Money processing system

Abstract

To quickly take action against a security abnormality.SOLUTION: A money processing unit processes money. A communication unit is connected to communicate with a network. A security abnormality detection unit detects a security abnormality. When the security abnormality is detected, a display unit displays the fact that the security abnormality has been detected, and a work guide corresponding to a model of a first money processing apparatus for instructing an operator to perform work for coping with the security abnormality.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a currency handling system. [Background technology]

[0002] There is known a currency processing system that is mainly composed of an open teller machine (for example, see Patent Document 1). Such a currency processing system is mainly installed in a branch of a financial institution and is set up so as to be able to communicate with a server in a data management center outside the branch via a network line.

[0003] Some currency processing devices constituting currency processing systems have a built-in computer equipped with a CPU, RAM, hard disk, etc. in the control unit. The computer is equipped with a general-purpose operating system, and in addition to reading and writing from various recording media, communicates over a network using a general-purpose protocol. However, computers connected to communication lines such as the Internet are exposed to threats such as unauthorized access and computer viruses. Therefore, similar threats also exist in currency processing systems used by financial institutions. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2022-141063 A Summary of the Invention [Problem to be solved by the invention]

[0005] When a security abnormality occurs in a currency handling device, it is necessary to deal with it quickly. However, there are many different types of currency handling devices, and the measures required to deal with a security abnormality may differ depending on the type of currency handling device. As a result, it may take a long time to deal with the security abnormality.

[0006] An object of the present invention is to provide a currency processing system that is capable of quickly dealing with security abnormalities. [Means for solving the problem]

[0007] According to a first aspect, a currency handling system includes a plurality of currency handling devices for handling currency, and a first currency handling device, which is one of the plurality of currency handling devices, includes a currency processing unit for processing currency, a communication unit communicatively connected to a network, a security anomaly detection unit for detecting a security anomaly, and a display unit for displaying a warning image, when the security anomaly is detected, including a message indicating that a security anomaly has been detected and operation guidance appropriate to the model of the first currency handling device that instructs an operator to perform an operation to address the security anomaly.

[0008] According to a second aspect, in the currency handling system of the first aspect, the multiple currency handling devices are connected to each other so that they can transmit information to each other, and the first currency handling device may be provided with a notification unit that, when the security anomaly detection unit detects the security anomaly, notifies the other currency handling devices of a detection signal indicating that the security anomaly has been detected.

[0009] According to a third aspect, in the currency handling system of the first or second aspect, the first currency handling device may be provided with a detection unit that detects a connection state of the communication unit, and the display unit may switch the display content depending on the connection state detected by the connection detection unit.

[0010] According to a fourth aspect, in a currency handling system relating to any one of the first to third aspects, the work guidance may indicate work to perform procedures to physically disable a communication line.

[0011] According to a fifth aspect, in a currency handling system relating to any one of the first to fourth aspects, when multiple tasks are required to address the security anomaly, the task guidance may display one task in the warning image in a predetermined order or in order of priority.

[0012] According to a sixth aspect, the currency handling system relating to the fifth aspect may include a connection detection unit that detects the connection status of the communication unit, and the display unit may display the remaining work steps when the connection status detected by the connection detection unit determines that the one task has been completed.

[0013] According to a seventh aspect, in a currency handling system relating to any one of the first to sixth aspects, the display unit may continue to display the warning image until all of the operations by the operator have been completed.

[0014] According to an eighth aspect, in a currency handling system of any of the first to seventh aspects, the currency handling unit may not accept operations related to currency handling until work to address the security anomaly is completed. Effect of the Invention

[0015] According to the above aspect, users of the currency handling system can quickly take action in response to security abnormalities. [Brief description of the drawings]

