Automatic transaction system

Abstract

To make transactions more convenient.SOLUTION: A server 1 stores an account, a contact, and a registered image in association with each other. When a person photographed in a photographed image 3 taken at the time of a transaction using an account does not match the person photographed in a registered image, the server 1 transmits an electronic mail to inquire whether to allow the transaction to continue contact. An automatic transaction device 10 takes a photographed image 3 at the time of the transaction, and cancels the transaction if the person photographed in the photographed image 3 does not match the person photographed in the registered image. The automatic transaction device 10 executes the transaction when there is a response to the electronic mail indicating that the transaction is allowed. The automatic transaction device 10 stops the transaction if there is a response to the electronic mail indicating that the transaction is not allowed.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an automated trading system. [Background technology]

[0002] Bank account users may use automated teller machines (ATMs) to conduct transactions related to their bank accounts. ATMs may require identity verification using PIN numbers or biometric authentication.

[0003] As for ATM-related technologies, for example, a facial recognition security method has been proposed that simplifies facial recognition and strengthens security performance in order to obtain authentication of card use by recognizing the user's face. Also, for example, a biometric information transaction method has been proposed that enables biometric information transactions at ATMs even when a cash card that does not support biometric information transactions is used. Also, for example, a fraudulent transaction notification system has been proposed that enables the discovery and identification of fraudulent users quickly and accurately. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2005-196516 A [Patent Document 2] JP 2020-80100 A [Patent Document 3] JP 2006-11919 A Summary of the Invention [Problem to be solved by the invention]

[0005] ATMs sometimes use facial recognition to verify identity. However, as an individual grows and ages, the registered facial image may be judged to be different from the person photographed during a transaction, reducing convenience.

[0006] In one aspect, the present case aims to improve the convenience of transactions. [Means for solving the problem]

[0007] In one proposal, an automated transaction system is provided that includes a server and an automated transaction device. The server stores an account, a contact, and a registered image in association with each other, and if a person in an image captured during a transaction using the account does not match a person in the registered image, sends an email to the contact asking whether or not to allow the transaction to continue. The automated transaction device captures an image during a transaction, and if a person in the captured image does not match a person in the registered image, it interrupts the transaction, and if there is a response to the email indicating that the transaction is permitted, it executes the transaction, and if there is a response to the email indicating that the transaction is not permitted, it stops the transaction. Effect of the Invention

[0008] According to one aspect, convenience of transactions can be improved. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram illustrating an example of an automated trading system according to a first embodiment. [Diagram 2] FIG. 13 is a diagram illustrating an example of an automated trading system according to a second embodiment. [Diagram 3] FIG. 2 is a diagram illustrating an example of a hardware configuration of an ATM. [Figure 4] FIG. 2 is a diagram illustrating an example of a hardware configuration of an authentication server. [Diagram 5] 2 is a block diagram showing an example of functions of an ATM and an authentication server. [Figure 6] FIG. 11 is a diagram illustrating an example of registration information. [Figure 7] FIG. 13 is a diagram showing an example of a transaction process when continuation of the transaction is rejected in email authentication. [Figure 8] FIG. 13 is a diagram showing an example of a transaction process when continuation of the transaction is permitted in email authentication. [Figure 9] FIG. 13 is a diagram showing an example of an interruption screen. [Figure 10] FIG. 13 is a diagram showing an example of an email. [Figure 11] 1 is a flowchart (part 1) illustrating an example of a procedure for a transaction process. [Figure 12] 13 is a flowchart (part 2) illustrating an example of a procedure for a transaction process. [Figure 13] 11 is a flowchart (part 3) illustrating an example of a procedure for a transaction process. [Figure 14] 13 is a flowchart illustrating an example of a procedure for an identification card authentication process. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, the present embodiment will be described with reference to the drawings. Note that each embodiment can be implemented in combination with a plurality of other embodiments as long as no contradiction occurs. First Embodiment First, the first embodiment will be described.

[0011] FIG. 1 is a diagram showing an example of an automated transaction system according to a first embodiment. In the first embodiment, face recognition and authentication using e-mail are performed during a transaction at an automated transaction device 10. The automated transaction system of the first embodiment includes a server 1 and the automated transaction device 10. The server 1 and the automated transaction device 10 are connected via a network.

[0012] The server 1 is a server computer that performs authentication during transactions at the automated transaction device 10. The server 1 has a memory unit 1a and a processing unit 1b. The memory unit 1a stores data used in processes executed by the server 1. The memory unit 1a is, for example, a memory or storage device that the server 1 has. The memory unit 1a stores registered information 2. The registered information 2 is information in which an account, contact information, and a registered image are registered in association with each other.

[0013] The account is a bank account that can be used for transactions by the automated transaction apparatus 10. The contact is a contact where the account holder of the corresponding account can be contacted by email. For example, an email address is registered as the contact. The registered image is an image registered as a facial image of the account holder of the corresponding account. For example, a facial image stored in an IC (Integrated Circuit) of an identification card such as a My Number card or a driver's license is registered as the registered image. The processing unit 1b controls the server 1 and is capable of executing required processing. The processing unit 1b is, for example, a processor or arithmetic circuit included in the server 1.

[0014] The automated transaction device 10 is a device that executes financial transactions according to the operation of an operator. The automated transaction device 10 is, for example, an ATM installed in a financial institution or the like. The automated transaction device 10 has a camera 11 and a control unit 12. The camera 11 is a camera installed so as to be able to photograph the operator of the automated transaction device 10. For example, the camera 11 is installed on the automated transaction device 10 so that the lens faces a position where the operator who operates the automated transaction device 10 stands. The control unit 12 is capable of controlling the automated transaction device 10 and executing required processing. The control unit 12 is, for example, a processor or arithmetic circuit that the automated transaction device 10 has.

[0015] The server 1 and the automated transaction apparatus 10 execute the following processes when a transaction is made using the automated transaction apparatus 10. First, the control unit 12 starts a transaction in accordance with the operation of the operator of the automated transaction apparatus 10. For example, the control unit 12 causes the card processing unit of the automated transaction apparatus 10 to accept the insertion of a cash card. Then, the control unit 12 identifies the account to be used for the transaction from the information read from the cash card. For example, the control unit 12 identifies the account indicated by the account number read from the cash card as the account to be used for the transaction. Note that hereinafter, the account to be used for the transaction may be simply referred to as the account. The control unit 12 accepts the input of a PIN, and if the PIN is successfully verified, accepts the input of the transaction details for the transaction using the account.

[0016] The camera 11 takes a photographed image 3 during a transaction. The photographed image 3 is an image of the face of the operator of the automated transaction apparatus 10. The control unit 12 notifies the server 1 of the account and transmits the photographed image 3 to the server 1. The processing unit 1b refers to the registration information 2 and compares the person appearing in the registered image corresponding to the account notified by the automated transaction apparatus 10 with the person appearing in the photographed image 3 acquired from the automated transaction apparatus 10. Then, the processing unit 1b notifies the automated transaction apparatus 10 whether the person appearing in the photographed image 3 matches the person appearing in the registered image. For example, the processing unit 1b extracts facial features from each of the registered image and the photographed image 3, and if the degree of match between the extracted facial features is equal to or greater than a predetermined value, it determines that the person appearing in the photographed image 3 matches the person appearing in the registered image.

