JPS603663B2 - transaction processing device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a transaction processing device that performs a predetermined transaction using a card on which various data including a customer's unique PIN number are recorded, such as an automatic cash dispensing device installed in a financial industry such as a bank. Related to transaction processing devices such as cash machines and automatic teller machines.

This type of transaction processing device compares the reading data of the PIN number magnetically recorded on the card with the PIN number keyed in by the customer, or stores the PIN number in the device in advance and stores it. The card user's personal identification number is compared with the personal identification number keyed in by the customer, and when these numbers match, it is confirmed that the card user is the person who is eligible for the transaction.

After this confirmation, a predetermined transaction is executed. In financial industries such as banks, transaction processing devices for cash payments and deposits are already widespread.

It is no exaggeration to say that the magnetic recording format of the card used in this transaction processing device is already widely known. Since encoders for recording data on cards are also commercially available, counterfeiting of cards has become relatively easy. In particular, with devices that do not store the PIN number in the device and compare the read data of the card's PIN number with the keyed-in PIN number, a counterfeiter can set the PIN number arbitrarily. Moreover, transactions can be made with this arbitrarily set PIN number.The purpose of this invention is to be able to detect the use of counterfeit cards at an early stage, and to prevent fraudulent transactions caused by counterfeit cards. do.

Another object of the present invention is to provide a transaction processing device that can sufficiently deal with failures in the means for preventing fraudulent transactions and that can enable subsequent legitimate transactions. shall be.

Throughout this specification, a "keyword" is one of the codes used to determine whether a recording medium (for example, a magnetic card) used in a transaction processing device is genuine, and is updated every time a transaction is processed. This is the code with . The keyword is recorded on the recording medium, and the memo of the transaction processing device is accessed by read data (for example, account number) on the recording medium. It is recorded for each user (for example, for each account number). For each transaction process, the correspondence between the keywords on the recording medium and the keywords in the memory is examined to determine whether the recording medium is being used continuously and correctly. A transaction is permitted only when both keywords have a predetermined correspondence relationship, and a new keyword is created, thereby updating the keywords in the recording medium and memory. DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment in which the present invention is applied to a transaction processing device whose terminal device is an automatic cash dispensing machine will be described in detail with reference to the drawings.

FIG. 1 shows the overall configuration of the transaction processing device.

The transaction processing devices are control center 1 and center 1.
It consists of a large number of terminals connected online. Examples of terminals include an automatic cash dispensing machine (hereinafter abbreviated as CD) 2 and a counter processing device (hereinafter abbreviated as WM) 3. The center 1 includes a central processing unit (hereinafter referred to as CPU) 10 that controls communication with each terminal and processes transaction data transmitted from the terminals, and a customer-specific information file (hereinafter referred to as CPU) that stores customer transaction data. A communication control device 12 and a modem 13 are provided for communication with a terminal device.

In processing transaction data, the CPUIO inspects the card, determines whether or not a transaction is possible, performs transaction calculation processing, as will be shown later.
Performs CIFII rewriting, card issuance processing, card inquiry processing, etc. A large number of terminals are connected to the center 1 via a modem 5 and a terminal controller 4, and communication with the center 1 is controlled by these.

The CD2, which is one of the terminals, includes an operation procedure display 22 that sequentially displays the operations that a customer must perform for a payment transaction, a keyboard for inputting a PIN number, a billed amount, etc., a card insertion slot, a cash discharge slot, etc. Customer service panel 2 with
3. A card reader and writer (hereinafter simply referred to as a card reader) 24, which reads the card data recorded on the card inserted into the card slot and writes predetermined data to the card. A slip issuing machine 25 that prints data on a journal and a slip and imprints the emboss on a card to issue the slip, and a bill discharging machine 2 that counts and carries out the bills of the billed amount.
6 as input/output equipment. The CPU 20 executes predetermined transactions by controlling these input/output devices and communication with the center. CPU
20' includes a memory 21 for storing transaction data and the like. The CPU 20 is connected to the terminal controller 4 by an input/output control circuit 27. WM3 is
In this example, it has card issuing and card inquiry functions, and is equipped with a memory 31 and an input/output control circuit 37.
CP connected to terminal controller 4 by
It has a built-in U30.

