JP5465997B2 - Financial system - Google Patents

Description

  The present invention relates to data communication between a customer operation terminal, a portable terminal held by a bank clerk, and a server installed in the bank in a financial institution.

  A system for exchanging messages among a management server, an automatic transaction apparatus, and a mobile terminal is known (for example, Patent Document 1). In this system, the management server and the automatic transaction apparatus are connected by wire, the automatic transaction apparatus and the mobile terminal are connected by wireless (non-contact IC chip), and the management server and the mobile terminal are connected automatically. Connected through the device.

JP 2007-193749 A

  A portable terminal is carried by a clerk, and the clerk moves to various places in the line. In the prior art, non-contact IC chips such as FeliCA (registered trademark) and Mifare (registered trademark) are used for short-distance communication, so when the communication distance is short and the mobile terminal does not exist in the vicinity of the automatic transaction apparatus It was difficult to call a mobile terminal from the server. On the other hand, if the communication distance between the automatic transaction apparatus and the mobile terminal is increased so that the mobile terminal can be called, there is a possibility that the communication performed between the automatic transaction apparatus and the mobile terminal may be intercepted from the server. .

  The present invention has been made to solve at least a part of the above-described problems, and enables the mobile terminal to be called and improves the security of communication when transmitting data of the mobile terminal from the server. For the purpose.

SUMMARY An advantage of some aspects of the invention is to solve at least a part of the problems described above, and the invention can be implemented as the following forms or application examples.
According to an embodiment of the present invention, a financial system is provided. The financial system includes a server, a fixed terminal, a mobile terminal, a first wireless communication path for calling the mobile terminal from the server, and data communication between the server and the fixed terminal. A wired communication path and a second wireless communication path for communicating data between the fixed terminal and the mobile terminal, different from the first wireless communication path, and stored in the server The data is transmitted to the mobile terminal via the wired communication path and the second wireless communication path instead of the first wireless communication path, and the mobile terminal generates an encryption key and sends it to the server. The server transmits the encryption key, the server encrypts data to be transmitted to the mobile terminal using the encryption key, transmits the encrypted data to the fixed terminal using the wired communication path, and the fixed terminal. The terminal Transmitting the encrypted data to the mobile terminal using the wireless communication channel. According to this form of the financial system, the mobile terminal can be called, the call path of the mobile terminal is different from the data communication path from the server to the mobile terminal, and the data is encrypted. It is possible to improve the security of communication when transmitting terminal data.

[Application Example 1]
A financial system for communicating data between a server, a fixed terminal, a mobile terminal, a first wireless communication channel for calling the mobile terminal from the server, and the server and the fixed terminal And a second wireless communication path for communicating data between the fixed terminal and the mobile terminal, different from the first wireless communication path, and stored in the server The transmitted data is transmitted to the mobile terminal via the wired communication path and the second wireless communication path instead of the first wireless communication path.
According to this application example, the mobile terminal can be called, and the call path of the mobile terminal is different from the data communication path from the server to the mobile terminal. Therefore, communication when data of the mobile terminal is transmitted from the server. It is possible to improve security.

[Application Example 2]
The financial system according to Application Example 1, wherein a communication distance of the second wireless communication path is shorter than a communication distance of the first wireless communication path.
Since the communication distance of the second wireless communication path is shorter than the communication distance of the first wireless communication path, it is difficult to intercept the second wireless communication path.

[Application Example 3]
In the financial system according to Application Example 1 or Application Example 2, the mobile terminal generates an encryption key, transmits the encryption key to the server, and the server uses the encryption key to send data to the mobile terminal The encrypted data is transmitted to the fixed terminal using the wired communication path, and the fixed terminal transmits the encrypted data to the mobile terminal using the second wireless communication path. Send to the financial system.
According to this application example, since the data is encrypted, security can be improved.

