ATM systems, transaction methods, and transaction method programs

Abstract

To obtain an ATM system etc. that can further improve safety. [Solution] The system comprises an ATM device (11) that processes transactions related to payments from a user's account, and an approver interaction server (22) that, when a user performs a transaction at the ATM device (11), sends an approval request message to an approver who approves or denies the user's transaction, requesting approval of the transaction. The approver interaction server (22) has an approver interaction server registration information storage unit (221A) that stores data related to the approver, and the approver interaction server registration information storage unit (221A) stores a customer information provision availability flag that indicates whether the customer of the transaction should be included in the approval request message, and a transaction amount information provision availability flag that indicates whether the transaction amount should be included. The approver interaction server (22) generates an approval request message based on the customer information provision availability flag and the transaction amount information provision availability flag, and sends the message to an approver terminal device (31) owned by the approver.

Description

[Technical Field]

[0001] This technology relates to an ATM system, a transaction method, and a program for the transaction method, in which transactions are conducted using automated transaction devices such as ATMs (Automated Teller Machines) (hereinafter referred to as ATMs or ATM devices). In particular, it relates to improving the security of transactions. [Background technology]

[0002] In recent years, fraudulent financial transactions such as bank transfer scams, in which elderly people and others are tricked into transferring money via telephone or document, have become a problem. Measures to prevent bank transfer scams have therefore been implemented, such as installing monitoring equipment in ATM corners where ATMs are installed. For example, using technology that automatically detects behavior suspected to be fraudulent based on images taken by cameras installed near the ATM corner and detection by sensors, the system can stop the user's bank transfer operation and have a staff member speak to the user.

[0003] In addition, the account owner designates an approver, such as a close relative, and registers the data in advance in the accounting system. Then, when the account owner transfers money from the account at an ATM, the transfer details, such as the transfer destination and transfer amount, are notified to the approver's terminal device, such as a mobile phone, and the approver is asked to approve the transfer each time, thereby preventing transfer fraud (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2015-064621 Summary of the Invention [Problem to be solved by the invention]

[0005] However, technologies for automatically detecting fraudulent activity may erroneously identify legitimate transactions as fraudulent, or conversely, may overlook fraudulent transactions as legitimate. Furthermore, the technology in Patent Document 1 requires the account owner to register the approver's data in advance. However, when an account owner uses an ATM to transfer funds, they may be reluctant to register the approver because they do not want to disclose the specific purpose or amount of their money to the approver. This may result in an inability to prevent transfer fraud and an inability to improve safety.

[0006] Therefore, there has been a demand for an ATM system, a transaction method, and a program for the transaction method that can further improve safety. [Means for solving the problem]

[0007] The ATM system disclosed herein comprises an automated teller machine that processes transactions related to payments from a user's account, and an approver collaboration server that, when a user conducts a transaction at the automated teller machine, sends an approval request message to an approver who approves or denies the user's transaction, requesting approval of the transaction. The approver collaboration server has an approver collaboration server registration information storage unit that stores data related to the approver, and the approver collaboration server registration information storage unit stores at least one of a customer information provision availability flag that indicates whether information related to the transaction's customer is to be included in the approval request message and a transaction amount information provision availability flag that indicates whether information on the transaction amount is to be included. The approver collaboration server generates an approval request message based on the customer information provision availability flag and the transaction amount information provision availability flag, and sends the message to an approver terminal device held by the approver.

[0008] In addition, the transaction method disclosed herein is a transaction method in which an automated teller machine performs a transaction related to payment from a user's account, and includes the steps of generating an approval request message based on at least one of a customer information provision flag indicating whether the customer with whom the transaction is to be performed and a transaction amount information provision flag indicating whether the transaction amount is to be included in the approval request message sent when requesting approval from the approver, which are stored in an approver linkage server registration information storage unit that stores data related to the approver who approves or denies the user's transaction, sending the generated approval request message to an approver terminal device held by the approver, and continuing or canceling the transaction by the automated teller machine based on a selection result signal including the approval or denial of approval sent from the approver terminal device.

[0009] In addition, the program for the transaction method disclosed herein is a transaction method in which a transaction related to payment from a user's account is conducted from an automated transaction device, and the program causes a computer to execute the following steps: generating an approval request message based on at least one of a business partner information provision flag indicating whether the business partner with whom the transaction is conducted and a transaction amount information provision flag indicating whether the transaction amount is to be included in the approval request message sent when requesting approval from the approver, which are stored in an approver linkage server registration information storage unit that stores data related to the approver who approves or denies approval for the user's transaction; sending the generated approval request message to an approver terminal device held by the approver; and sending a selection result signal sent from the approver terminal device, including the approval or denial of approval, to the automated transaction device to continue or cancel the transaction. [Effects of the Invention]

