JP4720219B2 - PIN / password review alerting method, system, and device - Google Patents

Description

  The present invention relates to a method, a system, and an apparatus for inducing a security code / password review, and more particularly, a method, a system, and a device for appropriately providing a security code / password review without giving a user a sense of incongruity. About.

  Automatic cash transaction equipment, PCs connected to the Internet, etc. can be used to withdraw deposits or access personal information, etc. by entering a user ID, PIN, or password as information that identifies the individual user It is said. However, since the input of the password / password may be stolen, it is not preferable to continue using the same password / password.

In response to this, a method of changing a personal identification number in a transaction of an automatic teller machine has been disclosed (see Patent Document 1).
In the method described in Japanese Patent Laid-Open No. 9-330371, as shown in the conventional PIN code changing method in FIG. 11, the automatic teller machine (terminal device) is a normal transaction selected by the user, that is, the customer. After execution (deposit, payment, transfer, balance inquiry, etc.), the PIN code change screen is displayed and the new PIN code input information is sent to the host computer (host device) to change the PIN number. Make it.

  In the method shown in FIG. 11, a password change screen is automatically displayed after a normal transaction is executed by an automatic teller machine (terminal device), and the entered new password is transmitted to the host device to update the password. This is a method for the customer, and it is troublesome for the customer to promote the update even in a situation where the update is not necessary. In addition, the newly entered personal identification number is updated as it is without any particular check.

  In order to make it easier to remember the PIN, customers may use part of their personal information, such as their date of birth and phone number, as their PIN, but personal information such as their date of birth and phone number is generally used. It is not suitable as a PIN / password because it is easily known and easily recalled.

  For this, the personal identification number transmitted from the automatic teller machine (terminal device) is compared with the personal information registered in the host device by the host device and can be easily recalled from the personal information. If this happens, there is also a method of sending a message to that effect to the automatic teller machine (terminal device) and prompting the change again. However, in such a method, since the personal identification number is transmitted to the host device, processed by the host device, and the processing result is sent back to the automatic teller machine (terminal device), the customer is kept waiting for the time required for processing. At the same time, an extra load is applied to the host device.

  The present invention solves such a problem, determines the necessity of changing the personal identification number on the terminal device side, and only when it is determined that the change is necessary, a method, a system, and a system for prompting the customer to review the personal identification number / password, And an object to provide an apparatus.

The first invention is a method for instructing the user to review the password / password, and the terminal device receives the user ID, password / password, and processing request information entered by the user. The host device that receives and transmits to the host device and receives the user ID, password / password, and processing request information confirms the validity of the user ID and password / password with reference to the retained personal information. The personal information corresponding to the user ID and the processing result are transmitted to the terminal device, and the terminal device receiving the personal information corresponding to the user ID and the processing result outputs the processing result. In addition, when the entered personal identification number / password is compared with the received personal information, and it is determined that the personal identification number / password and the personal information are similar, the personal identification number / password And wherein the prompting the change.

  The second invention is a system for instructing the user to review the password / password, and means for inputting the user ID, password / password, and processing request information, and display means. A connection means for transmitting the input information to the host device and receiving the personal information corresponding to the user ID and the processing result sent from the host device, a means for holding the received personal information, and a password / password And a terminal device having means for comparing personal information with each other, determination means, and output means, and receiving the user ID, password / password, and processing request information sent from the terminal device, Corresponding personal information and connection means for sending processed results to the terminal device, means for holding personal information, and validity of received user ID and password / password The terminal device compares the input personal identification number / password with the received personal information and inputs the input information. When the personal identification number / password and personal information are similar, a screen for prompting the change of the personal identification number / password is displayed on the display means.

  The third invention is a terminal device for prompting the user to review the password / password, and means for inputting the user ID, password / password, and processing request information. Connection means for transmitting information and receiving personal information sent and processing results; means for holding the received personal information; means for comparing the personal identification number / password and personal information; Output means, and compares the input personal identification number / password with the received personal information. If the input personal identification number / password and personal information are similar, the personal identification number / password is displayed on the display means. A screen for prompting a password change is displayed.

