JPS605031B2 - transaction processing device - Google Patents

Description

[Detailed description of the invention] Hereinafter, the present invention will be explained in detail in the following order.

[1 Background of the invention] 1.1 Technical field 1.2 Description of the prior art [2 Summary of the invention] 2.1 Purpose of the invention 2.2 Structure, operation, and effects of the invention [3 Description of embodiments] 3.1 Structure of transaction processing device 3.2 Card data recording format 3.3 Customer specific information file (CIF) at the center 3.4 Operation of automatic cash dispensing station 3.5 Operation of counter processing device 3.6 Processing at the center 3. 7 Functions and Effects of Embodiments 3.8 Modifications [1 Background of the Invention] 1.1 Technical Field The present invention provides a system for performing predetermined transactions using a card on which various data including a customer-specific floor number are recorded. The present invention relates to transaction processing devices such as automatic cash dispensers and automatic deposit machines installed in financial industries such as banks.

1.2 Description of the Prior Art This type of transaction processing device compares the reading data of the PIN number magnetically recorded on the card with the PIN number keyed in by the customer, or stores the PIN number in the device in advance. The memorized PIN is compared with the PIN keyed in by the customer, and if these numbers match, the card user is deemed to be the person eligible for the transaction. Check.

After this confirmation, a predetermined transaction is executed. In financial industries such as banks, transaction processing devices for cash payments and deposits have already become widespread.

It is no exaggeration to say that the magnetic recording format of the card used in this transaction processing device is already widely known. Since encoders for recording data on cards are also commercially available, counterfeiting of cards has become relatively easy. In particular, with devices that do not store the PIN number in the device and compare the PIN discussion data on the card with the keyed-in PIN number, it is possible for a counterfeiter to set the PIN number arbitrarily. Moreover, transactions can be made using this arbitrarily set PIN number. [2 Summary of the Invention] 2.1 Purpose of the Invention The purpose of the invention is to detect the use of counterfeit cards at an early stage, and to prevent fraudulent transactions caused by counterfeit cards.

It is also an object of the present invention to provide a transaction processing device that allows card transactions even if a failure occurs in the main stage for preventing fraudulent transactions, and that can reissue cards if necessary. shall be.

2.2 Structure, operation, and effects of the invention This invention uses a recording medium in which user-specific data is recorded, and reads data read from the recording medium or data read from a memory accessed by this discussion data. , in a transaction processing device that verifies the genuine user by checking the data keyed in by the user.
A storage medium for keywords is provided in the recording medium, and the transaction processing device includes a memory for storing keywords for each user, and a first read/write device for reading data on the recording medium and writing data to be updated in the recording medium. A device, a calculation means for checking the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memo file, and a calculation means that performs a transaction only when both keywords have a predetermined correspondence. The first step is to create a new keyword and update the keyword in the memory and storage medium.
One of the features is that it is equipped with a control means.

Here, the "keyword" is one of the codes for determining whether the recording medium (for example, a magnetic card) used in the transaction processing device is genuine, and is characterized by being updated every time a transaction is processed. This is the code.

Keywords are recorded on the recording medium, and keywords that have a predetermined correspondence with the keywords on the recording medium are also stored in the memory of the transaction processing device, which is accessed by discussion data (for example, account number) on the recording medium. are stored for each user (for example, for each account number). For each transaction process, the correspondence between the keywords on the recording medium and each keyword in the memory is examined to determine whether the recording medium is being used correctly. That is, if both keywords have a predetermined correspondence relationship, the transaction is permitted, a new keyword is created, and the keywords in the recording medium and memory are thereby updated.

If both keywords do not have a predetermined correspondence relationship, the transaction is prohibited. Therefore, it is difficult to forge a recording medium, and even if it is forged, if a genuine card has already been used at least once before using the counterfeit recording medium, the keywords in the memory will have already been updated. Transactions cannot be conducted using counterfeit recording media. In this way, forgery of recording media can be detected at an early stage, and fraudulent transactions can be prevented. Furthermore, the transaction processing device of the present invention includes a means for detecting the occurrence of an error that requires reissuing a recording medium, an input means for inputting necessary data for reissuing the recording medium, and a means for reissuing the recording medium. Based on the data inputted by the second writing means to the recording medium and the input means, a keyword corresponding to the keyword of the corresponding user in the memory is obtained, and data including this keyword is written to the second recording medium. and a second control means for causing the second writing means to write on the recording medium.