The CPU 30 includes, as its input/output devices, an office key 32 that can only be operated by a person in a specific position, a keyboard 33 for inputting items necessary for card issuance, a printer 34, and key-input data. CRT that displays etc.
It is equipped with a display 35 and a card reader and writer (hereinafter simply referred to as a card reader) 36. Second
The figure shows the data recording format of a card used in a transaction processing device. The card has a magnetic stripe, and the magnetic stripe includes an ID code that indicates that the card is used at a bank, a bank approval code that indicates the usage category of the card, a customer's unique PIN number, bank number, store number, and the customer's ID code. The bank account number and keyword KI used to identify the card as belonging to Mao are magnetically recorded. FIG. 3 shows the contents of CIFII provided in the center 1.

C'11 is constituted by, for example, a magnetic disk. CIFII has a storage area for transaction data for each customer with an account, and this area stores the account number, balance, etc.
A password and keyword K2 are stored. Keywords K1 and K2 are mutually converted numerically by a predetermined algorithm, so even if the account number is the same, the keyword KI of the card and the keyword K of CIFII
2, but they are related by the algorithm above. This algorithm may be any arithmetic expression or one that exchanges digits. Keywords K1, K2
is updated for each transaction as shown below. FIG. 4 shows the steps of the customer's operations on the CD2 and the transaction processing of the CD2.

The customer first inserts the card into the card slot (step 4).
1) Enter your PIN using the keyboard (
Step 42). The data recorded on the inserted card is read by the card reader 24, and the data recorded on the card is read by the card reader 24.
The PIN number in the data and the keyed-in PIN number are compared (step 43). If the two numbers match, an instruction to input the amount to be paid is displayed on the display 22, and the customer inputs the amount to be paid (step 44). If the two passwords do not match, the card is returned (step 71) and the process ends. Instead of immediately returning the card, the user may be asked to enter the password again. In this case, if the answer to step 43 is NO multiple times in a row, the card is returned. When the requested payment amount is input, the data necessary for the payment transaction is prepared, and communication with the center 1 is started (steps 45 and 46).

In parallel with this center communication, the slip issuing machine 25 imprints the card onto the empos journal (step 47). The message sent from the CD2 to the center 1 includes the terminal code of the CD2, a code indicating the type of message (in this case, a withdrawal message), the keyed-in PIN and the amount to be paid, and the card information containing the keyword KI. Contains data. Upon receiving the message from CD2, Center 1 determines whether the transaction is possible, inspects the card, creates a new keyword, and performs the following operations, as will be detailed later.
ll is updated, and a message indicating the results of these processes is transmitted to CD2. The message sent from center 1 to CD 2 includes the terminal address of CD 2, operation instructions (withdrawals allowed, return of non-withdrawal cards, collection of non-withdrawal cards), card write data including new keywords, account number,
Contains the withdrawal amount and new balance. After communication with the center and card imprint processing, whether there was a transmission error or reception error,
It is checked whether there were any imprint errors (steps 48-50). Regarding transmission errors and reception errors, normally, if an error still occurs even after repeating transmission and reception with the center 1 a required number of times, YES will be obtained in steps 48 and 49. Imprint errors include, for example, a case where a card gets stuck in a conveyance path and imprinting is not performed, and a completion signal is not output. In the case of a transmission error, the transaction is unsuccessful and the card is returned because it was not sent to center 1 outside of the transaction day.
Step 71). In the case of a reception error or an imprint error, C'11 has already been updated, so generally the transaction has been completed. In this case, writing to the card (step 53), especially new keywords, is not possible, and the previous data remains on the card. Since it is generally possible to discuss the previous card data, in order to perform the card inquiry process described later,
A fault code is displayed (step 72), and the slip issuing machine 2
5, a message that a card inquiry is required is printed on the slip (step 73). After this, the process is left to the staff. The fault code indicates the type of fault, and is displayed on the internal panel of the CD 2, the remote monitor, and the like. If there is no error in any of steps 48 to 50, and withdrawal is possible according to the operation instructions in the message sent from center 1 (step 61), transaction data is printed on the slip (step 52), Writing write data including new keywords to (Step 5)
3), and the withdrawal and counting of cash equivalent to the withdrawal amount (step 54) are performed in parallel.