[0017] The comparison of the captured image 3 with the registered image may be performed by the automated transaction apparatus 10. When the comparison of the captured image 3 with the registered image is performed by the automated transaction apparatus 10, for example, the control unit 12 obtains the registered image corresponding to the account from the server 1, and compares the person appearing in the obtained registered image with the person appearing in the captured image 3.

[0018] If the person appearing in the captured image 3 matches the person appearing in the registered image, the control unit 12 executes the transaction according to the transaction details that were accepted. Then, the control unit 12 causes the card processing unit to release the cash card. If the person appearing in the captured image 3 does not match the person appearing in the registered image, the control unit 12 aborts the transaction. Furthermore, if the person appearing in the captured image 3 does not match the person appearing in the registered image, the processing unit 1b refers to the registered information 2 and identifies the contact information corresponding to the account. Then, the processing unit 1b sends an email to the identified contact information inquiring whether or not to allow the transaction to continue.

[0019] For example, the processing unit 1b generates an e-mail including a button for notifying the server 1 that continuation of the transaction is permitted and a button for notifying the server 1 that continuation of the transaction is rejected. Then, the processing unit 1b sends the generated e-mail to the e-mail address corresponding to the account. The processing unit 1b notifies the automated transaction device 10 of a response to the e-mail. For example, when the processing unit 1b is notified by the terminal that downloaded the e-mail that continuation of the transaction is permitted, the processing unit 1b notifies the automated transaction device 10 that a response indicating that the transaction is permitted has been received. Also, when the processing unit 1b is notified by the terminal that downloaded the e-mail that continuation of the transaction is rejected, the processing unit 1b notifies the automated transaction device 10 that a response indicating that the transaction is not permitted has been received.

[0020] The control unit 12 executes the transaction when there is a response to the e-mail indicating that the transaction is permitted. For example, the control unit 12 executes the transaction with the transaction details that were accepted as input, and causes the card processing unit to release the cash card. Furthermore, when there is a response to the e-mail indicating that the transaction is permitted, the processing unit 1b stores the photographed image 3 as a registered image. For example, the processing unit 1b adds the photographed image 3 to the registration information 2 as a registered image corresponding to the account.

[0021] If there is a response to the e-mail indicating that the transaction is not permitted, the control unit 12 cancels the transaction and then causes the card processing unit to store the cash card without releasing it.

[0022] According to the first embodiment, the server 1 stores an account, a contact, and a registered image in association with each other, and if a person appearing in a captured image 3 taken during a transaction using the account does not match a person appearing in the registered image, the server 1 sends an email to the contact asking whether or not to allow the transaction to continue. The automated transaction device 10 takes a captured image 3 during a transaction, and if a person appearing in the captured image 3 does not match a person appearing in the registered image, the automated transaction device 10 aborts the transaction. If there is a response to the email indicating that the transaction is authorized, the automated transaction device 10 executes the transaction, and if there is a response to the email indicating that the transaction is not authorized, the automated transaction device 10 aborts the transaction.

[0023] As a result, the automated transaction system of the first embodiment can execute a transaction if identity verification via email is successful, even if it is determined that the person in the registered image does not match the person in the captured image 3 due to the user's growth or aging. Therefore, the automated transaction system of the first embodiment can improve the convenience of transactions.

[0024] Furthermore, when there is a response to the e-mail indicating that the transaction is permitted, the server 1 stores the captured image 3 as a registered image. This allows the automated transaction system of the first embodiment to perform appropriate face authentication in subsequent transactions.

[0025] Furthermore, the automated transaction device 10 accepts insertion of a cash card at the time of a transaction, identifies the account from information read from the cash card, and if there is a response to an email indicating that the transaction is not permitted, stores the cash card without releasing it. In this way, the automated transaction system of the first embodiment can recover from a third party a cash card that may have been illegally obtained by the third party.

[0026] The automated transaction device 10 may read a face image from an identification card, and the server 1 may store the captured image 3 as a registered image when the face image matches the registered image. This allows the automated transaction system of the first embodiment to improve security when registering a registered image.

[0027] Second Embodiment Next, a second embodiment will be described below. In the second embodiment, face recognition and authentication using e-mail are performed when a transaction is performed using an ATM.

[0028] 2 is a diagram showing an example of an automated trading system according to a second embodiment. The automated trading system according to the second embodiment includes a host server 21, a mail server 22, a smartphone 23, an ATM 100, and an authentication server 200. The host server 21, the mail server 22, the smartphone 23, the ATM 100, and the authentication server 200 are connected to a network 20. The network 20 is, for example, a wide area network such as the Internet.

[0029] Host server 21 is a server computer that manages the bank accounts of users. Host server 21 increases or decreases the balance of the account used for a transaction according to the content of the transaction executed by ATM 100.

[0030] The mail server 22 is a server computer that controls the sending and receiving of e-mails. When the mail server 22 receives an e-mail from the authentication server 200 to the e-mail address of the user, the mail server 22 manages the received e-mail as an incoming e-mail for the e-mail address of the user. In response to a request from the smartphone 23, the mail server 22 causes the smartphone 23 to download the incoming e-mail for the e-mail address of the user.

[0031] The smartphone 23 is a smartphone operated by a user who has a bank account. The smartphone 23 downloads, from the mail server 22, an e-mail sent from the authentication server 200 to the user's e-mail address. The smartphone 23 transmits a response to the e-mail, indicating whether or not the transaction should be continued, to the authentication server 200.

[0032] The ATM 100 is a device that accepts input operations by an operator and executes transactions such as deposits and withdrawals based on the accepted input. The ATM 100 photographs the operator during a transaction and transmits the photographed image to the authentication server 200. If face authentication using the photographed image by the authentication server 200 is successful, the ATM 100 executes the transaction according to the input details.

[0033] For example, in a transaction to deposit money into an account, ATM 100 accepts the insertion of cash and notifies host server 21 of the amount of cash inserted. Host server 21 adds the amount of cash inserted to the balance of the account used in the transaction. Also, for example, in a transaction to withdraw money from an account, ATM 100 dispenses cash in the amount entered and notifies host server 21 of the amount of cash dispensed. Host server 21 subtracts the amount of cash dispensed from the balance of the account used in the transaction.

[0034] If the face authentication using a captured image by the authentication server 200 fails, the ATM 100 suspends the transaction until it is notified of the result of authentication using email (email authentication) by the authentication server 200. If the email authentication by the authentication server 200 is successful, the ATM 100 executes the transaction according to the input details. Also, if the email authentication by the authentication server 200 fails, the ATM 100 suspends the transaction.

[0035] The authentication server 200 is a server computer that performs face authentication and e-mail authentication when a transaction is performed by the ATM 100. The authentication server 200 performs face authentication using a captured image captured by the ATM 100 during a transaction, and notifies the ATM 100 of the result of the face authentication. In face authentication, the authentication server 200 determines whether or not a person appearing in a registered image stored in association with an account used in the transaction matches a person appearing in a captured image acquired from the ATM 100. If the person appearing in the registered image matches the person appearing in the captured image, the authentication server 200 determines that the face authentication has been successful, and if the person appearing in the registered image does not match the person appearing in the captured image, the authentication server 200 determines that the face authentication has failed.

