JPH0778812B2 - Card authentication terminal - Google Patents

Description

Description: TECHNICAL FIELD The present invention relates to a card authentication terminal device, and in particular, an authentication process by a host device or a simulated authentication process not by a host device is performed according to a purchase price of a customer. The present invention relates to a card authentication terminal device.

[Prior Art] Recently, with the spread of credit cards, a transaction processing device that inquires of a host device whether payment by credit card is possible and performs a card authentication process to display the inquiry result. Is being put to practical use. Such a transaction processing device may be a card authentication terminal device or a CAT (credit authorization
Terminal) is called.

However, when a credit transaction is performed using a credit card in the related art, not all credit transaction processing card authentication processing is targeted.
That is, the card authentication process is performed only when the purchase price of the customer exceeds a predetermined amount, and the transaction process is performed when the authentication result indicating that the transaction is possible is transmitted from the host device. On the other hand, when the purchase amount is less than or equal to the predetermined amount, the transaction processing is performed unconditionally. Here, it is determined by the operator of the store whether or not the purchase amount of the customer exceeds a predetermined amount.

However, in the above-mentioned conventional method, since the operator determines the amount of money, the operator erroneously permits the transaction unconditionally, despite the amount of money that the card authentication process originally had to be performed. , It was sometimes impossible to collect the payment later. In addition, a shopper who knew that the card authentication process would not be performed within a certain amount of money sometimes used an unauthorized card for shopping.

Therefore, if the purchase amount exceeds a certain amount, an inquiry is made to the host device, and if the purchase amount is within a certain amount, it is simulated that the inquiry is made to the host device. It is considered to provide a card authentication terminal device that authenticates and makes it seem that authentication processing is necessary regardless of the purchase price.

[Problems to be solved by the invention]

However, if the setting contents of the limit amount of money, which is a criterion for determining whether or not to carry out the above-mentioned simulated authentication process, can be read out from the terminal device, an operator who knows this amount of money will make a fictitious item below this amount There is a problem that a crime such as sales processing using a card number may be caused, or the operator may tell the shopper this amount, and the operator and the shopper together may conduct an illegal transaction. is there. Further, since the store manager knows this limit amount without the operator having to read out this limit amount, there is a problem that the manager himself may carry out fraudulent card transaction processing.

Therefore, a main object of the present invention is to provide a host device with a function of making an inquiry at random even when performing transaction processing below a limit amount of money that is a criterion for performing simulated authentication processing. An object of the present invention is to provide a card authentication terminal device that solves the above problems.

[Means for Solving Problems] According to the present invention, when the purchase amount of a customer exceeds a predetermined limit amount, an authentication request is issued to the host device and an authentication process for displaying an authentication result from the host device is performed. If the purchase amount is less than or equal to the limit amount, it is a card authentication terminal device that performs a simulated authentication process that displays a predetermined simulated authentication result without making an authentication request to the host device. Input means for inputting, and a determining means for determining whether or not the amount data input from the input means is less than or equal to the limit amount data requiring the authentication processing by the host device, and the input means by the determining means. Random number generating means for generating a random number when it is determined that the amount data input from is less than or equal to the limit amount data, and the random number generated by the random number generating means. On the basis of,
Selection means for selecting whether to request authentication processing to the host device, and the determination means determines that the amount data input from the input means is less than or equal to the limit amount data, and the selection means causes the host device In response to the selection of the authentication process according to (1), the control unit controls the host device to perform the authentication process without performing the simulated authentication process.

[Operation] The card authentication terminal device according to the present invention performs authentication processing by the host device when the purchase amount of the customer exceeds the limit amount, and generates a random number when the purchase amount is less than or equal to the limit amount. , The host device is allowed to select whether or not to make an authentication request based on the generated random number, and if the authentication request to the host device is not selected, a simulated authentication process is performed. If it is selected to perform the authentication processing for the host computer, the authentication processing is performed by the host device even if the purchase amount is less than or equal to the limit amount.