If withdrawal is not possible, the card must be collected or returned (step 55), and the card is either collected (step 56) or returned (step 71) according to the instruction. After printing the slip, writing the card, and counting the cash line, it is checked whether an error has occurred in these processes (steps 57 to 59).

A printing error is detected, for example, when a printing completion signal is not output. Card write errors are detected when the card is jammed and only a portion of the data is written to the card, or when a read check is performed after writing. Examples of cash line counting errors include jammed banknotes. In either case, the transaction has already been completed. In the case of a printing error or a cash dispensing counting error, a fault code is displayed (step 79), since the writing of data including the new keyword to the input card has been completed.
It will be left to the staff to handle. The clerk hands over the customer's card and cash to complete the transaction. There are two types of forced write errors. The first is an error that occurs before writing to the card is performed. This is the case, for example, when a card jam occurs before the card reaches the head of the card reader 24, and the previous data remains on the card and can be read. The other type of error is an error that makes it impossible to discuss the card, such as when a card jam occurs while writing to the card, or when writing is not performed due to a power outage.
This is a case where it is determined that discussion is not possible through a read check after posting. In the case of a write error in step 57, it is determined whether reading the input is possible (step 74), and if not, a fault code is displayed (step 74).
Step 75), and a message indicating that the card needs to be reissued is printed on the slip (Step 76). If the power code can be read, a failure code is displayed (step 77), and a message indicating that a power code inquiry is required is printed on the slip (step 7).
8). In any case, after this, we move on to the staff processing, and WM3
Card reissue or card inquiry is performed using .
If there are no errors, the card is returned (step 60), the printed slip and cash are released (step 62), and the transaction is completed.

If a card return error (step 61) or a cash or slip release error (step 63) occurs, a fault code is displayed (step 79) and then processing is performed by an attendant.
In the above example, after updating the CIFII of center 1, all transactions are determined to be successful, but it is also possible to determine that the transactions are not successful by restoring the CIFII.

FIG. 5 and FIG. 6 show the operation of the staff member on the WM3 and the processing procedure of the WM3. FIG. 5 shows the card issuing process, and FIG. 6 shows the card inquiry process. The WM3 becomes operational only when the officer key is operated (steps 81, 91). This provides tight control over card issuance and card inquiries. Card issuance includes initial issuance, in which a card is issued for the first time for a certain user (account), and reissue. In FIG. 5, a key is entered to select either initial issue or reissue (step 82), and in FIG. 6, a key is entered to select card inquiry (step 92), and then the card is inserted. (steps 83, 93). In the case of card issuance (FIG. 5), items necessary for card issuance, such as a personal identification number, bank number, store number, account number, etc., are entered using the keyboard 33 (step 84).

The input data is displayed on the CRT 35. When issuing a card for the first time, the PIN number is a number specified by the customer, and the account number is the number of the account to which the card is issued. Banks have a ledger that records the necessary information about all opened accounts. Since the PIN number is also recorded in this ledger, if the card is to be reissued, the PIN number can be found from this ledger. Further, the user can also know the password by inputting the account number into the WM 3 and inquiring the center 1 through account inquiry. However, even in the case of reissuance, the keywords cannot be known from the ledger, nor are they known to the customer or bank staff.

The keyword is only stored in the CIFII of the center 1. In the case of first publication, keywords are created at the center. When the key input for each item is completed, the key input data including the account number is transmitted to the center 1 along with the terminal code of the WM 3, a code indicating card issuance, etc. (step 85). Then, as will be described later, the card write data including the keyword is sent from the center 1, so when this is received (step 86), it is checked whether it is an error message or a reception error (step 87). If there is no error, the write data sent from the center is written to the card by the card reader 36, and the card is returned (step 88).
In the case of an error message or reception error, the card is returned without writing data to the card (step 89). In the case of a card inquiry (FIG. 6), when a card is inserted, the card data is transferred to the card reader 36.
(step 93).