[Application Example 4]
In the financial system according to Application Example 3, the cipher is a public key cipher, the mobile terminal generates a public key and a secret key, transmits the public key to the server, and the server transmits the public key. The data to be sent to the mobile terminal using is encrypted, and the encrypted data is transmitted to the fixed terminal using the wired communication path, and the fixed terminal uses the second wireless communication path to transmit the encrypted data. A financial system, wherein encrypted data is transmitted to the mobile terminal, and the mobile terminal decrypts the encrypted data using the secret key.
According to this application example, since the secret key necessary for decryption is not transmitted, it is possible to improve data security.

  The present invention can be realized in various forms, and can be realized in various forms such as a communication method in a financial institution such as an information communication system in addition to a financial system.

It is explanatory drawing which shows the system configuration | structure of a financial system. It is explanatory drawing which shows the functional block of a financial system. It is a sequence diagram of operation | movement of a financial system. It is an operation | movement flowchart of a customer terminal. It is an operation | movement flowchart of a server. It is an operation | movement flowchart of a portable terminal.

  FIG. 1 is an explanatory diagram showing a system configuration of a financial system. The financial system 10 is installed in a financial institution such as a bank, for example. The financial system 10 includes a server 100, a customer terminal 200 (fixed terminal), and a mobile terminal 300 (mobile terminal). The server 100 has a function of performing banking operations and accumulates various data necessary for performing banking operations. The server 100 sends data to the customer terminal 200 or the mobile terminal 300 in response to a request from the customer terminal 200 or the mobile terminal 300. The customer terminal 200 is fixedly installed in a lobby in the bank, and has a function for a customer to input transaction details instead of entering a bank transaction slip. The portable terminal 300 is carried by a bank clerk or an attendant (hereinafter referred to as an “operator”) and has a function of displaying customer information transmitted from the server 100.

  The server 100 and the mobile terminal 300 are connected by a first wireless communication path 410, and the customer terminal 200 and the mobile terminal 300 are connected by a first wireless communication path 410, and the server 100 and the customer terminal are connected. 200 is connected by a wired communication path 400. Here, the first wireless communication path 410 has a communication distance in which communication is possible regardless of whether the mobile terminal 300 is in the row. On the other hand, the communication distance of the second wireless communication path 420 is shorter than the communication distance of the first wireless communication path 410, and communication between the customer terminal 200 and the portable terminal 300 can be performed only in the vicinity of the customer terminal 200. In this embodiment, a wireless LAN (Local Area Network) is used as the first wireless communication path 410, and wireless USB (wireless USB or WUSB) is used as the second wireless communication path 420. Therefore, in this embodiment, the “first wireless communication path 410” is also referred to as “wireless LAN 410”, and the “second wireless communication path 420” is also referred to as “wireless USB 420”. In the wireless LAN, for example, a communication distance of about 100 m and a communication speed of 54 MB / s are possible. The wireless USB has a communication distance of 10 m or less, but a communication speed of 480 MB / s is possible. In this embodiment, a wired LAN is used as the wired communication path 400. In this embodiment, the “wired communication path 400” is also referred to as “wired LAN 400”. In addition, what was mentioned here is an example of a communication path, and various communication paths other than the example given here as the wired communication path 400, the 1st wireless communication path 410, and the 2nd wireless communication path 420 are shown. It is possible to adopt.

  FIG. 2 is an explanatory diagram showing functional blocks of the financial system. The server 100 includes a CPU 110, a RAM 120, a hard disk 130, and a wired communication interface 140 (hereinafter, “interface” is abbreviated as “IF”). The hard disk 130 stores an encryption program 132 and data 134. The data 134 includes various information and data necessary for carrying out banking operations such as customer information and transaction information.

  The customer terminal 200 includes a control device 210 (CPU 210), a wired communication IF 220, a wireless communication IF 230, a card reader 240, and a display unit 250 with a touch panel. The wired communication IF 220 is connected to the wired communication IF of the server 100 via the wired LAN 400. The wireless communication IF 230 is used for wireless communication with the mobile terminal 300. The card reader 240 reads the bank card possessed by the customer and acquires the customer name and account number. The display unit 250 with a touch panel accepts input of transaction details from a customer or displays various information to the customer.