[0010] According to this disclosure, the approver collaboration server stores at least one of a customer information provision flag and a transaction amount information provision flag stored in the approver collaboration server registration information storage unit.The approver collaboration server then generates an approval request message based on the customer information provision flag and the transaction amount information provision flag and sends it to the approver terminal device owned by the approver.This allows a transfer approval request message that does not include at least one of the transfer destination name and transfer amount to be sent to the approver, making it easier for users to register approvers.This improves security. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a diagram illustrating a configuration of an ATM system according to a first embodiment. [Figure 2] 10 is a diagram showing an example of approver cooperation server registration information stored in server storage unit 221 in accordance with Embodiment 1. FIG. [Figure 3] FIG. 2 is a diagram illustrating a transfer process in the ATM system according to the first embodiment. [Figure 4] FIG. 10 is a diagram showing the flow of signals between the approver link server 22 and the approver terminal device 31 when the account number of an ATM user is registered. [Figure 5] 10 is a diagram showing the flow of signals when a voice call is made between the approver terminal device 31 and the autophone 12 according to the first embodiment. FIG. DETAILED DESCRIPTION OF THE INVENTION

[0012] An ATM system according to an embodiment will be described below with reference to the drawings. In the drawings, components with the same reference numerals are identical or equivalent, and this applies throughout the embodiments described below. The size relationships between components in the drawings may differ from those in reality. The configurations of components shown throughout the specification are merely illustrative and are not limited to those described in the specification. In particular, the combinations of components are not limited to those in each embodiment, and components described in other embodiments may be applied to other embodiments. In addition, when multiple similar devices are distinguished by subscripts, the subscripts may be omitted if there is no need to distinguish or identify them.

[0013] Embodiment 1 FIG. 1 is a diagram showing the configuration of an ATM system according to a first embodiment. In the ATM system according to the first embodiment, when an ATM user using an ATM device 11 performs a transaction such as a transfer, the ATM system requests approval from a pre-registered approver and performs the transaction based on the approval or denial of the approval. In this case, if the approver wishes to make a voice call with the ATM user to determine whether the approval is granted, the ATM system supports the voice call between the approver and the ATM user. This section describes the processing operations of the devices in the ATM system when an ATM user transfers money from one account to another. While not particularly limited, this section describes an example of an ATM user who is an elderly person who is relatively likely to become a victim of a bank transfer fraud. The approver is also described as a person who has circumstances that restrict the financial transactions performed by the account owner, such as a close relative such as a family member (child, spouse, or grandchild), a young guardian, or a married couple with special circumstances.

[0014] In the ATM system according to the first embodiment, devices are installed in an ATM corner 1 and a banking center 2 owned by a financial institution (hereinafter referred to as a bank). An approver terminal device 31, on which an approval processing application 315A (described later) is installed, is the device that communicates with devices installed in the ATM corner 1 and the banking center 2 within the ATM system. The ATM corner 1 and the banking center 2 are connected for communication via an inter-site communication line 4 and a public communication network 5. The banking center 2 and the approver terminal device 31 are connected for communication via the Internet 6 and the public communication network 5. The inter-site communication line 4 is a dedicated line. The public communication network 5 is a network that allows voice calls using telephone numbers such as telephone lines and IP phones. The Internet 6 is a communication network that transmits and receives signals including various data.

[0015] In an ATM system, the ATM device 11 and the autophone 12 are devices installed at ATM corners 1, such as bank branches and off-site locations. FIG. 1 shows one ATM device 11 and one corresponding autophone 12 at one ATM corner 1. However, this is not a limitation. Generally, one or more ATM devices 11 and autophones 12 are installed at ATM corners 1 at multiple locations.

[0016] The ATM device 11 is an automated teller machine that processes deposits and withdrawals in accounts opened by ATM users at a bank, and entries in passbooks, etc. The ATM device 11 is connected to an accounting system server 21 and an approver link server 22 installed in a bank operations center 2 (described later) via an inter-site communication line 4 such as an optical line or a wireless line so as to be able to communicate at all times.

[0017] The ATM device 11 in the first embodiment includes an ATM processing unit 111, an ATM communication unit 112, an ATM input unit 113, an ATM display unit 114, a cash card unit 115, and a cash processing unit 116. The ATM processing unit 111 performs processing operations such as transfers, deposits and withdrawals, and bankbook entries based on various input data. Herein, the ATM processing unit 111 includes a timer (not shown) and is capable of measuring time. Hereinafter, processing related to operations performed by the ATM device 11 may be described as being performed by the ATM device 11. The ATM communication unit 112 serves as an interface that converts signals when communicating signals between the ATM processing unit 111 (ATM device 11) and the accounting system server 21 and the approver linkage server 22. Hereinafter, unless otherwise specified, communication between the ATM processing unit 111 (ATM device 11) and the accounting system server 21 and the approver linkage server 22 is assumed to be performed via the ATM communication unit 112.