[0016] [Figure 1] 1 is a schematic diagram showing the configuration of a currency handling system according to a first embodiment. [Diagram 2] FIG. 2 is a block diagram showing a configuration of security software according to the first embodiment. [Diagram 3] 5 is a diagram illustrating an example of data stored in a setting storage unit according to the first embodiment. FIG. [Figure 4] 5 is a diagram illustrating an example of data stored in an interface master according to the first embodiment. FIG. [Diagram 5] 4 is a flowchart showing a monitoring process for security abnormalities in the currency handling device according to the first embodiment. [Figure 6] FIG. 4 is a diagram showing an example of a first warning image according to the first embodiment. [Figure 7] FIG. 11 is a diagram showing an example of a second warning image according to the first embodiment. [Figure 8] FIG. 11 is a block diagram showing a configuration of security software according to a second embodiment. [Figure 9] FIG. 1 is a schematic block diagram illustrating a configuration of a computer according to at least one embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0017] First embodiment Configuration of currency processing system 1 Hereinafter, the embodiments will be described in detail with reference to the drawings. FIG. 1 is a schematic diagram showing the configuration of a money handling system 1 according to the first embodiment. The currency handling system 1 includes multiple currency handling devices 10 (a teller machine 10A and a cash bus 10B), an IoT gateway 30, and a switching hub 50. The teller machine 10A and the cash bus 10B are examples of currency handling devices. The teller machine 10A, the cash bus 10B, and the IoT gateway 30 are connected to one another by a network (LAN) via the switching hub 50. Hereinafter, the network connecting the components of the currency handling system 1 will be referred to as an inter-machine network. The IoT gateway 30 processes log data of the processing of the teller machine 10A and the cash bus 10B, and transmits it to an external maintenance server. The log data transmitted by the IoT gateway 30 is used for the maintenance management of the currency handling system 1.

[0018] In addition, the teller machine 10A is connected to an external financial transaction server or the like via a network independent of the inter-machine network. Hereinafter, the network connecting to the outside is referred to as a service network.

[0019] 《Teller machine 10A》 The teller machine 10A is a device installed in a store and capable of various processes including the deposit and withdrawal of currency. The teller machine 10A includes a banknote processing unit 11 that stores or dispenses banknotes, a coin processing unit 12 that stores or dispenses coins, and a terminal 13 that operates the teller machine 10A and displays its status.

[0020] The terminal 13 accepts operations from an operator and issues operating instructions to the banknote processing unit 11 and the coin processing unit 12. The terminal 13 includes a display unit 131, an operation unit 132, and a control unit 133. The display unit 131 includes a display device such as a liquid crystal display. The display unit 131 displays information such as a business menu screen, an operation explanation screen, error processing guidance, device settings, and a maintenance screen for maintenance personnel. The operation unit 132 includes a touch panel, hardware buttons, a keyboard, and the like, and accepts operations performed by the operator using the touch panel and keyboard.

[0021] The control unit 133 manages the cash currency handled by the store. The control unit 133 manages the cash currency based on the denomination identification results and counting results by the banknote processing unit 11 and the coin processing unit 12. In other words, the control unit 133 executes a control program for controlling the banknote processing unit 11 and the coin processing unit 12. The control program is a program that executes operations related to currency processing. Information about the calculated cash currency is transmitted to a financial transaction server or the like via a service network. The control unit 133 is a computer equipped with a processor, memory, auxiliary storage device, etc., as described below. The control unit 133 operates on a general-purpose operating system.

[0022] "Cash Bus 10B" The cash bus 10B includes a plurality of storage vaults 21 for storing cash and securities, and a control device 22. Each storage vault 21 is configured to be removable from the main body, and is provided with a locking mechanism for prohibiting the removal of the storage vault 21. The control device 22 authenticates the operator, and enables the storage and removal of the bundles and coin bars in the corresponding storage vault 21 by inputting transaction details specifying the denomination and quantity of the bundles and coin bars to be stored or removed. That is, the control device 22 determines whether or not to unlock the locking mechanism of which storage vault 21, based on the authentication result of the operator and the transaction details. In addition, each storage vault 21 is previously designated as a designated denomination for storing bundles or coin bars of a specific denomination. When the storage vault 21 is closed, the control device 22 locks the storage vault 21, and counts the number of bundles or coin bars of the designated denomination stored in the storage vault 21 by a sensor.

