JPS58142475A - Transaction processor - Google Patents

Abstract

PURPOSE:To prevent the illegal use of a card, by checking on the correspondence relation between the cards, i.e. recording media and keywords stored in a storage device, and permitting transactions when both words have a prescribed relation, and then renewing the cards and keywords in the storage device when the transactions are permitted. CONSTITUTION:A transaction processor consists of a control center 1 and plural cash dispensers 2, etc. This center 1 is provided with a CPU10, information file classified by customers, communication control part 12, etc., and each dispenser 2 is provided with a CPU20 and a card reader and writer 24, billing machine 25, etc., controlled by the CPU20. The dispenser 2 compares a keyword read from a card with a keyword inputted on a customer panel 23; when they coincides with each other, the coincidence is reported to the center 1. The center 1 checks on the relation between information in the file 11 and information from the dispenser 2; when both pieces of information have the prescribed relation, transactions are permitted and the keyword is renewed simultaneously, thereby preventing the illegal use of the cards.

Description

DETAILED DESCRIPTION OF THE INVENTION The present invention relates to a transaction processing device that performs predetermined transactions using a card on which various data including a customer's unique personal identification number are recorded.

This type of transaction processing device compares the read data of the PIN number magnetically recorded on the card with the PIN number manually entered by the customer, or stores the PIN number in the device in advance and then uses the stored PIN number. The card user's personal identification number is compared with the personal identification number keyed by the customer, and when these station numbers match, it is confirmed that the card user is the person who is eligible for the transaction. After this confirmation, a predetermined transaction is executed.

In financial industries such as banks, transaction processing devices for cash payments and deposits are already widespread.

It is no exaggeration to say that the magnetic recording format of the card used in this transaction processing device is already widely known. Since encoders for recording data on cards are also commercially available, counterfeiting of cards has become relatively easy. In particular, with devices that do not store the PIN number in the device and compare the read data of the card O identification number with the PIN entered manually, it is possible for a counterfeiter to set the PIN number arbitrarily. Moreover, transactions can be made using this arbitrarily set PIN number.

This invention detects the use of counterfeit cards at an early stage.
and prevent fraudulent transactions using counterfeit cards.
□゛1)! [The purpose is to stop

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment in which the present invention is applied to a transaction processing device whose terminal device is an automatic cash dispensing machine will be described in detail with reference to the drawings.

FIG. 1 shows the overall configuration of the transaction processing device. The transaction processing device is composed of a control center (1) and a large number of terminals connected online to a center (11)K. One of the terminals is an automatic cash dispensing machine (hereinafter abbreviated as CD) (2).

At Center+11, there is a central processing unit (hereinafter referred to as CPU) that controls communications with each terminal and processes transaction data transmitted from the terminals.
Customer-specific information pool (hereinafter referred to as CIF)
(11), as well as a communication control device (1'4) and a modem (13) for communication with the terminal.In processing transaction data, the CPU troll checks the card, as will be shown later. It determines whether a transaction is possible, performs transaction calculation processing, rewrites CIFF F11+, etc. - A large number of terminals are connected to the center (1) via a modem (5) and a terminal controller (4), and These control communication with the center (1). One of the terminals, CD+21, includes an operation procedure display (branch) that sequentially displays the operations that the customer must perform for payment transactions, and a PIN code. The card data recorded on the card inserted into the card insertion slot of the customer service panel, which is equipped with a keyboard for inputting the billing amount, etc., a card insertion slot, and a cash discharge slot, is read, and a predetermined value is stored on the card. A card reader and writer (hereinafter simply referred to as a card reader) (hereinafter simply referred to as a card reader) (hereinafter simply referred to as a card reader) (hereinafter referred to simply as a card reader) (to) that prints transaction data on a journal and slip for each transaction,
In addition, it is equipped with a slip issuing machine (to) that imprints the emboss on the card and issues a slip, and a bill discharger m2 that counts and carries out the bills of the billed amount as input/output devices. The CPU (company) controls these input/output devices as well as communication with the center f1+.
Execute a given transaction. The CPU is equipped with a memory that stores transaction data and the like. CPU (goods)
is connected to the terminal controller (4) by an input/output control circuit (2). In FIG. 1, CPU
The memory that stores the program of IOI (3) and the like are not shown.