[0018] The ATM input unit 113 has an input device such as a touch panel and a numeric keypad, and sends input signals including input data such as operation instructions and characters entered by the ATM user to the ATM processing unit 111. The ATM display unit 114 has a display device such as a monitor, and displays the contents processed by the ATM processing unit 111 on the screen of the display device. The cash card unit 115 has a cash card insertion slot and reads magnetic data stored on a cash card. The cash processing unit 116 has a cash deposit / withdrawal slot and performs processes related to cash deposits and withdrawals, such as counting cash.

[0019] The autophone 12 is a telephone with a handset installed in association with the ATM device 11 so that, for example, an ATM user can make a voice call via the public communication network 5. The autophone 12 is basically set to automatically call the telephone number of the bank operator's telephone 7 when the ATM user picks up the handset, and is installed so that the bank operator can provide instructions on how to operate the bank operator's telephone. However, the autophone 12 has its own telephone number that can be used for voice calls and can receive outside calls. Therefore, the autophone 12 in the first embodiment can make a voice call with the approver terminal device 31 via the telephone exchange 23, as will be described later. Here, as shown in FIG. 1, the autophone 12 is installed in the ATM device 11, but this is not limiting.

[0020] Furthermore, equipment related to banking operations is installed in the banking operations center 2. In the ATM system according to the first embodiment, the accounting system server 21, the approver linkage server 22, and the telephone exchange 23 are installed in the banking operations center 2.

[0021] The accounting system server 21 is an accounting system host computer that performs deposit management, account management, etc. The accounting system server 21 has an accounting system memory unit 211. The accounting system memory unit 211 stores and saves account-related data such as account numbers (including financial institution codes and branch codes when no special distinction is made here; the same applies hereinafter), names, and deposit amounts in a database. In the first embodiment, the accounting system server 21 performs transfer processing based on data included in signals sent from the ATM device 11.

[0022] Approver cooperation server 22 is a computer that stores data registered regarding approvers as approver cooperation server registration information and performs processing to link ATM users and approvers when ATM users perform transactions such as transfers. Approver cooperation server 22 has a server storage unit 221, a search unit 222, a message generation unit 223, and a transmission unit 224.

[0023] Server storage unit 221 stores the approver cooperation server registration information described above in approver cooperation server registration information storage unit 221A. Server storage unit 221 also stores ATM information, which combines data related to the ATM number and installation location (branch name or address) of ATM device 11 and the telephone number of AutoPhone 12, in ATM information storage unit 221B.

[0024] The search unit 222 performs processing related to determining whether the ATM user is registered as an approver and searching the approver collaboration server registration information stored in the approver collaboration server registration information storage unit 221A based on the account number data sent from the ATM device 11. The search unit 222 and the approver collaboration server registration information storage unit 221A form an approver registration database. The message generation unit 223 generates an approval request message to send to the approver terminal device 31, requesting approval from the approver. Based on the data stored in the approver collaboration server registration information storage unit 221A, the message generation unit 223 generates an approval request message that does not include either or both of the transfer destination name and transfer amount. The search unit 222 and the message generation unit 223 each have communication units for communicating via the inter-site communication line 4 and the Internet 6. The calling unit 224 performs calling processing to have the telephone exchange 23, described below, call the autophone 12 and the approver terminal device 31 corresponding to the ATM device 11 operated by the ATM user. Here, the processes performed by the search unit 222, the message generation unit 223, and the transmission unit 224 are performed by, for example, a computer executing a program for a transaction method stored in the server storage unit 221.

[0025] The telephone exchange (PBX) 23 converts signals and performs other functions to enable voice calls via the public communication network 5. In this example, the telephone exchange 23 has two or more external lines and has a forwarding function to relay calls to the autophone 12 installed in the ATM corner 1 and the approver terminal device 31, as well as voice calls after the lines are connected.

[0026] The approver terminal device 31 is a terminal device owned by an approver registered by an ATM user in the first embodiment, and is, for example, a device such as a smartphone or a tablet. The approver terminal device 31 has a terminal control processing unit 311, a terminal communication unit 312, a terminal input unit 313, a terminal display unit 314, a terminal storage unit 315, a microphone unit 316, and a speaker unit 317. Here, the approver terminal device 31 is described as being divided into various units based on their functions, but it may also be configured as an integrated unit on a board.

[0027] The terminal communication unit 312 serves as an interface that converts signals when communicating between the approver terminal device 31 (terminal control processing unit 311) and external devices. The signals converted by the terminal communication unit 312 include voice signals transmitted via the public communication network 5 and signals containing data transmitted via the Internet 6. The terminal input unit 313 is a device, such as a touch panel, that sends input signals to the terminal control processing unit 311, including input data such as operation instructions and characters input by the approver. The terminal display unit 314 has a display device such as a monitor and displays the contents processed by the terminal control processing unit 311 on the screen of the display device. The microphone unit 316 has a sound collection device such as a microphone that converts the voice emitted by the approver when making a voice call into a signal. The speaker unit 317 emits the voice of the ATM user transmitted via the public communication network 5 when the approver makes a voice call.

