Agent authentication system and agent authentication method

Abstract

To provide an agent authentication system capable of safely achieving a transaction in which an agent withdraws cash while reducing the burden on an agent and a bank.SOLUTION: In an agent authentication system 100, a case management system 110 generates and registers a piece of agent transaction information based on input from a person in charge 10 for each agent transaction case and outputs a piece of matter identification information of the agent transaction information to a ledger 161. An automatic cash transaction machine 120 verifies the identity of the operator who presents the ledger 161 and the identification document, and when the identity verification is successful, transmits the case identification information acquired from the ledger 161 and name information acquired from an identity verification documents to the case management system 110. The case management system 110 determines that the operator is the agent 20 and the authentication has been successful, when there is the agent transaction information that has the combination of the case identification information and the name information and notifies the permission for the transaction based on the transaction details of the case to the automatic cash transaction machine 120. The automatic cash transaction machine 120 executes the transaction according to the notify.SELECTED DRAWING: Figure 1

Description

[[Technical Field]]

[0001] The present invention relates to an agent authentication system and an agent authentication method, and is suitably applied to an agent authentication system and an agent authentication method that authenticate an agent when the agent withdraws bank deposits using an automated teller machine. [[Background Art]]

[0002] Currently, with the spread of cashless payments and Internet Banking (IB), opportunities for handling cash have decreased year by year, while the demand for cash withdrawal remains strong.

[0003] For example, for a bank account held by a corporation, when using the Internet Banking (so-called Electronic Banking, EB: Electronic Banking) used by the corporation, balance confirmation, transfer and other operations can be performed online; however, when cash is needed, a person needs to go to the bank counter to withdraw the cash. In general, cash withdrawal processing for a corporation is performed not by the person in charge (manager) responsible for the withdrawal, but by an agent (e.g., a clerk). When an agent performs cash withdrawal processing, the agent (e.g., the clerk) prepares identity verification documents such as a driver's license, a seal (corporate seal), a corporate passbook and the like, goes to the counter, and after the bank clerk at the counter performs transaction confirmation and identity verification, can withdraw cash from the corporate bank account.

[0004] Here, for example, Patent Document 1 discloses a slip generation system aimed at efficiently performing identity verification. The slip generation system described in Patent Document 1 includes: an electronic accounting machine that accepts input from a customer; an acquisition unit that acquires at least part of information related to customer identity verification; and a search unit that searches for information related to the customer's social risk against a database containing information related to social risk based on the information acquired by the acquisition unit, wherein at least part of the input acceptance processing by the electronic accounting machine and at least part of the search processing by the search unit are executed in parallel. [Prior art documents] [Patent Documents]

[0005] [Patent Document 1] Japanese Patent Publication No. 2020-061078 [Overview of the Initiative] [Problems that the invention aims to solve]

[0006] However, the conventional method of cash withdrawal by an agent described above had the problem of being burdensome for both the corporation (agent) and the bank teller, as the agent had to bring valuables such as the corporation's seal and passbook to the bank counter, and the bank teller had to perform transaction verification and identity verification. In addition, cash withdrawals using the counter had the problem of not being easily linked with EB (Electronic Banking). Another method of cash withdrawal is to have the agent hold the corporate card and withdraw cash from an automated teller machine (ATM), but this is not common because it involves disclosing the PIN of the corporate card to the agent, which poses a security management risk. Furthermore, these problems could not be resolved by the slip generation system disclosed in Patent Document 1.