  The portable terminal 300 includes a control device 310 (CPU 310), wireless communication IFs 320 and 330, a finger vein authentication device 340, and a display unit 250 with a touch panel. The wireless communication IF 320 is used for communication with the server 100. An access point 405 is disposed on the wired LAN 400, and the wireless communication IF 320 and the access point 405 are connected by the wireless LAN 410. In this embodiment, the wired LAN 400 includes a plurality of access points 405, and the position of the mobile terminal 300 is estimated using the radio wave intensity of communication between each of the plurality of access points 405 and the mobile terminal 300. Is possible. The wireless communication IF 330 is used for communication with the customer terminal 200. The wireless communication IF 330 of the mobile terminal 300 and the wireless communication IF 230 of the customer terminal 200 are connected by a wireless USB 420. The finger vein authentication device 340 acquires the finger vein pattern of the operator (person) who uses the mobile terminal 300. This finger vein pattern is used for operator authentication. Instead of the finger vein authentication device 340, a fingerprint authentication device or another biometric authentication device may be used. The display unit with a touch panel 350 accepts input from an operator or displays information sent from the server 100.

  FIG. 3 is a sequence diagram of the operation of the financial system. In FIG. 3, for the steps processed by the customer terminal 200, the process step number is set to step S <b> 2 ** in accordance with the code (200) given to the customer terminal 200. Similarly, for the steps processed by the server 100, the step number is S1 **, and for the steps processed by the mobile terminal 300, the step number is S3 **. In FIG. 3, arrows indicate transmission / reception of signals such as requests and data, solid lines indicate transmission / reception of signals by wired communication, and broken lines indicate transmission / reception of signals by wireless communication.

  In step S200, the CPU 210 of the customer terminal 200 receives a transaction business selection from the customer. For example, when the transaction is a loan application, a loan selection is received from the transaction menu. Next, in step S205, the display unit with a touch panel 250 of the customer terminal 200 accepts data input such as the customer's address, name, and amount. If the customer has a trading account, the card reader 240 reads the information stored in the emboss of the cash card or stored in the magnetic tape or IC chip, so that the customer's name, You may read the account number. The CPU 210 transmits to the server 100 data such as the result of transaction transaction selection and the input customer address, name, and amount.

  In step S <b> 100, the CPU 110 of the server 100 receives data such as transaction selection, customer address, name, amount, etc. sent from the customer terminal 200. In the next step S105, the CPU 110 executes transaction processing using data such as transaction selection, customer address, name, and amount.

  In step S230, the customer terminal 200 requests the server 100 to call an operator (employee). This call request is executed when the customer inputs the operator's call request to the display unit 250 with a touch panel of the customer terminal 200. The case where the customer needs to call the clerk is, for example, a case where the customer needs to support the clerk when the customer operates the customer terminal 200 or the transaction.

  When the CPU 110 of the server 100 receives an operator call request from the customer terminal 200, the CPU 110 calls the mobile terminal 300 to call the operator. This is because the portable terminal 300 is owned by an operator and can be called through the portable terminal 300. In step S <b> 115, the CPU 110 confirms the position of the mobile terminal 300. The position of the mobile terminal 300 can be estimated as follows. In the present embodiment, as described above, a plurality of access points 405 are arranged on the wired LAN 400 (FIG. 2). The CPU 310 of the mobile terminal 300 can obtain the distance from the mobile terminal 300 to each access point 405 from the radio wave intensity in communication with each access point 405. And CPU310 estimates the position of the portable terminal 300 from those distances. The CPU 110 of the server can acquire the position of the mobile terminal 300 by acquiring information indicating this position from the CPU 310 of the mobile terminal 300.