[0028] The terminal control processing unit 311 processes input data. In particular, the terminal control processing unit 311 executes the stored approval processing application 315A. The terminal control processing unit 311 is assumed to be configured, for example, by a computer having a control arithmetic processing unit such as a CPU. The terminal control processing unit 311 executes processing based on the program stored in the terminal storage unit 315, thereby realizing functions.

[0029] The terminal storage unit 315 stores data used by the terminal control processing unit 311 when performing processing. In particular, the terminal storage unit 315 stores the approval processing application 315A executed by the terminal control processing unit 311 as program data. The approval processing application 315A is, for example, application software provided by a bank so that an approver can approve or deny approval of a transfer made by an ATM user. The terminal storage unit 315 has a volatile storage device (not shown) such as random access memory (RAM) that can temporarily store data, and a non-volatile auxiliary storage device (not shown) such as flash memory that can store data for the long term.

[0030] 2 is a diagram showing an example of approver collaboration server registration information stored in server storage unit 221 according to Embodiment 1. The approver collaboration server registration information is data that an ATM user applies to a bank for use with the approval of an approver, and that the bank stores and registers in server storage unit 221 of approver collaboration server 22. Here, we will explain the data items registered as approver collaboration server registration information based on FIG. 2.

[0031] The account number is the account number where the approver is registered. The approver voice call phone number is the phone number of the approver's terminal device 31. The transfer approval app approver ID information is an email address at which the approver can receive emails sent from the bank. As will be described later, the transfer approval app approver ID information is used as an approval app login ID for personal authentication when activating the approval processing application 315A possessed by the approver terminal device 31. The transfer approval app approver ID password information is a password for personal authentication when activating the approval processing application 315A possessed by the approver terminal device 31.

[0032] The transfer destination information provision flag is a customer information provision flag that indicates whether information (data) such as the name of the transfer destination (customer) is "provision possible" or "provision impossible" when an approval request is made to the approver. The transfer amount information provision flag is a transaction amount information provision flag that indicates whether information (data) about the transfer amount (transaction amount) is "provision possible" or "provision impossible" when an approval request is made to the approver. Here, both the transfer destination information provision flag and the transfer amount information provision flag are included in the approver linkage server registration information, but this is not limited to this, and only one of them may be included. The approver absence transfer permission flag is a transaction absence permission flag that indicates whether the ATM device 11 will continue the transfer (transaction) operation ("transfer permitted") or stop it ("transfer not permitted") if the approver does not notify the approver of the transfer approval or disapproval within a set time (e.g., three minutes).

[0033] When an ATM user starts using the ATM system described in embodiment 1, the ATM user applies for use to the bank that holds the account number, attaching all information registered as the approver link server registration information except for the transfer approval app approver ID and password.

[0034] When accepting an application for use, the bank verifies the validity of each piece of data to be registered. If the bank verifies the validity, it stores the data in server storage unit 221 of approver collaboration server 22 and registers it as approver collaboration server registration information. At this time, approver collaboration server 22 generates an initial password to be entered by the approver for authentication purposes when approver terminal device 31 launches approval processing app 315A for the first time, and registers this initial password as transfer approval app approver ID password information in the approver collaboration server registration information.

[0035] The approver linkage server 22 sends application information such as the application store required to install the approval processing application 315A in the approver terminal device 31, and the generated initial password, to the email address registered as the transfer approval application approver ID information.

[0036] The approver performs an operation to install the approval processing application 315A in the approver terminal device 31. Then, the approver executes the approval processing application 315A on the approver terminal device 31. The approval processing application 315A prompts the approver to enter the approval application login ID (email address), the initial password, and the password to be entered by the approver the next time the approval processing application 315A is started.

[0037] When the approver inputs a password or other information, the approver terminal device 31 stores the input information in a data area specific to the application. The approver terminal device 31 also transmits a signal including the password or other data to the approver linking server 22 via the Internet 6.

[0038] When the approval application login ID (email address) and initial password from the approver terminal device 31 match the approver association server registration information stored in the server storage unit 221, the approver association server 22 overwrites the approver ID password information with the password data and registers it.

[0039] As will be described later, the approver cooperation server 22 sends a push notification and a signal to the approver terminal device 31 when an ATM user who is registered as an approver performs a transfer operation at the ATM device 11. After the initial startup, the approver terminal device 31 (terminal control processing unit 311) waits for a push notification during operation even when the approval processing app 315A is not running. Therefore, when the approver terminal device 31 receives a signal related to the push notification from the approver cooperation server 22, it starts the approval processing app 315A and starts processing related to approval.

[0040] Fig. 3 is a diagram illustrating a transfer process in the ATM system according to the first embodiment. Here, the processing operations performed by each device in the ATM system when an ATM user performs a transfer operation will be described with reference to Fig. 3 and other figures. Here, the ATM user is assumed to be a user for whom an approver has been registered in advance, and is a legitimate user who transfers money to another account using the cash card of his or her own account.