[0036] If the face authentication fails, the authentication server 200 performs email authentication and notifies the ATM 100 of the result of the email authentication. In the email authentication, the authentication server 200 requests the mail server 22 to send an email inquiring whether or not to permit continuation of the transaction to an email address stored in association with the account used for the transaction. If the authentication server 200 receives a response from the smartphone 23 indicating that continuation of the transaction is permitted, the authentication server 200 determines that email authentication has been successful, and if the authentication server 200 receives a response from the smartphone 23 indicating that continuation of the transaction is rejected, the authentication server 200 determines that email authentication has failed. Note that in the second embodiment, the authentication server 200 and the host server 21 are provided separately, but the host server 21 may have the function of the authentication server 200.

[0037] 3 is a diagram showing an example of a hardware configuration of an ATM. The entire ATM 100 is controlled by a processor 101. A memory 102 and a plurality of peripheral devices are connected to the processor 101 via a bus 108. The processor 101 may be a multiprocessor. The processor 101 is, for example, a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). At least a part of the functions realized by the processor 101 executing a program may be realized by an electronic circuit such as an application specific integrated circuit (ASIC) or a programmable logic device (PLD).

[0038] The memory 102 is used as a main storage device of the ATM 100. The memory 102 temporarily stores at least a part of the OS (Operating System) program and application programs to be executed by the processor 101. The memory 102 also stores various data used for processing by the processor 101. As the memory 102, for example, a volatile semiconductor storage device such as a RAM (Random Access Memory) is used.

[0039] The peripheral devices connected to the bus 108 include a storage device 103 , a network interface 104 , a display processing unit 105 , a touch panel processing unit 106 , and an I / O (Input / Output) interface 107 .

[0040] The storage device 103 electrically or magnetically writes and reads data to and from a built-in recording medium. The storage device 103 is used as an auxiliary storage device for the ATM 100. The storage device 103 stores various data including OS programs, application programs, and transaction history information. Note that, for example, a hard disk drive (HDD) or a solid state drive (SSD) can be used as the storage device 103.

[0041] The network interface 104 is connected to the network 20. The network interface 104 transmits and receives data to and from other devices via the network 20.

[0042] A display 111 is connected to the display processing unit 105. The display processing unit 105 displays various information such as operation guides on the screen of the display 111 in accordance with instructions from the processor 101. The display 111 may be a display device using an organic EL (Electro Luminescence) display device, a liquid crystal display device, or the like.

[0043] A touch panel 112 is connected to the touch panel processing unit 106. The touch panel 112 is disposed, for example, in front of the display 111. The touch panel processing unit 106 detects a position on the screen where the user's finger touches or approaches the touch panel 112, and notifies the processor 101 of the position.

[0044] A card processing unit 113, a passbook processing unit 114, a coin processing unit 115, a bill processing unit 116, an IC reading unit 117, a camera 118, and an OCR (Optical Character Reader) reading unit 119 are connected to the I / O interface 107. The I / O interface 107 notifies each connected unit of an instruction from the processor 101 in accordance with an instruction from the processor 101. The I / O interface 107 also notifies the processor 101 of information acquired from each unit via the bus 108.

[0045] The card processing unit 113 controls the insertion, acceptance and ejection of cash cards. The card processing unit 113 reads magnetically recorded information (such as account number) attached to an inserted card. The card processing unit 113 can also take in and store cash cards.

[0046] The passbook processing unit 114 controls the taking in and ejection of passbooks. The passbook processing unit 114 also reads magnetically recorded information (such as account numbers) attached to the taken-in passbooks. The passbook processing unit 114 also has a function for printing on passbooks, and is capable of writing to the passbooks.

[0047] The coin processing unit 115 controls the ejection and intake of coins and the opening and closing of a door for coin insertion and withdrawal according to instructions from the processor 101. The banknote processing unit 116 controls the ejection and intake of banknotes and the opening and closing of a door for banknote insertion and withdrawal according to instructions from the processor 101. The banknote processing unit 116 has a function for reading the type and serial number of banknotes. The banknote processing unit 116 reads the serial number of a banknote inserted or withdrawn when depositing or withdrawing money, and outputs it to the processor 101.

[0048] The IC reading unit 117 reads information stored in an IC card such as a My Number card that is held over the IC reading unit 117. The IC reading unit 117 transmits the information read from the IC card to the processor 101.

[0049] Camera 118 generates still or video image data of the scene at which the lens of camera 118 is aimed, in accordance with instructions from processor 101, and stores the data in memory 102. Camera 118 is installed so as to be able to capture an image of the operator of ATM 100.

[0050] The OCR reading unit 119 recognizes a character string printed on the face of an IC card such as a My Number card. The OCR reading unit 119 transmits the recognized character string to the processor 101.

[0051] In addition, the I / O interface 107 can read data from the portable recording medium 35 or write data to the portable recording medium 35. The portable recording medium 35 is, for example, a recording medium such as a DVD (Digital Versatile Disc) or a CD (Compact Disc). The portable recording medium 35 can store transaction history information and the like.

[0052] The automated transaction device 10 shown in the first embodiment can also be realized by the same hardware as the ATM 100 shown in Fig. 3. The processor 101 is an example of the control unit 12 shown in the first embodiment.

[0053] The ATM 100 realizes the processing functions of the second embodiment by executing a program recorded on, for example, a computer-readable recording medium. The program describing the processing contents to be executed by the ATM 100 can be recorded on various recording media. For example, the program to be executed by the ATM 100 can be stored in the storage device 103. The processor 101 loads at least a part of the program in the storage device 103 into the memory 102 and executes the program. The program to be executed by the ATM 100 can also be recorded on the portable recording medium 35. The program stored in the portable recording medium 35 becomes executable after being installed in the storage device 103 under the control of, for example, the processor 101. The processor 101 can also directly read out the program from the portable recording medium 35 and execute it.

[0054] 4 is a diagram showing an example of the hardware configuration of an authentication server. The authentication server 200 is entirely controlled by a processor 201. A memory 202 and a plurality of peripheral devices are connected to the processor 201 via a bus 209. The processor 201 may be a multiprocessor. The processor 201 is, for example, a CPU, an MPU, or a DSP. At least a part of the functions realized by the processor 201 executing a program may be realized by an electronic circuit such as an ASIC or a PLD.

[0055] The memory 202 is used as a main storage device of the authentication server 200. The memory 202 temporarily stores at least a part of the OS program and application programs to be executed by the processor 201. The memory 202 also stores various data used for processing by the processor 201. As the memory 202, for example, a volatile semiconductor storage device such as a RAM is used.

[0056] The peripheral devices connected to the bus 209 include a storage device 203 , a GPU (Graphics Processing Unit) 204 , an input interface 205 , an optical drive device 206 , a device connection interface 207 , and a network interface 208 .

[0057] The storage device 203 electrically or magnetically writes and reads data to and from a built-in recording medium. The storage device 203 is used as an auxiliary storage device for a computer. The storage device 203 stores an OS program, application programs, and various data. Note that, for example, an HDD or SSD can be used as the storage device 203.

[0058] The GPU 204 is connected to a monitor 41. The GPU 204 displays an image on the screen of the monitor 41 in accordance with an instruction from the processor 201. The monitor 41 may be a display device using an organic electroluminescence (EL) display device, a liquid crystal display device, or the like.

[0059] The input interface 205 is connected to a keyboard 42 and a mouse 43. The input interface 205 transmits signals sent from the keyboard 42 and the mouse 43 to the processor 201. Note that the mouse 43 is an example of a pointing device, and other pointing devices can also be used. Examples of other pointing devices include a touch panel, a tablet, a touch pad, and a trackball.