  A fourth aspect of the invention is a host device that receives information on a user ID, a password / password, and a processing request and executes processing, and the user ID, password / password, and processing request that are sent The connection means for transmitting personal information corresponding to the user ID and the processed result, the means for holding the personal information, and the validity of the received user ID and password / password are retained. Control means for confirming and executing processing by referring to personal information to be processed.

  The fifth invention is a method for instructing the user to review the password / password, and the terminal device receives the user ID, password / password, and processing request information entered by the user. The host device that receives and transmits to the host device and receives the user ID, password / password, and processing request information confirms the validity of the user ID and password / password with reference to the retained personal information. Then, the personal information corresponding to the user ID is transmitted to the terminal device, the process is executed, the processing result is transmitted to the terminal device, and the terminal device receiving the personal information corresponding to the user ID is input. If the personal identification number / password is compared with the received personal information and it is determined that the personal identification number / password and the personal information are similar, the user is prompted to change the personal identification number / password, and Processing result received the terminal apparatus, and outputs the processing result.

  According to the present invention, the user is reminded only when the password / password needs to be changed, and the validity of the newly entered password / password is promptly determined, so that it can be used unnecessarily. It is possible to eliminate waiting for a person.

  FIG. 1 shows a conceptual diagram of a security code review and arousing guidance system in an automatic cash transaction system to which the present invention is applied.

  The automatic teller machine transmits a processing request such as cash withdrawal entered by a user, that is, a customer, a customer ID, and a personal identification number to the host device. Confirm that processing is possible, and send the processing result and personal information to the automatic teller machine. The automatic cash transaction apparatus that has received the processing result and personal information performs processing such as cash withdrawal / passbook entry, and compares / determines whether the received personal information is similar to the personal identification number. If it is determined, the user is prompted to enter a new password.

  FIG. 2 is a functional block diagram of a system that performs the processing, and FIG. 3 illustrates a processing flow example 1 of the automatic teller machine in the system that performs the processing. As shown in FIG. 2, the system receives a request from a customer, sends a request to the host device 2, and outputs a result sent back from the host device 2, and requested from the cash automatic transaction device 1. A host device 2 that performs processing and sends the result back to the automatic teller machine 1 is connected.

  As an interface with a customer, the automatic teller machine 1 includes a means 12 for displaying information on processing contents, a requesting process, a means 13 for inputting a personal identification number, a cash card reader 14, a means 16 for making deposits and withdrawals, a bankbook Further includes a passbook processing means 17 for reading and writing, a connection means 15 with the upper apparatus 2, a means 18 for holding personal information received from the upper apparatus, and a means for comparing the held personal information with a personal identification number. 19 and means 11 for controlling the entire automatic teller machine 1 are provided.

  The host device 2 includes a connection unit 22 with the automatic teller machine 1, a customer master 23 that holds customer deposit information, personal information, and the like, and a unit 21 that controls the entire host device 2.

  Hereinafter, the processing flow will be described with reference to FIG. The control means 11 of the automatic teller machine 1 starts processing upon accepting a processing request such as cash withdrawal entered by the customer by operating the input means 13 in accordance with the display content of the display means 12 (step S1). Reads the customer ID from the cash card inserted into the cash card reader 14 (step S2), inputs the password entered by the customer from the input means 13 (step S3), and connects the processing contents, customer ID, and password to the connection means. 15 is transmitted to the host device 2 via step 15 (step S4).

  The control unit 21 of the higher-level device 2 that has received the processing content, customer ID, and password through the connection unit 22 refers to the customer master 23 and confirms the processing content, customer ID, and password, and executes the processing. The processing result and personal information related to the received customer ID are sent back to the automatic teller machine 1.

  The control means 11 of the automatic teller machine 1 that has received the processing result and personal information in step S5 holds the received personal information in the personal information holding means 18 in step S6, and also includes the deposit / withdrawal means 16 and passbook processing. The processing result such as cash cash out is outputted by means 17.