[0041] When an ATM user inserts his / her cash card with an account number recorded in the ATM device 11 in the ATM corner 1, the ATM user starts the transfer operation by following the instructions on the screen displayed on the ATM display unit 114. The ATM user inputs the transfer destination financial institution code, transfer destination account number, and transfer amount as data via the ATM input unit 113 of the ATM device 11 (step S1).

[0042] The ATM device 11 also reads the ATM user's account number and other information recorded on the cash card using the cash card unit 115. The ATM device 11 performs processing in accordance with a pre-set JBA standard communication protocol using the ATM processing unit 111. The ATM device 11 communicates with the accounting system server 21 using the ATM communication unit 112, and sends to the accounting system server 21 a transaction signal containing data such as the transfer destination financial institution code, the ATM user and transfer destination account number, and the transfer amount (step S2).

[0043] Based on the data sent from the ATM device 11, the accounting system server 21 performs processing such as checking the transfer destination account number (step S3), and if there is a problem, such as a mismatch in the data content related to the transfer destination, it sends a notification signal to the ATM device 11 notifying that the transaction will be canceled.On the other hand, if there is no problem with the data, the accounting system server 21 sends a notification signal to the ATM device 11 notifying that the transfer is possible (step S4).At this time, the accounting system server 21 sends to the ATM device 11 the transfer destination financial institution code and the transfer destination name that matches the transfer destination account number, including the transfer destination name, to allow the ATM user to confirm that the transfer destination is correct.

[0044] The ATM device 11 communicates with the approver linkage server 22 via the ATM communication unit 112 and sends a confirmation signal containing the ATM number of the ATM device 11, the ATM user's account number, the transfer destination financial institution code, the transfer destination name, the transfer destination account number, and the transfer amount as data (step S5).

[0045] The approver cooperation server 22 uses the search unit 222 to search the approver cooperation server registration information storage unit 221A of the server storage unit 221 and confirms whether the ATM user's account number is registered (step S6). If the approver cooperation server 22 confirms that the ATM user's account number is not registered (unregistered) in the approver cooperation server registration information storage unit 221A, it sends a confirmation result signal to the ATM device 11 indicating that the transaction does not require approver cooperation (step S7). The approver cooperation server 22 then terminates its own processing.

[0046] When the ATM device 11 receives a confirmation result signal indicating that cooperation is not required, the ATM processing unit 111 continues the same processing operation as in a normal transfer. The ATM device 11 communicates with the accounting system server 21 in accordance with the JBA standard communication protocol and sends a request signal requesting the transfer process (step S8). The accounting system server 21 performs the transfer process (step S9), and when the transfer process is completed, sends an end signal to the ATM device 11 indicating that the process is completed (step S10). The ATM device 11 displays on the ATM display unit 114 a message indicating that the transfer process has been completed (step S11).

[0047] On the other hand, if the approver collaboration server 22 confirms that the ATM user's account number is registered in the approver collaboration server registration information storage unit 221A, it reads all of the approver collaboration server registration information associated with the corresponding account number from the server storage unit 221. The approver collaboration server 22 then sends to the ATM 11 a confirmation result signal indicating that collaboration is required, indicating that the transaction requires approver collaboration, and including flag information indicating whether or not the approver is available for transfer (step S7). Upon receiving the signal indicating that collaboration is required, the ATM 11 displays a message on the screen of the ATM display unit 114 indicating that a transfer approval request to the approver will be initiated and that the user should wait for the result, and enters a standby state (step S12). At this time, the ATM 11 starts timing using the ATM processing unit 111 (step S13).

[0048] FIG. 4 shows the signal flow between approver collaboration server 22 and approver terminal device 31 when the ATM user's account number is registered. Here, we will mainly explain the transaction method of approver collaboration server 22 performed when transferring funds. When approver collaboration server 22 confirms in step S6 of FIG. 3 that the ATM user's account number is registered, message generation unit 223 generates an approval request message based on the approver collaboration server registration information (step S21). The approval request message includes, for example, the ATM location, the transfer destination name, and the transfer amount, which are useful for the approver to determine whether to approve the transfer. However, if the transfer destination information provision availability flag in the approver collaboration server registration information stored in server storage unit 221 indicates "unavailable," approver collaboration server 22 generates a message that does not include the transfer destination name in the approval request message. Similarly, if the transfer amount information provision availability flag in the approver collaboration server registration information indicates "unavailable," approver collaboration server 22 generates a message that does not include the transfer amount in the approval request message. Then, in the case of a transaction that requires approver cooperation, the approver cooperation server 22 sends a notification signal related to a push notification to the approver terminal device 31 (step S22).