[0060] The optical drive device 206 uses laser light or the like to read data recorded on an optical disk 44. The optical disk 44 is a portable recording medium on which data is recorded so that it can be read by reflection of light. The optical disk 44 includes DVDs, DVD-RAMs, CD-ROMs (Read Only Memory), CD-Rs (Recordable) / RWs (ReWritable), etc.

[0061] The device connection interface 207 is a communication interface for connecting peripheral devices to the authentication server 200. For example, a memory device 45 or a memory reader / writer 46 can be connected to the device connection interface 207. The memory device 45 is a recording medium equipped with a function for communicating with the device connection interface 207. The memory reader / writer 46 is a device for writing data to the memory card 47 or reading data from the memory card 47. The memory card 47 is a card-type recording medium.

[0062] The network interface 208 is connected to the network 20. The network interface 208 transmits and receives data via the network 20 to and from other computers or communication devices.

[0063] The authentication server 200 can realize the processing functions of the second embodiment with the above hardware configuration. The server 1 shown in the first embodiment can also be realized with the same hardware as the authentication server 200 shown in FIG. 4. The processor 201 is an example of the processing unit 1b shown in the first embodiment. The memory 202 or the storage device 203 is an example of the storage unit 1a shown in the first embodiment.

[0064] The authentication server 200 executes a program recorded in, for example, a computer-readable recording medium to realize the processing function of the second embodiment. The program describing the processing contents to be executed by the authentication server 200 can be recorded in various recording media. For example, the program to be executed by the authentication server 200 can be stored in the storage device 203. The processor 201 loads at least a part of the program in the storage device 203 into the memory 202 and executes the program. The program to be executed by the authentication server 200 can also be recorded in a portable recording medium such as the optical disk 44, the memory device 45, or the memory card 47. The program stored in the portable recording medium becomes executable after being installed in the storage device 203 under the control of, for example, the processor 201. The processor 201 can also read and execute the program directly from the portable recording medium. Next, the functions of the ATM 100 and the authentication server 200 will be described in detail.

[0065] 5 is a block diagram showing an example of the functions of an ATM and an authentication server. The ATM 100 has a transaction unit 120, an authentication unit 130, and a transmission / reception unit 140. The transaction unit 120, the authentication unit 130, and the transmission / reception unit 140 are realized by a processor 101 executing a program stored in a memory 102.

[0066] The transaction unit 120 executes processing for transactions using the ATM 100. At the start of a transaction, the transaction unit 120 accepts the insertion of a cash card and the input of a PIN. For example, the transaction unit 120 causes the card processing unit 113 to accept the insertion of a cash card and read an account number from the inserted cash card. The transaction unit 120 then accepts the input of a PIN from the touch panel 112 and verifies that the correct PIN corresponding to the read account number has been entered. The transaction unit 120 accepts the input of transaction details. For example, the transaction unit 120 accepts input from the touch panel 112 to select the transaction type, transaction amount, transfer destination, etc.

[0067] If the face authentication by authentication server 200, authentication using an ID such as a My Number card (ID authentication), or email authentication is successful, transaction unit 120 executes the transaction with the transaction details that were accepted as input. Then, transaction unit 120 causes card processing unit 113 to release the inserted cash card. Furthermore, if face authentication fails, transaction unit 120 suspends the transaction. If ID authentication or email authentication performed after face authentication fails, transaction unit 120 aborts the transaction. Then, transaction unit 120 causes card processing unit 113 to take in and store the inserted cash card.

[0068] The authentication unit 130 executes processes for face authentication and ID authentication. The authentication unit 130 photographs the operator of the ATM 100 during face authentication. For example, the authentication unit 130 causes the camera 118 to photograph the operator and acquire the captured image. In ID authentication, the authentication unit 130 causes the OCR reading unit 119 to read information for accessing the face AP stored in the IC card of the My Number card from the face of the My Number card. For example, the authentication unit 130 causes the OCR reading unit 119 to acquire face information (for example, a 6-digit date of birth, a 4-digit year of expiration, and a 4-digit security code = a total of 14-digit verification number b) printed on the face of the My Number card placed on the OCR reading unit 119. The authentication unit 130 causes the IC reading unit 117 to acquire face image data stored in the IC data of the My Number card. For example, the authentication unit 130 causes the IC reading unit 117 to obtain face image data stored in the IC of the My Number card using the verification number b.

[0069] The transmission / reception unit 140 controls transmission and reception of data to and from the authentication server 200. In face authentication, the transmission / reception unit 140 transmits to the authentication server 200 the account number acquired by the transaction unit 120 and the captured image acquired by the authentication unit 130. In identity card authentication, the transmission / reception unit 140 transmits to the authentication server 200 the face image read from the My Number card by the authentication unit 130.

[0070] The authentication server 200 has a storage unit 210, a matching unit 220, a transmission / reception unit 230, and a registration unit 240. The storage unit 210 is realized using a storage area of ​​the memory 202 or the storage device 203. The matching unit 220, the transmission / reception unit 230, and the registration unit 240 are realized by the processor 201 executing a program stored in the memory 202. The storage unit 210 stores registration information 211. The registration information 211 is information in which the account number of the user's account, a facial image of the user used for face authentication (registered image), and the user's email address are registered in association with each other.

[0071] The matching unit 220 matches images in face authentication and ID authentication. In face authentication, the matching unit 220 matches a captured image acquired from the ATM 100 with a registered image registered in advance (pre-registered image) and a registered image additionally registered (additional registration image). For example, the matching unit 220 refers to the registration information 211 and identifies a pre-registered image and an additional registration image corresponding to an account number notified from the ATM 100. Then, the matching unit 220 matches a person appearing in the captured image with each of the people appearing in the pre-registered image and the additional registration image. The matching unit 220 determines that the face authentication is successful when a person appearing in the captured image matches a person appearing in either the pre-registered image or the additional registration image.

[0072] In identity card authentication, the matching unit 220 matches the face image read from the My Number card received from the ATM 100 with the pre-registered image. If the face image read from the My Number card matches the pre-registered image, the matching unit 220 determines that identity card authentication has been successful.

[0073] The transmission / reception unit 230 transmits and receives data to and from other devices and issues instructions to the ATM 100. If the face authentication by the matching unit 220 is successful, the transmission / reception unit 230 instructs the ATM 100 to execute a transaction. In addition, if the face authentication by the matching unit 220 is unsuccessful, the transmission / reception unit 230 instructs the ATM 100 to abort the transaction.

[0074] In the email authentication, the transmitting / receiving unit 230 sends an email inquiring whether or not to permit continuation of the transaction and whether or not to register the photographed image as an additional registration image. For example, the transmitting / receiving unit 230 refers to the registration information 211 and identifies an email address corresponding to the account number notified by the ATM 100. The transmitting / receiving unit 230 notifies the identified email address and transmits an email inquiring whether or not to permit continuation of the transaction and whether or not to register the photographed image as an additional registration image to the mail server 22.

[0075] When the smartphone 23 that downloaded the e-mail from the mail server 22 responds by refusing to continue the transaction, the transmitting / receiving unit 230 determines that the e-mail authentication has failed and instructs the ATM 100 to cancel the transaction. When the smartphone 23 responds by allowing the transaction to continue, the transmitting / receiving unit 230 determines that the e-mail authentication has been successful and instructs the ATM 100 to execute the transaction.