Therefore, even if a write error occurs when updating the keywords on the recording medium, it is possible to reissue the recording medium in which the keywords having a predetermined correspondence with the keywords in the memory are recorded, and there is a perfect countermeasure against failures. [3
DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments in which the present invention is applied to a transaction processing device whose terminal is an automatic cash dispensing machine will be described in detail with reference to the drawings.

3.1 Structure of transaction processing device FIG. 1 shows the overall configuration of the transaction processing device.

The transaction processing device consists of a control center and a number of terminals connected to the center 1 online. Examples of terminals include an automatic cash dispensing machine (hereinafter abbreviated as CD) 2 and a counter processing device (hereinafter abbreviated as WM) 3. The center 1 includes a central processing unit (hereinafter referred to as CPU) 10 that controls communication with each terminal and processes transaction data transmitted from the terminals, and a customer-specific information file that stores customer transaction data. (hereinafter referred to as CIF) 11, a communication control device 12 and a modem 13 for communicating with terminals are provided.

In processing transaction data, the CPUIO performs power inspection, transaction calculation processing,
Performs processing such as rewriting Cml l and issuing cards. A large number of terminals are connected to the center via a modem 5 and a terminal controller 4, and communication with the center 1 is controlled by these.

The CD2, which is one of the terminals, includes an operation procedure display 22 that sequentially displays the operations that a customer must perform for a payment transaction, a keyboard for inputting a PIN number, a billed amount, etc., a card insertion slot, a cash discharge slot, etc. Customer service panel 2 with
3. A card reader and writer (hereinafter simply referred to as a card reader) 24, which reads the card data recorded on the card inserted into the card slot and writes predetermined data to the card. A slip issuing machine 25 that prints data on a journal and a slip, imprints the emboss on the card, and issues the slip, and a paper waste discharger 26 that counts the paper waste of the payment bill and carries it out.
is equipped as an input/output device. The CPU 20 executes predetermined transactions by controlling these input/output devices and communication with the center 1. CPU2
0 is equipped with a memory 21 that stores transaction data and the like. The CPU 20' is interrogated with the terminal controller 4 by the input/output control circuit 27. WM3 is
In this example, the device is for issuing cards, and has a built-in CPU 30 which is equipped with a memory 31 and connected to the terminal controller 4 by an input/output control circuit 37.

The CPU 3 includes an office key 32 that can only be operated by a person in a specific position, a keyboard 33 for inputting items necessary for card issuance, a pre-waster 34, and a keypad 34 as input/output devices. CRT for displaying data etc.
It includes a display 35 and a card reader and writer (hereinafter simply referred to as a card writer) 36. 3.
2 Card Data Recording Format FIG. 2 shows the card recording format used in the transaction processing device.

The card has a magnetic stripe, and the magnetic stripe includes an m code indicating that the card is used by a bank, a bank approval code indicating the usage category of the card, a customer's unique PIN number, bank number, store number, The customer's account number, a keyword (
KI) etc. are magnetically recorded. 3.3 Customer Information File (CIF) at the Center FIG. 3 shows the contents of the CIF II provided at the center 1.

CIFII is constituted by, for example, a magnetic disk. CIFII has a transaction data storage area for each customer having an account, and this area stores the account number, balance, password, keyword (K2), and right flag F. Keyword (KI), (
K2) are mutually converted numerically by a predetermined algorithm, so even if they have the same account number, the card keyword (KI) and CIFII keyword (K2) do not match, but they can be related by the above algorithm. It is being This algorithm may be any arithmetic expression or one that exchanges digits. Keyword (KI), (K2
) is updated for each transaction as shown later. 3.
4. Operation of automatic cash dispensing machine FIG. 4 shows the steps of the customer's operations on the CD2 and the transaction processing of the CD2.