  Next, in step S7, the comparison means 19 verifies the similarity between the currently entered personal identification number and the personal information held by the personal information holding means 18, and if it is determined that they are not similar, processing is performed. If it is determined that they are similar to each other, the process proceeds to step S8, and a password change alert screen is displayed on the display means 12 to prompt the user to input a new password. FIG. 4 shows an example of a screen for invoking the password change.

  If the customer selects “do not change” the personal identification number by the input means 13 in step S9, the process ends. If the customer selects “change”, the process proceeds to step S10. Accept number input.

  In step S11, the comparison means 19 compares the newly entered password with the personal information held by the personal information holding means 18, and determines that the newly entered password is similar to the personal information. In this case, the process returns to step S8, and if it is determined that they are not similar, the process proceeds to step S12, where the new password is transmitted to the higher-level device 2, and the higher-level device 2 updates the password and ends the process. .

  FIG. 5 shows a processing flow example 2 of the automatic teller machine according to the present invention. The functional blocks of the second embodiment are the same as those of the first embodiment, and steps S21 to S25 are the same as steps S1 to S5 of the first embodiment.

  In step S26, the received personal information is held in the personal information holding means 18. Next, in step 26, the comparison means 19 verifies the similarity between the currently entered personal identification number and the personal information held by the personal information holding means 18, and if it is determined that they are not similar, step The process proceeds to S31, and if it is determined that they are similar, the process proceeds to step S27, and a password change alert screen is displayed on the display means 12 to prompt the input of a new password.

  In step S28, if the customer selects "do not change" the personal identification number by the input means 13, the process proceeds to step S31. If the customer selects "change", the process proceeds to step S29, and the input means 13 uses the new personal identification number. Accept number input.

  In step S30, the comparing means 19 compares the newly entered personal identification number with the personal information held by the personal information retaining means 18 and determines that the newly entered personal identification number and the personal information are similar. In this case, the process returns to step S27, and if it is determined that they are not similar, the process proceeds to step S31, and the processing result such as cash and cash out is output by the deposit / withdrawal means 16 and the passbook processing means 17.

  Next, in step S32, the new password is transmitted to the host device 2, and the host device 2 updates the password and ends the process.

  FIG. 6 shows a processing flow example 3 of the automatic teller machine according to the present invention. In the third embodiment, processing subsequent to step S6 of the first embodiment is performed.

  In step 47, the comparison means 19 verifies the similarity between the currently entered personal identification number and the personal information held by the personal information holding means 18 and determines that they are not similar, that is, it is not necessary to change the personal identification number. If this is the case, the process proceeds to step S48, and a password change selection screen is displayed on the display means 12, and the process proceeds to step S50. If it is similar, that is, if it is determined that the password change is required, the process proceeds to step S49. An urging screen is displayed on the display means 12 to prompt the input of a new password. An example of a screen for selecting the password change is shown in FIG.

  In step S50, if the customer selects “do not change” the password using the input means 13, the process ends. If the user selects “change”, the process proceeds to step S51. Accept number input.

  In step S52, the comparing means 19 compares the newly entered personal identification number with the personal information held by the personal information holding means 18 and determines that the newly inputted personal identification number and the personal information are similar. If this is the case, the process proceeds to step S53, the password re-input prompt screen is displayed, and the process returns to step S50. If it is determined that they are not similar, the process proceeds to step S54, and the new password is transmitted to the host device 2. The host device 2 updates the password and ends the process. An example of a password re-input prompting screen is shown in FIG.

  FIG. 9 shows a processing flow example 4 of the automatic teller machine according to the present invention. In the fourth embodiment, processing subsequent to step S4 in the first embodiment is performed.

  In step S4, the control unit 21 of the host device 2 that has received the processing content, customer ID, and password via the connection unit 22 refers to the customer master 23 and cashes personal information related to the received customer ID. While sending back to the automatic transaction apparatus 1, the processing content, customer ID, and password are confirmed, and processing is executed. In addition, the high-order apparatus 2 sends back a process result to the automatic teller machine 1 after completion | finish of a process.

  In step S <b> 61, the control unit 11 of the automatic teller machine 1 that has received the personal information holds the received personal information in the personal information holding unit 18.