[Embodiment] FIG. 3 is an external perspective view of a CAT according to an embodiment of the present invention. In FIG. 3, a CAT1 is provided with a card reader 2, a keyboard 3 and a display 4. Further, CAT1 is connected to a host device (not shown) that performs authentication processing, for example, via a telephone line network. The card reader 2 reads card data from a card. The cards used are
Generally, a credit card is used, but a cash card or the like may be used. The card data includes, for example, card number data and customer account number data. The keyboard 3 will be described later with reference to FIG.
Keys and the like for inputting the amount data are provided. The display unit 4 displays the data input from the keyboard 3 and the result of the authentication process. There are two types of data in the result of this authentication processing. One is
It is actual authentication response data from the host device, and the others are simulated authentication response data. The actual authentication response data from the host device is the content of the response in which the host device actually responded to the authentication request from CAT1. On the other hand, the simulated authentication response data is not the response content that the host device actually responded to, but the response content of the memory preset in the memory of CAT1.

In this embodiment, when the card is read by the card reader 2, the amount data is input from the keyboard 3, and the dial operation for calling the host device is performed, the predetermined value is determined without actually requesting the host device for authentication. The operation of displaying the simulated authentication result on the display device 4 is called a simulated authentication processing operation. The actual authentication process by the host device is
In principle, it is executed when the customer's purchase amount exceeds the predetermined limit amount, but in this embodiment, it may be executed even when the purchase amount is less than or equal to the limit amount. The simulated authentication process is executed when the purchase amount of the customer is less than or equal to a predetermined limit amount. The simulated authentication response data described above does not differ from the actual authentication response data in terms of display, and even if the simulated authentication processing is performed, the actual authentication processing operation is performed on the customer and the operator. You can think of it as being present. In this way, all credit transactions conducted using the card are made to appear to be authenticated regardless of the purchase amount of the customer, so that the operator or customer should be aware that the card cannot be illegally used. Since it can be held, it is possible to prevent card crimes.

FIG. 4 is a diagram showing a key arrangement of the keyboard shown in FIG. In FIG. 4, the keyboard 3 is provided with a card company selection key 31 for selecting a card company, a numeric key 32 for inputting amount data and the like, and a dial key 33 for calling the host device.

FIG. 5 is a schematic block diagram showing the electrical configuration of the CAT shown in FIG. In FIG. 5, CAT1 is provided with a CPU8. The CPU 8, the card reader 2, the keyboard 3 and the display 4 described above, as well as the modem 5, ROM6 and RAM7 are connected. The modem 5 is for performing data transmission between the CPU 8 and the host device, and is for modulating or demodulating a signal transmitted via the telephone line network. The ROM 6 stores the operation program of the CPU 8 based on the flowcharts shown in FIGS. 1 and 2 which will be described later. The RAM 7 stores authentication information as shown in FIG. 6 described later.

FIG. 6 is a diagram for explaining the memory configuration of the RAM shown in FIG. In FIG. 6, in the RAM 7, a limit amount buffer 71, an authentication number buffer 72, a message buffer 73,
A calculation buffer 74, a display buffer 75, a simulated authentication processing flag area 76, a reference value upper limit storage area 77, and a reference value lower limit storage area 78 are provided. The limit amount buffer 71 stores authentication process limit amount data that serves as a criterion for determining whether or not to execute the simulated authentication process. This limit amount data can be set from the keyboard 3, for example. The authentication number buffer 72 stores the simulated authentication number data of the previous simulated authentication. The simulated authentication number is a number created in CAT1 and corresponds to the authentication number issued when the host device performs the authentication process. A simulated authentication message is stored in the message buffer 73. The simulated authentication message is a preset message and corresponds to the authentication message transmitted from the host device. The simulated authentication message is set from the keyboard 3, for example. The calculation buffer 74 is used to calculate the simulated authentication number generated this time. The display buffer 75 stores data to be displayed on the display 4. The simulated authentication processing flag area 76 stores a flag indicating whether or not to carry out simulated authentication. The reference value upper limit storage area 77 stores the upper limit value of the reference value serving as a reference of whether or not to perform the authentication processing request to the host device, and the reference value lower limit storage area 78,
The lower limit value of the reference value is stored. Here, when the customer's purchase amount is less than or equal to the limit amount stored in the limit amount buffer 71, the CPU 8 generates a random number. Then, when the random number is within the range of the upper limit value and the addition / subtraction value described above, the CPU 8 controls to perform simulated authentication,
If the random number is not within this range, the host device is controlled to make an authentication request.

1 and 2 are flow charts for explaining the operation of one embodiment of the present invention. In particular, FIG. 1 shows the overall card authentication processing, and FIG. 2 shows the operation thereof. The simulated authentication data issuing operation is shown.

Next, the operation of one embodiment of the present invention will be described with reference to FIGS.

