information of the user, the permission information determination means for determining whether to acquire biometrics information of the user,
Guide means;
With
The guide means includes
An automatic transaction apparatus that provides a guide for acquiring biometric information of a user even when it is determined by the permission / rejection information determination means that biometric information is not acquired . Claim comprising: a biometric information the acquired compares the biometric information of a user registered in advance, the determination means determines whether or not to execute the process according to the transaction on the basis of the comparison result The automatic transaction apparatus according to 1. The automatic transaction apparatus according to claim 1 or 2, further comprising: a recording medium reading unit that reads permission / refusal information as to whether or not to permit acquisition of biometric information of the user from a recording medium possessed by the user. . Permission / rejection information storage means for storing permission / rejection information as to whether or not to allow acquisition of biometric information of the user;
A recording medium reading means for reading identification information for identifying the user from a recording medium possessed by the user;
Based on the read identification information, permission information acquisition means for acquiring permission information of the corresponding user from the permission information storage means,
Automatic transaction apparatus according to claim 1 or 2 comprising a. It is an automatic transaction method using an apparatus that includes an operator information acquisition means for acquiring biometric information from a user who is operating, and executes a predetermined transaction by the user's own operation,
Based on whether the permission information to permit the acquisition of biometric information of the user, the permission information determination step of determining whether to acquire biometrics information of the user,
A guide step,
Including
The guide step includes
An automatic transaction method that provides a guide for acquiring biometric information of a user even when it is determined in the permission / rejection information determination step that biometric information is not acquired . And biometric information the acquired claim 5 in advance by comparing the biometric information of the user registered, comprising the step of determining whether to execute the process according to the transaction on the basis of the comparison result Automatic transaction method described in 1 . The automatic transaction method according to claim 5 or 6, further comprising: reading permission / rejection information as to whether or not to allow acquisition of biometric information of the user from a recording medium possessed by the user . Reading identification information identifying the user from a recording medium possessed by the user;
Based on the read identification information, acquiring permission information of the corresponding user from permission / rejection information storage means for storing permission / rejection information as to whether or not to allow acquisition of the user's biometric information; and
The automatic transaction method according to claim 5 or 6 including :

Images