JPH04252396A - PIN verification device - Google Patents

Abstract

PURPOSE:To prevent the illegal use of a personal code number by changing the personal code number every time when a cash card is utilized and making the code number which is used this time unusable next time. CONSTITUTION:When the card data of a card 7 on which information indicating the preparation rule of the personal code number is recorded is read by means of a card reader 8, a paying machine control part 1 prepares the personal code number based on the preparation rule from among applicable card data from variables generated by a random number generator 9. By comparing the personal code number to be inputted from a keyboard 5 with an internally prepared personal code number, the usage of the applicable card is permitted at the time of coincidence. Thus, the personal code number is changed every time when the cash card 7 is used.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a password verification device used in fields such as automatic teller machines where security is provided by passwords.

0002

[Prior Art] Conventionally, in automatic teller machines, when a card reader reads a membership number recorded on a cash card, an inquiry is made to a host device for a PIN number based on the membership number, and the host device When the received PIN number matches the PIN number entered from the keyboard, cash payment to the card holder is permitted. In this case, the PIN number is fixed for each card holder.

[0003]On the other hand, recently, magnetic cards with different PIN numbers recorded for each room are prepared as hotel room keys, and when the PIN number of the magnetic card is read with a card reader installed at the entrance of each guest room, the PIN number of the magnetic card is read. A system has been put into practical use that unlocks the entrance when a password matches a preset password for the guest room. In this case, security is established by updating the PIN number according to preset rules each time the customer changes.

0004

[Problem to be Solved by the Invention] However, in the case of automatic teller machines, the PIN number is fixed for each card holder, so if the PIN number is known to another person, there is a risk of unauthorized use. Ta.

[0005] On the other hand, in the case of the room key system, if the user does not notice the loss of the card and updates the password late, there is a risk that the card may be stolen and the key unlocked.

[0006] Therefore, the present invention aims to provide a password verification device that can verify the password that changes each time it is used, can reliably prevent theft of the password, and can improve security. It is.

[0007]

[Means for Solving the Problems] The present invention provides a recording medium for recording information indicating rules for creating a personal identification number, an information reading means for reading information recorded on the recording medium, and a variable generation means for generating a variable. a PIN creation means for creating a PIN based on the PIN creation rules read by the reading means from variables generated by the generation means; a PIN input means; The personal identification number verification means compares and verifies the personal identification number and the personal identification number created by the creation means and validates the recording medium when they match.

[0008]

[Operation] With the present invention having such a configuration, information based on the rules for creating a personal identification number set for each user is recorded on a recording medium such as a magnetic card, and the information reading means reads the recording medium. When the recorded information is read, a password is created based on the creation rule from the variables generated by the variable generation means. The password entered through the input means is then compared and verified, and becomes valid if they match.

[0009] Therefore, the user creates and inputs a PIN number based on the variables generated each time the user uses the machine and the creation rules set for the user in advance. That is, since the password changes each time it is used, there is no risk of the password being stolen unless the creation rules are known.

0010

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to an automatic teller machine will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a schematic configuration of the above-mentioned automatic teller machine, in which a pay machine control section 1 constituting the main body of the control section is constituted by a personal computer or the like.
It is connected online to the upper host device 2. Also, there is a withdrawal unit controller 4 for controlling the operation of the withdrawal unit 3 for discharging cash, a keyboard 5 for inputting the withdrawal amount, etc., and a display for displaying the withdrawal amount entered by key, various messages, etc. A card reader 8 for reading card information magnetically recorded on a cash card 7, and a random number generator 9 are each connected to the payment machine control unit 1.

[0012] Here, the keyboard 5 is arranged with a numeric keypad for the card holder to enter a personal identification number (
PIN code input method).

As shown in FIG. 2, the cash card 7 has a membership number 71 set for each card holder and a company code 72 of the card issuing company (bank), as well as a personal identification number set for each card holder. Information 73 indicating rules is magnetically recorded. Here, the cash card 7 functions as a recording medium that records information indicating rules for creating a personal identification number, and the card reader 8 functions as an information reading means.

The random number generator 9 generates a two-digit variable at random upon receiving a random number generation command from the payment machine control unit 1 (variable generation means).

The payment machine control section 1 is configured to execute the payment process shown in FIG. That is, when the cash card 7 is inserted into the card reader 8, the card reader 8 reads the card data magnetically recorded on the card 7 and determines whether or not the card is normal. Here, for example, if the company code cannot be used with this payment machine, it is determined that the card is abnormal, an error message is displayed on the display 6, and the card 7 is ejected from the card reader 8 (error processing).