Step 4: First, insert the card into the card slot.
1) Enter the password using the keyboard (step 42). The data recorded on the inserted card is read by the card league 24 and stored on this card.
The PIN number in the data and the keyed-in PIN number are compared (step 43). If the two numbers match, an instruction to enter the amount to be paid will be displayed on the display 22, and the customer will key-in the amount to be paid (step 4).
4). If the two passwords do not match, the card is returned (step 65) and the process ends.

Instead of immediately returning the card, the user may be asked to enter the password again. In this case, step 43
If the answer is NO multiple times in a row, the card will be returned. Once the payment request amount is entered, the data necessary for the payment transaction is ready, and the process moves on to communication with the center (step 45,
46), and in parallel with this center communication, the slip issuing machine 25 imprints the emboss of the card onto the journal (step 47).

The message sent from CD2 to Center 1 includes the terminal code of CD2, a code indicating the type of message (in this case, a withdrawal message), the keyed-in PIN number, the requested payment amount, and a keyword (KI). Contains card data. When center 1 receives the message from CD2,
As will be described in detail later, determination of whether the transaction is possible, inspection of the card, creation of new keywords, updating of CIFII, etc. are performed, and a message indicating the results of these processes is transmitted to the CD 2. The message sent from center 1 to CD2 includes
This includes the terminal address, operation instructions (withdrawal allowed, withdrawal not possible, card return, withdrawal not possible card collection), card write data including new keywords, account number, withdrawal amount, and new balance. ing. After communication with the center and card imprint processing, it is checked whether there was a transmission error, whether there was a reception error, and whether there was an imprint error (step 48).
~50).

Regarding transmission errors and reception errors, normally, if an error still occurs even after the transmission/reception with the center 1 has been repeated the required number of times, YES will be obtained in steps 48 and 49. Imprint errors include, for example, a case where a card gets stuck in a conveyance path and imprinting is not performed and a completion signal is not output. In the case of a transmission error, the transaction data is not sent to the center, so the transaction is unsuccessful and the card is returned (step 65). In the case of reception errors and imprint errors, the Cmll has already been updated, so generally the transaction has been completed. In this case, writing to the card (step 53), especially new keywords, is not possible, so a write error message is sent to the center (step 66). After this, it is left to the processing of the staff. The write error message includes a code and card data indicating this fact. If there is no error in any of steps 48 to 50, and withdrawal is possible according to the operation instructions in the message sent from center 1 (step 51), transaction data is printed on the slip (step 52), Writing write data including new keywords to (Step 5)
3), and the withdrawal and counting of cash equivalent to the withdrawal amount (step 54) are performed in parallel.

If withdrawal is not possible, the card must be collected or returned (step 55), and the card is either collected (step 56) or returned (step 65) according to the instruction. After printing the slip, writing the card, and counting the cash dispensed, it is checked whether an error has occurred in these processes (steps 57 to 59).

A printing error is detected, for example, when a printing completion signal is not output. Card write errors include cases where the card is jammed and writing to the card is not done at all or only partially, and cases where the card is detected by a read check after writing. Cash line counting errors include, for example, paper jams. In either case, the transaction has already been completed. In the case of a printing error or a cash line counting error, since writing of data including a new keyword to the card has been completed, the process is left to the clerk's processing. The clerk hands over the customer's card and cash to complete the transaction. There are two types of forced write errors. The first is an error that occurs before writing to the card is performed.
This is the case, for example, when a card conversation occurs before the card reaches the position of the head of the force read 24, and the previous data remains on the card and it is possible to read that data. be. The other type of error is when the card cannot be read. For example, a card jam occurs while writing to the card, writing is not performed due to a power outage, or there is a read check after writing. This is a case where it is determined that discussion is not possible. In the case of a write error in step 58, it is determined whether reading is possible (step 67), and if possible,
The write-off message is sent to center 1 (step 66), and then the process moves on to the staff. If the card cannot be read, a message indicating that the card must be reissued is printed on the slip (step 68).

