JPH0797382B2 - Card authentication terminal device - Google Patents

Description

Description: FIELD OF THE INVENTION The present invention relates to an improvement of a card authentication terminal device that performs simulated authentication processing.

<< Summary of the Invention >> According to the present invention, for small amount transactions equal to or less than the authentication process limit amount, only the transactions randomly extracted based on the preset extraction rate are communicated with the host to actually perform the authentication process, while extracting. Regarding leakage transactions, in the card authentication terminal device that simulated authentication processing without communicating with the host, it is possible to set the extraction rate only from the outside, and tampering with the store This is something that can be prevented.

<< Prior art and its problems >> The applicant firstly communicates with the host only for transactions that are randomly extracted based on a preset extraction rate for small transactions below the authentication processing limit amount and actually authenticates them. While performing processing, a card authentication terminal device is proposed (not yet published) that performs simulated authentication processing without communicating with the host for transactions that are not extracted.

However, in the above proposal, the extraction rate data, which is the basis for extracting transactions for which actual authentication processing should be performed, can be freely set and changed at each store by key operation of the terminal device. It was done.

For this reason, if the operator of each store mistakenly sets the value of the extraction rate to a low value, the detection rate of the fraudulent card may be lowered, and the card company may be seriously damaged.

Further, the operator of each store intentionally sets a low extraction rate, which may lead to a crime such as illegal card transaction processing being carried out at every store.

<< Object of the Invention >> An object of the present invention is to prevent damage to a card company due to a mistakenly set low extraction rate in a card authentication terminal device that selectively performs real authentication processing and simulated authentication processing of this kind. The purpose of this is to prevent the crime, and further to intentionally set a low extraction rate to prevent a crime such as illegal card transaction processing in stores.

<< Structure and Effect of the Invention >> In order to achieve the above object, the present invention communicates with a host only for transactions that are randomly extracted based on a preset extraction rate for small transactions below the authentication processing limit amount. Is a card authentication terminal device that does not communicate with the host but conducts a simulated authentication process for transactions that are not extracted. It is possible to set the extraction rate only from the outside via a transmission line, comprising means for detecting information on the extraction rate, and means for automatically updating the extraction rate based on the detected information. It is characterized by having done.

According to such a configuration, the information regarding the extraction rate, which is the standard for determining whether the sequentially occurring transactions are the real authentication processing or the simulated authentication processing, the information other than the host computer such as the center is transmitted via the transmission line. It becomes impossible to give such information, and it is possible to prevent the store from being involved in such information.

Therefore, no data about the extraction rate is known to the store side, which gives a psychological effect that it is impossible to illegally use the card by using the simulated authentication process. You can stop it.

In other words, the operator can change the extraction rate and perform fraudulent sales processing, damage the store, or prevent fraudulent card transaction processing around the store, reducing the loss of the card company. Obtainable.

In addition, the information regarding the extraction rate is different for each store depending on the degree of evaluation of the transaction credit of each store as seen from the card company, and the ratio of the actual authentication process can be controlled by this, so the amount of card authentication inquiries to the host computer It is also possible to control and operate the host efficiently.

Furthermore, it is possible to continuously verify the creditworthiness of each store based on the ratio of actual authentication processing set for each store, the number of card processing errors and the number of card crime accidents that occurred at that store, and to reduce card crime. be able to.

<< Description of Embodiments >> FIG. 1 is an external perspective view showing an embodiment of a card authentication terminal device according to the present invention.

As shown in the figure, on the front panel of the card authentication terminal device 1, in addition to the display 2 and the keyboard 3, a card slot 4 for reading card information is provided. By doing so, various kinds of information can be input from the customer's card, and communication with the host computer or the like of the center is possible via the transmission line.

As shown in FIG. 2, on the keyboard 3, company designated keys 31 to 33, ten keys 34, dial keys 35, reset keys 36, display keys 37, clear keys 38 and set keys 39 are arranged. By appropriately operating these, various kinds of information can be input and dialing operations for the center and the like can be performed.

As shown in FIG. 3, the control unit of this terminal device is
It is composed of a microcomputer mainly composed of U5, ROM6 and RAM7, and the system bus has its display unit as described above.
2, in addition to the keyboard 3, a cart reader 8 for reading information from a card inserted in the card slot 4 and a transmission line 9
A modem 10 for communicating with the host computer of the center is connected via the.