[0023] The control device 22 includes a display unit 221, an operation unit 222, and a control unit 223. The display unit 221 includes a display device such as a liquid crystal display. The display unit 221 displays information such as an authentication screen, an operation screen, error processing guidance, device settings, and a maintenance screen for maintenance personnel. The operation unit 222 includes a touch panel, hardware buttons, a keyboard, and the like, and accepts operations performed by an operator using the touch panel or keyboard. The control unit 223 is a computer that includes a processor, memory, auxiliary storage device, and the like, as described below. The control unit 223 runs on a general-purpose operating system. The control unit 133 executes a control program for controlling the lock mechanism of the storage 21 and for currency coefficients. The control program is a program that executes operations related to currency processing.

[0024] Security Software Security software for detecting security abnormalities is installed in the control unit 133 of the terminal 13 of the teller machine 10A and the control unit 223 of the control device 22 of the cash bus 10B. Fig. 2 is a block diagram showing the configuration of the security software according to the first embodiment.

[0025] The control unit 133 and the control unit 223 are provided with a connection detection unit 101, a device detection unit 102, a security anomaly detection unit 103, a cutoff unit 104, a warning unit 105, and a setting storage unit 106 by installing security software. Hereinafter, the teller machine 10A and the cash bus 10B, which are devices in which the security software is installed, are collectively referred to as the currency handling device 10.

[0026] The connection detection unit 101 detects the insertion and removal of a plug into a network interface provided in the currency processing device 10. The connection detection unit 101 may obtain the result of the insertion and removal detection by an operating system, or may determine the presence or absence of a plug by Ping or the like. The device detection unit 102 detects devices capable of communicating with the currency processing device 10. The device detection unit 102 detects devices directly connected via a network interface, and devices on a network connected via a network interface. The device detection unit 102 records the detection results in the setting storage unit 106. For example, the device detection unit 102 associates the ID (e.g., MAC address) of a device capable of communicating, the model name, and the ID of the network interface, and records them in the setting storage unit 106.

[0027] The security anomaly detection unit 103 detects a security anomaly in the currency processing device 10. The security anomaly includes malware such as a computer virus and unauthorized access. The security anomaly detection unit 103 can detect a security anomaly, for example, based on a whitelist that lists permitted programs and accesses in advance. In the currency processing device 10, the programs and accesses required to realize its functions are known, so the whitelist method is suitable. The security anomaly detection unit 103 may detect a security anomaly, for example, based on a blacklist that lists prohibited programs and accesses in advance. The security anomaly detection unit 103 may detect a security anomaly, for example, based on a blacklist that lists prohibited programs and accesses in advance.

[0028] The blocking unit 104 performs a blocking process for a security anomaly detected by the security anomaly detection unit 103. Specifically, the blocking unit 104 isolates or deletes the detected malware, and blocks communication.

[0029] When a security anomaly is detected by the security anomaly detection unit 103, the warning unit 105 outputs to the display unit a screen indicating that a security anomaly has been detected and work guidance indicating an operation to deal with the security anomaly. Examples of the operation to deal with the security anomaly include unplugging a network cable connected to a network interface and unplugging a power plug of a network device such as the IoT gateway 30.

[0030] FIG. 3 is a diagram showing an example of data stored in the setting storage unit 106 according to the first embodiment. The setting storage unit 106 stores, in association with each other, the ID, the name, and the connection port of a device that can communicate with the currency handling device 10. The data stored in the setting storage unit 106 is updated by the device detection unit 102.

[0031] FIG. 4 is a diagram illustrating an example of data stored in the interface master according to the first embodiment. The master database 107 stores an interface master and an equipment master in advance. The interface master is a table that stores images showing the position of each network interface for each model of the currency processing device 10 in association with each other. In other words, the interface master stores the model, the network interface ID, and an image in association with each other. The equipment master is a list of the names of devices that have the function of communicating with the outside. For example, the names of the cash dispenser 10A and the IoT gateway 30 are recorded in the equipment master.

[0032] Operation of the currency handling device 10 FIG. 5 is a flowchart showing the process of monitoring security abnormalities in the currency handling device 10 according to the first embodiment. When the currency handling apparatus 10 is started, it executes a control program and processes currency. The currency handling apparatus 10 also executes security software.

[0033] The device detection unit 102 of the currency processing device 10 first detects devices that are communicatively connected via each network interface (step S1). The device detection unit 102 records the ID and name of the detected device in association with the ID of the connected network interface in the setting storage unit 106 (step S2).