After this, the card is reissued by WM3. If there are no errors above, the card is returned (step 60).
, the printed slip and cash are released (step 6)
2), the transaction is completed. Card return error (step 61)
), cash, or slip release error (step 63), the process will be handled by the staff member. In the above example, after updating the CIFII of center 1, the transaction is determined to be successful, but if the CIFII is restored to its original value, the transaction can be determined to be unsuccessful.

3.5 Operation of counter processing device FIG. 5 shows the operation of the clerk on WM3 and the processing procedure of WM3.

The WM3 becomes operational only when the office key is operated (step 71). This allows card issuance to be strictly controlled. WM3 is the first issue where a card is issued for a certain user (account) for the first time,
It has both a republishing and a functional library. A key for selecting either initial issue or reissue is input (step 72).
, and the card is inserted (step 73). Then, items necessary for card issuance, such as a personal identification number, bank number, store number, account number, etc., are input using the keyboard 33 (step 74). The input data is CR
Displayed on T35. When issuing a card for the first time, the PIN number is a number specified by the customer, and the account number is the number of the account to which the card is issued. Banks have a ledger that records the necessary information about all opened accounts. Since the PIN number is also recorded in this ledger, if the card is to be reissued, the PIN number can be found from this ledger.
Further, the user can also know the password by inputting the account number into the WM 3 and inquiring the center 1 through account inquiry. However, even in the case of reissuance, the keywords cannot be known from the ledger, nor are they known to the customer or bank staff.

The keyword is only stored in the CIFII of the center 1. If this is the first publication, it will be created using the keyword 'macenter'. When key input for each item is completed, key input data including the account number is transmitted to center 1 (step 75). Then, as described later, the write data of the card containing the keyword will be sent from center 1.
When this message is received (step 76), it is checked whether it is an error message or a received message (step 77).
).

If there is no error, the light sent from center 1
Data is written to the card by card writer 361 and the card is issued (step 78). In the case of an error message or reception error, the card is returned (step 79). 3.6 Processing at the Center FIG. 6 shows the processing procedure at the center 1.

After receiving the message from the terminal, the message is classified (step 81). If it is a withdrawal message (step 82)
, proceed to the withdrawal transaction processing from step 86. In the case of a write error message (step 83), since this message includes an account number, CIFII is checked and the write error flag F of the storage area of the corresponding account number is set. (Step 98).

In the case of a card issuance message from WM3 (corresponding to step 75) (step 84), the process advances to the card issuance process from step 101. In the case of a deposit message (step 86)
), predetermined deposit transaction processing is performed (step 107
). If the received message is another message, processing corresponding to that message is executed. Now, in the withdrawal transaction process, first, the format of the received withdrawal message is checked, and the keyword (KI) in the message is converted into a numerical value using a predetermined algorithm.

Further, CIFII is searched from the account number included in the message (step 86). If there is an error in the contents of the received withdrawal message (step 87), for example, if there is no corresponding account number in Cmll, an error message containing an instruction to return the transaction-unavailable card is sent to CD2 (step 88). ). If there is no error, next, enter the keyed-in password included in the message from CD2 and the CIFI
The PIN number stored in I's corresponding account is compared (
Step 89), if they match, a check is made to see if flag F is set (step 90). If flag F is not set, the numerically converted keyword in the message is compared with the keyword (K2) stored in the corresponding CIFII account (step 91
). If the PIN numbers do not match in step 89 or the keywords do not match in step 91, the card is fraudulently used or a fraudulent card (counterfeit card) is used, and the transaction includes an instruction to collect the card. The message is sent to CD2 (step 92). In step 89, the password included in the message other than the card data may be compared with the password in the CIFII.
Furthermore, since the verification of the personal identification number has already been carried out on the CD 2, the process of step 89 is not necessarily necessary at the center 1. If the password and keyword match,
The requested payment amount and the balance in CIFII are compared, and if the balance is larger, withdrawal is possible (step 93).

