JP2002324219A - Card authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a card authentication system capable of preventing the illegal use of a card due to forgery on a high level. SOLUTION: This card authentication system is provided with a plurality of card authenticating terminals 10 and a central data processing center 20 connected through a public communication network 30 to those card authenticating terminals so that on-line authentication processing can be executed by the card authenticating terminal 10 by performing access from the central data processing center 20 through a card business integral network system 50 to the respective host computers of card companies 51-53. This card authentication system is provided with a use validity/invalidity information storage device 40 for allowing each card user to preliminarily switch the validity/invalidity of the card, and the on-line authentication is executed only to the card whose use is judged to be valid through the use validity/invalidity storage device 40 by the central data processing center 20.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention allows a user such as a credit card or a debit card to set whether or not the card can be used, for example, to prevent unauthorized use only by using the card. Card authentication system that can be.

[0002]

2. Description of the Related Art In principle, conventional credit cards and debit cards are always used once a card has been issued, except for cards that have invalidated the use of stolen cards and the like and cards that have exceeded their usage limit. Yes, it can be used after confirming the user at the time of use.

[0003]

However, there is no problem if the notification can be made promptly after the theft or loss, but it may take a long time before the notification is made, and illegal use cannot be prevented. Further, conventionally, there is no defense against unauthorized use by a forged card.

[0004] In view of such circumstances, an object of the present invention is to provide a card authentication system which can highly prevent improper use due to forgery.

[0005]

According to a first aspect of the present invention for solving the above-mentioned problems, a number of card authentication terminals and a central data processing center connected to the card authentication terminals via a public communication network are provided. A card authentication system comprising: a central data processing center that online-accesses a card authentication terminal by accessing a host computer of each card company online through a card business integrated network system; Has an availability information storage device that allows the user to switch in advance the validity / invalidity of the card,
In the card authentication system, the central data processing center performs online authentication only on a card determined to be usable via the availability information storage device.

According to a second aspect of the present invention, in the first aspect, the availability information storage device receives a request to change the availability from a user of the card and validates the use of the card. And a card authentication system.

According to a third aspect of the present invention, in the second aspect, the availability information storage device receives a request to change the availability from a user of the card and validates the use of the card. After that, the card authentication system automatically changes to unusable at a predetermined time.

According to a fourth aspect of the present invention, in any one of the first to third aspects, the availability information storage device sends a request for a change of availability from a user of the card to a wireless request from the user. A card authentication system is characterized in that the card authentication system receives the data via a communication terminal.

According to a fifth aspect of the present invention, in any one of the first to third aspects, the availability information storage device sends a request for a change of availability from a user of the card to a wireless request from the user. A card authentication system is received from a communication terminal via the card authentication terminal.

According to a sixth aspect of the present invention, in any one of the first to fifth aspects, the availability information storage device has data on each card in advance, and the registered card is Is registered in the card authentication system.

According to a seventh aspect of the present invention, in any one of the first to fifth aspects, the availability information storage device registers only data on usable cards for each card as needed. A card authentication system characterized in that:

According to the present invention, it is possible to provide a card authentication system which can highly prevent illegal use due to forgery.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described based on one embodiment.

FIG. 1 shows an overall schematic configuration of an embodiment of a credit card authentication system according to the present invention. As shown in FIG. 1, a number of card authentication terminals 10 are connected to a central data processing center 20 via a wired or wireless public communication network 30, and the central data processing center 20
It is connected to the availability information storage device 40 and the card business integrated network 50 via a dedicated communication network.
Card Business Comprehensive Network 50
A representative example is CAFIS of TTI Data Communication Co., Ltd., which connects a plurality of card companies 51 to 53 and financial institutions online.

The card authentication terminal 10 includes a CPU 11 for performing various calculations and controls, and a ROM 12 in which programs are stored.
A RAM 13 for storing various data, a card reader 14 for reading member information and a card ID of a credit card requiring authentication, an input / output means 15 for inputting information such as a charge and a payment method, The main components include a display 16 for displaying results and the like, a printer 17 for printing out usage charges and the like, and a transmitting / receiving device 18 for connecting to a public communication network 30.

The central data processing center 20 is connected to a central processing unit 21 for performing various operations and control, a program storage device 22 for storing programs, a data storage device 23 for storing various data, and a public communication network 30. And a transmitting / receiving device 24 for connection to the card business integrated network system 50 as a main component.

The availability information storage device 40 is shown in FIG.
As shown in the figure, the central processing unit 41 performs various calculations and controls.
And a program storage device 42 in which a program is stored.
And a data storage device 43 for storing various data, and a transmitting / receiving device 4 for connecting to the central data processing center 20.
4 and a receiving device 45 that receives information directly from a communication terminal 60 such as a mobile phone or a PHS. The data storage device 43 stores an availability information database 46.

The availability information database 46 is shown in FIG.
As shown in (b), for example, when a card such as a credit card is issued, a database in which information for accessing the user, for example, a member name and a password are registered together with the card number. Information on whether the card is valid or invalid is also provided.

The validity / invalidity information in the availability information database 46 can be changed by the user at any time. The method of change by the user is not particularly limited, but may be changed via the web connected via the communication terminal, or may be changed by receiving mail from the communication terminal 60. Alternatively, the change may be made by a voice instruction from the communication terminal.

The change of validity / invalidity may be made valid when there is a request for activation, and invalidated when there is a request for invalidation. , Only a predetermined time, for example, 2, 3, 5 minutes, 1
It is preferable that after the activation is performed for a short time such as 0 minutes or a predetermined time such as one day, the invalidation is automatically performed. This is to prevent fraudulent use of a forged card by enabling it only when the user uses it.

