JPH0535464B2 - - Google Patents

Description

[Detailed Description of the Invention] Industrial Application Field This invention relates to a password verification device, and in particular, in transaction processing, it is possible to determine whether or not a customer conducting a transaction is a predetermined specific customer based on an input password. This invention relates to a PIN verification device that makes a determination.

Summary of the Invention The present invention is a password verification device that verifies a password that changes according to transaction conditions and an input password.

Conventional technology In conventional PIN verification devices used in ATMs (Automatic Tellers Machines) and CATs (Credit Authorization Terminals), the PIN is entered in advance between the parties to the transaction at the time of the contract prior to the transaction. It is fixed numerical data,
Once determined, the PIN number will not change during the contract period.

Problems to be Solved by the Invention Incidentally, since the personal identification number used for transaction processing is usually four digits long, there is a possibility that the personal identification number can be memorized by another person and may be misused by another person.

Therefore, the main object of the present invention is to provide a password verification device that prevents misuse of the password.

Means for solving the problem A storage means for storing a plurality of additional data to be added to a temporary PIN, a temporary PIN recorded on a transaction card, and a storage means for storing a plurality of additional data added to a temporary PIN; a reading means for reading a selection number specifying which of the plurality of additional data is to be added, and a selection number read by the reading means from among the plurality of additional data stored in the storage means; PIN number synthesis means for adding additional data to the temporary PIN number to synthesize a PIN number;
a password input means for inputting a password;
The password matching detection means compares the password input from the password input means and the password synthesized by the password composition means to detect a match.

Effect: In this invention, a plurality of pieces of additional data are stored in the storage means in advance, and a PIN is synthesized from the temporary PIN stored in the same transaction card and the additional data retrieved by the selection number. . Then, when the customer inputs a password from the password code input means, the combined password and the input password are compared to detect a match.

Embodiment FIG. 2 is a diagram showing the configuration of a personal identification number verification device according to an embodiment of the present invention. In FIG. 2, the PIN verification device is composed of an information processing device 1, an information file storage device 2, a card reader 3, and a keyboard 4. Connected. The information file storage device 2 contains numerical data corresponding to transaction conditions and the card reader 3 stores the card 5.
The data read from is stored. Here, the transaction conditions are, for example, the date of the transaction, and if that day is, for example, "Monday, February 20th," the numerical data corresponding to the above transaction conditions would be "02" indicating the month, and the date. The date data "02201" is composed of "20" indicating the day of the week and "1" indicating the day of the week. The card reader 3 reads, for example, account number data, selection number data, and temporary password data stored on the magnetic stripe 6 of the card 5. Here, the selection number is number data that specifies one of the above-mentioned date data stored in the information file storage device 2. The keyboard 4 is used by the customer to input a personal identification number. The information processing device 1 synthesizes a new PIN by adding, for example, one of the above-mentioned date data to the temporary PIN data read from the card 5, and combines the synthesized PIN data with the PIN input from the keyboard 4. It compares the encrypted data and detects a match.

FIG. 3 is a schematic block diagram showing the electrical configuration of the personal identification number verification device shown in FIG. 2. In FIG. 3, the information processing device 1 shown in FIG. 2 includes a CPU 7, an interface circuit 8, a timer 9, and a memory 10.
It consists of Interface circuit 8 is connected to CPU 7 and memory 10 via data bus 11, and memory 10 is connected to CPU 7 via data bus 11 and address bus 12.
A timer 9, the above-mentioned information file storage device 2, card reader 3, and keyboard 4 are connected to the interface circuit 8. The timer 9 measures the current time and provides data indicating the month, date, and day of the week of the current day to the information file storage device 2 via the interface circuit 8. Memory 10 is
It includes an area for storing data read by the CPU 7 from the information file storage device 2, and an area for storing an operating program for the CPU 7 based on a flowchart as shown in FIG. 1, which will be explained later.

FIG. 4 is an illustrative diagram showing a storage area of the memory 10 shown in FIG. In FIG. 4, the storage area 100 includes, for example, addresses "00" to "02".
The account number data, selection number data, and temporary password data read from the card 5 by the card reader 3 are stored. Additional number data specified by the selection number and read from the information file storage device 2 is stored at address "03". Additional number data is number data added to the temporary password. The new password data synthesized by the CPU 7 is stored at address "04," and the password data keyed in from the keyboard 4 is stored at address "05."

