CN106204952A - Self-service move back X 2 method and self-service move back card system - Google Patents

Abstract

The invention provides an automatic card return method and an automatic card return system that enable customers to retrieve swallowed bank cards by themselves. The method for automatically returning the card includes the following steps. In the step of saving the associated information of the temporary card, the self-service device obtains the associated information of the temporary card associated with the card when recycling the card, and saves the associated information of the temporary card in the information storage mechanism of the self-service device. In the user input information recognition step, the self-service device recognizes user input information input by the user to the self-service device. In the user verification step, the self-service device compares the information entered by the user with the information associated with the temporarily stored card, thereby performing local verification on the user. In the step of returning the card, if the local verification is successful, the self-service device returns the temporarily stored card to the user. According to the automatic card withdrawal method and the automatic card withdrawal system of the present invention, the self-service equipment can confirm the user's identity information through local verification, which greatly improves the popularity rate of the self-service card withdrawal function.

Description

Self-service card refund method and self-service card refund system

technical field

The present invention relates to a self-service card withdrawal method and a self-service card withdrawal system, in particular to a self-service card withdrawal system for customers after the card recovery occurs due to reasons such as operation timeout or host computer instructions in self-service equipment such as automatic teller machines (ATMs) or exchange machines that require customers to insert cards. A self-service card return method and a self-service card return system for retrieving the card from the self-service device.

Background technique

In financial institutions such as banks, self-service devices such as cash self-service transaction devices are widely used in order to reduce the burden on operators and to automate operations such as customer deposit processing and withdrawal processing to improve customer service. In addition, various self-service devices for customers to perform prescribed tasks (for example, payment of electricity bills, etc.) by themselves are also widely used. In order for these self-service machines to operate automatically, a card such as a magnetic card or an IC card is used as a medium for the self-service machines to identify information on customers and their accounts.

Under normal circumstances, for example, the customer inserts the card into the self-service device at the beginning of the transaction, performs corresponding operations, and sends the card from the self-service device at the end of the transaction, and the customer takes the card and ends the operation on the self-service device.

In the above process, sometimes the card is recycled by the self-service device due to reasons such as operation timeout. After that, the current mainstream self-service equipment will temporarily store these recycled cards until the operator performs regular maintenance and hand over the recycled cards to the counter staff, and the customers whose cards have been recycled need to report to the counter staff afterwards and return them after confirmation Recycled cards. This process itself increases the workload of the bank and also causes inconvenience to customers.

In this regard, the prior art has proposed a self-service card return device for recycling cards, which can reduce the workload of the bank and improve the convenience of customers when the card is recycled by the self-service equipment.

For example, Patent Document 1 discloses an automatic card swallowing and returning processing system for self-service equipment. When card swallowing occurs on the self-service equipment, the drive system drives the card transmission mechanism to receive the card and store the card in the card box. The storage location information is sent to the automatic card swallowing and returning control system. The automatic card withdrawal control system gives a reminder to confirm identity information when the customer chooses the self-service card refund service, and sends the input customer-related information to the bank's background system. After the bank's background system confirms the customer's identity, the automatic card swallowing and returning control system sends the storage location information of the card to the drive system, and the drive system drives the card selection mechanism and the card transmission mechanism to push the card in the card box out to customers.

Patent Document 2 discloses a card recycling device, which includes a card reader and a card box installed in the self-service machine, the card box is arranged behind the card reader, and a plurality of card receiving boxes are arranged in the card box. A card slot, a card pushing mechanism that pushes the card in the card slot to the exit of the card reader is installed at the rear of the card box.

Patent document 1: CN103413387A (application number: 201310363133.0)

Patent document 2: CN203870638U (application number: 201420135934.1)

However, the above-mentioned prior art mainly relates to the structure of the card return hardware device, and does not fully provide a method for self-service equipment to confirm identity information when self-service card return. For example, in Patent Document 1, the self-service device must send customer-related information to the bank's background system, and the bank's background system must confirm the identity of the customer. Therefore, the self-service card return process of the prior art requires the transformation of the bank's background system, that is, the bank host to adapt to the self-service card return process, which limits the popularity of the self-service card withdrawal function.