[0034] The security anomaly detection unit 103 determines whether or not a security anomaly exists in the currency processing device 10 (step S3). If the security anomaly detection unit 103 determines that a security anomaly exists (step S3: YES), the cutoff unit 104 attempts to cut off the security anomaly (step S4). If data related to a security anomaly exists, the cutoff unit 104 isolates the data, and if unauthorized access exists, cuts off communication from the network interface through which the access was made. The cutoff unit 104 also cuts off input operations to the control program via the man-machine interface (operation unit 132 or operation unit 222) (step S5).

[0035] Furthermore, the warning unit 105 refers to the setting storage unit 106 and the device master, and identifies a network interface to which a device having a function of communicating with the outside is connected (step S6). Specifically, the warning unit 105 identifies a device name recorded in the setting storage unit 106 that exists in the device master, and identifies the ID of a network interface associated with the device in the setting storage unit 106. The connection detection unit 101 identifies a network interface to which a cable is connected among the network interfaces identified in step S6 (step S7).

[0036] The warning unit 105 determines whether or not at least one cable connected to a device having a function of communicating with the outside has been detected (step S8). If one or more cables connected to a device with external communication capabilities are detected (step S8: YES), the warning unit 105 reads an image associated with the ID of the currency processing device 10 and the ID of the network interface identified in step S7 from the interface master (step S9).

[0037] The warning unit 105 generates a first warning image including a message indicating the occurrence of the security anomaly detected in step S3, an instruction to unplug the cable from the network interface identified in step S7, an instruction to contact the maintenance company, and the image read out in step S9, and outputs the image to the display unit (step S10). FIG. 6 is a diagram showing an example of the first warning image according to the first embodiment. This allows the user to recognize the cable to be unplugged by visually checking the image showing the position of the network interface included in the first warning image. The first warning image is displayed in the foreground of the screen as a modal window. If multiple cables are detected in step S7, the first warning image displays instructions and images corresponding to each cable. The currency processing device 10 then returns the process to step S6 and continues to display the first warning image.

[0038] In addition, by identifying the cable that is actually connected in step S7 described above, when the user unplugs the cable, the instruction and image for the unplugged cable are no longer displayed. In other words, the warning unit 105 switches the display content of the first warning image depending on the connection state of the cable.

[0039] If no cable connected to a device having an external communication function is detected in step S8 (step S8: NO), the warning unit 105 generates a second warning image including a message indicating that a security anomaly detected in step S3 has occurred, an instruction to contact a maintenance company, a message indicating that communication has been disconnected, and a close button, and outputs the image to the display unit (step S11). The second warning image is displayed in the foreground of the screen as a modal window. FIG. 7 is a diagram showing an example of the second warning image according to the first embodiment. When the close button is pressed, the warning unit 105 makes the second warning image invisible, and the currency processing device 10 resumes execution of the control program (step S12).

[0040] Actions and Effects Through the above-described security anomaly monitoring process, the currency handling device 10 notifies the user of the occurrence of a security anomaly and has the user physically cut off communication. Although damage caused by a security anomaly can be suppressed by the cutoff unit 104, it is preferable to quickly physically cut off the connection to the network before a further attack occurs. This is because there is a possibility of an attack occurring that cannot be detected by the security anomaly detection unit 103. By physically cutting off communication, even if an attack that cannot be detected by the security anomaly detection unit 103 occurs, the impact can be limited to a range closed by the currency handling device 10. Since the impact of the attack can be limited to a range closed by the currency handling device 10, execution of the control program of the currency handling device 10 is permitted with communication cut off, and complete halt of operations can be prevented while suppressing security risks.

[0041] Furthermore, after the currency handling device 10 has disconnected from the device having the external communication function, it allows the control program to be executed, but after the second warning image is hidden by pressing the close button, the warning unit 105 displays the second warning image again after a certain period of time (e.g., 30 minutes) has elapsed. This makes it possible to prevent the user from forgetting to contact the maintenance company.