[0076] When the e-mail authentication is successful and the transaction is executed, and then the identity card authentication is successful, the registration unit 240 registers an additional registration image in the registration information 211. For example, the registration unit 240 registers the captured image in the registration information 211 as an additional registration image corresponding to the account number notified by the ATM 100 at the time of the transaction.

[0077] 5 show only a part of the communication paths, and it is possible to set communication paths other than those shown in the figure. Next, the registration information 211 stored in the storage unit 210 will be described in detail.

[0078] FIG. 6 is a diagram showing an example of registration information. Registration information 211 is information in which the account number of the user's account, the facial image of the user used for facial authentication, and the user's email address are registered in association with each other. Registration information 211 has fields for account number, name, pre-registered image, additionally registered image, and email address. The account number is set in the account number field. The name of the user who is the account holder is set in the name field. The pre-registered image field is set to a facial image of the user that is registered in advance. The facial image set in the pre-registered image field is a facial image stored in the IC of the user's identification card, such as a My Number card or a driver's license.

[0079] The additional registration image field is set with a facial image of the user to be additionally registered. The facial image set in the additional registration image field is an image taken when facial authentication fails but email authentication is successful. Note that a plurality of facial images may be registered in the additional registration image field. The email address field is set with the email address of the user. Next, a transaction process by the automated trading system of the second embodiment will be described. First, a process when continuation of a transaction is refused in email authentication will be described.

[0080] 7 is a diagram showing an example of transaction processing when continuation of a transaction is rejected in email authentication. When the authentication server 200 receives a response refusing continuation of a transaction in email authentication performed when face authentication fails, it causes the ATM 100 to stop the transaction.

[0081] In a transaction process, first, transaction unit 120 of ATM 100 accepts an operation from operator 51. Transaction unit 120 causes card processing unit 113 to accept the insertion of a cash card and read the account number from the inserted cash card. Then, transaction unit 120 accepts input of a PIN from touch panel 112 and verifies that the correct PIN corresponding to the read account number has been entered.

[0082] Here, the authentication unit 130 of the ATM 100 causes the camera 118 to capture an image 52 of the operator 51 (step S1). The transmission / reception unit 140 of the ATM 100 transmits the account number read from the cash card and the captured image 52 to the authentication server 200, and requests the authentication server 200 to perform face authentication.

[0083] The matching unit 220 of the authentication server 200 refers to the registration information 211 and identifies the pre-registered image 53 corresponding to the account number notified by the ATM 100. Then, the matching unit 220 matches the person appearing in the captured image 52 with the person appearing in the pre-registered image 53 (step S2). Here, it is assumed that the matching unit 220 determines that the person appearing in the captured image 52 does not match the person appearing in the pre-registered image 53 (determines NG). Then, the transmitting / receiving unit 230 of the authentication server 200 instructs the ATM 100 to abort the transaction.

[0084] The transmitting / receiving unit 230 refers to the registration information 211 and identifies the email address corresponding to the account number notified by the ATM 100. The transmitting / receiving unit 230 then notifies the mail server 22 of the identified email address and sends an email inquiring whether or not to continue the transaction (step S3). The mail server 22 manages the email received from the authentication server 200 as an incoming email for the email address notified by the authentication server 200. The smartphone 23 downloads the email sent from the authentication server 200 from the mail server 22. In response to the downloaded email, the smartphone 23 transmits a response to the authentication server 200 refusing to continue the transaction (step S4). The transmitting / receiving unit 23 then instructs the ATM 100 to cancel the transaction (step S5).

[0085] The transaction section 120 stops the transaction in response to an instruction from the authentication server 200. Then, the transaction section 120 causes the card processing unit 113 to take in and store the cash card (step S6).

[0086] In this way, if face authentication fails during a transaction using the ATM 100, the authentication server 200 sends an email to the user inquiring whether or not to continue the transaction, and if a response refusing to continue the transaction is received, causes the ATM 100 to stop the transaction. In this way, the automated transaction system of the second embodiment can prevent the operator 51 from executing a transaction if the operator 51 is a third party who has illegally obtained a cash card. Furthermore, if email authentication fails, the ATM 100 can collect the cash card from the third party who has illegally obtained the cash card by storing it instead of releasing it. Next, a process will be described when continuation of a transaction is permitted in email authentication.

[0087] 8 is a diagram showing an example of transaction processing when continuation of a transaction is permitted in e-mail authentication. When the authentication server 200 receives a response permitting continuation of the transaction in the e-mail authentication, the authentication server 200 causes the ATM 100 to execute the transaction.

[0088] First, the transaction unit 120 of the ATM 100 accepts the insertion of a cash card and the input of a PIN by the operator 51, and when it confirms that the input of the correct PIN is correct, it accepts the input of the transaction details. Then, the authentication unit 130 of the ATM 100 causes the camera 118 to take a photographed image 52 of the operator 51 (step S11). The transmission / reception unit 140 of the ATM 100 transmits the account number read from the cash card and the photographed image 52 to the authentication server 200, and requests the authentication server 200 to perform face authentication.

[0089] The matching unit 220 of the authentication server 200 matches the person appearing in the captured image 52 with the person appearing in the pre-registered image 53 corresponding to the account number notified from the ATM 100 (step S12). Here, it is assumed that the matching unit 220 determines that the person appearing in the captured image 52 does not match the person appearing in the pre-registered image 53 (determines NG). Then, the transmitting / receiving unit 230 of the authentication server 200 instructs the ATM 100 to abort the transaction.

[0090] The transmitting / receiving unit 230 sends an e-mail inquiring whether to continue the transaction to the mail server 22, notifying the e-mail address corresponding to the account number notified by the ATM 100 (step S13). The mail server 22 manages the e-mail received from the authentication server 200 as a received e-mail for the e-mail address notified by the authentication server 200. The smartphone 23 downloads the e-mail sent from the authentication server 200 from the mail server 22. In response to the downloaded e-mail, the smartphone 23 transmits a response to the authentication server 200 permitting the continuation of the transaction (step S14). The transmitting / receiving unit 230 then instructs the ATM 100 to execute the transaction (step S15).

[0091] The transaction unit 120 executes the transaction in response to an instruction from the authentication server 200 (step S16). Here, the transaction unit 120 executes the transaction whose contents were accepted as input at the start of the transaction. If the email authentication is successful, the ATM 100 and the authentication server 200 register the captured image 52 as an additional registration image.

[0092] In registering the additional registration image, first, the authentication unit 130 causes the IC reading unit 117 to read the My Number card 54 held up by the operator 51, using the verification number obtained by having the OCR reading unit 119 read the face information of the My Number card 54 (step S17). The authentication unit 130 obtains the read image 55 stored in the IC of the My Number card 54 by the IC reading unit 117. The transmission / reception unit 140 transmits the read image 55 to the authentication server 200, and requests the authentication server 200 to verify it against the pre-registered image 53.

[0093] The matching unit 220 matches the scanned image 55 with the pre-registered image 53 (step S18). Here, it is assumed that the matching unit 220 determines that the scanned image 55 matches the pre-registered image 53 (determines OK). Then, the registration unit 240 registers the captured image 52 in the registration information 211 as an additional registration image corresponding to the account number of the account used in the transaction (step S19).

[0094] In this way, if face authentication fails during a transaction using the ATM 100, the authentication server 200 sends an email to the user inquiring whether or not to continue the transaction, and when it receives a response permitting continuation of the transaction, it causes the ATM 100 to execute the transaction. In this way, the automated transaction system of the second embodiment can execute a transaction even if the operator 51 is a user who is the account holder, and is determined to be a different person from the person appearing in the pre-registered image 53 due to the operator's growth or aging. Thus, the automated transaction system of the second embodiment can improve the convenience of transactions.