  In step S120, the server CPU 110 calls the mobile terminal 300 closest to the customer terminal 200. The call from the portable terminal 300 to the operator may be performed by displaying a call on the display unit 350 with a touch panel of the portable terminal 300 or by vibrating the portable terminal 300. In step S305, the called operator of the portable terminal 300 responds whether or not the customer can be handled. Specifically, when CPU 310 of portable terminal 300 detects that a command indicating that a customer can be handled is input to display unit with touch panel 350, CPU 310 responds to server 100 that the customer can be handled. If the customer can be handled, in step S325, the CPU 310 of the mobile terminal 300 acquires and confirms the operator ID. This operator ID confirmation can be performed by, for example, finger vein authentication or operator ID input to the display unit 350 with a touch panel. Then, the finger vein pattern or operator ID and information (for example, identification information) of the portable terminal 300 are transmitted to the server 100. If the finger vein pattern or the operator ID and the information of the portable terminal 300 are correct, the CPU 110 of the server 100 approves the operator and the portable terminal 300 in step S135.

  When the operator of the mobile terminal 300 closest to the customer terminal 200 is not capable of handling a customer, for example, when the operator is already handling another customer, the operator displays a message indicating that the customer cannot be handled with a touch panel. To the unit 350. The CPU 310 of the mobile terminal 300 transmits to the server 100 that the customer cannot be handled. Upon receiving this response, the CPU 110 of the server 100 selects the portable terminal 300 close to the next closest customer terminal 200 and performs the same processing. In the case where no response is received from the mobile terminal 300 selected within a certain period, the mobile terminal 300 close to the next closest customer terminal 200 is selected and the same processing is performed. In the present embodiment, the mobile terminal 300 is selected in the order closest to the customer terminal 200. However, the selection order of the mobile terminal 300 may be determined in advance, and the operator in charge is determined according to the customer. You may keep it. Further, the CPU 110 may be excluded from the call target for the mobile terminal 300 that is already serving customers. Moreover, it is preferable to select the mobile terminal 300 possessed by an operator in a place (lobby) in the same area as the place where the customer terminal 200 is located. The operator who can handle the customer moves to the vicinity of the customer terminal 200 where the customer who requested the call is located, and supports the customer.

  The operator needs customer information when dealing with customers. The operator acquires customer information from the server 100. In addition to information that can be shown to customers, customer information includes credit information that cannot be shown to customers. Therefore, it is preferable to display the customer information not on the customer terminal 200 but on the mobile terminal 300 owned by the operator. Hereinafter, processing for displaying customer information on the mobile terminal 300 will be described.

  In step S <b> 140, the CPU 110 of the server 100 transmits a communication key K <b> 1 that is an encryption key for maintaining communication security between the customer terminal 200 and the portable terminal 300 to the customer terminal 200 and the portable terminal 300. The CPU 210 of the customer terminal 200 receives the communication key K1 in step S235, and the CPU 310 of the mobile terminal 300 receives the communication key K1 in step S335. The customer terminal 200 and the mobile terminal 300 have a plurality of communication keys K1 in advance, and the CPU 110 of the server 100 assigns a selection number for selecting one communication key from the plurality of communication keys K1 to the customer. You may make it transmit to the terminal 200 and the portable terminal 300. FIG. In this case, it is preferable that the plurality of communication keys K1 are stored in the customer terminal 200 and the portable terminal 300 before the start of the bank. In step S240 and step S340, CPU 210 of customer terminal 200 and CPU 310 of portable terminal 300 establish a communication link using communication key K1. For example, a PIN code can be used as the communication key K1. It is also possible to employ a key other than the PIN code.

  In step S <b> 145, the CPU 110 of the server 100 transmits a communication key K <b> 2 that is an encryption key for maintaining communication security between the server 100 and the mobile terminal 300 to the mobile terminal 300. In step S345, CPU 310 of portable terminal 300 receives communication key K2. Similarly to the transmission of the communication key K1, the server 100 and the portable terminal 300 have a plurality of communication keys K2 in advance, and the CPU 110 of the server 100 receives one communication key from the plurality of communication keys K2. You may make it transmit the selection number for selection to the portable terminal 300. FIG. In this case, it is preferable that the plurality of communication keys K2 are stored in the server 100 and the portable terminal 300 before the start of the bank. In step S150 and step S350, CPU 110 of server 100 and CPU 310 of portable terminal 300 establish a communication link using communication key K2. As the communication key K2, for example, a WEP (Wired Equivalent Privacy) key or a WPA (Wi-Fi Protected Access (registered trademark)) key can be used in addition to the SSID and E-SSID.