  Next, in step S62, the comparison unit 19 verifies the similarity between the currently entered personal identification number and the personal information held by the personal information holding unit 18, and is not similar, that is, the personal identification number does not need to be changed. If it is determined that the password number change selection screen is displayed on the display means 12, the process proceeds to step S65. If it is similar, that is, if it is determined that the password number needs to be changed, the process proceeds to step S64. A password change prompting screen is displayed on the display means 12 to prompt the user to input a new password.

  In step S65, if the customer selects “do not change” the password by the input means 13, the process proceeds to step S70. If the customer selects “change”, the process proceeds to step S66. Accept number input.

  In step S67, the comparing means 19 compares the newly entered personal identification number with the personal information retained by the personal information retaining means 18, and determines that the newly entered personal identification number and the personal information are similar. If so, the process proceeds to step S69, the password re-input prompting screen is displayed, and the process returns to step S65. If it is determined that they are not similar, the process proceeds to step S68, and the new password is transmitted to the host device 2. Proceeding to S70, the host device 2 updates the password and ends the process.

  In step S70, the reception of the processing result from the host device 2 is confirmed. If it has not been received, the process waits. If it has been received, the process proceeds to step S71. The processing result such as payout is output and the processing is terminated.

  FIG. 10 shows a processing flow example 5 of the automatic teller machine according to the present invention. In the fifth embodiment, processing subsequent to step S4 of the first embodiment is performed.

  The host device 2 according to the fifth embodiment holds a change history of the password for each customer ID in the customer master 23.

  In step S4, the control means 21 of the host device 2 that has received the processing contents, customer ID, and password via the connection means 22 refers to the customer master 23 and relates to the received customer ID before. The used personal identification number is sent back to the automatic teller machine 1, and the processing contents, customer ID, personal identification number are confirmed and processing is executed. In addition, the high-order apparatus 2 sends back a process result to the automatic teller machine 1 after completion | finish of a process.

  In step S81, the control means 11 of the automatic teller machine 1 that has received the personal information holds the received old password in the personal information holding means 18.

  Next, in step S82, the comparison means 19 compares the currently entered personal identification number with the old personal identification number held by the personal information holding means 18 and determines that they are not similar, ie, it is not necessary to change the personal identification number. If YES in step S83, the password change selection screen is displayed on the display unit 12, and the flow advances to step S85. If it is similar, that is, if it is determined that the password change is required, the flow advances to step S84, and the password is changed. A change alert screen is displayed on the display means 12 to prompt the user to enter a new password.

  In step S85, if the customer selects "do not change" the password by the input means 13, the process proceeds to step S90, and if "change" is selected, the process proceeds to step S86. Accept number input.

  In step S87, the comparison means 19 compares the newly entered password with the old password held by the personal information holding means 18, and if the newly entered password matches the old password. In step S89, the password re-input prompting screen is displayed, and the flow returns to step S85. If they do not match, the flow proceeds to step S88, the new password is transmitted to the host device 2, and the process proceeds to step S90. 2 updates the password and ends the process.

  In step S90, the reception of the processing result from the host device 2 is confirmed. If it has not been received, the process waits for reception. If it has been received, the process proceeds to step S91. The processing result such as payout is output and the processing is terminated.

(Appendix 1)
In this method, the terminal device accepts the user ID, password / password, and processing request information input by the user and sends them to the host device. The host device that has received the user ID, password / password, and processing request information confirms the validity of the user ID and password / password with reference to the stored personal information and executes the processing. The personal information corresponding to the user ID and the processing result are transmitted to the terminal device, and the personal information corresponding to the user ID and the terminal device receiving the processing result output the processing result and the input password. Compare the number / password with the received personal information,
A method of prompting a change of a personal identification number / password when it is determined that the personal identification number / password and the personal information are similar.