Then, it is checked whether there is a read error (step 94), and if there is a read error, the card is returned immediately (step 98). In this case, the card is generally reissued. If the card is not read, the read card data is sent to the center 1 along with the WM3 terminal code, card inquiry code, etc. (step 95). No key input is required for various items. center 1
Then, as shown later, the keyword K2 of CIFII is reversely updated, and a message indicating that the inquiry process has been completed is sent from the center 1 (step 96). This message includes data indicating whether the reverse update of the keyword K2 of CIFII has been performed normally, so when the center message is received, the printer 34 sends a message indicating that the card inquiry has been completed. Whether the reverse update was performed normally (OK or NG) is printed (step 9).
7). No writing is done to the card. FIG. 7 shows the processing procedure at the center 1.

After receiving the message from the terminal, this message 4 is classified (step 101). If it is a withdrawal message (Step 1
02), proceed to the withdrawal process from step 106. In the case of a card issue message (step 103), step 12
In the case of a card inquiry message (step 104), the process moves to the card inquiry process from step 131. In the case of a deposit message (Step 1)
05), predetermined deposit transaction processing is performed (step 1
36). If the received message is another message, processing corresponding to that message is executed. Now, in the withdrawal transaction process,
First, the format of the received withdrawal message is checked, and the keyword KI in the message is converted into a numerical value using a predetermined algorithm. Further, the CIFII from the account number included in the message is searched (step 106). If there is an error in the contents of the received withdrawal message (Step 1)
07), for example, if there is no corresponding account number in the CIFII, an error message containing an instruction to return the non-transactionable card is sent to the CD 2 (step 108). If there is no error, the keyed-in password included in the message from CD2 is compared with the password stored in the corresponding account in Cmll (step 109), and if they match, the next step is to The numerically converted keywords in the message,
The keyword K2 stored in the corresponding account of Cmll is compared (step 110). If the PIN numbers do not match in step 109 or the keywords do not match in step 110, this means that the card was used fraudulently or a fraudulent card (counterfeit card) was used, and a message containing instructions to collect the non-transactionable card will be sent. Send to CD2. (step 111). In step 109, the password included in the card data in the message and the password in the C nail 11 may be compared. Furthermore, since the verification of the personal identification number has already been carried out in the CD 2, the processing in step 109 is not necessarily necessary in the center 1. If the PIN and keyword match, the payment request amount and C
The balance in Hana 11 is compared, and if the balance is larger, withdrawal is possible (step 112).

If the balance is insufficient in step 112, a message containing an instruction to return the non-withdrawal card is sent to CD2 (step 113). If withdrawal is possible, the balance of the account number that is the subject of the transaction in Cbi11, the keyword K
2 is updated (step 114).

The new balance is determined by subtracting the requested payment amount (withdrawal amount) from the stored balance. The simplest keyword to use is the number of times a card is used.
In this case, a new keyword is created by adding 1 to K2. Other keyword updating methods include calculating using a predetermined function using the previous keyword as a variable, and using random numbers. In the above function, the number of uses, time, etc. can also be used as parameters. The random number is obtained by a random number generator consisting of a pulse generator and a counter that counts the generated pulses. When a new keyword is found in this way, this new keyword is stored in the corresponding area of Cmll and is converted into a numerical value using a predetermined algorithm (step 115). Then, this new numerically converted keyword replaces the keyword in the card data to create card write data. Finally, the message containing the withdrawal instructions, created light data, account number, withdrawal amount, and new balance is edited, and C
D2 (step 116). In CD2, the write data of the card transmitted from the center as described above is written to the card (step 53), so the keyword KI of the card is a new value newly created at the center and converted into a numerical value. Become a keyword.