[0049] When the approver terminal device 31 receives the push notification signal, the terminal control processing unit 311 executes the approval processing application 315A to start the approval processing (step S23). If the approval processing application 315A is not running, it is started and processing begins. The approver terminal device 31 performs authentication communication by sending an authentication signal including the "approval application login ID (email address)" and "password" stored in the application-specific data area to the approver linkage server 22 via the device communication unit 312 (step S24). The approver terminal device 31 also sends a message request signal via the device communication unit 312 requesting transmission of a transfer approval request message to be presented to the approver (step S25). Here, the "approval application login ID (email address)" and "password" may be input by the approver via the terminal input unit 313.

[0050] When the approver cooperation server 22 receives a request for a transfer approval request message from the approver terminal device 31, the approver cooperation server 22 sends a message signal including the transfer approval request message generated by the message generation unit 223 to the approver terminal device 31 (step S26).

[0051] The approver terminal device 31 displays a transfer approval request message on the screen using the terminal display unit 314 and prompts the approver to make a decision regarding approval (step S27). The approver checks the contents of the transfer approval request message and selects a response from the three options displayed on the screen: “Do not allow the transfer,” “Allow the transfer,” and “Make a decision after a voice call with the person in question” via the terminal input unit 313 (step S28). The approver terminal device 31 then sends a selection result signal including the selection result to the approver collaboration server 22 via the terminal communication unit 312 (step S29). Here, if the approver terminal device 31 determines that the approver has selected “Make a decision after a voice call with the person in question,” it enters a standby state while still displaying the two options, “Do not allow the transfer” and “Allow the transfer.” The processing operations when a voice call is made will be described later.

[0052] The approver cooperation server 22 sends the selection result signal sent from the approver terminal device 31 to the ATM device 11 (step S30). If the selection included in the selection result signal is "Allow the transfer," the ATM device 11 causes the ATM display unit 114 to display on the screen an approval result message indicating that the approver's approval of the transfer has been completed (step S31). Then, the ATM device 11 resumes the same processing operations as in the normal transfer process, and, as in steps S8 to S10 in Figure 3, communicates with the accounting system server 21 in accordance with the JBA standard communication protocol to request the transfer process and complete the transfer.

[0053] On the other hand, if the selection included in the selection result signal is "Do not allow transfer," the ATM device 11 causes the ATM display unit 114 to display on the screen an approval result message indicating that the approver has not approved the transfer (step S31), and cancels the transfer transaction.

[0054] Fig. 5 is a diagram showing the signal flow when a voice call is made between the approver terminal device 31 and the autophone 12 according to the first embodiment. In step S29 of Fig. 4, when the content of the selection result signal is "decide after a voice call with the person in question", the ATM device 11 causes the ATM display unit 114 to display on the screen a result message indicating that the approver wishes to make a voice call and indicating an instruction to pick up the receiver by a ringtone (step S41).

[0055] The approver collaboration server 22 sends a number signal of the voice call telephone number of the autophone 12 corresponding to the ATM device 11 in the ATM information storage unit 221B and the approver voice call telephone number in the approver collaboration server registration information storage unit 221A to the telephone exchange 23 (step S42).

[0056] The telephone exchange 23 performs an outgoing call process to send a call signal to both telephone numbers based on the voice call telephone number and the approver voice call telephone number notified by the approver link server 22 (step S43). When the ATM user hears a ringtone on the autophone 12 corresponding to the ATM device 11, the ATM user picks up the receiver to answer (step S44). Similarly, when the approver receives an incoming call on the approver terminal device 31, the approver answers by, for example, pressing the call button (step S45). When an incoming call is received on one telephone number, the telephone exchange 23 plays an automated voice message urging the user to wait for a while until an incoming call is received on the other telephone number. Then, when the voice call is established on both telephone lines, the telephone exchange 23 performs a relay process to relay the voice call between the ATM user and the approver until the call is terminated (step S46).

[0057] If one or both of the autophone 12 and the approver terminal device 31 are busy with a third party, the telephone exchange 23 repeatedly redials the call at regular intervals. If the approver terminal device 31 is busy at this time, the terminal display unit 314 displays a message on the screen, for example, "If busy, please end the call promptly." If a line connection is not established and the call is not completed within a predetermined time (e.g., one minute) from the initial call, the telephone exchange 23 sends a signal to the approver cooperation server 22 indicating that the voice call could not be completed. The approver cooperation server 22 then sends a signal to the ATM device 11 that includes the approver absence transfer permission / prohibition flag information. As described below, the ATM device 11 performs processing based on the approver absence transfer permission / prohibition flag information using the ATM processing unit 111.

[0058] After ending the voice call, the approver selects a response from the two options displayed on the screen, "Do not allow the transfer" or "Allow the transfer," via the input unit (step S47). The approver terminal device 31 sends a selection result signal including the selection result to the approver cooperation server 22 via the terminal communication unit 312 (step S48). The approver terminal device 31 then ends the approval process. The approver cooperation server 22 also sends the selection result signal sent from the approver terminal device 31 to the ATM device 11, ending the process (step S49).