[0042] In the currency handling system 1 according to the first embodiment, if a security abnormality occurs in the teller machine 10A, an instruction to unplug the cable connected to the machine-to-machine network and the cable connected to the service network is displayed. If a security abnormality occurs in the cash bus 10B, an instruction to unplug the cable connected to the machine-to-machine network is displayed. Furthermore, in the currency handling system 1 according to the first embodiment, if the IoT gateway 30 is not provided in the machine-to-machine network, an instruction to unplug the cable connected to the machine-to-machine network is not displayed. In this case, the teller machine 10A and the cash bus 10B can perform cooperative processing using the machine-to-machine network even after a security abnormality occurs.

[0043] Second embodiment In the currency handling system 1 according to the first embodiment, when a security abnormality occurs in a currency handling device 10, the currency handling device 10 in which the security abnormality occurred takes action. On the other hand, when a security abnormality occurs in one currency handling device 10 constituting the currency handling system 1, there is a possibility that an attack may also occur on other currency handling devices 10 constituting the same currency handling system 1. In the currency handling system 1 according to the second embodiment, when a security abnormality occurs in one currency handling device 10, the other currency handling devices 10 are notified of the occurrence of the security abnormality.

[0044] Security Software 8 is a block diagram showing the configuration of security software according to the second embodiment. In addition to the functions of the first embodiment, the security software according to the second embodiment further causes the currency handling device 10 to function as a notification unit 108. When the security anomaly detection unit 103 detects a security anomaly, the notification unit 108 notifies other devices constituting the currency handling system 1 of the occurrence of a security anomaly.

[0045] The currency handling device 10 that has received a security abnormality notification from another currency handling device 10 executes the processes from step S4 to step S12 in Fig. 5. In other embodiments, the currency handling device 10 that has received a security abnormality notification may only display a warning image.

[0046] Third embodiment The currency handling system 1 according to the first embodiment displays a first warning image instructing the user to unplug the cables of each network interface when a security anomaly occurs in a currency handling device 10 in which multiple network interfaces are connected to communication-enabled devices. However, since the first warning image may contain multiple instructions, the user may be confused as to which cable to unplug. The currency handling system 1 according to the second embodiment presents the work procedures one by one when multiple tasks are required to deal with a security anomaly.

[0047] Specifically, the device master of the master database 107 according to the third embodiment stores the priority of disconnection in association with the device. Then, in step S9 of the flowchart shown in FIG. 5, the warning unit 105 identifies the network interface connected to the device with the highest priority among the network interfaces identified in step S7, and reads out only the image associated with the device. Then, in step S10, the warning unit 105 displays a first warning image instructing the user to remove the cable from the network interface with the highest priority. This allows the user to easily recognize which cable should be removed with priority. In addition, when the cable is removed, the network interfaces identified in step S7 no longer include the network interfaces from which the cable has been removed, so the warning unit 105 acquires an image of the network interface connected to the device with the second highest priority. This allows the currency processing device 10 according to the third embodiment to display the work together with the warning image in order of priority. In addition, the warning unit 105 continues to display the first warning image until all the work by the operator is completed.

[0048] Other Embodiments Although one embodiment has been described in detail above with reference to the drawings, the specific configuration is not limited to the above, and various design changes are possible. That is, in other embodiments, the order of the above-mentioned processes may be changed as appropriate. Also, some of the processes may be executed in parallel.

[0049] The currency handling system 1 according to the embodiment described above includes two currency handling devices 10, but is not limited to this. For example, a currency handling system 1 according to another embodiment may include three or more currency handling devices 10.

[0050] Furthermore, the currency handling device 10 according to the embodiment described above identifies a network interface connected to a device capable of communicating with the outside based on the device detection result by the connection detection unit 101 and the device master in the master database 107, but is not limited to this. For example, in another embodiment, a designer may record information on a network interface connected to a device capable of communicating with the outside in the setting storage unit 106 in advance when setting up the currency handling device 10, and the currency handling device 10 may refer to this information when a security abnormality occurs.