In the case of a card issue message (step 103), the format of this message is first inspected, and CIFI I is searched using the account number included in the message (
Step 121).

Then, if there is an error in the message, or if the card is being reissued and there is no corresponding account number in CIFII (step 122), the error message is sent to the WM 3 (step 123). If there are no errors, the keyword proposal or creation occurs (step 12).
4).

In the case of card reissue, since the keyword should already be stored in CIFI I, the keyword of the corresponding account number is read out. When issuing a card for the first time,
C If there is no account in 11, an area will be set up for that account. Then, a new keyword is created using an appropriate function or random number using the account number and time as variables, and is stored in the area of the corresponding account number in CIFII or in the newly created area. A new keyword may also be created when a card is reissued. In this case, of course, the created keyword 'maC'1
It is stored in the corresponding area in 1. The keywords read or created from the C-11 are converted into numerical values using a predetermined algorithm (step 125), and sent to the WM3 as card write data added to each data transmitted from the WM3 (step 125). 126).

As mentioned above, this write data is written to the card in WM3 (step 88), so there is a predetermined correspondence between the keyword in the issued card and the keyword of the corresponding account stored in Cmll. , transactions can be made using this issued card.

In the case of a card inquiry message (step 104), the format of this message is similarly inspected, and the account number included in the message is used to search for credit card 11 (step 131).

If there is an error in the message or if there is no corresponding account number in CIFII (Step 13)
2), an error message is sent to WM3 (step 13
3). In this case, NG is printed in step 97 of FIG. If there is no error, the keyword K2 of the corresponding account number in CIFII is reverse updated (step 134).

The telegram from WM3 includes card data extracted from the inserted card, and this card data includes the keyword KI. This keyword KI is inversely converted using a predetermined algorithm in step 115, and this inversely converted keyword is used as a keyword K2 to the corresponding account number of CIFI I. Thereafter, a message indicating that the reverse update of the CIFII keyword has been successfully performed is transmitted to the WM 3 (step 135). Upon reception of this message, OK is printed in the WM3 (FIG. 6, step 97). In this manner, in the card inquiry process, keywords that have a predetermined correspondence with the keywords in the card are stored in the card 11, so that transactions can be made using the card that has undergone this process.

A customer-specific keyword KI is recorded on the card.

CIFI I stores a keyword K2 in a one-to-one correspondence with the keyword KI in the storage area of the customer's account number. Then, when the card is used, it is checked whether the keywords KI and K2 have a correct correspondence relationship, and the keywords K1 and K2 are updated. If the keywords KI and K2 do not have a correct correspondence relationship, the transaction is prohibited. Since the card stores keywords in addition to conventional card data, its format is difficult to understand, making it difficult to counterfeit the card. For example, even if the card is forged,
If a legitimate card is used even once before this counterfeit card is used, the keyword K2 of C'11 will be updated, so the keyword of the counterfeit card will no longer have the correct correspondence with the keyword of Cmll. transaction is immediately prohibited. Even though the keyword in C11 has been updated by using the correct card, the updated keyword is not written to the card due to an error in CD2, and the previous keyword remains on the card. Then, card inquiry processing is performed. In this card inquiry process, the keywords of the CIFII are corrected using the previous keywords remaining on the card so as to maintain a predetermined correspondence relationship with the keywords of the card. Therefore, even if a card whose keyword has not been updated due to an error in CD2 is used, a normal transaction is possible. Further, if the card becomes unreadable, the WM3 reissues the card. The keyword of the reissued card has a correct correspondence with the keyword of the corresponding account number in C'11 of Center 1. Therefore, normal transactions are possible using this reissued card.
In the above example, the card inquiry process is performed in the case of errors in steps 49 and 50, and in the case of an error in step 57, when the input card can be read, but the card inquiry is also performed in the case of an error in step 48. Good too.

Also, in the deposit processing (step 136), the above-mentioned password check and keyword check may be performed.