In addition, in the self-service card return service of the prior art such as patent document 1, the customer is prompted to input the card number, but the card has been recovered by the self-service device when the customer performs the self-service card return service, and there are very few people who can remember the card number in reality , has seriously affected the practicability of customers' self-service card withdrawal, and limited the success rate of self-service card withdrawal.

Moreover, the above-mentioned prior art has not yet disclosed how to ensure security when confirming identity information when self-service card withdrawal, and there are major hidden dangers such as card fraudulent claims or user information leakage.

Contents of the invention

The present invention aims at the above-mentioned technical problems in the prior art, and provides an automatic card return method and an automatic card return system that enable customers to retrieve swallowed bank cards by themselves.

The present invention provides an automatic card return method, which is used for a self-service device to return a card recovered and temporarily stored by the self-service device to the user. Obtain the temporarily stored card-associated information associated with the card, and save the temporarily stored card-associated information in the information storage mechanism of the self-service device; the user input information identification step, the self-service device identifies the information sent by the user to the self-service device The user input information input by the self-service device; the user verification step, the self-service device compares the user input information with the temporary storage card related information, thereby performing local verification on the user; and the card return step, in the If the local verification is successful, the self-service device returns the temporarily stored card to the user.

According to the automatic card withdrawal method of the present invention, the self-service device can confirm the user's identity information through local verification, so even if the background system of the bank, that is, the transformation of the bank host, can be performed by the self-service device, the self-service card return process can be greatly improved. The penetration rate of self-service card withdrawal function. Especially during the window period before the mainframe is modified, the usability of customers' self-service card collection has been improved.

In the automatic card withdrawal method of the present invention, in the step of storing the temporarily stored card-related information, the self-service device may acquire the card information, user information, transaction information and password information of the card as the temporarily stored card information. Card-associated information; in the user input information identification step, the self-service device displays a screen for the user to input card information, user information, transaction information and password information, and identifies the card information input by the user to the self-service device, the user One of information and transaction information and password information, as the user input information; in the user verification step, the self-service device is based on card information, user information and one of transaction information and password information for comparison , thereby locally authenticating the user.

Thus, when the user inputs information during verification, the user can select one of a variety of verification options. As long as the user can input a certain verification information, even if other verification information cannot be memorized, the user can select an appropriate option for input. The convenience of users is greatly improved, and the success rate of self-service card withdrawal is improved.

In the automatic card withdrawal method of the present invention, in the step of saving the associated information of the temporary storage card, the self-service device performs irreversible encryption processing on the acquired related information of the temporary storage card, and The irreversibly encrypted temporary storage card related information is stored in the information storage mechanism; in the user verification step, the self-service device performs the same irreversible encryption processing on the user input information as the temporary storage card related information Irreversible encryption processing, and comparing the user input information after irreversible encryption processing with the temporary storage card related information after irreversible encryption processing, so as to perform local verification on the user.

As a result, the safety of confirming identity information during self-service card withdrawal is ensured, and the risk of user information leakage and the like is greatly reduced.

In the automatic card withdrawal method of the present invention, in the step of storing the temporary card-related information, the acquired password information after irreversible encryption processing and the information stored in the information storage mechanism of the self-service device can also be If the irreversibly encrypted other password information is the same, the self-service device does not save the obtained password information, and deletes the saved other same password information from the information storage mechanism of the self-service device.

Thus, for the small possibility of repetition of the user password, it is guaranteed that the local authentication using the same password fails, and then the online authentication can be performed, thereby ensuring 100% security.

In the automatic card return method of the present invention, it may also include: the returned card information deletion step, after the self-service device returns the temporarily stored card to the user, the information stored in the self-service device Delete the temporary card association information of the card in the institution.

Therefore, the self-service device does not save the related information of the card that has been returned, which not only reduces the risk of user information leakage, but also benefits the self-service device to automatically return the card afterwards.