As shown in FIG. 4, the RAM 7 is provided with a limit amount buffer, an authentication number buffer, a message buffer, a calculation buffer, a display buffer, a simulated authentication processing flag F and an upper limit buffer and a lower limit buffer, which will be described later. ing.

5A and 5B are flowcharts showing the configuration of the control program stored in the ROM 6, and the operation of the apparatus of this embodiment will be systematically described below with reference to this flowchart.

When the power is turned on, the apparatus of this embodiment enters an idle state while waiting for the call from the host performed via the transmission line and the setting to the card authentication processing mode set via the keyboard (steps 501 and 502). ).

In this state, when the key operation for setting the card authentication processing mode is performed on the keyboard 3 shown in FIG. 2 (Yes at step 502), the card authentication processing is started.

At the beginning of this card authentication process, first, in response to the operation of inserting the card into the card slot 4 by the operator, the card information is read by the card reader 8 (step 50).
3), and the numeric keypad 3 on the keyboard 3 shown in FIG.
The amount information input by the operation of 4 and the like is read (step 504), and then the input amount and the authentication processing limit amount stored in the limit amount buffer of FIG. 4 are compared (step 505). ).

If it is determined that the amount of money for authentication processing is equal to or more than the limit (No at step 505), the operator waits for the dial key 35 to be operated (step 510), then the telephone line is connected (step 512) and dialing (step 512). Step 513) is performed to connect to the center host computer.

When the connection is completed, the card data and the input amount data are transmitted to the host computer (step 514),
The response from the host device is received (step 518) and stored in the display buffer shown in FIG. 4 (step 51).
9) Then, the telephone line is disconnected (step 520),
Finally, the contents of the display buffer are displayed on the display device 2 (step 521), whereby the actual authentication process is completed.

On the other hand, the entered amount information is (step 50
4) If it is determined that the amount is less than the authentication processing limit amount (step 505), only transactions randomly extracted based on a preset extraction rate are treated as real authentication processing that communicates with the host, while transactions that are not extracted Is a simulated authentication process that does not communicate with the host.

That is, when it is determined that the amount is equal to or less than the authentication processing limit amount (Yes at step 505), a known random number generation process is performed (step 506).

Next, the value of the random number obtained by this random number generation processing is
The reference data upper limit and reference data lower limit stored in the upper limit buffer and lower limit buffer shown in the figure are compared with the apex window comparator (steps 507, 50).
8).

As a result, only when the value of the obtained random number is out of the range of the upper and lower limit data (No in step 507, No in step 508), that is, only the transaction randomly extracted based on the preset extraction rate, A real authentication process for communicating is performed (steps 518 to 521).

On the other hand, the above window comparator processing (step 507,
508), if it is determined that the value falls within the upper and lower limits (Yes at Step 507, Yes at 508), the simulated authentication processing flag F shown in FIG. 4 is set (Step 50).
9), the following simulated authentication process is performed.

That is, wait for the dial key to be pressed (step 52
0) After confirming that the simulated authentication processing flag F is set to "1" (Yes at step 511), the telephone line connection processing (step 512) is skipped, and the dialing processing (step 513) and the card data are performed. , The amount data is transmitted (step 514).

Then, after confirming that the simulated authentication processing flag F is set to "1" (Yes in step 515), the above-described actual authentication processing (steps 519 to 521) is skipped, and instead, the simulated authentication response data issuing processing is performed. (Step 51
6).

As shown in FIG. 5B, in the simulated authentication response data issuing process, first, a random number is generated and stored in the calculation buffer (step 5161), then the simulated authentication number stored in the authentication number buffer is read out, and the calculation buffer is read. Generate a new simulated authentication number by adding it to the random number stored in (step
5162), finally, a simulated authentication response number is created based on the simulated authentication message stored in the message buffer and the simulated authentication number stored in the operation buffer (step 5163).

After that, the simulated authentication response data is stored in the display buffer (step 517), an appropriate processing time is corrected to approximate the actual authentication processing (step 518), and finally the contents of the display buffer are displayed on the display unit 2. Let

Then, the operation of the card authentication terminal device 1 is exactly the same as that of the real authentication processing in appearance, and it is impossible for the customer or the store side to identify whether the real authentication processing or the simulated authentication processing is performed. Therefore, it is possible to obtain the effect that the customer side and the store side mentally stop the fraudulent card processing.

The above is the description of the previously proposed portion, and the characteristic portion of the present invention will be described next.