(Appendix 2)
A system for prompting the user to review the password / password, and means for inputting the user ID, password / password, and processing request information, display means, and input information The connection means for receiving the personal information corresponding to the user ID and the processing result transmitted to the apparatus and sent from the host apparatus, the means for holding the received personal information, the personal identification number / password and the personal information are compared. A terminal device having means for determining, determining means, and output means, and receiving user ID, password / password, and processing request information sent from the terminal device, and personal information corresponding to the user ID, and Connection means for transmitting the processed result to the terminal device, means for holding personal information, and personal information for holding the validity of the received user ID and password / password. The terminal device compares the input personal identification number / password with the received personal information, and inputs the personal identification number / password. When the personal information is similar to the personal information, a system for displaying a screen prompting the change of the personal identification number / password on the display means.

(Appendix 3)
A terminal device that prompts the user to review the password / password, and a means for inputting the user ID, password / password, and processing request information, and the input information is transmitted and transmitted. Connection means for receiving the received personal information and processing results, means for holding the received personal information, means for comparing the personal identification number / password and personal information, determination means, and output means When the entered personal identification number / password is compared with the received personal information, and the entered personal identification number / password is similar to the personal information, a screen prompting the display means to change the personal identification number / password A terminal device characterized by displaying.

(Appendix 4)
A host device that receives the user ID, password / password, and processing request information and executes processing, receives the received user ID, password / password, and processing request information, Refer to the personal information that holds the personal information corresponding to the user ID and the connection means for transmitting the processed result, the means for holding the personal information, and the validity of the received user ID and password / password. And a control unit for confirming and executing the processing.

(Appendix 5)
In this method, the terminal device accepts the user ID, password / password, and processing request information input by the user and sends them to the host device. The host device that has received the user ID, password / password, and processing request information confirms the validity of the user ID and password / password with reference to the personal information held, and sets the user ID as the user ID. The terminal device that transmits the corresponding personal information to the terminal device, executes the process, transmits the processing result to the terminal device, and receives the personal information corresponding to the user ID, the input personal identification number / password, The received personal information is compared, and if it is determined that the entered personal identification number / password is similar to the personal information, the personal identification number / password is prompted to be changed, and the processing result is received. It is the terminal apparatus, wherein the outputting the processing result.

(Appendix 6)
A system for prompting the user to review the password / password, and means for inputting the user ID, password / password, and processing request information, display means, and input information The connection means for receiving the personal information corresponding to the user ID and the processing result transmitted to the apparatus and sent from the host apparatus, the means for holding the received personal information, the personal identification number / password and the personal information are compared. A terminal device having means for determining, determining means, and output means, and receiving user ID, password / password, and processing request information sent from the terminal device, and personal information corresponding to the user ID, and Connection means for transmitting the processed result to the terminal device, means for holding personal information, and personal information for holding the validity of the received user ID and password / password. The terminal device compares the input personal identification number / password with the received personal information, and inputs the personal identification number / password. If the personal information is similar to the personal information, a screen prompting the change of the personal identification number / password is displayed on the display means, and the processing result is received and the processing result is output. Receives user ID, password / password, and processing request information to be sent, confirms the validity of the received user ID and password / password with reference to the stored personal information, and supports user ID Personal information to be transmitted to the terminal device, and further processed results are transmitted to the terminal device.

(Appendix 7)
A host device that receives the user ID, password / password, and processing request information and executes processing, receives the received user ID, password / password, and processing request information, Personal information corresponding to the user ID and connection means for transmitting the processed result to the terminal device, means for holding the personal information, and personal information holding the validity of the received user ID and password / password And receiving the received user ID, password / password, and processing request information, and receiving the received user ID, password / password. A higher-level device characterized in that validity is confirmed by referring to held personal information, personal information corresponding to a user ID is transmitted to a terminal device, and further processed results are transmitted to the terminal device.

(Appendix 8)
A method for inviting a review of a password / password as described in Appendix 1, wherein the entered password / password is compared with the received personal information, and the entered password / password and personal information are If it is determined that they are not similar, a method for selecting whether or not to change the password / password is selected.

(Appendix 9)
The terminal device according to attachment 3, wherein the input personal identification number / password is compared with the received personal information, and it is determined that the input personal identification number / password and personal information are not similar Displays a screen for selecting whether or not to change the password / password.