The present invention also provides an automatic card return system, which is equipped with a self-service device and a host that can communicate with each other through the network, and is used for the self-service device to return to the user the card recovered and temporarily stored by the self-service device, characterized in that the self-service When the device reclaims the card, it obtains the temporarily stored card-related information associated with the card, and saves the temporarily stored card-related information in the information storage mechanism of the self-service device, and identifies the user's information input by the user to the self-service device. The input information is compared based on the information input by the user and the associated information of the temporary storage card, so as to perform local verification on the user; if the local verification is successful, the self-service device returns the received information to the user The temporarily stored card; if the local verification fails, the self-service device initiates an online verification request to the host via the network, and the host performs online verification; if the online verification succeeds , the self-service device returns the temporarily stored card to the user.

According to the automatic card withdrawal system of the present invention, the self-service device can confirm the user's identity information through local verification, and only when the local verification of the self-service device fails, the automatic card return process is carried out through online verification, taking into account the bank's host before the transformation. The usability of self-service card withdrawal and the smooth transition after the transformation of the mainframe of the bank during the window period.

In addition, the above-mentioned technical solutions of the automatic card return method of the present invention can also be realized by an automatic card return system or an automatic card return device as a self-service device, and similar technical effects can be achieved.

Description of drawings

FIG. 1 is a conceptual diagram of an automatic card withdrawal system according to an embodiment of the present invention.

Fig. 2 is a schematic diagram of the appearance of the self-service device according to the embodiment of the present invention.

Fig. 3 is a hardware/block diagram of the self-service device according to the embodiment of the present invention.

Fig. 4 is a flow chart of the method for automatically withdrawing a card according to an embodiment of the present invention.

Fig. 5 is a flow chart when forgetting occurs in a specific example of the automatic card withdrawal method according to the embodiment of the present invention.

FIG. 6 is a schematic diagram showing transaction-related information.

Fig. 7 is a flow chart of self-service card withdrawal in a specific example of the automatic card withdrawal method according to the embodiment of the present invention.

Fig. 8 is a flow chart of a user selection verification method when self-service card withdrawal in a specific example of the automatic card withdrawal method according to the embodiment of the present invention.

Explanation of reference signs:

1 Automatic card withdrawal system; 2 Host computer; 3 Network; 100 (100-1～100-4) self-service equipment; 102 Operation screen; 103 Operation buttons; 104 Password keyboard; 105 Non-contact IC card reader; 107 deposit and withdrawal port; 108 receipt exit; 110 display operation department; 120 card processing department; 121 card temporary storage department; 130 non-contact ID card reading department; 140 receipt processing department; Processing Department; 200 Control Department; 210 Communication Department; 220 Handwriting Input Recognition Department; 230 User Verification Department; 240 Card Control Department;

detailed description

Embodiments of the present invention will be described in more detail below in conjunction with the accompanying drawings. In addition, the same reference numerals are attached to the same or corresponding parts in the drawings, and repeated descriptions are omitted.

Firstly, an automatic card withdrawal system including an embodiment of the present invention will be described with reference to the accompanying drawings. FIG. 1 is a conceptual diagram of an automatic card withdrawal system according to an embodiment of the present invention. As shown in FIG. 1 , as shown in FIG. 1 , the automatic card withdrawal system 1 includes a host 2, a network 3 and self-service devices 100 (100-1, 100-2, 100-3, 100-4). The host 2 is installed in a bank, for example, and can receive information from the self-service device 100 via the network 3 and send information and instructions to the self-service device 100 . The network 3 is, for example, various communication networks such as a wired communication network or a wireless communication network, and can realize data transmission. The self-service device 100 can send information to the host 2 via the network 3 and receive information and instructions from the host 2 . Among them, although four self-service devices 100-1, 100-2, 100-3, and 100-4 are shown, the number is not limited and can be set arbitrarily according to needs. Each self-service device may have the same or similar structure, which will be collectively referred to as the self-service device 100 for description below.

The self-service equipment 100 according to the embodiment of the present invention will be described in detail with reference to the accompanying drawings. First, the appearance of the self-service device 100 will be described. Fig. 2 is a schematic diagram of the appearance of the self-service device according to the embodiment of the present invention. In FIG. 2 , the installation positions and shapes of each structure are only for illustration, and are not intended to limit the present invention. In practice, various appropriate installation positions and shapes can be adopted according to the situation. As shown in FIG. 2 , the self-service device 100 is, for example, an automatic teller machine (ATM, also known as a cash self-service transaction device) or an exchange machine, which requires a customer to insert a card. The self-service device 100 is equipped with an operation panel 102 such as a touch display screen, operation buttons 103 and a code pad 104 for user operations. On the self-service device 100, for example, a non-contact IC card reader 105, an entry and exit card opening 106, a deposit and withdrawal opening 107, a receipt exit 108, and the like are arranged on the front surface.