FIG. 5 is a diagram showing a procedure for synthesizing a password by the CPU 7. In FIG. 5, if the current date is, for example, "Monday, February 20th", "02201" is stored in the information file storage device 2 as date data. The data indicating the days of the week is obtained by assigning Monday to Sunday to numbers 1 to 7, respectively. Next, the CPU 7 reads data specified by the selection number from the date data indicating the month, day, and day of the week, and loads it into the memory 10. Here, the selection number is an arbitrary number, for example, 1 to 3, selected in advance by the customer. If the select number is, for example, "1", the CPU 7 reads data indicating the month, for example, "02"; if the select number is, for example, "2", it reads data indicating the day, for example, "20"; is, for example, "3", data indicating the day of the week, for example, "1" is read out. Next, the CPU 7 adds the read data to the front of the first digit of the temporary password read from the card 5. For example, if the selection number is "3", the CPU 7 adds "1" indicating the day of the week of the transaction to the temporary PIN number "1984", and sets "11984" as the PIN number for that day.

FIG. 1 is a flow diagram for explaining the operation of an embodiment of the present invention. Next, Figures 1 to 5
The operation of an embodiment of the present invention will be described in detail with reference to the drawings.

When the customer inserts his/her own card 5 into the card reader 3, the card reader 3 reads account number data, selection number data, and temporary password data from the card 5. CPU7 is card reader 3
The read data is stored in the information file storage device 2. Subsequently, the CPU 7 reads the selection number data and temporary password data from the information file storage device 2 and stores them in the storage area 100 of the memory 10. Subsequently, the CPU 7 reads out the corresponding additional number data from the date data stored in the information file storage device 2 based on the selection number stored in the address "01" of the storage area 100, and reads out the corresponding additional number data from the date data stored in the information file storage device 2. 03”.

The CPU 7 then synthesizes a new PIN based on the temporary PIN data stored at the address "02" of the storage area 100 and the additional number data stored at the address "03", and synthesizes a new PIN number at the address "04". ” is memorized. The CPU 7 waits until a password is input from the keyboard 4. When the password is input from the keyboard 4, the CPU 7 stores the input password data at address "05" in the storage area 100. Subsequently, the CPU 7 determines whether the combined password data and the key-input password data match. Here, if these PIN data match, the transaction becomes possible.

In the above-described embodiment, data is input by reading a magnetic card with a card reader and inputting keys from a keyboard, but it may also be input by an optical method or by voice. Furthermore, in the above embodiment, the date of the transaction is used as the transaction condition, but the PIN number may also be synthesized based on transaction conditions such as transaction amount, transaction location, or a combination of these transaction conditions. good.

As described above, by incorporating very simple information such as the transaction date into the PIN number, the user is not inconvenienced and a highly secure PIN number can be obtained.

Effects of the Invention As described above, according to the present invention, at least one of a plurality of pre-registered additional data is retrieved based on the selection number recorded on the transaction card, and the data is recorded on the transaction card. New PIN data is synthesized from the temporary PIN and this additional data, and when the customer inputs the PIN from the PIN input means, the synthesized PIN data is compared with the entered PIN code data. , the match is detected, so if you change the select number, the PIN will also be different, so even if someone else remembers your PIN, the customer can choose the select number arbitrarily, and will not be able to proceed with the next transaction. In some cases, transactions cannot be made with the memorized PIN number, which has the effect of preventing unauthorized use of the PIN number.

[Brief explanation of drawings]

FIG. 1 is a flow diagram for explaining the operation of an embodiment of the present invention. FIG. 2 is a diagram showing the configuration of a password verification device according to an embodiment of the present invention.
FIG. 3 is a schematic block diagram showing the electrical configuration of a personal identification number verification device according to an embodiment of the present invention. Fourth
The figure is an illustrative view showing the storage area of the memory shown in FIG. 3. FIG. 5 is a diagram showing a procedure for synthesizing a password. In the figure, 1 is an information processing device, 2 is an information file storage device, 3 is a card reader, 4 is a keyboard, 7 is a CPU, 8 is an interface circuit, 9
indicates a timer, and 10 indicates a memory.

Claims (1)

[Scope of Claims] 1. Storage means for storing a plurality of additional data to be added to a temporary PIN; a temporary PIN recorded on a transaction card; reading means for reading a selection number recorded on a transaction card that specifies which of the plurality of additional data is to be added; PIN number synthesis means for adding additional data designated by the selection number read by the reading means to the temporary PIN number to synthesize a PIN number; PIN input means for inputting the PIN number; and the PIN number. A password matching device comprising a password matching detection means for comparing a password input from a number inputting means and a password synthesized by the password composition means to detect a match.