However, in the case of depositing money, fraudulent use of the card or use of a counterfeit card is unlikely, and even if there is, the customer will not suffer any disadvantage, so this is not necessarily necessary. In the above example, only the center 1 converts the keyword into a numerical value, but a numerical conversion program or a numerical conversion circuit may be provided in both the center 1 and the CD 2, and the numerical value of the keyword may be converted in both.

This situation is shown in FIG. Assume that the keyword recorded in the card is KI=3412. This keyword is CD2 with the first and second digits, and the third and fourth digits.
The digits are exchanged, resulting in K3=4321. This keyword K3 is transmitted between the center 1 and CD2. Then, in the center 1, the keyword K3 is further rearranged in the reverse order so that K2=1234. This keyword K2 is stored in C'11. In this way, the keyword takes completely different values on the Cmll, on the line, and on the card, so the value of the keyword is completely unknown from the outside. Although a CD is shown as the terminal in the above embodiment, it goes without saying that the present invention can also be applied to automatic teller machines and loan machines.

In this case, it is preferable to check keywords for transaction processing such as balance inquiry, transfer, and transfer. Also, transaction processing devices using cards other than transaction processing devices of banks, etc.
For example, it goes without saying that it can be applied to POS system terminals at gas stations and ECRs (electronic cash registers), terminals at unmanned supermarkets, and other vending machines that sell goods using cards. This applies not only to terminals that operate online, but also to devices that operate offline. In this case, the keywords are stored in the memory of the device rather than in the center. Furthermore, the present invention can also be applied to passbooks with magnetic stripes on which transaction data is recorded. All you have to do is record the keywords on the magnetic stripe of your bankbook. As explained in detail above, in this invention, the correspondence between keywords stored in a recording medium such as a card and the memory of the device is checked, and if both keywords have a predetermined correspondence, the transaction is permitted and no recording is made on the medium. and has updated memory keywords.

Transactions are prohibited if both keywords do not have a predetermined correspondence relationship. Therefore, it is difficult to forge recording media.
Even if it is forged, it can be detected at an early stage, and transactions cannot be conducted using a forged recording medium, thereby completely preventing fraudulent transactions. Also,
Even if a write error occurs when updating the keyword on the recording medium, if the data containing the keyword on the recording medium remains in an arguable state, the keyword in memory can be updated using the keyword on the recording medium. Since it is modified to maintain a predetermined correspondence with the keyword, subsequent transactions are possible, and there is complete countermeasure against failures.

[Brief explanation of the drawing]

Figure 1 is a block diagram showing the overall configuration of the transaction processing device, Figure 2 is a diagram showing the card format, Figure 3 is a diagram showing the contents of the customer-specific information file, and Figure 4 is a diagram showing the operation of the CD. 5 and 6 are flow charts showing the operation of the WM, FIG. 7 is a flow chart showing the operation of the center, and FIG. 8 is a diagram showing the state of numerical conversion of keywords. . 1...control center, 2. ．． …． CD, 3...
...WM, 10,20,30...CPU,
1 1...Customer information file, 24, 36...
...Card reader and writer. Figure 1 Figure 2 Figure 3 Figure 5 Figure 6 Figure 4 Figure 4 Figure 8

Claims (1)

[Claims] 1 Using a recording medium on which user-specific data is recorded, by comparing the data read from the recording medium or the data read from the memory accessed by this read data with the data keyed in by the user, In a transaction processing device that confirms a genuine user, the recording medium has a storage area for keywords, and the transaction processing device has a memory for storing keywords for each user, and a memory for reading and updating data on the recording medium. a reading/writing device for writing the data to be read, and a calculation means for checking the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memory;
A first control means that permits the transaction only when both keywords have a predetermined correspondence relationship, and also creates a new keyword and updates the keyword in the memory and the recording medium with the new keyword, and collates the keyword in the recording medium. means for detecting the occurrence of an error that should occur; a reading device for reading data including keywords from a recording medium for keyword verification; and a method based on the data read by the reading device.
A second method of modifying the keyword of the corresponding user in the memory so as to maintain a predetermined correspondence relationship with the keyword of the recording medium.
A transaction processing device comprising: control means;