If the write-F flag F is set (YES at step 90), the process moves to step 93 without performing keyword comparison processing. Step 93
If the balance is insufficient, a message containing an instruction to return the non-withdrawal card is sent to CD 2 (step 94). If withdrawal is possible, the balance in the storage area of the account number subject to the transaction in CIFII and the keyword (K2) are updated, and flag F is reset (step 95). The new balance will be the payment request amount (withdrawal amount) from the stored balance.
It is found by subtracting . The easiest way to use the keyword is the number of times a card has been used. In this case, a new keyword is created by adding 1 to (K2). Other keyword updating methods include calculating using a predetermined function using the previous keyword as a variable, and using random numbers. In the above function, the number of uses, time, etc. can also be used as parameters. The random number is obtained by a random number generator including a pulse generator and a counter that counts the generated pulses. In this way, when a new keyword is found, this new keyword is stored in the area corresponding to CIFII, and is numerically converted using a predetermined algorithm (step 95). Then, this new numerically converted keyword replaces the keyword in the word data to create card write data. Finally, the instructions for withdrawing, the created light
A message containing the data, account number, withdrawal amount, and new balance is edited and sent to CD 2 (step 97). CD
In step 2, the write data of the card transmitted from center 1 is written to the card as described above (step 5).
3) The keyword (KI) of the card is a new keyword newly created at the center and converted into a numerical value.

In the case of a card issue message (step 84), the format of this message is first checked, and the CIFII is searched using the account number included in the message (step 101).

Then, if there is an error in the message, or if the card is being reissued and there is no corresponding account number in CIFI1 (step 102), the error message is sent to WM3 (step 103). If there are no errors, keyword discovery or creation occurs (step 10).
4).

In the case of card reissue, since the keyword should already be stored in CIFII, the keyword of the corresponding account number will be displayed one after another. If the card is issued for the first time, C.
If there is no account in IFI1, an area is created for that account. Then, a new keyword is created using an appropriate function for converting the account number or time, or a random number, and is stored in the area of the corresponding account number in CIFII or in the newly created area. A new keyword may also be created when a card is reissued. In this case, of course, the created keyword is CIFII
It will be memorized in the corresponding Elya inside. The keywords successively derived or created from CIFII are converted into numerical values using a predetermined algorithm (step 105), added to each data transmitted from the WM3, and sent to the WM3 as card write data (step 106).

As mentioned above, this light data is written to the card in WM3 (step 78), so there is a predetermined correspondence between the keyword in the issued card and the keyword of the corresponding account stored in CIFII. transactions can be made using this issued card.

3.7 Effects and effects card of the embodiment In CIFI1, in which a customer-specific keyword (KI) is recorded, there is a pair of keyword (KI) in the storage area of the customer's account number. A keyword (K2) corresponding to 1 is stored.

Then, when the card is used, the keyword (K
It is checked whether I) and (K2) have a correct correspondence, and the keywords (KI) and (K2) are updated. If the keywords (KI) and (K2) do not have a correct correspondence relationship, the transaction is prohibited. Since a keyword is recorded on each card in addition to conventional card data, its format is difficult to understand, making it difficult to forge the card. Even if a card is counterfeited, if a legitimate card was used at least once before this counterfeit card was used, the CIFII keyword (
Since K2) has been updated, the keywords of the counterfeit card no longer have a correct correspondence with the keywords of CIFII, and the transaction is immediately prohibited. Even though the CIFII keyword has been updated by using the correct card.

If the updated keyword is not written to the card due to an error in CD2 (in this case, the previous keyword remains on the card), a write error message is transmitted from CD2 to center 1. . When the center 1 receives the write error message, it sets a write error flag F, and if the flag F is set, it does not check the keyword. Therefore, CD2
Even if a code whose keyword has not been updated due to an error is used, a normal transaction is possible. Furthermore, if the card becomes unnegotiable,
The card will be reissued by WM3.

The keyword of the reissued card is Center 1's CIF
It has a correct correspondence with Elijah's keyword of the corresponding account number in II. Therefore, normal transactions are possible using this reissued card. ．． 8. Modification In the above example, when a write error message is transmitted from CD2, center 1 sets flag F in C11 and omits keyword checking.