Next, hardware/modules of the self-service device 100 will be described. Fig. 3 is a hardware/block diagram of the self-service device according to the embodiment of the present invention. As shown in FIG. 3 , the self-service device 100 includes, for example, the following hardware/modules. The display operation unit 110 is realized by, for example, the operation panel 102 and the operation buttons 103, and can display a guide screen for the user to input information or instructions, and accept the user's input. The card processing part 120 sucks in the bank card inserted by the customer from the card slot 106 and reads the magnetic stripe if the bank card is a magnetic card, and reads the IC data when the bank card is an IC card, and according to the upper control part instructions to recycle or return the card to the customer. The card temporary storage unit 121 receives and temporarily stores the cards recovered by the card processing unit 120 , and pushes the temporarily stored cards back to the card processing unit 120 according to the instruction of the upper control unit. The non-contact ID card reading unit 130 is, for example, realized by the non-contact IC card reader 105, which can read the information recorded by the chip on the non-contact IC card reader 105 or near the non-contact IC card reader 105. Basic information such as name and ID number. The receipt processing unit 140 can print the receipt and send it out from the receipt outlet 108 according to the instruction of the upper control unit. The PIN pad input unit 150 is realized by, for example, the PIN pad 104, and allows the user to input PIN information. The cash processing unit 160 handles cash used for deposit and withdrawal transactions. The control unit 200 includes a communication unit 210, a handwriting input recognition unit 220, a user verification unit 230, a card control unit 240, a forgotten card self-retrieval control unit 250 and other required modules. The communication unit 210 can transmit information to the host 2 via the network, and can receive information and commands from the host 2 . The handwriting input recognition unit 220 recognizes the trajectory of the user's handwriting input. The user verification unit 230 verifies whether or not the user's input exists in the forgotten card information (also referred to as temporary card-related information). The card control part 240 communicates with the card processing part 120 and returns the result status. The forgotten card self-retrieval control unit 250 communicates with the card temporary storage unit 121 and returns the result status. In addition, the cash identification unit 300 is used to identify cash. The information storage mechanism 400 records the above-mentioned forgotten card information (temporary card-related information), details will be described later.

Next, the automatic card withdrawal method according to the embodiment of the present invention will be described. Fig. 4 is a flow chart of the method for automatically withdrawing a card according to an embodiment of the present invention. As shown in Figure 4, the automatic card return method of the embodiment of the present invention is used for the self-service device 100 to return to the user the card recovered and temporarily stored by the self-service device 100, which specifically includes the step S101 of temporarily storing the associated information of the card, identifying the information input by the user Step S102, user verification step S103 and card withdrawal step S104. In step S101 of storing temporary card related information, the self-service device 100 acquires temporary card related information associated with the card when recycling the card, and saves the temporary card related information in the information storage mechanism 400 of the self-service device 100 . In the user input information recognition step S102 , the self-service device 100 recognizes user input information input to the self-service device 100 by the user. In the user verification step S103, the self-service device 100 compares the temporary card association information with the user input information, thereby performing local verification on the user. In the card return step S104, if the local verification is successful, the self-service device 100 returns the temporarily stored card to the user.

According to the automatic card withdrawal method and the automatic card withdrawal system of the embodiments of the present invention, the self-service equipment can confirm the identity information of the user through local verification, so even if the background system of the bank, that is, the transformation of the bank host, can be executed by the self-service equipment The self-service card return process has greatly improved the popularity of the self-service card withdrawal function. Especially during the window period before the mainframe is modified, the usability of customers' self-service card collection has been improved.

In addition, when the local verification fails, the self-service device 100 may prompt the user that the self-collection of the card fails, and the automatic card withdrawal process ends. In addition, when the local verification fails, the self-service device 100 can also initiate an online verification request to the host 2 via the network 3, and the host 2 performs the online verification. If the online verification is successful, the self-service device 100 returns the temporarily stored Card.