  In step S <b> 355, the CPU 310 of the portable terminal 300 generates an encryption key K <b> 3 for encrypting the data of the server 100 and transmits it to the server 100. At this time, it is preferable that the CPU 310 creates a set of public key K3A and secret key K3B and transmits the public key K3A to the server 100 as the encryption key K3. That is, a public key cryptosystem may be used. Data encrypted by the CPU 310 of the server 100 using the public key K3A can be decrypted only by the CPU 310 of the portable terminal 300 having the secret key K3B. The CPU 110 of the server 100 receives the encryption key K3 (public key K3A). In this embodiment, the wireless LAN 410 is used as a path for transmitting the encryption key K3 from the portable terminal 300 to the server 100. However, the wireless USB 420 and the wired LAN 400 may be used as a transmission path.

  When the operator requests customer information stored in the server 100, the CPU 310 of the mobile terminal 300 requests customer information from the server 100 in step S360. In this embodiment, the CPU 310 requests customer information from the server 100 via the wireless USB 420 and the wired LAN 400. However, the CPU 310 may request customer information from the server 100 via the wireless LAN 410. In the case of a request via the wireless USB 420 and the wired LAN 400, the CPU 210 of the customer terminal 200 relays the request for customer information in step S250.

  When receiving the request for customer information, the CPU 110 of the server 100 encrypts the requested customer information and transmits it to the customer terminal 200 in step S170. The customer information may be encrypted using the public key K3A sent from the mobile terminal 300, but the CPU 110 uses the common key encryption method (for example, DES, triple DES, IDEA, etc.) encryption key K4 ( A common key) may be created and the customer information may be encrypted with this encryption key K4. This is because, in general, when the encryption strength is the same, the size (number of bits) of the public key K3A is larger than the size (number of bits) of the encryption key K4 of the common key cryptosystem. This is because encryption using the public key K3A takes more time than encryption using the encryption key K4. When customer information is encrypted with the encryption key K4, the encryption key K4 is encrypted with the public key K3A. That is, the CPU 110 encrypts customer information using a common encryption key method, and encrypts the encryption key K4 used in the common encryption key method using a public key encryption method. Then, the CPU 110 transmits the encrypted customer information and the encrypted encryption key K4 to the customer terminal 200. In step S <b> 255, the CPU 210 of the customer terminal 200 relays the encrypted customer information and the encrypted encryption key K <b> 4 and transmits them to the mobile terminal 300 via the wireless USB 420.

  In step S365, the CPU 310 of the portable terminal 300 receives the encrypted customer information and the encrypted encryption key K4. In step S370, the CPU 310 decrypts the customer information. First, the CPU 310 decrypts the encryption key K4 using the secret key K3B, and then decrypts the customer information using the decrypted encryption key K4. The decrypted customer information is displayed on the touch panel-equipped display unit 350 of the mobile terminal 300. The operator can perform customer support using this customer information.

  FIG. 4 is an operation flowchart of the customer terminal. The same steps as those shown in the sequence diagram of FIG. 3 are given the same step numbers. In the description of the flowchart of FIG. 4, processing that has not been described in FIG. 3 will be described, and description of overlapping processing will be omitted.

  In step S <b> 210, the CPU 210 transmits the transaction selection result (step S <b> 200) and the input customer address, name, amount, and other data (step S <b> 205) to the server 100. In step S215, the CPU 210 detects that an operator call request from the customer has been made to the display unit 250 with a touch panel. Upon receiving this call request, the CPU 210 moves the process to step S230 as described above.