FIG. 2 shows the data recording format of a card used in a transaction processing device. The card has a magnetic stripe, and the magnetic stripe includes an ID code indicating that the card is used by a bank, a bank authorization code indicating the usage category of the card, a customer-specific PIN number, a bank number,
A store number, a customer's account number, a keyword (K1) for determining whether the card is genuine, etc. are magnetically recorded.

FIG. 3 shows C I F (I
It shows the contents of I). CIF (+l is made up of, for example, a magnetic disk. CIF Ql includes:
Each customer with an account has a storage area for its transaction data, and this area stores the account number, balance, password, keyword (K2), and write error flag (F). The keywords (Kl) and (K2) are mutually converted numerically by a predetermined algorithm, so even if they have the same account number, the keyword (K1) on the card and the keyword (K2) on the CXP(OL) will not match. are related by the algorithm above.

This algorithm may be any arithmetic expression or one that exchanges digits. The keywords (Kl) (K2) are updated for each transaction as shown later.

Figure 4 shows customer operations for CD+21 and CD
(This shows the procedure for transaction processing in step 21. The customer first inserts the card into the card slot (step (2)), then manually enters the PIN number using the keyboard (step c@).
. The data recorded on the inserted card is read by the Card League, and the PIN number in this card data is compared with the PIN number entered manually (step). If both numbers match, an instruction to enter the payment amount will be displayed on the display.
The customer inputs the invoice amount (step (to))
. If the two PIN numbers do not match, the card is returned (step (to)) and the process ends. Instead of immediately returning the card, the user may be required to manually enter the PIN number again. In this case, if you make a step profit and answer NO multiple times in a row,
If this happens, the card will be returned.

Once the payment request amount is entered, the data necessary for the payment transaction is ready, so we move on to communication with the center IT (step 8).
s (to)). Parallel to this center communication, a slip issuing machine□
Imprinting of the embossed card onto the journal is performed by □□ (step @). The message sent from CI] 21 to the center (1) includes the terminal code of the CD (2), a code indicating the type of message (in this case, a withdrawal message), the entered personal identification number, and the amount to be paid. and card data including the keyword (Kl). C, D 12) Upon receiving the message, the center (
1), as will be detailed later, determines whether the transaction is possible, inspects the card, creates new keywords, and performs CI F (I
I) updates, etc. are performed, and a message indicating these processing results is transmitted to the CD+21. Center fl+ to CD+
The message sent to 21 includes the CD (2+ terminal address, operation instructions (withdrawal allowed, return of non-withdrawal card, collection of non-withdrawal card), write/write of the card containing the new keyword, etc.
Contains data, account number, withdrawal amount, and new balance.

After communication with the center and card imprint processing, it is checked whether there is a transmission error, whether there is a reception error, and whether there is an imprint error (steps (to) to ■). Regarding transmission errors and reception errors, normally, if an error still occurs even after repeating transmission and reception with the center (11) a required number of times, the step is, for example, if the card is stuck in the conveyance path and imprinting is not performed. , the completion signal may not be output. In the case of a transmission error, the transaction data is not sent to the center (11), so the transaction is unsuccessful and the card is returned (step (551). Reception CIF (IIlG) in case of errors and imprint errors
Since it has already been updated, the transaction is generally completed.

In this case, since it is not possible to write to the card (step (43), especially new keywords), a write error message is sent to the center [11 (step @
). After this, it is left to the processing of the staff. A write error message trap contains a code and card data indicating this.

If there are no errors in any of steps (to) to ne, if withdrawal is possible according to the operation instructions in the message sent from the center (1) (step (4υ)), print the transaction data on the slip ( Step (@), write write data including new keyword i to card (step (43)
, cash equivalent to the withdrawal amount, and counting processing (step (lead)) are performed in parallel.If withdrawal is not possible,
Since it is card collection or return (step (a)), the card is collected according to the instruction (step (ω)) or the card is returned (step (to)).

After slip printing, card writing, and cash dispensing counting, it is checked whether an error has occurred in these processes (steps (49 to (4I)).

A printing error is detected, for example, when a printing completion signal is not output. Card and write errors include cases where the card is jammed and writing to the card is not done at all or only partially, and cases where the card is detected by a read check after writing. Cash repeat counting errors include, for example, jammed banknotes. In either case, the transaction has already been completed. In the case of a printing error or a cash dispensing counting error, since writing of data including a new keyword to the card has been completed, the process is left to the clerk's processing. The clerk hands over the customer's card and cash to complete the transaction. In the case of a card write error, since the keyword of the card has not been updated, a write error message is sent to the center IT (step @). The process then moves on to the processing by the staff member. If a card write error occurs, such as when the card becomes jammed during writing, the card is unreadable and must be reissued.