As a result, the self-service device 100 can confirm the user's identity information through local verification, and only when the local verification of the self-service device 100 fails, the automatic card withdrawal process is performed through online verification, taking into account the window before the bank's host computer 2 is not modified. During the period, the availability of self-service card collection and the smooth transition after the renovation of host 2.

A specific example of the automatic card withdrawal method according to the embodiment of the present invention will be described below. The specific example described here is only an example of the automatic card return method of the embodiment of the present invention, and is not intended to limit the automatic card return method of the embodiment of the present invention, and the steps in this specific example can be omitted as appropriate.

Fig. 5 is a flow chart when forgetting occurs in a specific example of the automatic card withdrawal method according to the embodiment of the present invention. As shown in Figure 5, first the user inserts the card into the card slot 6 of the self-service device 100 (step S201), and starts operations such as deposit and withdrawal transactions or balance inquiry (step S202). After the transaction or operation is completed, the self-service device 100 sends the card out from the card slot 6 (step S203). At this time, the self-service device 100 judges whether or not the card has been taken out within a predetermined time (step S204). The specified time can be set as appropriate, for example, it is set to 60 seconds. If the card is taken out within the prescribed time (step S204: Yes), the transaction is normally completed (step S205). If the card has not been taken out after the specified time (step S204: No), when the control unit 200 judges that the card temporary storage unit 121 has a vacant position, the card recovery instruction is sent to the card processing unit 120 by the card control unit 240, and the The forgotten card self-retrieval control unit 250 sends a card receiving instruction to the card temporary storage unit 121 . After the cards recovered by the card processing unit 120 are received and temporarily stored by the card temporary storage unit 121, an instruction answer is returned to the self-service retrieval control unit 250 for the forgotten card and returned to the card temporary storage position (step S206). The forgotten card self-retrieval control unit 250 sends a card recovery information storage instruction to the information storage mechanism 400, and the information storage mechanism 400 records the last transaction-related information as temporarily stored card-related information (step S207). Afterwards, because the self-service device 100 forgets to take out the card, the transaction ends abnormally (step S208).

FIG. 6 is a schematic diagram showing transaction-related information. As shown in FIG. 6 , the information storage mechanism 400 stores, for example, multiple pieces of transaction-related information corresponding to multiple recycling cards. Information related to each transaction includes card information such as stolen card number information, user information such as customer name and ID number, transaction information such as the name of the last transaction (swallowed card transaction), and password information such as an encrypted password . The last transaction-related information as an example of temporary card-related information is not limited thereto, and new information may be added or part of the information may be omitted according to actual conditions.

When it is determined in the above step S204 that the card has not been taken out after a predetermined time and there is a vacancy in the card temporary storage unit 121 , steps S206 and S207 are executed to temporarily store the card in the card temporary storage unit 121 . But this specific example is not limited to the above-mentioned situation of forgetting to take the card. It is also possible to perform steps S206 and S207 when the host computer 2 of the bank receives a card recovery instruction and the card temporary storage unit 121 has a vacant position, and temporarily stores the card in the card temporary storage. Section 121.

In the above step S207, the basic information such as the customer's name and ID card number can be extracted by the self-service device 100 from the data sent by the bank's host computer 2 during the transaction. If the above basic information does not exist in the data, it will not be recorded.

In the above step S207, the information storage mechanism 400 records the customer's private information such as the password input by the customer. According to relevant regulations, in order to improve security, self-service equipment cannot record customer privacy information in plain text. Therefore, it is preferable to perform an irreversible encryption operation before recording in the information storage unit 400 . In addition, the user password has a small possibility of repetition (probability 0.000001), if the encrypted password is repeated with the existing information in the information storage mechanism 400, then this time it will not be recorded in the information storage mechanism 400 and the information storage mechanism 400 will be deleted at the same time. Duplicate information in . This way, local authentication using the same password fails and online authentication can be done afterwards for 100% security.