[0007] This invention was made in consideration of the above points, and aims to propose an agent authentication system and agent authentication method that can securely realize transactions in which an agent withdraws cash while reducing the burden on the agent and the bank. [Means for solving the problem]

[0008] To solve the above problem, the present invention provides an agent authentication system for agent transactions conducted by an agent designated by a person in charge, comprising: a case management system for managing agent transaction information consisting of predetermined items of information relating to the agent transaction; and an automated cash transaction device having a function for verifying the identity of the operator, wherein the case management system generates and registers agent transaction information for each agent transaction case based on input from the person in charge, outputs case identification information of the registered agent transaction information to a form, and the automated cash transaction device verifies the identity of the operator who presents the form and identity verification documents, If the identity verification is successful, the case identification information obtained from the form and the name information obtained from the identity verification documents are transmitted to the case management system. The case management system searches for the agent transaction information based on the combination of the case identification information and the name information received from the automated cash transaction machine. If a case with that combination exists in the agent transaction information, the system determines that the operator is the agent and that agent authentication is successful. The system notifies the automated cash transaction machine of permission to execute the transaction based on the transaction details of the case registered in the agent transaction information, and the automated cash transaction machine executes the transaction in accordance with the notification from the case management system. In the event that the agent loses the aforementioned document, the case management system is capable of registering the identification information of the store conducting the agent transaction and the identification information of the agent in the agent transaction information at a predetermined time. When the loss of the aforementioned document is notified to the case management system by the person in charge, the ATM installed in the store matching the store's identification information verifies the identity of the operator who presents identification documents and requests the operator to input the agent's identification information. If the identity verification is successful, the ATM transmits the agent's identification information entered by the operator and the name information obtained from the identification documents to the case management system. The case management system searches the agent transaction information based on the combination of the agent's identification information and name information received from the ATM. If a case with that combination exists in the agent transaction information, the system determines that the operator is the agent and that agent authentication has been successful. The system notifies the ATM of permission to proceed with the transaction based on the transaction details of the case registered in the agent transaction information, and the ATM executes the transaction in accordance with the notification from the case management system. A proxy authentication system characterized by the above is provided.

[0009] Furthermore, in order to solve the above problems, the present invention provides an agent authentication method in which an agent authentication system performs agent authentication in an agent transaction by an agent designated by a person in charge, wherein the agent authentication system comprises a case management system that manages agent transaction information consisting of information of predetermined items relating to the agent transaction, and an automated cash transaction device that has a function to verify the identity of the operator, wherein the case management system performs a registration step in which it generates and registers agent transaction information for each agent transaction case based on input from the person in charge, the case management system performs a document output step in which it outputs case identification information of the agent transaction information registered in the registration step to a document, and the automated cash transaction device verifies the identity of the operator who presents the document and identity verification documents The system includes: an identity verification step in which the system performs verification and, if the identity verification is successful, transmits the case identification information obtained from the form and the name information obtained from the identity verification document to the case management system; an agent authentication step in which the case management system searches for the agent transaction information based on the combination of the case identification information and the name information received from the ATM in the identity verification step, and if a case with that combination exists in the agent transaction information, determines that the operator is the agent and that agent authentication is successful, and notifies the ATM of permission to execute the transaction based on the transaction details of the case registered in the agent transaction information; and a transaction execution step in which the ATM executes the transaction in accordance with the notification from the agent authentication step. In the event that the agent loses the aforementioned document, the case management system may register the identification information of the store conducting the agent transaction and the identification information of the agent in the agent transaction information at a predetermined time. When the loss of the aforementioned document is notified to the case management system by the person in charge, in the identity verification step, the ATM installed at the store matching the store's identification information will verify the identity of the operator who presents the identification documents and request the operator to input the agent's identification information. If the identity verification is successful, the ATM will register the identification information of the agent entered by the operator and the aforementioned The name information obtained from the identity verification document is transmitted to the case management system; in the agent authentication step, the case management system searches for agent transaction information based on the combination of the agent's identification information and the name information received from the automated cash exchange machine; if a case with that combination exists in the agent transaction information, the system determines that the operator is the agent and that agent authentication is successful; the system notifies the automated cash exchange machine of permission to execute the transaction based on the transaction details of the case registered in the agent transaction information; and in the transaction execution step, the automated cash exchange machine executes the transaction in accordance with the notification from the case management system. A proxy authentication method characterized by the above is provided. [Effects of the Invention]

[0010] According to the present invention, transactions in which an agent withdraws cash can be safely realized while reducing the burden on both the agent and the bank. [Brief explanation of the drawing]