  In step S220, CPU 210 detects that a data input end command from the customer has been input to display unit 250 with a touch panel. In step S225, CPU 210 detects that a transaction end command from the customer has been input to display unit 250 with a touch panel.

  In step S260, CPU 210 determines whether there is further data input. When requesting data input other than the data input in step S205, the CPU 210 shifts the process to step S265 and accepts further data input.

  FIG. 5 is an operation flowchart of the server. The same steps as those shown in the sequence diagram of FIG. 3 are given the same step numbers. In the description of the flowchart of FIG. 5, processing that has not been described in FIG. 3 will be described, and description of overlapping processing will be omitted.

  In step S110, the CPU 110 receives an operator call request (step S230) from the customer terminal 200. In step S125, CPU 110 waits for a response from the called mobile terminal 300. When the response from the portable terminal 300 is capable of dealing with a customer, the CPU 110 shifts the processing to step S135. On the other hand, when the response is incapable of dealing with customers, the CPU 110 shifts the processing to step S130. In step S <b> 130, CPU 110 selects another mobile terminal 300. Since this selection method has already been described, a description thereof will be omitted.

  In step S165, CPU 110 encrypts customer information requested by the operator of portable terminal 300. Since encryption has already been described, description thereof will be omitted. In step S175, CPU 110 waits for portable terminal 300 or whether there is a request for further customer information. If there is no request for customer information within a certain period of time, in step S180, the CPU 110 inquires of the mobile terminal 300 whether the communication may be terminated, and if there is a response that may terminate the communication, Or when there is no response within a fixed period, a process is transferred to step S185 and communication is complete | finished.

  FIG. 6 is an operation flowchart of the mobile terminal. The same steps as those shown in the sequence diagram of FIG. 3 are given the same step numbers. In the description of the flowchart in FIG. 6, processing that has not been described in FIG. 3 will be described, and description of overlapping processing will be omitted.

  In step S310, the CPU 310 acquires an operator's vein pattern and authenticates the operator using the pattern. As mentioned above. The CPU 310 may send the acquired operator vein pattern to the server 100 to cause the CPU 110 of the server 100 to authenticate the operator. Even if the vein authentication cannot be performed, in step S315, the CPU 310 can authenticate the operator by causing the operator to input an ID to the display unit with touch panel 350. In step S320, CPU 310 transmits to server 100 that the customer cannot be handled. The fact that the customer cannot be handled means that the input in step S305 is not possible to handle the customer, or the vein pattern and the input ID do not match and the operator cannot be authenticated (steps S310 and S315). ) Is included.

  In step S <b> 330, the CPU 310 receives customer terminal information (identification information) from the server 100. In step S375, CPU 310 displays the decrypted customer information on display unit with touch panel 350. In step S380, CPU 310 waits for a command input requesting further customer information. If there is a request for further customer information, CPU 310 causes the process to proceed to step S360. If there is no further request for customer information, CPU 310 accepts a communication end command in step S385, and ends communication in step S390.

  As described above, according to the present embodiment, the wireless LAN 410 capable of relatively long-distance communication is used for calling from the server 100 to the portable terminal 300, and the customer information is communicated between the customer terminal 200 and the portable terminal 300. A wireless USB 420, which is a short-range communication method, is used. Therefore, the mobile terminal 300 can be called from the server 100. And since the wireless USB 420 with a short communication distance is used for communication of customer information instead of the wireless LAN 410, the communication distance is short and the communication is not easily intercepted. Therefore, communication security can be increased. Even if the portable terminal 300 is robbed during use, since the communication distance between the portable terminal 300 and the customer terminal 200 is short, the portable terminal 300 cannot acquire the data of the server 100 outside the bank. . In addition, if the person who snatched the portable terminal 300 (the snatcher) is in the vicinity of the customer terminal 200, the person who is not the employee has the portable terminal, so that the employee can easily find the snatcher. .