Fig. 7 is a flow chart of self-service card withdrawal in a specific example of the automatic card withdrawal method according to the embodiment of the present invention. As shown in Figure 7, after the card temporary storage process shown in Figure 5, when the customer tries to take the card by himself, for example, select the self-service retrieval function of swallowing the card according to the guide picture displayed on the operation screen 102 of the self-service device 100 (step S301 ). Then, the user can select a verification method and input the selected verification information (step S302).

Details of step S302 are shown in FIG. 8 . Fig. 8 is a flow chart of a user selection verification method when self-service card withdrawal in a specific example of the automatic card withdrawal method according to the embodiment of the present invention. As shown in Figure 8, the user can select a part or all of the card number (for example, the last 4 digits), customer name, ID number and the name of the last transaction for verification. The temporary card association information also includes other In the case of information, other authentication methods that can be selected by the user may be added (step S3021). Here, when the user chooses to input the last 4 digits of the card number, for example, the input can be performed through the PIN pad 104 (step S3022). For example, when the user selects the customer's name input, the user can select pinyin input, and this time, for example, the virtual full keyboard is displayed by the display operation part 110, and the user can also select handwriting input, such as on the display operation part 110, handwriting input (step S3023) . For example, when the user selects the ID card number input, the user can choose to swipe the ID card input on the non-contact ID card reading part 130, and also can choose to manually click and input. At this time, for example, the virtual numeric keyboard is displayed by the display operation part 110 (step S3024). When the user chooses to input the last transaction name, he can choose the transaction names displayed on the operation screen 102 such as deposit, withdrawal, and balance inquiry (step S3025). Thereafter, the user authentication unit 230 performs the same irreversible encryption operation as in the above-mentioned step S207 on any one of the above-mentioned authentication information input by the customer (step S3026).

Return to FIG. 7 to continue the description. After selecting an authentication method and inputting the selected authentication information as described above in step S302, the user inputs a password, for example, through the password pad 104 (step S303). That is, in the self-service card collection, the password is a must, and one of the other verification methods is optional (such as the last 4 digits of the card number, the customer's name, ID number, and the name of the last transaction).

Then, the user verification unit 230 of the self-service device 100 performs the same irreversible encryption operation on the password input by the customer and any other verification information, and then compares it with the temporary card-related information recorded by the information storage mechanism 400, thereby performing local verification ( Step S304). If the local verification is successful (step S304: yes), then the self-retrieval control unit 250 sends a card return instruction to the card temporary storage unit 121, and the card control unit 240 sends a card return instruction to the card processing unit 120 at the same time. After the user successfully retrieves the card, the forgotten card self-retrieval control unit 250 sends an instruction to the information storage mechanism 400 to clear the relevant records in the temporarily stored card-associated information (step S305).

If the temporary card association information recorded by the information storage mechanism 400 fails to compare with the user input and the local verification fails (step S304: No), the self-service device 1 initiates an online verification request to the bank's host 2 via the network 3, and the host 2 performs the verification. Online verification (step S306). If the host 2 returns that the online verification is successful (step S306: Yes), then step S305 is executed to perform the same processing as that of the local verification. If the host computer 2 returns that the online verification fails, it will prompt the customer to fail in taking out the card by himself (step S307).

In the above-mentioned specific example of the automatic card withdrawal method of the embodiment of the present invention, the self-service device 100 obtains the card information, user information, transaction information and password information of the card as temporary card related information, and displays the card information and user information for the user to input. , a screen of transaction information and password information, identifying card information, one of user information and transaction information, and password information input by the user to the self-service device 100 as user input information. Furthermore, the self-service device 100 compares one of the card information, the user information, the transaction information and the password information, so as to perform local verification on the user.

Thus, when the user inputs information during verification, the user can select one of a variety of verification options. As long as the user can input a certain verification information, even if other verification information cannot be memorized, the user can select an appropriate option for input. The convenience of users is greatly improved, and the success rate of self-service card withdrawal is improved.

In the above-mentioned specific example of the automatic card withdrawal method of the embodiment of the present invention, the self-service device 100 performs irreversible encryption processing on the acquired temporary card-related information, and stores the irreversibly encrypted information in the information storage mechanism 400 of the self-service device 100. The processed temporary card association information. In addition, the self-service device 100 performs the same irreversible encryption process on the user input information as the irreversible encryption process of the temporary card-related information, and compares the irreversibly encrypted user input information with the irreversibly encrypted temporary card-related information , authenticating the user locally.