When the customer wants to pay with a credit card at the store, the operator of the store deposits the card from the customer and inserts the card into the card reader 2 of CAT1. In step S1 (abbreviated as S1 in the figure), the card reader 2 reads card data from the inserted card,
Give to CPU8. The CPU 8 stores the read card data in a predetermined area (not shown) of the RAM 7. Then, in step S2, the operator operates the numeric keys 32 of the keyboard 3.
When the customer's purchase amount data is input by operating, the CPU 8 stores the input amount data in a predetermined area (not shown) of the RAM 7. Succeedingly, in a step S3, the CPU 8 determines whether or not the input purchase amount data is equal to or less than the authentication processing limit amount stored in the limit amount buffer 71. As described above, in this embodiment, the operator does not judge the size of the purchase amount, so that the operator does not make a judgment error like the conventional CAT.

Then, if the purchase amount is less than or equal to the authentication processing limit amount, the CPU 8 generates a random number in step S4, and subsequently in step S5, is equal to or greater than the lower limit value stored in the reference value lower limit storage area 78. It is determined whether or not the generated random number is less than or equal to the upper limit value stored in the reference value upper limit storage area 77 in step S6. If the random number is within the range of the upper limit value and the addition / subtraction value, the flag F in the simulated authentication processing flag area 76 is set to, for example, "1" in step S7 in order to execute the simulated authentication processing in the subsequent processing. To do. If the random number generated by the CPU 8 is not within the range of the above-mentioned addition / subtraction value or the upper limit value, the simulated authentication processing flag F remains reset. Here, when it is determined in step S3 that the purchase amount data of the customer exceeds the authentication processing amount data, the above steps S4 to S7 are skipped. In this way, in this embodiment, when the purchase amount data of the customer is equal to or less than the limit amount that requires the authentication processing of the host device, a random number is generated so that the authentication processing is randomly performed by the host device. Therefore, it is extremely difficult to perform fraud even if the maximum amount of money is known, and it gives the operator and the customer a sense that it is impossible to illegally use the card. The effect of preventing crime is born.

Note that the CPU8 may simply generate a random number,
The purchase amount data input from the may be substituted into a certain function to generate a random number, or the card data read by the card reader 2 may be substituted into a predetermined function to generate a random number, Further, the card data and the money amount data may be substituted into a predetermined function to generate a random number.

Succeedingly, in a step S8, the CPU 8 determines whether or not the simulated authentication processing flag F is set to "1". Here, if the simulated authentication processing flag F is not set to "1", in order to call the host device, in step S10, a direct current circuit is formed with the exchange to enable transmission, that is, a normal telephone set. It is the same as the off-hook state. On the other hand, if the simulated authentication processing flag F is "0", the CPU8
Does not perform the operation of step S10, the same state as the on-hook state continues. Subsequently, in step S11, whether in the on-hook state or the off-hook state, the CPU 8 dials, and when the line is connected, in step S12, the card data and the purchase amount data stored in the RAM 7 are stored. Is transmitted to the host device via the modem 5. It goes without saying that nothing is transmitted in the on-hook state.

Succeedingly, in a step S13, the CPU 8 determines whether or not the simulated authentication processing flag F is set to "1". If the simulated authentication processing flag F is not set to "1", the response from the host device, that is, the authentication result is received in step S14, and then the response data is stored in the display buffer 75 in step S15. Then, subsequently, in step S16, the telephone line is disconnected. Subsequently, in step S20, the CPU 8 displays the contents of the display buffer 75 on the display unit 4.

On the other hand, when the simulated authentication processing flag F is set to "1", the CPU 8 issues simulated authentication response data in step S17. In this simulated authentication response data issuing process, first, in step S171 of FIG. 2, the CPU 8 generates a random number and stores it in the calculation buffer 74. Subsequently, in step S172, the CPU 8 reads the authentication number data stored in the authentication number buffer 72 at the time of the previous simulated authentication processing and adds it to the random number stored in the calculation buffer 74,
Generate this simulated authentication number data. Here, a random number is added to the previous simulated authentication number instead of a constant to generate the simulated authentication number this time, so that the operator does not notice that the simulated authentication is being performed. is there. Subsequently, in step S173, the CPU 8 creates simulated authentication response data based on the simulated authentication message data stored in the message buffer 73 and the current simulated authentication number data stored in the calculation buffer 74.