If there are no errors, the card is returned (step 5m), the printed slip and cash are released (step 5m), and the transaction is completed. Card return error (step (511)), cash, slip release error (step (to)
) occurs, it will be handled by the staff in charge.

In the above example, after updating the CIF (It) of center +11, the transaction is concluded, but it is also possible to return the CIF (11) to the original value.

FIG. 5 shows the processing procedure of the center.

After receiving the message from the terminal, the message is classified (step 111). If it is a withdrawal message (step -)
, proceed to the withdrawal transaction processing from step Kasumi. In the case of a write error message (step), since this message includes an account number, CI FCll) is searched,
The write error flag CF) in the storage area of the corresponding account number is set (step). In the case of a deposit message (step (goods)), predetermined deposit transaction processing is performed (step @). If the received message is another Ω message, processing corresponding to that message is executed.

Now, in the withdrawal transaction process, the format of the received withdrawal message is first checked, and the keyword (Kl) in the message is converted into a numerical value using a predetermined algorithm.

Also, from the east account number included in the message, CI
F(n) is searched (step (6!9). If there is an error in the content of the received withdrawal message (step export)
, for example, if there is no corresponding account number in the CIF C11), an error message containing an instruction to return the non-transactionable card is sent to the CD+21 (step spider). If there is no error, next, the entered PIN included in the message from CD+21 is compared with the PIN stored in the corresponding account in CIF (11) (Step @) , if they match, it is then checked whether the flag (F) is set (step IBI). If the flag F) is not set, the numerically converted keyword i in the message is compared with the keyword 1 (K2) stored in the corresponding account of CIF(n) (step (up to) )). If the PIN does not match in step - or the keyword does not match in step (to),
Since the card was used fraudulently or a fraudulent card (counterfeit card) was used, a message containing an instruction to collect the non-transactionable card is sent to CD(2) (step m)). In step Kasumi, the password included in the card data in the message and the password in CIF (11) may be compared. Further, since the verification of the personal identification number has already been carried out at the CD (2), the processing in step - is not necessarily necessary at the center (1).

If the PIN number and keyword match, the billed amount and the balance in CIF (IIl) are compared, and if the balance is larger, it becomes a withdrawal tube (step (2)). Write error. 7 lag CF) is set (YES at step -), the process moves to step (2) without performing keyword comparison processing. If the balance is insufficient in step (2), a message containing an instruction to return the non-withdrawal card is sent to CD (2) (step (company)).

If withdrawal is possible, the balance in the storage area of the account number that is the subject of the transaction in CIF (++), the keyword (K
2) is updated, and the flag CF) is reset (step ff41). The new balance is determined by subtracting the requested payment amount (withdrawal amount) from the stored balance. The simplest keyword to use is the number of times a card is used. In this case, a new keyword is created by adding 1 to (K2). Other keyword updating methods include calculating using a predetermined function using the previous keyword as a variable, and using random numbers. In the above function, the number of uses, time, etc. can also be used as parameters. The random number is obtained by a random number generator consisting of a pulse generator and a counter that counts the generated pulses. In this way, when a new keyword is sought, this new keyword is
It is stored in the corresponding area of F (II) and converted into numerical values using a predetermined algorithm (step ■)
. Then, this new numerically converted keyword replaces the keyword in the card data to create card write data. Finally, a telegram containing instructions for withdrawing, the created light book data, corridor number, withdrawal amount, and new balance is edited and sent to CD+21 (
step).

In the CD+21, the write data of the card transmitted from the center+1 as described above is written to the card (step (431)), so the card keyword (K) is ka, ku value (:.

It becomes a new converted keyword.

In Figure 5, even in the deposit processing (step @),
The above-mentioned password check and keyword check may be performed.

However, in the case of depositing money, fraudulent use of the card or use of a counterfeit card is unlikely, and even if there is, the customer will not suffer any disadvantage, so this is not necessarily necessary.

A customer-specific keyword (K1) is recorded on the card. CIF (+1) stores a keyword (K2) in a one-to-one correspondence with the keyword (K1) in the storage area for the customer's account number. Then, when the card is used, the keywords (K1) and (K2
) are checked to see if they have a correct correspondence, and the keywords (K1) and (K2) are updated. If the keywords (K1) and (K2) do not have a correct correspondence relationship, the transaction is prohibited. Although keywords are recorded on the card in addition to conventional card data, the format is difficult to understand, making it difficult to counterfeit the card. Even if the card is forged, if a legitimate card has been used at least once before this counterfeit card is used, then the keyword (K2
) has been updated, so the keyword of the counterfeit card no longer has a correct correspondence with the CIF (river) keyword, and the transaction is immediately prohibited.