  In the present embodiment, the customer information is encrypted by the server 100 and then sent to the mobile terminal via the customer terminal 200. On the other hand, the encryption key K3 for encryption is transmitted between the server 100 and the portable terminal 300 via the wireless LAN 410. Accordingly, the portable terminal 300 owns the encryption key, but the customer terminal 200 does not own the encryption key. Therefore, even if the customer terminal 200 relays the customer information, the customer information cannot be decrypted. Note that it is preferable to use a public key encryption method as the encryption method. In the public key cryptosystem, since the secret key necessary for decryption is not transmitted / received, the security of customer information can be improved.

  Further, in the present embodiment, the contents of communication communicated via the wireless LAN 410 are a mobile terminal call request and a public key K3A, both of which are information that does not cause a problem even if intercepted for security.

  In this embodiment, the CPU 110 of the server 100 encrypts the customer information and sends it to the portable terminal. However, in the wireless LAN 410 and the wireless USB 420, the security is maintained by the communication keys K1 and K2. It is possible to omit encryption.

 In the above description, examples of financial institutions such as banks have been explained. However, when providing operator support in the unmanned contract machine corner of non-banks such as consumer finance, insurance consultation reception terminals, operator mobile terminals, and travel agencies It can also be used in a combination such as a reception terminal at an operator and a portable terminal of an operator. The communication between the mobile terminal 300 and the server 100 may use, for example, a mobile phone line in addition to the wireless LAN 410. For communication between the mobile terminal 300 and the customer terminal 200, infrared communication or Bluetooth is used. (Bluetooth (registered trademark)) may be used.

  Although the embodiments of the present invention have been described based on some examples, the embodiments of the present invention described above are for facilitating the understanding of the present invention and limit the present invention. is not. The present invention can be changed and improved without departing from the spirit and scope of the claims, and it is needless to say that the present invention includes equivalents thereof.

10 ... Financial system 100 ... Server 110 ... CPU
120 ... RAM
DESCRIPTION OF SYMBOLS 130 ... Hard disk 132 ... Encryption program 134 ... Data 140 ... Wired communication interface 200 ... Customer terminal 210 ... Control apparatus (CPU)
220 ... Wired communication IF
230 ... Wireless communication IF
DESCRIPTION OF SYMBOLS 240 ... Card reader 250 ... Display part with a touch panel 300 ... Portable terminal 310 ... Control apparatus 320 ... Wireless communication IF
330 ... Wireless communication IF
340 ... Finger vein authentication device 350 ... Display unit with touch panel 400 ... Wired communication path (wired LAN)
405 ... access point 410 ... first wireless communication path (wireless LAN)
420 ... Second wireless communication path (wireless USB)
K1 ... Communication key K2 ... Communication key K3 ... Encryption key K3A ... Public key K3B ... Private key K4 ... Encryption key

Claims (3)

A financial system,
Server,
A fixed terminal,
A mobile terminal,
A first wireless communication path for calling the mobile terminal from the server;
A wired communication path for communicating data between the server and the fixed terminal;
A second wireless communication path for communicating data between the fixed terminal and the mobile terminal, different from the first wireless communication path;
With
The data stored in the server is transmitted to the mobile terminal via the wired communication path and the second wireless communication path instead of the first wireless communication path .
The mobile terminal generates an encryption key and sends the encryption key to the server;
The server encrypts data to be sent to the mobile terminal using the encryption key, and transmits the encrypted data to the fixed terminal using the wired communication path,
Said fixed terminal that sends the encrypted data using the second radio communication path to the mobile terminal, the financial system. The financial system according to claim 1,
The financial system, wherein a communication distance of the second wireless communication path is shorter than a communication distance of the first wireless communication path. In the financial system according to claim 1 or 2 ,
The cipher is a public key cipher,
The mobile terminal generates a public key and a private key, and transmits the public key to the server;
The server encrypts data to be sent to the mobile terminal using the public key, and transmits the encrypted data to the fixed terminal using the wired communication path,
The fixed terminal transmits the encrypted data to the mobile terminal using the second wireless communication path;
The mobile terminal decrypts the encrypted data using the secret key;
Financial system.

Images