[0095] Furthermore, when the email authentication is successful, the authentication server 200 registers the photographed image 52 in the registration information 211 as an additionally registered image. In the next and subsequent face authentication, the authentication server 200 can easily make the face authentication of a user whose face has changed since the photographing of the pre-registered image 53 successful by using the photographed image 52 registered as an additionally registered image. The authentication server 200 registers the face image stored in the IC of the My Number card 54 as the pre-registered image 53, and registers the photographed image 52 as an additionally registered image when the read image 55 and the pre-registered image 53 match. This allows the authentication server 200 to improve security when registering the additionally registered image. Next, a screen displayed by the ATM 100 when a transaction is interrupted will be described.

[0096] 9 is a diagram showing an example of the interruption screen. When the transaction unit 120 is instructed to interrupt the transaction by the authentication server 200, the transaction unit 120 displays the interruption screen 71 on the display 111 and interrupts the transaction. The interruption screen 71 is a screen that notifies the user that face authentication has failed and prompts the user to perform email authentication.

[0097] The interruption screen 71 includes a message notifying the user that face authentication has failed, such as "Matching with pre-registered face image data was not successful." The interruption screen 71 also includes a message prompting the user to operate the smartphone 23 for email authentication, such as "An email has been sent to a pre-registered contact. Please carry out a transaction confirmation operation." The interruption screen 71 also includes a message notifying the user that authentication using an identification card, such as the My Number card 54, is possible instead of email authentication, such as "Alternatively, hold your identification card over the ATM." Next, an email sent by the authentication server 200 in email authentication will be described.

[0098] 10 is a diagram showing an example of an e-mail. When face authentication fails during a transaction, the transmitting / receiving unit 230 transmits an e-mail 81 addressed to an e-mail address stored in association with the account used for the transaction to the mail server 22. The smartphone 23 downloads the e-mail 81 from the mail server 22 and displays it on the display of the smartphone 23.

[0099] The email 81 includes the captured image 52 captured by the ATM 100 during the transaction. The email 81 also includes information related to the transaction, such as the transaction date and time, the transaction location, the transaction type, the transaction account number, and the transaction serial number. The email 81 also includes a message inquiring whether or not to allow the transaction to continue, such as "Do you allow the above transaction to be carried out at the ATM?". The email 81 also includes a message informing the user that the captured image 52 can be registered as an additional registered image, such as "If permitted, you can also add an image this time."

[0100] Furthermore, email 81 includes a "Reject" button, an "Allow (additional image registration)" button, and an "Allow (do not add additional image registration)" button. The "Reject" button is a button for sending a response to authentication server 200 refusing to continue the transaction. Note that email 81 includes a message above the "Reject" button, such as "Click here to reject," indicating that the "Reject" button is a button for rejecting the continuation of the transaction. The "Reject" button is set so that, when pressed, information for identifying the transaction (e.g., the transaction serial number) and information indicating that continuation of the transaction is rejected are sent to authentication server 200.

[0101] The "Allow (Additional Image Registration)" button is a button for sending to the authentication server 200 a response permitting continuation of the transaction and a notification that the captured image 52 will be registered as an additional registration image. The email 81 includes a message such as "Click here for permission (if you wish to additionally register this image as a customer image)" above the "Allow (Additional Image Registration)" button. This message indicates that the "Allow (Additional Image Registration)" button is a button for permitting continuation of the transaction and registering an additional registration image. The "Allow (Additional Image Registration)" button is set so that, when pressed, information for identifying the transaction, information indicating that continuation of the transaction is permitted, and information indicating that an additional registration image will be registered are sent to the authentication server 200.

[0102] The "Allow (no additional image registration)" button is a button for sending to the authentication server 200 a response permitting continuation of the transaction and a notification that the captured image 52 will not be registered as an additional registration image. The email 81 includes a message such as "Allow (if you do not want to register an image as a customer image this time) click here" above the "Allow (no additional image registration)" button. This message indicates that the "Allow (no additional image registration)" button is a button for permitting continuation of the transaction and not registering an additional registration image. The "Allow (no additional image registration)" button is set so that, when pressed, information for identifying the transaction, information indicating that continuation of the transaction is permitted, and information indicating that an additional registration image will not be registered are sent to the authentication server 200.

[0103] By sending such email 81, the authentication server 200 inquires of the user, who is the account holder of the account used in the transaction, whether or not to continue the transaction. For example, if a third party attempts to carry out a transaction at the ATM 100 using a fraudulently obtained cash card, the authentication server 200 can notify the user of the third party's facial image and the transaction details by sending email 81. When the user who has been notified of the transaction by the third party presses the "Reject" button, the authentication server 200 receives a response from the smartphone 23 refusing to continue the transaction, and causes the ATM 100 to stop the transaction. In this way, the automated transaction system of the second embodiment can prevent transactions by a third party who has fraudulently obtained a cash card.

[0104] Also, for example, when a user attempts to carry out a transaction using the ATM 100 and fails in face authentication, the authentication server 200 can notify the user of the failure in face authentication by sending an email 81. When the user who has been notified of the failure in face authentication presses the "Allow (additionally register an image)" button, the authentication server 200 receives from the smartphone 23 a response permitting continuation of the transaction and a notification that an additionally registered image will be registered. Then, the authentication server 200 causes the ATM 100 to carry out the transaction and registers the photographed image 52 as an additionally registered image. In this way, the automated transaction system of the second embodiment can carry out the transaction even if face authentication fails due to the growth or aging of the user. In addition, the automated transaction system of the second embodiment can appropriately perform face authentication in subsequent transactions by registering the photographed image 52 as an additionally registered image.

[0105] Also, for example, when a person to whom the user has deposited a cash card, such as a family member of the user, attempts to carry out a transaction using the ATM 100, the authentication server 200 can notify the user that the person is about to carry out a transaction by sending an email 81. When the user, who has been notified of the transaction by the person to whom the cash card has been deposited, presses the "Allow (no additional image registration)" button, the authentication server 200 receives from the smartphone 23 a response permitting continuation of the transaction and a notification that an additional registration image will not be registered. Then, the authentication server 200 causes the ATM 100 to carry out the transaction. In this way, the automated transaction system of the second embodiment can carry out a transaction using an account by a person other than the user authorized by the user who is the account holder, while maintaining security. Below, the processes carried out by the ATM 100 and the authentication server 200 will be described in detail.

[0106] 11 is a flowchart showing an example of a procedure for a transaction process (part 1). The process shown in FIG. 11 will be described below in order of step number. [Step S101] The transaction unit 120 of the ATM 100 accepts the insertion of a cash card and the input of a PIN. For example, the transaction unit 120 causes the card processing unit 113 to accept the insertion of a cash card and read an account number from the inserted cash card. The transaction unit 120 then accepts input of a PIN via the touch panel 112, and verifies that the correct PIN corresponding to the read account number has been entered.

[0107] [Step S102] The transaction unit 120 accepts input of transaction details. For example, the transaction unit 120 accepts input from the touch panel 112 to select the transaction type, transaction amount, transfer destination, etc.