[0011] [Figure 1] This figure shows an example configuration of an agent authentication system 100 according to one embodiment of the present invention. [Figure 2]This diagram shows an example configuration of an automated cash transaction machine (ATM) 120 with an identity verification function. [Figure 3] This flowchart shows an example of a cash withdrawal transaction procedure using the agent authentication system 100. [Figure 4] This figure shows an example of agent transaction information registered in the case management system 110. [Figure 5] This figure shows an example of agent transaction information registered in the case management system 110 in the fourth modified example. [Modes for carrying out the invention]

[0012] Embodiments of the present invention will be described in detail below with reference to the drawings.

[0013] In the following explanation, various types of information may be described using terms such as "table," "list," and "queue," but these types of information may also be represented using other data structures. To indicate independence from data structure, "XX table," "XX list," etc., may be referred to as "XX information." When describing the content of each type of information, terms such as "identification information," "identifier," "name," "ID," and "number" will be used, but these terms are interchangeable.

[0014] Furthermore, in the following explanations, when describing similar elements without distinction, a reference code or a common number in the reference code will be used. When describing similar elements with distinction, the reference code of that element will be used, or the ID assigned to that element will be used instead of the reference code.

[0015] Furthermore, while the following description may include explanations of processes performed by executing a program, the processor may be the primary entity performing the processing, as a program is executed by at least one processor (e.g., a CPU) and performs defined processes using appropriate memory resources (e.g., memory) and / or interface devices (e.g., communication ports). Similarly, the primary entity performing the processing by executing a program may be a controller, device, system, computer, node, storage system, storage device, server, management computer, client, or host having a processor. The primary entity performing the processing by executing a program (e.g., a processor) may include hardware circuits that perform some or all of the processing. For example, the primary entity performing the processing by executing a program may include hardware circuits that perform encryption and decryption, or compression and decompression. The processor operates as a functional unit that realizes predetermined functions by operating according to the program. Devices and systems including a processor are devices and systems including these functional units.

[0016] A program may be installed from its program source into a device such as a computer. The program source may be, for example, a program distribution server or a computer-readable storage medium. If the program source is a program distribution server, the program distribution server includes a processor (e.g., a CPU) and memory resources, which may further store the distribution program and the program to be distributed. The processor of the program distribution server may then execute the distribution program, thereby distributing the program to other computers. Furthermore, in the following description, two or more programs may be implemented as a single program, or one program may be implemented as two or more programs.

[0017] (1) Composition First, with reference to Figures 1 and 2, the configuration of the agent authentication system 100 according to one embodiment of the present invention, and its related configurations will be described.

[0018] FIG. 1 is a diagram showing a configuration example of an agent authentication system 100 according to an embodiment of the present invention. FIG. 2 is a diagram showing a configuration example of an automatic teller machine (ATM) 120 with an identity verification function.

[0019] As shown in FIG. 1, the agent authentication system 100 includes a case management system 110 and an automatic teller machine (ATM) 120 with an identity verification function. FIG. 1 also shows an internet banking system 130, an accounting system 140, a terminal 150, and a printer 160 as related components of the agent authentication system 100.

[0020] FIG. 1 also shows a responsible person 10 who is responsible for a transaction (withdrawal in this example) and an agent 20 who actually performs cash withdrawal. The responsible person 10 is a person who manages a bank account of the internet banking 130, for example, a manager of a corporate enterprise. The agent 20 is a person who withdraws cash as an agent in accordance with a request from the responsible person 10, and is, for example, an office clerk of a corporate enterprise.

[0021] Note that, in FIG. 1, reference numerals (S11 to S20) assigned to arrows between components correspond to the processing of steps S11 to S20 in the flowchart of FIG. 3 described later.