During a idling operation (steps 501 and 502), if a call is made from one of the hosts via the transmission line (Yes at step 501), the telephone line connection processing is performed (step 522), and then the message from the host is received. (Step 523).

The received message is for instructing the card authentication terminal device 1 to perform various jobs, and the corresponding processing is performed according to the contents of the command (step 52).
4 Deny).

Among them, when the reference data setting command according to the present invention is confirmed (Yes at step 524), the reference data setting process is started.

When starting this reference data setting process, first,
After exchanging IDs (step 525) and confirming that the other host device is correct (step 526), the upper and lower limits of the reference data are received from the command of the format shown in FIG. 7A, and this is the upper limit of the memory. The data is stored in the buffer and the lower limit buffer (steps 527 to 530), the telephone line disconnection process is performed (step 531), and the reference data setting process ends.

As described above, in the apparatus of this embodiment, the card data is sent from the host computer of the center, for example, by sending the reference data setting command as shown in FIG. 7A and simultaneously sending the reference data upper limit and the reference data lower limit. It is possible to allow the authentication terminal device 1 side to freely set the upper and lower limits of the reference data.

The subsequent processing is as described above, waiting for the setting to the card authentication processing mode (step 502), and executing a series of jobs for the card authentication processing (step 502).
503-522).

Further, it is particularly important that the apparatus of this embodiment cannot set or change the upper and lower limits of the reference data by operating the keyboard 3 or the like. Therefore, the setting of the upper and lower limits of the reference data cannot be executed from any other than the host computer via the transmission line,
Since the upper and lower limit data is not known to the store side,
It is possible to give both the customer and the store clerk the psychological effect that the illegal use of the card using the simulated authentication processing is impossible.

That is, like the conventional device, the operator can change the setting value and perform illegal sales processing, damage the store, prevent illegal card transaction processing around the store, and reduce the loss of the card company. is there.

Further, according to the apparatus of the present embodiment, the rate of the actual authentication process can be controlled by changing the judgment reference data for each store according to the evaluation degree of the transaction credit of each store as seen from the card company. The amount of authentication inquiries can be controlled, and efficient host operation can be achieved.

Furthermore, it is possible to continuously verify the creditworthiness of each store based on the ratio of actual authentication processing set for each store and the number of card processing errors and card crime accidents that occurred at that store, which is extremely effective in reducing card crime. To bring.

In the above embodiment, the reference data upper and lower limits are sent together with the reference data setting command shown in FIG. 7A,
Although the card authentication terminal device 1 is configured to receive this, as shown in FIG. 7B, the reference data upper and lower limits are added to the response data from the host, and the reference data upper limit and lower limit are added. Even if the response data from the host device shown in FIG. 6 is received during the response process (step 616), and the lower limit reference data attached to the response data is stored in the memory at the end of the actual or simulated authentication process (step 616). 622),
It is possible to set data from the host.

In this case, since the value of the upper and lower limit data can be changed every time the actual authentication process is performed, the actual authentication can be performed in accordance with the frequency of card fraud processing at each store. There is an effect that the processing frequency can be set appropriately.

[Brief description of drawings]

FIG. 1 is an external perspective view showing an embodiment of a card authentication terminal device according to the present invention, FIG. 2 is a front view showing the configuration of a keyboard of the device, and FIG. 3 is a hardware configuration of the device. FIG. 4 is a block diagram, FIG. 4 is a memory map showing the data structure in the RAM of the device, FIGS. 5A and 5B are flowcharts showing the software structure of the device of the embodiment, and FIG. 6 is another software structure. Flowchart showing an example, first
FIG. 7A and FIG. 7B are diagrams showing the data format of received data. 1 …… Terminal device for card authentication 2 …… Display device 3 …… Keyboard 4 …… Card slot 5 …… CPU 6 …… ROM 7 …… RAM 8 …… Card reader 9 …… Transmission line 10 …… Modem

Claims (1)

[Claims] 1. Regarding small amount transactions less than the authentication processing limit amount, only the transactions randomly extracted based on the preset extraction rate are contacted with the host to actually perform the authentication processing, while the transactions that are not extracted are extracted. Is a card authentication terminal device for performing a simulated authentication process without communicating with a host, and means for detecting information relating to the extraction rate from the data received via a transmission line; Means for automatically updating the extraction rate based on the obtained information, and the extraction rate can be set only from the outside via a transmission line.