[0108] [Step S103] The authentication unit 130 of the ATM 100 captures an image of the operator 51. For example, the authentication unit 130 causes the camera 118 to capture an image of the operator 51 and obtains a captured image 52. [Step S104] The transmitter / receiver unit 140 of the ATM 100 transmits to the authentication server 200 the account number read in step S101, the image 52 captured in step S103, and the transaction details entered in step S102.

[0109] [Step S105] The matching unit 220 of the authentication server 200 matches the captured image 52 with the pre-registered image 53 and the additionally registered image. For example, the matching unit 220 refers to the registration information 211 and identifies the pre-registered image 53 and the additionally registered image corresponding to the account number notified by the ATM 100 in step S104. The matching unit 220 then matches the person appearing in the captured image 52 with the people appearing in the pre-registered image 53 and the additionally registered image. The matching unit 220 may also match the person appearing in the most recently registered image of the identified pre-registered image 53 and additionally registered image with the person appearing in the captured image 52.

[0110] [Step S106] The matching unit 220 determines whether or not the person appearing in the photographed image 52 matches the person appearing in the registered image. For example, the matching unit 220 extracts facial features from each of the images to be compared, and determines that the people appearing in the images match when the degree of match between the extracted facial features is equal to or greater than a predetermined value. The matching unit 220 determines that the person appearing in the photographed image 52 matches the person appearing in either the pre-registered image 53 or the additionally registered image. If the matching unit 220 determines that the person appearing in the photographed image 52 matches the person appearing in the registered image, the processing proceeds to step S107. If the matching unit 220 determines that the person appearing in the photographed image 52 does not match the person appearing in the registered image, the processing proceeds to step S110.

[0111] [Step S107] The transmitter / receiver unit 230 of the authentication server 200 instructs the ATM 100 to execute the transaction. [Step S108] Transaction unit 120 executes the transaction whose contents were accepted in step S102. For example, if deposit is selected as the transaction type in step S102, transaction unit 120 causes coin processing unit 115 and banknote processing unit 116 to accept the insertion of cash for the transaction amount entered in step S102. Then, transaction unit 120 requests host server 21 to add the transaction amount to the balance of the account corresponding to the account number read in step S101.

[0112] Furthermore, for example, when withdrawal is selected as the transaction type in step S102, transaction unit 120 causes coin processing unit 115 and banknote processing unit 116 to dispense cash for the transaction amount input in step S102. Then, transaction unit 120 requests host server 21 to subtract the transaction amount from the balance of the account corresponding to the account number read in step S101.

[0113] Also, for example, when transfer is selected as the transaction type in step S102, transaction unit 120 requests host server 21 to subtract the transaction amount input in step S102 from the balance of the account corresponding to the account number read in step S101. Then, transaction unit 120 requests host server 21 to add the transaction amount to the balance of the account corresponding to the account number input as the transfer destination in step S102.

[0114] [Step S109] The transaction unit 120 returns the cash card. For example, the transaction unit 120 causes the card processing unit 113 to eject the cash card inserted in step S101. Then, the process ends.

[0115] [Step S110] The transmitter / receiver 230 instructs the ATM 100 to suspend the transaction. [Step S111] The trading unit 120 displays the interruption screen 71 on the display 111 and interrupts the transaction.

[0116] 12 is a flowchart showing an example of a procedure for a transaction process (part 2). The process shown in FIG. 12 will be described below in order of step number. [Step S112] The authentication unit 130 determines whether or not to perform email authentication. If the authentication unit 130 determines that email authentication is to be performed, the process proceeds to step S116. If the authentication unit 130 determines that email authentication is not to be performed (identity authentication is to be performed), the process proceeds to step S113.

[0117] [Step S113] The ATM 100 and the authentication server 200 execute an identification card authentication process, which will be described in detail later (see FIG. 14). [Step S114] The authentication unit 130 determines whether the identity card authentication has been successful. If the authentication unit 130 determines that the identity card authentication has been successful, the process proceeds to step S122. If the authentication unit 130 determines that the identity card authentication has failed, the process proceeds to step S115.

[0118] [Step S115] The transaction unit 120 cancels the transaction. Then, the transaction unit 120 causes the card processing unit 113 to take in and store the cash card inserted in step S101. The transmitter / receiver unit 140 may notify the host server 21 or a terminal operated by the administrator of the ATM 100 that the transaction has been canceled. Then, the process ends.

[0119] [Step S116] The transmitting / receiving unit 230 transmits to the mail server 22 an email 81 inquiring whether to permit continuation of the transaction (transaction permission) and whether to register the captured image 52 as an additional registered image (image addition necessity). For example, the transmitting / receiving unit 230 refers to the registration information 211 and identifies an email address corresponding to the account number notified by the ATM 100 in step S104. The transmitting / receiving unit 230 generates an email 81 including the transaction details notified by the ATM 100 in step S104, the captured image 52, a "Reject" button, an "Allow (additional image registration)" button, and an "Allow (do not add image registration)" button. The transmitting / receiving unit 230 transmits the generated email 81 to the mail server 22, notifying the identified email address.

[0120] [Step S117] The transmitting / receiving unit 230 determines whether or not there has been a response refusing to continue the transaction from the smartphone 23. If the transmitting / receiving unit 230 determines that there has been a response refusing to continue the transaction, it proceeds to step S118. If the transmitting / receiving unit 230 determines that there has been no response refusing to continue the transaction, it proceeds to step S119.

[0121] [Step S118] The transmitter / receiver 230 instructs the ATM 100 to cancel the transaction. The process then proceeds to step S115. [Step S119] The transmitting / receiving unit 230 determines whether or not there has been a response from the smartphone 23 permitting continuation of the transaction. If the transmitting / receiving unit 230 determines that there has been a response permitting continuation of the transaction, it proceeds to step S121. If the transmitting / receiving unit 230 determines that there has been no response permitting continuation of the transaction, it proceeds to step S120.

[0122] [Step S120] The transmitting / receiving unit 230 determines whether or not a certain time has passed since the transmission of the email 81 in step S116. If the transmitting / receiving unit 230 determines that the certain time has passed since the transmission of the email 81, the process proceeds to step S118. If the transmitting / receiving unit 230 determines that the certain time has not passed since the transmission of the email 81, the process proceeds to step S117.

[0123] [Step S121] The transmitter / receiver 230 instructs the ATM 100 to execute a transaction. At this point, the transmitter / receiver 230 notifies the ATM 100 of information, included in the response received in step S119, indicating whether or not to register the captured image 52 as an additionally registered image (whether or not to add an image).

[0124] [Step S122] The transaction unit 120 executes the transaction according to the transaction details inputted in step S102. [Step S123] The trading unit 120 determines whether or not to register the photographed image 52 as an additional registration image. For example, when the trading unit 120 is notified of information indicating that the photographed image 52 is to be registered as an additional registration image from the authentication server 200 in step S121, the trading unit 120 determines to register the photographed image 52 as an additional registration image. When the trading unit 120 determines to register the photographed image 52 as an additional registration image, the processing proceeds to step S125. When the trading unit 120 determines not to register the photographed image 52 as an additional registration image, the processing proceeds to step S124.

[0125] [Step S124] The transaction unit 120 returns the cash card. For example, the transaction unit 120 causes the card processing unit 113 to eject the cash card inserted in step S101. Then, the process ends.

[0126] 13 is a flowchart showing an example of a procedure for a transaction process (part 3). The process shown in FIG. 13 will be described below in order of step number. [Step S125] The ATM 100 and the authentication server 200 execute an identification card authentication process, which will be described in detail later (see FIG. 14).