[0022] The case management system 110 is a system that manages agent transactions performed by agent 20, and is implemented by a server such as a cloud. The case management system 110 is configured independently of the corporate internet banking 130. The reason for this is that each bank has its own internet banking 130 server, and introducing the case management system 110 into such internet banking 130 would require extensive modifications, resulting in high costs and a lot of time. Therefore, in this embodiment, the case management system 110 is made into an independent server such as a cloud, and the interface part of the server is provided by an API (Application Programming Interface), making it possible to implement the agent authentication system 100 with smaller modifications than modifying the server of each bank's own corporate internet banking 130.

[0023] The case management system 110 primarily has the functions of display, registration, updating, and authentication. For example, the case management system 110 displays an input screen for registering information related to agent transactions (agent transaction information) on the terminal 150 of the person in charge 10, and generates, updates, and stores the agent transaction information in response to input operations by the person in charge 10. Details of the agent transaction information will be described later with reference to Figure 4. Furthermore, when an agent 20 who has received a request from the person in charge 10 attempts to withdraw cash from the ATM 120 as an agent, the case management system 110 performs agent authentication to determine whether the agent 20 is an agent registered in the agent transaction information, based on the agent transaction information it holds and the results of the identity verification process performed on the agent 20 at the ATM 120.

[0024] As shown in Figure 2, the automated cash transaction machine (ATM) 120 with identity verification function is configured to include a camera unit 121, an identity verification unit 122, and an automated cash transaction unit 123.

[0025] Internet Banking 130 is a type of online banking (so-called electronic banking (EB)) for corporate clients.

[0026] The accounting system 140 is a business system that performs accounting processing for banks. The accounting system 140 is built for each bank that provides internet banking 130, and in this example, it manages the bank accounts of the corporation to which the person in charge 10 belongs.

[0027] Terminal 150 is an information processing terminal used by the person in charge 10 and is connectable to the internet banking network 130. Specifically, Terminal 150 can be any information processing terminal with network connectivity, such as a personal computer or smartphone.

[0028] Printer 160 is a printer directly or indirectly connected to terminal 150. When terminal 150 is connected to the case management system 110 via internet banking 130, printer 160 outputs a document 161 in response to an operation from terminal 150. However, the output of document 161 is controlled by the case management system 110. Specifically, when agent transaction information for a case where person in charge 10 is in charge has been registered, the case management system 110 permits the output of document 161 for that case in response to an operation from terminal 150 used by person in charge 10. By performing such control, it is possible to prevent anyone other than person in charge 10 from issuing agent transaction documents 161.

[0029] Form 161 is, for example, a two-dimensional barcode and does not contain information indicating specific transaction details. Instead, it prints encrypted information of the case management number registered in the agent transaction information. The information output to form 161 is controlled by the case management system 110. Form 161 is not limited to a two-dimensional barcode; it may be in other output formats (e.g., images or electronic data) as long as it does not contain information indicating specific transaction details and is in a form that the agent 20 can carry.

[0030] (2) Procedure for withdrawal by proxy Next, referring to Figure 3 and other figures, we will explain in detail the procedure by which an agent 20 withdraws cash from an ATM 120 in the agent authentication system 100 shown in Figures 1 and 2, upon receiving a request from the person in charge 10.

[0031] Figure 3 is a flowchart showing an example of a cash withdrawal transaction procedure using the agent authentication system 100.

[0032] According to Figure 3, first, the person in charge 10 operates the terminal 150 to display the login screen for internet banking 130, and logs in to internet banking 130 by entering the ID and password on this login screen (step S11). The ID and password are information that only the person in charge 10 (or the person in charge of the corporation) would know, and upon successful login, it is considered that the person in charge 10 (or the person in charge of the corporation) has logged in.

[0033] Next, the person in charge 10 selects the desired transaction from the internet banking 130 menu displayed on the terminal 150 upon successful login in step S11. Specifically, in this example, they select "Agent Withdrawal," which means a transaction in which cash is withdrawn by an agent (step S12).

[0034] When "Agent Withdrawal" is selected in step S12, the internet banking system 130 connects to the transaction management system 110 (step S13). From this point onward, all communication between the terminal 150 and the transaction management system 110 is conducted via the internet banking system 130. Once the terminal 150 connects to the transaction management system 110 in step S13, the agent transaction information registration screen is displayed on the terminal 150.