Subsequently, in step S18 of FIG. 1, the CPU 8 stores the simulated authentication response data in the display buffer 75, and subsequently in step S19, the CPU 8 corrects the processing time of the actual authentication processing by the host device. The processing time does not differ from the actual authentication processing. continue,
In step S20, the CPU 8 displays the simulated authentication response data stored in the display buffer 75 on the display unit 4, updates the previous simulated authentication number data in the authentication number buffer 72 with the simulated authentication number data of this time, and calculates the operation buffer. 74 is cleared, the simulated authentication processing flag F is reset, and the operation ends.

In the above-described embodiment, whether or not to issue the authentication processing request to the host device is selected based on whether or not the generated random number is within a predetermined range, but not limited to this, for example, the generated random number. Whether the authentication processing request is issued to the host device may be selected based on whether is an even number or an odd number.

[Effects of the Invention] As described above, according to the present invention, when the purchase amount of the customer exceeds the limit amount, authentication processing by the host device is performed, and when the purchase amount is less than or equal to the limit amount, a random number is generated. Is generated, and the host device is made to select whether or not to make an authentication request based on the generated random number, and if the authentication request to the host device is not made, a simulated authentication process is performed. When the request to authenticate the host device is selected, the authentication process is performed by the host device even if the purchase amount is less than the limit amount. There is also a case where the authentication process is performed, and it gives a sense that the illegal use of the card is impossible even for a small amount of shopping. Therefore, it becomes impossible for the operator to perform sales processing with a fictitious card number and to shop using a fraudulent card in the shopper all around, and thus it is possible to prevent fraudulent card transaction processing.

Further, since it is possible to prevent the sale of these cards, it is possible to reduce the loss of the card company and prevent the store side from receiving the card handling designation cancellation due to the occurrence of the card crime from the card company.

[Brief description of drawings]

1 and 2 are flow charts for explaining the operation of the embodiment of the present invention. FIG. 3 is an external perspective view of a CAT according to an embodiment of the present invention. FIG. 4 is a diagram showing a key arrangement of the keyboard shown in FIG. FIG. 5 is a schematic block diagram showing the electrical configuration of the CAT shown in FIG. FIG. 6 is a diagram for explaining the memory configuration of the RAM shown in FIG. In the figure, 1 is CAT, 2 is a card reader, 3 is a keyboard, 4 is a display, 5 is a modem, 6 is ROM, 7 is RAM, and 8
Is a CPU, 32 is a numeric key, 33 is a dial key, 71 is a limit amount buffer, 72 is an authentication number buffer, 73 is a message buffer, 74 is a calculation buffer, 75 is a display buffer, 76 is a simulated authentication processing flag storage area, 77 Indicates a reference value upper limit storage area, and 78 indicates a reference value lower limit storage area.

Claims (6)

[Claims] 1. When the purchase amount of a customer exceeds a predetermined limit amount, an authentication request is made to the host device, and an authentication process for displaying the authentication result from the host device is performed, and the purchase amount is the limit amount. In the following cases, in a card authentication terminal device that performs a simulated authentication process for displaying a predetermined simulated authentication result without making an authentication request to the host device, an input means for inputting customer purchase amount data, Discriminating means for discriminating whether or not the amount data inputted from the input means is less than or equal to the limit amount data requiring the authentication processing by the host device; and the amount data inputted from the input means by the discriminating means. And a random number generated by the random number generating means, the random number generating means generating a random number in accordance with the determination that is less than or equal to the limit amount data. Selection means for selecting whether to request authentication processing to the host device, and the judgment means judges that the amount data inputted from the input means is less than or equal to the limit amount data. And a control means for controlling the authentication processing by the host device to be performed without performing a simulated authentication processing in response to the authentication processing by the host device being selected by the selection means. Card authentication terminal device. 2. The card authentication terminal device according to claim 1, wherein the random number generation means generates a random number based on the amount data inputted from the input means. 3. A reading means for reading card data from a card, wherein the random number generating means generates a random number based on the card data read by the reading means. Card authentication terminal device described. 4. A reading means for reading card data from a card is further provided, wherein the random number generating means generates a random number based on the card data read by the reading means and the amount data inputted from the input means. The card authentication terminal device according to claim 1, which is generated. 5. The selecting means is based on whether or not the random number generated by the random number generating means is within a predetermined range.
The card authentication terminal device according to any one of claims 1 to 4, wherein whether to request an authentication process to the host device is selected. 6. The selection means selects whether or not to request authentication processing to the host device, based on whether the random number generated by the random number generation means is an even number or an odd number. The card authentication terminal device according to any one of claims 1 to 4.