The accepting device 45 accepts only an activation request from an authorized user and requests a predetermined password for access so as not to accept an unauthorized request from an unauthorized user. Preferably, the notification of the caller of the communication terminal may be used as a password.

In order to allow a user to easily make an activation request while preventing such unauthorized use, for example, a communication terminal together with a card number, a pre-registered password, predetermined member information, and an activation request is required. The mail function may be used. Also, an application capable of performing predetermined encryption processing (one-way operation) is stored in the communication terminal, and the result of predetermined encryption processing using the member number of the card and an encryption key registered in advance is stored in a password. This may be transmitted using a mail function together with predetermined member information and an activation request.

Further, in the availability information database 46, only the numbers of valid cards may exist. That is, the receiving device 45 uses only the card number received together with the activation request in the availability information database 46.
And if the card number exists in the usability information database 46, it is determined that the card is valid. In addition,
In this case, to prevent access by unauthorized users,
A password is issued such that a predetermined result is obtained when a predetermined encryption process is performed at the time of issuing a card, for example, a password such that the result is always zero when a predetermined calculation is performed, and transmitted together with such a password. It is necessary to eliminate only unauthorized card registration by registering only the registered card number.

In the card authentication system described above, when a card is used, the user preferably precedes, preferably immediately before use, the receiving device 45 of the availability information storage device 40 via a communication terminal such as a mobile phone. It is necessary to send an activation request to. Thereafter, the user enters the card authentication terminal 10 installed at the store or service counter.
Then, a check is made to see if it can be used. That is, as shown in FIG. 3, the card authentication terminal 10 reads the member information and the card number with the card reader 14 (Step S).
11). This is transmitted from the transmitting / receiving device 18 to the central data processing center 20 via the public communication network 30 (step S12). When the central data processing center 20 receives the card information requiring authentication, the central data processing center 20 inquires of the usability information storage device 40 about the usability of the card and waits for the reception of the usability judgment result (step S13). It is determined whether or not the card can be used from the result of the use determination (step S14).
If the card cannot be used (step S14, No), it is determined that the card cannot be used for the card authentication terminal (step S14).
15).

On the other hand, if the card can be used (step S14, Yes), the member information is separated from the member information and the card number of the received authentication required card, and this is converted into predetermined formatted data, and the card business is executed. It transmits to a specific card company via the integrated network system 50 (step S16), and waits for an authentication result from the card company (step S17).

Upon receiving the authentication result from the card company,
It is determined whether the authentication required card is an invalid card (step S
18) If it is determined that the card is invalid (step S1)
8, Yes) When it is determined that the card cannot be used (step S15) and when it is determined that the card is not an invalid card (step S18, N
o) is determined to be valid (step S19), and information for authentication is transmitted to the card authentication terminal 10 (step S2).
0). The processing of the data such as the usage amount and the payment method is the same as the processing of a normal credit card or debit card, and a description thereof will be omitted.

According to the embodiment described above, the card can be used only when the user uses the card, so that illegal use of the card due to a forged card or the like can be prevented.

In the above-described embodiment, when the user makes a request to change the card availability, the request is sent directly from the communication terminal 60 to the availability information storage device 40. , And may be transmitted from the card authentication terminal 10 to the availability information storage device 40 via the central data processing center 20. In this case, the communication terminal 60 and the card communication terminal 10
For example, according to a wireless standard such as Bluetooth, for example, automatic connection and communication may be performed.

In the above-described embodiment, the availability information storage device 40 is installed separately from the central data processing center 20, but it goes without saying that the availability information storage device 40 may be installed in the central data processing center 20.

[0030]

As described above, according to the present invention,
This has the effect of providing a card authentication system that can highly prevent unauthorized use due to forgery.

[Brief description of the drawings]

FIG. 1 is a diagram showing a schematic configuration of a card authentication system according to an embodiment of the present invention.

FIG. 2 is a diagram schematically showing a usability information storage device of the present invention.

FIG. 3 is a diagram showing an authentication procedure of the card authentication system according to the embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Card authentication terminal 20 Central data processing center 30 Public communication network 40 Usability information storage device 50 CAFIS

Claims (7)

[Claims] A plurality of card authentication terminals; and a central data processing center connected to the card authentication terminals via a public communication network. Each of the card authentication terminals is connected from the central data processing center via a card business integrated network system. In a card authentication system in which online authentication processing can be performed at the card authentication terminal by accessing a host computer of a card company online, whether or not each card user can switch in advance whether the card is valid or invalid A card authentication system comprising an information storage device, wherein the central data processing center performs online authentication only on a card determined to be usable via the availability information storage device. 2. The use availability information storage device according to claim 1, wherein a request for a change in availability from a user of the card is received and the use of the card is validated.
The card authentication system described in 1. 3. The use availability information storage device automatically receives a request from a user of the card to change the use and validates the use of the card, and then automatically changes the use to a non-usable state in a predetermined time. The card authentication system according to claim 2, wherein: 4. The use availability information storage device according to claim 1, wherein the request from the user of the card to change the availability is received from the user via a wireless communication terminal.
3. The card authentication system according to any one of 3. 5. The usage information storage device receives a request from a user of a card to change the usage from a wireless communication terminal from the user via the card authentication terminal. The card authentication system according to claim 1. 6. The apparatus according to claim 1, wherein the availability information storage device has data on each card in advance, and registers the availability of the registered card. Card authentication system described in Crab. 7. The card authentication according to claim 1, wherein said usable information storage device registers at any time only data of usable cards for each card. system.