As a result, the safety of confirming identity information during self-service card withdrawal is ensured, and the risk of user information leakage and the like is greatly reduced.

In the above specific example of the automatic card withdrawal method in the embodiment of the present invention, the obtained password information after irreversible encryption processing is the same as other password information after irreversible encryption processing that has been stored in the information storage mechanism of the self-service device In the case of , the self-service device 100 does not save the acquired password information, and deletes other stored same password information from the information storage unit 400 of the self-service device 100 .

Thus, for the small possibility of repetition of the user password, it is guaranteed that the local authentication using the same password fails, and then the online authentication can be performed, thereby ensuring 100% security.

In the above-mentioned specific example of the automatic card withdrawal method of the embodiment of the present invention, after the self-service device 100 returns the temporarily stored card to the user, it deletes the temporary storage of the card from the information storage mechanism 400 of the self-service device 100. Card associated information.

Therefore, the self-service device 100 does not save the related information of the card that has been returned, which not only reduces the risk of user information leakage, but also benefits the self-service device 100 to automatically return the card afterwards.

In order to facilitate the understanding of the above-mentioned beneficial effects of the present invention, the security and usability of the above-mentioned specific example of the automatic card withdrawal method according to the embodiment of the present invention will be specifically described below.

First of all, as the first aspect of local authentication security, the password is mandatory when the user tries to get the card by himself. The password is generally 6 digits, and the calculation shows that there are 10^6 combinations. Moreover, as mentioned above, if the encrypted password is repeated, local verification will fail. This alone can guarantee 100% theoretical security of local verification with minimal loss of usability.

As the second aspect of local verification security, when the user tries to take the card by himself, the auxiliary verification means (such as the last 4 digits of the card number, customer name, ID number, last transaction name, etc.) can choose one of them. There are only a few transaction names, but there are 10^4 combinations of the last 4 digits of the card number, and the probability of the customer's name and ID number being guessed is even slimmer.

As the first aspect of local verification availability, the password information encrypted by the password keyboard 150 is stored in the information storage mechanism 400 of the ATM. Even if the user inputs the same 6-digit password, if the keys of the password keyboard 150 are different, the encrypted passwords will be different. Different banks have different key update strategies, generally speaking, update once a day. That is, if the user comes to get the swallowed bank card as soon as possible, no online verification of the host is required. In most cases, the user will know immediately after the bank card is swallowed and try to get it back. In this way, during the window period before the bank mainframe is upgraded, only the software and hardware upgrade of the self-service device 100 can meet most of the use cases, and after the bank host is transformed in the future, the self-service device 100 can achieve smoothness without modification. transition.

As the second aspect of the availability of local verification, local verification is applicable as long as the user retrieves the swallowed bank card as soon as possible and its password is not duplicated with other swallowed card passwords. That is, usability is only related to the probability of repeating the code of the swallowed card. On the premise that the number of password digits is fixed at 6, the repetition rate of the password of the swallowed card depends on the maximum number of swallowed cards. In summary, the availability of local verification is (10^6)/10^6*(10^6-1)/10^6*(10^6-2)/10^6*(10^6-3)/10 ^6*(10^6-4)/10^6*...*(10^6-(N-1))/10^6, where N is the maximum number of temporarily stored cards supported by the card temporary storage unit 121 . The calculation shows that when N is 5, the availability is 99.999%, when N is 10, the availability is 99.9955%, and when N is 20, the availability is 99.981%. Therefore, local authentication availability is extremely high.

The embodiments and specific examples of the present invention have been described above with reference to the drawings. However, the embodiments and specific examples described above are only specific examples of the present invention for understanding the present invention, and are not intended to limit the scope of the present invention. Those skilled in the art can make various modifications, combinations, and rational omissions of elements to the various embodiments and specific examples based on the technical idea of the present invention, and the obtained forms are also included in the scope of the present invention.