[0035] Next, the person in charge 10 operates the terminal 150 to input the required information regarding the agent transaction. Upon receiving this input, the case management system 110 registers the agent transaction information (step S14). The registration of agent transaction information performed in step S14 will be explained using the agent transaction information 210 in Figure 4.

[0036] Figure 4 shows an example of agent transaction information registered in the case management system 110. The agent transaction information 210 shown in Figure 4 is an example of the overall table of agent transaction information held by the case management system 110. For simplicity, in this explanation, it is assumed that when connected to the case management system 110, the table of agent transaction information 210 shown in Figure 4 is displayed on the terminal 150, and the responsible person 10 enters data into the blank fields of this table to register the agent transaction information 210 in the case management system 110. However, in reality, the way agent transaction information is displayed on the terminal 150 and the data structure of agent transaction information held by the case management system 110 do not have to be the same.

[0037] The agent transaction information 210 in Figure 4 has a record for each agent transaction registered by the person in charge 10, and each record consists of data items 211 to 216. Note that the data structure in Figure 4 is just one example, and other configurations may also be used, such as automatically registering the account number of the corporate account from which the funds are withdrawn (the account logged into via internet banking 130).

[0038] Item 211, "Case Management Number," contains the management number of the case registered as an agent transaction. Item 212, "Withdrawal Amount," contains the amount to be withdrawn in the case. Item 213, "Name of Withdrawal Officer," contains the name of the officer 10 who registered the case. Item 214, "Name of Withdrawal Agent," contains the name of the agent 20 who will actually make the withdrawal in the case. Item 215, "Case Registration Date and Time," contains the registration date and time of the case. Item 216, "ATM Transaction Completion Date and Time," contains the date and time the agent transaction (i.e., ATM withdrawal) in the case was completed.

[0039] The process in step S14 of Figure 3 will be explained in detail using the agent transaction information 210 in Figure 4. First, the case management system 110, connected from the logged-in terminal 150, generates a new record of agent transaction information 210 and sets the name of the person in charge 10 in item 213 of the record based on the login information. Next, the case management system 110 displays a registration screen showing the record on the terminal 150 using an interface such as a GUI (Graphical User Interface). Next, the person in charge 10 enters the amount to be withdrawn in item 212 and the name of the agent in item 213 on the registration screen displayed on the terminal 150, and confirms the input (by pressing the register button). Upon receiving the press of the register button, the case management system 110 updates the agent transaction information 210 it holds and registers the record with the above input information set. The data in item 216 will be recorded in step S20, which will be described later.

[0040] Returning to the explanation of Figure 3, after registering the agent transaction information, the person in charge 10 performs a predetermined operation on a predetermined screen presented by the case management system 110 (specifically, for example, pressing the "Print" button to output the registered information on the registration completion screen), thereby printing a form 161 from the printer 160 connected to the terminal 150. The form 161 is, for example, a two-dimensional barcode. The form 161 does not show any information that reveals the specific transaction details of the agent transaction information 210 registered in step S14; for example, only the "case management number" in item 211 is printed in an encrypted state.

[0041] Next, agent 20 goes to ATM 120 with the form 161 (two-dimensional barcode) output in step S15. ATM 120 has a scanner or other device capable of acquiring the information recorded on form 161 (in this example, the encrypted two-dimensional barcode information). Using this device, ATM 120 reads the encrypted case management number from form 161 presented by agent 20 and acquires the case management number by decrypting it (step S16).

[0042] Next, ATM 120 (identity verification unit 122) performs identity verification processing for agent 20 (step S17). For identity verification processing, the agent 20 uses a photo ID (for example, a driver's license) that he possesses.