[0127] [Step S126] The authentication unit 130 determines whether the identity card authentication has been successful. If the authentication unit 130 determines that the identity card authentication has been successful, the process proceeds to step S127. If the authentication unit 130 determines that the identity card authentication has failed, the process proceeds to step S129.

[0128] [Step S127] The transmitter / receiver unit 140 requests the authentication server 200 to register the photographed image 52 as an additional registration image. [Step S128] The registration unit 240 registers the photographed image 52 as an additionally registered image. For example, the registration unit 240 registers the photographed image 52 in the registration information 211 as an additionally registered image corresponding to the account number notified by the ATM 100 in step S104.

[0129] [Step S129] The transaction unit 120 returns the cash card, for example by causing the card processing unit 113 to eject the cash card inserted in step S101.

[0130] In this way, the ATM 100 photographs the operator 51 during a transaction, and the authentication server 200 performs face authentication using the photographed image 52. If the person in the photographed image 52 does not match the person in the registered image, the ATM 100 suspends the transaction, and the authentication server 200 sends an email 81 to the email address associated with the account used for the transaction, inquiring whether or not to permit continuation of the transaction. Then, when the authentication server 200 receives a response from the smartphone 23 to the email 81 indicating that the transaction is permitted, the ATM 100 executes the transaction. On the other hand, when the authentication server 200 receives a response from the smartphone 23 to the email 81 indicating that the transaction is not permitted, the ATM 100 suspends the transaction.

[0131] As a result, the automated trading system of the second embodiment can execute a transaction if identity verification via email 81 is successful, even if facial authentication fails due to the growth or aging of the user who is the account holder. Furthermore, the automated trading system of the second embodiment can also execute a transaction through operations by a person other than the user, if the user gives permission to the email 81. Therefore, the automated trading system of the second embodiment can improve the convenience of transactions.

[0132] Furthermore, when the authentication server 200 receives a response from the smartphone 23 permitting continuation of the transaction, including a notification indicating that the photographed image 52 is to be registered as an additionally registered image, and the identity card authentication is successful, the authentication server 200 registers the photographed image 52 as an additionally registered image. This allows the automated transaction system of the second embodiment to perform appropriate face authentication in subsequent transactions.

[0133] Furthermore, if the email authentication fails, the ATM 100 does not release the cash card but stores it in storage. This allows the automated transaction system of the second embodiment to collect from a third party a cash card that may have been illegally obtained by the third party.

[0134] Note that, before the transaction execution process in step S122, the additional registration image registration process in steps S123 to S128 may be executed. Also, the identity card authentication process in steps S113 to S114 and the e-mail authentication process in steps S116 to S121 may be executed in parallel, and if either authentication is successful, the processes from step S122 onwards may be executed.

[0135] 14 is a flowchart showing an example of the procedure of the identification card authentication process. The process shown in FIG. 14 will be described below in order of step numbers. [Step S131] The authentication unit 130 of the ATM 100 causes the OCR reading unit 119 to read the face data of the My Number card 54 and generate a verification number from the face data. For example, the authentication unit 130 causes the OCR reading unit 119 to obtain a verification number b, which is a total of 14 digits, consisting of a six-digit date of birth, a four-digit year of expiration, and a four-digit security code, printed on the face of the My Number card 54 placed on the OCR reading unit 119.

[0136] [Step S132] The authentication unit 130 causes the IC reading unit 117 to access the face AP of the My Number card 54 using the verification number b acquired in step S131. [Step S133] The authentication unit 130 determines whether or not the on-card AP has been accessed. If the authentication unit 130 has been able to access the on-card AP, the process proceeds to step S134. If the authentication unit 130 determines that the on-card AP has not been accessed, the process proceeds to step S139.

[0137] [Step S134] The authentication unit 130 reads a face image from the My Number card 54. For example, the authentication unit 130 causes the IC reading unit 117 to obtain the image stored in the IC of the My Number card 54 as the read image 55.

[0138] [Step S135] The transmitter / receiver 140 of the ATM 100 transmits the scanned image 55 scanned in step S134 to the authentication server 200. <Step S136> The matching unit 220 of the authentication server 200 matches the scanned image 55 received in step S135 with the pre-registered image 53.

[0139] [Step S137] The matching unit 220 determines whether the scanned image 55 matches the pre-registered image 53. If the matching unit 220 determines that the scanned image 55 matches the pre-registered image 53, the process proceeds to step S140. If the matching unit 220 determines that the scanned image 55 does not match the pre-registered image 53, the process proceeds to step S138.

[0140] [Step S138] The transmitter / receiver 230 of the authentication server 200 notifies the ATM 100 that the scanned image 55 and the pre-registered image 53 do not match (mismatch). [Step S139] The authentication unit 130 determines that the identity card authentication has failed, and the process ends.

[0141] [Step S140] The transmitter / receiver 230 notifies the ATM 100 that the scanned image 55 matches the pre-registered image 53. [Step S141] The authentication unit 130 determines that the identification card authentication has been successful.

[0142] Thus, in ID authentication, the ATM 100 obtains the image stored in the IC of the My Number card 54 as the read image 55, and the authentication server 200 determines whether the read image 55 matches the pre-registered image 53. The automated transaction system of the second embodiment can improve the convenience of transactions by allowing a transaction to be executed if face authentication fails and either email authentication or ID authentication succeeds. Furthermore, if ID authentication succeeds, the authentication server 200 registers the captured image 52 as an additional registration image. This allows the automated transaction system of the second embodiment to improve security when registering an additional registration image.

[0143] Furthermore, when ATM 100 successfully accesses the IC using verification number b generated from the face of My Number card 54, it acquires read image 55 and requests verification from authentication server 200. In this way, the automated transaction system of the second embodiment allows registration of an additional registration image only when the image stored in the IC of My Number card 54 brought by operator 51 matches pre-registered image 53, thereby improving security when registering an additional registration image.

[0144] Although the embodiments have been described above, the configurations of the parts shown in the embodiments can be replaced with other parts having similar functions. Any other components or steps may be added. Furthermore, any two or more configurations (features) of the above-mentioned embodiments may be combined. [Explanation of symbols]

[0145] 1 Server 1a Storage section 1b Processing section 2. Registration Information 3. Photographed images 10. Automatic transaction equipment 11 Camera 12 Control section

Claims

1. a server that stores an account, a contact, and a registered image in association with each other, and, if a person appearing in an image taken during a transaction using the account does not match a person appearing in the registered image, sends an email to the contact asking whether or not to allow the transaction to continue; an automated transaction device that takes the captured image during the transaction, suspends the transaction if a person in the captured image does not match a person in the registered image, executes the transaction if there is a response to the e-mail indicating that the transaction is permitted, and aborts the transaction if there is a response to the e-mail indicating that the transaction is not permitted; An automated trading system having

2. When the server receives a response to the e-mail indicating that the transaction is permitted, the server stores the photographed image as the registered image.

2. The automated trading system of claim 1.

3. The automated transaction machine reads a facial image from an identification card, When the face image matches the registered image, the server stores the captured image as the registered image.

3. The automated trading system according to claim 2.

4. the automated transaction device accepts insertion of a cash card at the time of the transaction, identifies the account from information read from the cash card, and if there is a response to the email indicating that the transaction is not permitted, stores the cash card without releasing it.

2. The automated trading system of claim 1.

Images