Claims (10)

1. An automatic card return method, used for self-service equipment to return to users the card recovered and temporarily stored by the self-service equipment, characterized in that it includes: The step of saving the temporary card related information, the self-service device obtains the temporary card related information associated with the card when recycling the card, and saves the temporary card related information in the information storage mechanism of the self-service device; a user input information identifying step, the self-service device identifying user input information input by the user to the self-service device; The user verification step, the self-service device compares the information input by the user with the information associated with the temporary storage card, so as to perform local verification on the user; and In the step of returning the card, if the local verification is successful, the self-service device returns the temporarily stored card to the user. 2. The automatic card withdrawal method according to claim 1, wherein: In the step of storing associated information of the temporarily stored card, the self-service device obtains the card information, user information, transaction information and password information of the card as the associated information of the temporarily stored card; In the user input information recognition step, the self-service device displays a screen for the user to input card information, user information, transaction information and password information, and identifies the card information, user information and transaction information input by the user to the self-service device One of them and password information, as the user input information; In the user verification step, the self-service device compares one of card information, user information, transaction information and password information, thereby locally verifying the user. 3. The automatic card withdrawal method according to claim 2, characterized in that: In the step of saving the associated information of the temporary storage card, the self-service device performs irreversible encryption processing on the obtained temporary storage card related information, and saves the irreversibly encrypted temporary information in the information storage mechanism of the self-service device. Card related information; In the user verification step, the self-service device performs the same irreversible encryption processing on the user input information as the irreversible encryption processing of the temporary storage card-related information, and combines the irreversible encryption processing of the user input information with The associated information of the temporarily stored card after irreversible encryption processing is compared, so as to perform local verification on the user. 4. The automatic card withdrawal method according to claim 3, wherein: In the step of storing the temporary card-associated information, when the acquired password information after irreversible encryption processing is the same as other password information after irreversible encryption processing that has been stored in the information storage mechanism of the self-service device , the self-service device does not save the acquired password information, and deletes the same saved other password information from the information storage mechanism of the self-service device. 5. The automatic card withdrawal method according to any one of claims 1 to 4, further comprising: In the step of deleting the returned card information, after the self-service device returns the temporarily stored card to the user, delete the temporarily stored card-associated information of the card from the information storage mechanism of the self-service device. 6. An automatic card return system, equipped with a self-service device and a host that can communicate with each other through the network, and is used for the self-service device to return to the user the card recovered and temporarily stored by the self-service device, characterized in that, When the self-service device reclaims the card, it obtains the temporarily stored card-related information associated with the card, and saves the temporarily stored card-related information in the information storage mechanism of the self-service device, and identifies the information sent by the user to the self-service device. The input user input information is compared based on the user input information and the information associated with the temporary storage card, so as to perform local verification on the user; The self-service device returns the temporarily stored card to the user if the local verification is successful; When the local verification fails, the self-service device initiates an online verification request to the host via the network, and the host performs online verification; The user returns the temporary stored card. 7. The automatic card withdrawal system as claimed in claim 6, characterized in that, The self-service equipment obtains the card information, user information, transaction information and password information of the card as the temporarily stored card-related information, displays a screen for the user to input card information, user information, transaction information and password information, and identifies One of card information, user information and transaction information and password information input by the user to the self-service device as the user input information; The self-service device compares one of card information, user information, transaction information, and password information, thereby locally verifying the user. 8. The automatic card return system as claimed in claim 7, characterized in that, The self-service device performs irreversible encryption processing on the obtained temporary storage card related information, and stores the irreversibly encrypted temporary storage card related information in the information storage mechanism of the self-service device; The self-service device performs the same irreversible encryption process on the user input information as the irreversible encryption process of the temporary storage card-related information, and combines the irreversible encrypted user input information with the irreversible encrypted temporary The associated information of the stored card is compared, so as to perform local verification on the user. 9. The automatic card return system as claimed in claim 8, characterized in that, If the acquired password information after irreversible encryption is the same as other irreversibly encrypted password information stored in the information storage mechanism of the self-service device, the self-service device does not save the acquired password information. password information, and delete the same other password information that has been saved from the information storage mechanism of the self-service device. 10. The automatic card withdrawal system according to any one of claims 6 to 9, characterized in that, After the self-service device returns the temporarily stored card to the user, it deletes the temporarily stored card-associated information of the card from the information storage mechanism of the self-service device.