(Appendix 10)
A system for inducing the revision of the password / password as described in Appendix 6, wherein the host device further retains the password / password change history (old password / password) as personal information and sends it from the terminal device. The user ID, password / password, and processing request received are received, the validity of the user ID, password / password is confirmed with reference to the retained personal information, and the old ID corresponding to the user ID is stored as personal information. The terminal device that transmits the personal identification number / password to the terminal device, executes the process, transmits the processing result to the terminal device, and receives the old personal identification number / password corresponding to the user ID. The password is compared with the received old password / password, and if there is an old password / password that matches the entered password / password, Encourage changes in number / password, further, the terminal device which has received the processing result, and outputs the processing result system.

Conceptual diagram of the security code review alert system Security code review alert system function block diagram Processing flow example 1 of the automatic teller machine according to the present invention Security code change reminder screen example Processing flow example 2 of the automatic teller machine according to the present invention Processing flow example 3 of automatic teller machine according to the present invention Security code change selection screen example Example of password re-entry reminder screen Processing flow example 4 of automatic teller machine according to the present invention Processing flow example 5 of automatic teller machine according to the present invention Conventional method of changing PIN

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Cash automatic transaction apparatus 2 Host apparatus 11, 21 Control means 12 Display means 13 Input means 14 Cash card reader 15, 22 Connection means 16 Deposit / withdrawal means 17 Passbook processing means 18 Personal information holding means 19 Comparison means 23 Customer master

Claims (5)

A method for inviting users to review their PIN / password,
The terminal device accepts the user ID, password / password, and processing request information entered by the user and sends them to the host device.
The host device that has received the user ID, password / password, and processing request information confirms the validity of the user ID, password / password with reference to the stored personal information, executes the process, and uses it. Personal information corresponding to the person ID and the processing result are transmitted to the terminal device,
The terminal device that has received the personal information corresponding to the user ID and the processing result outputs the processing result, compares the input personal identification number / password with the received personal information,
A method of prompting a change of a personal identification number / password when it is determined that the personal identification number / password and the personal information are similar. A system that alerts users to review their PIN / password,
Means for inputting user ID, personal identification number / password, and processing request information, display means, personal information corresponding to the user ID transmitted from the host device and transmitted from the host device; and A terminal device having connection means for receiving the processing result, means for holding the received personal information, means for comparing the personal identification number / password and personal information, determination means, and output means;
Receiving user ID, personal identification number / password, and processing request information sent from the terminal device, and storing personal information corresponding to the user ID and processing results to the terminal device, and holding personal information And a host device having a control means for confirming the validity of the received user ID and password / password with reference to the stored personal information and executing the processing,
The terminal device compares the entered password / password with the received personal information,
A system characterized by displaying a screen prompting a change of a personal identification number / password on a display means when the inputted personal identification number / password and personal information are similar. A terminal device that alerts the user to review the password / password,
Means for inputting user ID, password / password, and processing request information;
A connection means for transmitting the input information and receiving the personal information sent and the processing result;
Means for holding received personal information;
A means of comparing the personal identification number / password and personal information;
A determination means;
Output means,
Compare the entered PIN / password with the received personal information,
A terminal device that displays a screen for prompting a change of a personal identification number / password on a display means when the inputted personal identification number / password is similar to personal information. A host device that receives information of a user ID, a password / password, and a processing request and executes processing;
A connection means for receiving the received user ID, password / password, and processing request information, and transmitting personal information corresponding to the user ID and the processing result;
Means for holding personal information;
A host device comprising: control means for confirming validity of a received user ID and password / password with reference to held personal information and executing processing. A method for inviting users to review their PIN / password,
The terminal device accepts the user ID, password / password, and processing request information entered by the user and sends them to the host device.
The host device that has received the user ID, password / password, and processing request information checks the validity of the user ID, password / password with reference to the personal information held, and corresponds to the user ID. Send personal information to the terminal device, execute the process, send the processing result to the terminal device,
The terminal device that has received the personal information corresponding to the user ID compares the input personal identification number / password with the received personal information,
If it is determined that the entered PIN / password and personal information are similar, prompt the user to change the PIN / password,
Furthermore, the terminal device that has received the processing result outputs the processing result.

Images