[0059] As described above, when the selection included in the selection result signal is "allow the transfer," the ATM device 11 causes the ATM display unit 114 to display on the screen an approval result message indicating that the approver has approved the transfer. Then, similar to steps S8 to S10 in Fig. 3, the ATM device 11 communicates with the accounting system server 21 to request a transfer process and complete the transfer. On the other hand, when the selection included in the selection result signal is "do not allow the transfer," the ATM device 11 causes the ATM display unit 114 to display on the screen an approval result message indicating that the approver has not approved the transfer (step S50), and cancels the transfer transaction.

[0060] As described above, the ATM device 11 measures the time elapsed since the ATM device 11 received a signal indicating that the transaction requires approver cooperation and entered a standby state. If the ATM device 11 does not receive a first selection result signal from the approver cooperation server 22 within a preset time period (for example, three minutes), the ATM device 11 determines whether or not to allow the transfer based on the approver absence transfer permission flag information.

[0061] If the approver absence transfer permission / non-permission flag information is "transfer permitted," the ATM device 11 displays a message on the screen to the effect that the transaction will continue because there was no contact from the approver by the deadline.The ATM device 11 then resumes the same processing operations as for normal transfers, and communicates with the accounting system server 21 in accordance with the JBA standard communication protocol to request the transfer process and complete the transfer.On the other hand, if the approver absence transfer permission / non-permission flag information is "transfer not permitted," the ATM device 11 displays a message on the screen to the effect that the transaction will be canceled because there was no contact from the approver by the deadline, and then cancels the transfer transaction.

[0062] As described above, in the ATM system according to the first embodiment, when an approver is registered for an ATM user, the approver link server 22 sends a push notification to the approver terminal device 31. The approval processing application 315A of the approver terminal device 31 is started in response to the push notification, causes a transfer approval request message to be displayed on the terminal display unit 314, and prompts the approver to approve or deny the request via the terminal input unit 313. Therefore, when an ATM user performs a transfer operation from the ATM device 11, information can be quickly provided to the approver in a remote location, enabling the approver to quickly become aware of the possibility of a fraudster attempting to induce an unauthorized transfer.

[0063] At this time, the approver linkage server registration information storage unit 221A of the server storage unit 221 stores the transfer destination information provision flag and the transfer amount information provision flag as approver linkage server registration information. Therefore, the transfer approval request message generated by the message generation unit 223 of the approver linkage server 22 can be sent to the approver terminal device 31 owned by the approver without including at least one of the transfer destination name and the transfer amount. Therefore, even if an ATM user making a transfer does not want to disclose the specific use and amount of their money to the approver, they are more likely to accept the registration of an approver who will approve the transaction. This allows both the ATM user and the approver to agree to the transfer transaction, thereby improving security. The ATM system in the first embodiment includes the approver linkage server 22, which performs approval-related processing. Therefore, processing between the accounting system server 21, which serves as the host computer, and the ATM device 11 can be performed in the same manner as conventional processing. Therefore, a system can be built without having to modify the accounting system server 21.

[0064] The ATM system of the first embodiment includes an autophone 12, an approver link server 22, and a telephone exchange 23, and enables voice communication between the approver terminal device 31 and the autophone 12 corresponding to the ATM device 11. Therefore, even if a transfer approval request message does not include at least one of the transfer destination name and the transfer amount, the approver can directly obtain information from the ATM user via a telephone call to determine whether the purpose of the transfer is a solicitation from a fraudster. The approver can then accurately determine whether to approve the transaction while respecting the ATM user's privacy. In the ATM system of the first embodiment, once the approver approves the transaction, a telephone call between the approver and the ATM user is not necessarily required. Because a telephone call is not required, the ATM user's psychological resistance to registration can be reduced. Furthermore, for example, by predetermining rules between the ATM user and the approver, the number of telephone calls required for transactions can be reduced.

[0065] When the approver wishes to have a voice call with the ATM user, the call for the approver is made to arrive at the autophone 12 installed together with the ATM device 11. Therefore, even if the ATM user is talking to the fraudster on a mobile phone, the call for the approver can be received, and the approver can interrupt the conversation with the fraudster and make a voice call with the ATM user before the transfer is completed.

[0066] Embodiment 2 In the first embodiment described above, approval for transfers from an account was described, but the present invention is not limited to this. For example, the present invention can also be applied to approval for transactions, particularly transactions involving payments from an account, such as withdrawing (paying) cash from an account. For example, a fraudster may obtain a user's cash card, obtain their PIN information, and then attempt to withdraw a large amount of cash. In such cases, if a procedure requiring the approval of an approver is implemented, it is possible to prevent inadvertent cash withdrawals. In this case, the approver cooperation server 22 can create an approval request message that does not include the transaction amount, based on the transaction amount information provision availability flag.

[0067] Furthermore, in the above-described first embodiment, it is assumed that one approver is registered in the approver database for each user (account), but this is not limited to this. For example, multiple approvers may be registered for each user (account). In this case, approver link server 22 may transmit a notification signal of transfer approval or rejection to all registered approvers, and perform processing based on the selection result from the approver (approver terminal device 31) who responded first.