When a write error message is received, the corresponding keyword in CIFII may be returned to its pre-update value. Since the pre-update keyword remains recorded on the card, the next time the card is used, the card's keyword and the CIFII keyword will have a correct correspondence relationship. Or, in the keyword inspection of Center 1, the card keyword and CIFI
If there is no correspondence with keyword 1, CIFI
The previous keyword may be created from the keyword of I, the keyword of the card and the previous keyword may be compared, and if these correspond, the transaction may be permitted. In addition, in the above example, the card is reissued only when it is impossible to dispute the card data, but if necessary, it can also be reissued in the case of errors in steps 49, 50, and 58 in Figure 4. You may reissue your card.

Furthermore, in FIG. 6, deposit processing (step 107)
Also, the above-mentioned password check and keyword check may be performed.

However, in the case of depositing money, fraudulent use of the card or use of a counterfeit card is unlikely, and even if there is, the customer will not suffer any disadvantage, so this is not necessarily necessary. In the above example, only the center 1 converts the keyword into a numerical value, but a numerical conversion program or a numerical conversion circuit may be provided in both the center 1 and the CD 2, and the numerical value of the keyword may be converted in both. This situation is shown in FIG. Assume that the keyword recorded in the CD is KI=3412.The first and second digits of this keyword, and the third and fourth digits of this keyword are exchanged in CD2, resulting in K3=4321. .This keyword (K3) is transmitted between center 1 and CD2.Then, center 1 further transmits the keyword (K3).
are rearranged in the reverse order, resulting in K2=1234. This keyword (K2) is stored in CIFII. In this way, the keyword takes completely different values in the CIFI 1, on the line, and in the card, so the value of the keyword is completely unknown from the outside. Although a CD is shown as the terminal in the above embodiment, it goes without saying that the present invention can also be applied to automatic teller machines and loan machines.

In this case, it is preferable to check keywords for transaction processing such as balance inquiry, transfer, and transfer. In addition, card-based transaction processing devices other than bank transaction processing devices, such as gas stations and ECR (electronic cash registers)
Needless to say, the present invention can also be applied to POS system terminals such as cash registers, unmanned supermarket terminals, and other vending machines that sell goods using cards. This applies not only to terminals that operate online, but also to devices that operate offline. In this case, the keywords are stored in the memory of the device rather than in the center. Furthermore, the present invention can be applied to passbooks with magnetic stripes in which transaction data is stored. All you have to do is record the keyword on the magnetic stripe of your passbook. Brief Description of the Drawings Figure 1 is a block diagram showing the overall configuration of the transaction processing device. Figure 2 is a block diagram showing the overall configuration of the transaction processing device.
FIG. 3 is a diagram showing the contents of the customer information file. FIG. 4 is a flow chart showing the operation of the CD. FIG. 5 is a flow chart showing the operation of the WM. FIG. 7 is a flowchart showing the operation of the center, and is a diagram showing how keywords are converted into numerical values.

1...control center, 2.・・・．・．． CD, 3
...WM, 10, 20, 30...CPU,
1 1...Customer information file, 24, 36...
...Card reader and writer, 33...Keyboard.

Figure 1 Figure 2 Figure 3 Figure 4a Figure 4b Figure 5 Figure 6 Figure 7

Claims (1)

[Claims] 1 Using a recording medium on which user-specific data is recorded, by comparing the data read from the recording medium or the data read from the memory accessed by this read data with the data keyed in by the user, In a transaction processing device that confirms a genuine user, the recording medium has a storage area for keywords, and the transaction processing device has a memory for storing keywords for each user, and a memory for reading and updating data on the recording medium. a first reading/writing device for writing data that should be reissued; a means for detecting the occurrence of an error that requires reissuance of the recording medium; and an input means for inputting necessary data for reissuing the recording medium;
A second writing means to the recording medium for reissuing the recording medium; and inspecting the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memory. a calculation means; a first control means for permitting a transaction only when both keywords have a predetermined correspondence relationship; and for creating a new keyword and thereby updating the keyword in the memory and the recording medium; and an input means. A second control means that obtains a keyword corresponding to the keyword of the corresponding user in the memory based on the input data, and causes the second writing means to write data including this keyword on the recording medium. and,
A transaction processing device equipped with