[0051] Computer Configuration FIG. 9 is a schematic block diagram illustrating a configuration of a computer according to at least one embodiment. The computer 100 comprises a processor 110, a main memory 120, a storage 130, and an interface 140. The above-mentioned control unit 133 and control unit 223 are implemented in the computer 100. The operations of the above-mentioned processing units are stored in the storage 130 in the form of a program. The processor 110 reads the program from the storage 130, loads it in the main memory 120, and executes the above-mentioned processes according to the program. The processor 110 also secures storage areas in the main memory 120 corresponding to the above-mentioned storage units according to the program. Examples of the processor 110 include a CPU (Central Processing Unit), a GPU (Graphic Processing Unit), and a microprocessor.

[0052] The program may be for realizing a part of the functions to be performed by the computer 100. For example, the program may be for realizing the functions by combining with other programs already stored in the storage or by combining with other programs implemented in other devices. In another embodiment, the computer 100 may include a custom LSI (Large Scale Integrated Circuit) such as a PLD (Programmable Logic Device) in addition to the above configuration or instead of the above configuration. Examples of PLDs include PAL (Programmable Array Logic), GAL (Generic Array Logic), CPLD (Complex Programmable Logic Device), and FPGA (Field Programmable Gate Array). In this case, a part or all of the functions realized by the processor 110 may be realized by the integrated circuit. Such an integrated circuit is also included in an example of a processor. In another embodiment, the computer 100 may be virtualized on one or more computers.

[0053] Examples of storage 130 include a magnetic disk, a magneto-optical disk, an optical disk, a semiconductor memory, etc. Storage 130 may be an internal medium directly connected to the bus of computer 100, or an external medium connected to computer 100 via interface 140 or a communication line. In addition, when this program is distributed to computer 100 via a communication line, computer 100 that receives the program may load the program in main memory 120 and execute the above-mentioned processing. In at least one embodiment, storage 130 is a non-transitory tangible storage medium.

[0054] The program may be for realizing part of the above-mentioned functions. Furthermore, the program may be a so-called differential file (differential program) that realizes the above-mentioned functions in combination with other programs already stored in the storage 130. [Explanation of symbols]

[0055] 1...Currency processing system 10...Currency processing device 100...Computer 101...Connection detection unit 102...Device detection unit 103...Security abnormality detection unit 104...Shutoff unit 105...Warning unit 106...Settings storage unit 107...Master database 10A...Teller 10B...Cash bus 11...Banknote processing unit 110...Processor 12...Coin processing unit 120...Main memory 13...Terminal 130...Storage 131...Display unit 132...Operation unit 133...Control unit 140...Interface 21...Storage 22...Control device 221...Display unit 222...Operation unit 223...Control unit 30...IoT gateway 50...Switching hub 58...Notification unit

Claims

1. A plurality of currency processing devices for processing currency, A first currency handling device which is one of the plurality of currency handling devices, a currency processing unit for processing currency; A communication unit communicably connected to the network; a security anomaly detection unit that detects a security anomaly; a display unit that displays a warning image including a message indicating that a security abnormality has been detected and an operation guidance corresponding to a model of the first currency processing device that instructs an operator to perform an operation to deal with the security abnormality when the security abnormality is detected; A currency processing system comprising:

2. The plurality of currency processing devices are connected to each other so as to be capable of transmitting information thereto, The first currency processing device includes: a notification unit that notifies other currency processing devices of a detection signal indicating that the security abnormality has been detected when the security abnormality detection unit detects the security abnormality; The currency handling system of claim 1 .

3. The first currency processing device includes: a connection detection unit that detects a connection state of the communication unit, The display unit switches display contents according to the connection state detected by the connection detection unit.

3. A currency handling system according to claim 1 or 2.

4. The work guidance indicates a work for carrying out a procedure for physically disabling a communication line.

3. A currency handling system according to claim 1 or 2.

5. When multiple tasks are required to address the security anomaly, The work guidance displays one work in the warning image in a predetermined order or in order of priority.

3. A currency handling system according to claim 1 or 2.

6. a connection detection unit that detects a connection state of the communication unit, The display unit displays remaining work steps when it is determined that the one work is completed based on the connection state detected by the connection detection unit.

6. The currency handling system according to claim 5.

7. The display unit continues to display the warning image until the operator completes all of the operations.

3. A currency handling system according to claim 1 or 2.

8. The currency processing unit does not accept operations related to currency processing until the work to deal with the security abnormality is completed.

3. A currency handling system according to claim 1 or 2.

Images