[0068] Furthermore, in the first embodiment described above, it has been explained that the approver who is a family member decides whether to approve or not, but this is not limited to this. For example, approval may be made by a bank employee or the like who has been entrusted with work by the approver.

[0069] In the first embodiment described above, the ATM device 11 keeps time, and if the approver does not notify the ATM device 11 of the approval or disapproval of the transfer within a set time, the ATM device 11 performs processing based on the approver absence transfer approval or disapproval flag information. However, this is not limited to this. For example, the approver linkage server 22 may keep time, and if the approver does not notify the ATM device 11 of the approval or disapproval of the transfer within a set time, the ATM device 11 may be notified of the continuation or cancellation of the transfer.

[0070] In the first embodiment described above, the approver terminal device 31 is realized by installing the approval processing application 315A on a general-purpose terminal device such as a smartphone, but this is not limiting. For example, the approver terminal device 31 may be configured as a dedicated terminal device. [Explanation of symbols]

[0071] 1 ATM corner 11 ATM equipment 111 ATM processing unit 112 ATM Communications Department 113 ATM input section 114 ATM display section 115 Cash Card Section 116 Cash Processing Department 12 Autophone 2. Banking Center 21 Accounting Server 211 Accounting System Storage Unit 22 Approver Collaboration Server 221 Server storage unit 221A Approver cooperation server registration information storage unit 221B ATM information storage section 222 Search Department 223 Message Creation Unit 224 Transmission Department 23 Telephone exchange 31 Approver terminal device 311 Terminal control processing unit 312 Terminal communication unit 313 Terminal Input Unit 314 Terminal display unit 315 Terminal memory unit 315A Approval Processing App 316 Microphone Section 317 Speaker section 4. Communication lines between bases 5 Public communication network 6. Internet 7 telephone

Claims

1. an automated teller machine that processes transactions related to payments from a user's account; an approver cooperation server that, when the user conducts the transaction at the automated transaction device, transmits an approval request message to an approver who approves or denies approval of the user's transaction, requesting approval of the transaction; the approver cooperation server has an approver cooperation server registration information storage unit that stores data related to the approver, the approver cooperation server registration information storage unit stores at least one of a customer information provision flag indicating whether information related to the customer of the transaction should be included in the approval request message and a transaction amount information provision flag indicating whether information on the transaction amount should be included in the approval request message; The approver cooperation server generates the approval request message based on the customer information provision flag and the transaction amount information provision flag, and sends the message to the approver terminal device owned by the approver.

2. an autophone installed in correspondence with the automated teller machine and capable of making voice calls via a public communication line network; a telephone exchange that connects the approver terminal device to the autophone and relays the voice call; Equipped with 2. The ATM system according to claim 1, wherein the approver cooperation server causes the telephone exchange to relay the line connection and the voice call based on an instruction sent from the approver terminal device.

3. the approver cooperation server sends a selection result signal including the approval or disapproval of the approval sent from the approver terminal device to the automated transaction device; 3. The ATM system according to claim 1, wherein the automated teller machine continues or cancels the transaction based on the selection result signal.

4. data relating to a plurality of approvers for the user is stored in the approver cooperation server registration information storage unit; the approver cooperation server sends the approval request message to the approver terminal device owned by each of the approvers, and sends the first selection result signal of the selection result signals sent from the plurality of approver terminal devices, each including an approval or denial of the approval, to the automated transaction device; 3. The ATM system according to claim 1, wherein the automated teller machine continues or cancels the transaction based on the selection result signal sent.

5. A transaction method for conducting a transaction related to payment from a user's account from an automated transaction device, generating an approval request message based on at least one of a customer information provision flag indicating whether to include a customer with which the transaction is to be performed and a transaction amount information provision flag indicating whether to include a transaction amount in an approval request message to be sent to the approver when requesting approval, the approval request message being stored in an approver cooperation server registration information storage unit that stores data related to the approver who approves or denies approval of the user's transaction; sending the generated approval request message to an approver terminal device owned by the approver; a step of the automated transaction machine continuing or canceling the transaction based on a selection result signal including whether or not the approval is accepted, sent from the approver terminal device; A trading method having the following.

6. A transaction method for conducting a transaction related to payment from a user's account from an automated transaction device, generating an approval request message based on at least one of a customer information provision flag indicating whether to include a customer with which the transaction is to be performed and a transaction amount information provision flag indicating whether to include a transaction amount in an approval request message to be sent to the approver when requesting approval, the approval request message being stored in an approver cooperation server registration information storage unit that stores data related to the approver who approves or denies approval of the user's transaction; sending the generated approval request message to an approver terminal device owned by the approver; a step of sending a selection result signal including the approval or denial of the approval sent from the approver terminal device to the automated transaction machine to continue or cancel the transaction; A trading method program that causes a computer to execute the above.

Images