[0016] In the case of a cash card 7 that can be used with this payment machine, information 73 indicating a password creation rule in the card data is recognized. It also sends a random number generation command to the random number generator 9. When a two-digit variable is generated by the random number generator 9 in response, the variable is read and displayed on the display 6, and a password is generated from the variable based on the corresponding creation rule. (Password Creation Means) Next, when the numeric keypad of the keyboard 5 is operated to input a password, the input password is compared and verified with the password generated internally. If the two match, the cash magnetic card 7 is validated and the host device 2
to inquire about the balance of the user with the relevant membership number. (Password verification means) If the balance responded by the host device 2 is greater than or equal to the withdrawal amount keyed in from the keyboard 5, cash payment is permitted, and the withdrawal unit controller 4 is controlled to adjust the withdrawal amount. The corresponding cash is discharged from the dispensing unit 3.

[0017] If the key-input password and the internally created password do not match, or if the balance is less than the withdrawal amount, the above-mentioned error process is executed.

A card issuing company that uses the automatic teller machine of this embodiment configured as described above assigns and delivers appropriate rules for creating a personal identification number to each user. In addition, a cash card 7 is issued to each user, on which information indicating the corresponding creation rule is recorded together with the membership number, company code, etc.

When using an automatic teller machine, each user first inserts the cash card 7 that he or she owns into the card reader 8. Then, a two-digit variable is randomly generated from the random number generator 9 and displayed on the display 6. Thereupon, the user creates a password from the displayed two-digit variable based on the creation rules set for him/herself, and enters the password from the keyboard 5. On the other hand, inside the payment machine, a PIN number is automatically created from a two-digit variable generated by the random number generator 9 and information indicating the creation rule in the card data read by the card reader 8. Then, the key-input password and the internally generated password are compared and verified, and if they match, cash payment using the cash card 7 becomes possible.

[0020] For example, the creation rule set for a certain user is ``Use the password ``4ab8'' from the two-digit numbers a and b calculated by the calculation formula ``2x+y'' (x and y are variables)''. If there is, the variable x generated from the random number generator 9
, y are (3, 5), the password will be "7118", and if (5, 3), the password will be "7138".

As described above, according to the present embodiment, the PIN number changes depending on the variable generated by the random number generator 9 every time even one cash card 7 is used, and if the PIN numbers do not match, the PIN number changes. The use of the card 7 becomes impossible. Therefore, as long as the user does not know the rules for creating the password, there is no risk that the card 7 will be stolen, since even if the user is seen entering the password, the password will be changed the next time it is used.

It should be noted that the present invention is not limited to the above embodiments. For example, in the embodiment described above, a case was shown in which a password was created using variables generated by the random number generator 9, but the means for generating variables is not limited to this.
For example, it is possible to use the date and time measured by a clock circuit as variables and create a password from the date and time at the time of use. However, if the date is used, if it is used more than once on the same day, it will become the same as the previous time, so it is desirable to add a rule such as incrementing it by "1" each time it is used.

Furthermore, it goes without saying that the present invention is not limited to automatic teller machines, but can also be applied to, for example, room key systems in hotels. It goes without saying that various other modifications can be made without departing from the gist of the present invention.

[0024]

Effects of the Invention As described in detail above, according to the present invention, it is possible to check the PIN number that changes each time it is used, and the PIN code can be reliably prevented from being stolen and the security can be improved. A number verification device can be provided.

[Brief explanation of the drawing]

FIG. 1 is a block configuration diagram of an automatic teller machine which is an embodiment of the present invention.

FIG. 2 is a diagram showing the data format of the cash card in the same embodiment.

FIG. 3 is a flowchart showing payment processing by a payment machine control unit in the same embodiment.

[Explanation of symbols]

1...Payment machine control unit, 5...Keyboard (PIN code input means), 6...Display device, 7...Cash card (recording medium),
8...Card reader (information reading means), 9...Random number generator (variable generation means).

Claims (1)

[Claims] Claim 1: A recording medium for recording information indicating rules for creating a personal identification number, an information reading means for reading information recorded on the recording medium, a variable generating means for generating a variable, and a variable generated by the generating means. a PIN number creation means for creating a PIN number based on a PIN creation rule read by the reading means; a PIN input means; and a PIN input by the input means and the creation means. A password verification device comprising a password verification means for comparing and verifying the created password and validating the recording medium if they match.