If you do not struggle with the CIF (u) keyword being updated by using the correct card, and the updated keyword was not written to the card due to an error in CD+21, then the Write to fil.
An error message is transmitted. At the center (1), the light
When an error message is received, write error flag F)
is set, and if this flag (F) is set, keyword checking is not performed. Therefore, CD
Even if a card whose keyword has not been updated due to the error in (2) is used, normal transactions are possible.

In the above example, the keyword is converted into a numerical value only in the center (]), but a numerical conversion circuit or a numerical conversion circuit is provided in both the center (]) and the CD+21, so that the keyword is converted into a numerical value in both. It's okay. This situation is shown in FIG. Assume that the keyword recorded on the card is Kl=3412. This keyword is CI
]21, the first and second digits and the third and fourth digits are exchanged, respectively, resulting in K3=4321.

This keyword (K3) is transmitted between the center fil and the CD (21).Then, at the center (1), the keyword (K3) is further rearranged in the reverse order and becomes 2=
It becomes 1234. This keyword (K2) is CI 11
Memorized by the river. In this way, the keyword is CIF(1
1) Since the value of the keyword is completely different both on the line and on the card, the value of the keyword is completely unknown from the outside.

Although a CD is shown as the terminal in the above embodiment, it goes without saying that the present invention can also be applied to automatic teller machines and loan machines. In this case, it is preferable to check keywords for transaction processing such as balance inquiry, transfer, and transfer. Also, transaction processing devices using cards other than transaction processing devices such as banks, etc.
Zl>)'PECR(electron-+-y7y!6
Needless to say, the present invention can also be applied to POS system terminals such as ``Logistar'', terminals at unmanned supermarkets, and other vending machines that sell goods using cards. This applies not only to terminals that operate online, but also to devices that operate online. In this case, the keywords are stored in the memory of the device rather than in the center. Furthermore, the present invention can also be applied to passbooks with magnetic stripes on which transaction data is recorded. All you have to do is record the keyword on the magnetic stripe of your passbook.

As explained in detail above, in this invention, the correspondence relationship □ between keywords stored in a recording medium such as a card and the memory of the device is checked, and if both keywords have a predetermined correspondence relationship, the transaction is permitted and recorded. Media and memory keywords have been updated. Transactions are prohibited if both keywords do not have a predetermined correspondence relationship. Therefore, it is difficult to forge a recording medium, and even if it is forged, it can be detected early, and it is impossible to conduct transactions using a forged recording medium, preventing fraudulent transactions. Prevented in advance.

[Brief explanation of the drawing]

Figure 1 is a block diagram showing the overall configuration of the transaction processing device, Figure 2 is a diagram showing the card format, Figure 3 is a diagram showing the contents of the customer-specific information file, and Figure 4 is the operation of the terminal. FIG. 5 is a flow chart showing the operation of the center, and FIG. 6 is a diagram showing how keywords are converted into numerical values. (1)... Control center, (2)... Cash dispenser, (10) (company)... @ CPU, 01.
...Customer information file, (Foundation)...Card reader and writer. that's all

Claims (2)

[Claims] (1) Using a recording medium in which user-specific data is recorded, the data read from the recording medium or the data read from the memory accessed by this read data is compared with data entered manually by the user. Accordingly, in a transaction processing device that confirms a genuine user, the recording medium has a storage area for keywords, and the transaction processing device has a memory for storing keywords for each user, and a memory for reading and storing data on the recording medium. a reading/writing device for writing data to be updated; a calculation means for checking the correspondence between the keyword read from the recording medium and the keyword of the user of the recording medium stored in the memory; A transaction processing device, comprising control means for permitting a transaction only when a predetermined correspondence exists, and for creating a new keyword and thereby updating keywords in a memory and a recording medium. (2) A means for detecting the occurrence of an error in which the keyword to be updated cannot be recorded on the recording medium is provided, the memory stores the keyword and the occurrence of the error for each user, and the control means stores the occurrence of the error. The transaction processing device according to claim ti1, in which the transaction is permitted regardless of whether or not there is a correspondence relationship between the keywords.