[0043] In the identity verification process, the camera unit 121 first takes a photograph of the driver's license and the face of the agent 20. Next, the identity verification unit 122 determines the authenticity of the driver's license (authenticity determination). Known methods for determining the authenticity of identity documents such as driver's licenses can be used, and a detailed explanation is omitted. For example, it is conceivable that a special light from a light source provided in the identity verification unit 122 would be shone onto the driver's license and the reflection would be checked. Furthermore, the identity verification unit 122 performs facial recognition using the image taken by the camera unit 121 to determine whether the person operating the ATM with identity verification function (agent 20) is the same person as the person shown on the driver's license (identity determination). In this identity determination, the operator may be instructed to perform a predetermined movement to perform biometric authentication, thereby preventing a third party from impersonating the person shown on the driver's license. Then, the identity verification unit 122, if it determines that the driver's license is genuine in its authenticity determination and that the agent 20 is the person indicated on the driver's license in its identity determination, processes the name written on the driver's license as text data. This text data can be obtained by performing image processing such as OCR (Optical Character Recognition) on the image of the driver's license taken by the camera unit 121. Since the identity verification process has confirmed that the agent 20 is the person on the driver's license, the ATM 120 can process this text data as the name information of the agent 20.

[0044] Next, ATM 120 (identity verification unit 122) transmits the case management number obtained in step S16 and the character data of the name on the identity verification document (e.g., driver's license) obtained through the identity verification process in step S17 to the case management system 110. The case management system 110 then uses the received case management number as a key to search for the corresponding case in its agent transaction information 210, compares the "Name of withdrawal agent" in item 204 of the corresponding case record with the received character data of the name, and determines whether the two match (step S18).

[0045] If the matching result in step S18 is OK, that is, if the name of the withdrawal agent matches the name on the license (YES in step S18), the transaction management system 110 determines that the agent 20 has been successfully authenticated. In this case, the transaction management system 110 notifies the ATM 120 that it is authorized to withdraw the amount registered in item 212 "Withdrawal Amount" in the transaction record retrieved in step S18. Upon receiving the notification, the ATM 120 communicates with the accounting system 140 and withdraws the above amount from the corporation's bank account (step S19). The accounting system 140 also notifies the internet banking 130 of the withdrawal record. Then, once the withdrawal process in step S19 is completed, the ATM 120 notifies the transaction management system 110 of the date and time the transaction was completed. Finally, the case management system 110 registers the transaction completion date and time notified by the ATM 120 in the "ATM Transaction Completion Date and Time" field of item 216 in the above case record (step S20), and completes the agent withdrawal process. By recording the ATM transaction completion date and time in the agent transaction information 210, the person in charge 10 can check from the agent transaction information 210 when the registered agent transaction was completed or not completed.

[0046] On the other hand, if the result of the matching performed in step S18 is NG, that is, if the name of the withdrawal agent does not match the name on the driver's license (NO in step S18), it is determined that the authentication of agent 20 has failed. In this case, the transaction management system 110 notifies the ATM 120 that the withdrawal by agent 20 is not permitted and completes the agent withdrawal process. At this time, the ATM 120 may also use its own display screen (not shown) or the like to notify agent 20 that the agent authentication has failed and that the withdrawal of cash by agent 20 is not permitted.

[0047] The following effects can be obtained from the agent transaction described above.

[0048] Firstly, in the agent authentication system 100 according to this embodiment, since the information printed on the form 161 is encrypted, even if the form 161 (two-dimensional barcode) necessary for conducting agent transactions is lost, it is possible to prevent misuse by a third party who obtains the form 161. In particular, the form 161 does not have personal information (or similar information) such as the names of the person in charge 10 and the agent 20, or bank account numbers printed on it, and even if it is decrypted, only the case management number will be shown, so it is possible to more reliably prevent damage such as information leakage and fraudulent withdrawals.

[0049] Secondly, in the agent authentication system 100 according to this embodiment, in the identity verification process for agent 20, the identity verification unit 122 uses an image of the ATM 120 operator and a photograph attached to the identity verification document to determine the agent's identity. Therefore, even if agent 20, who is the withdrawal agent, has the form 161 and identity verification document (driver's license) stolen, the thief will not be able to pass the identity verification because the image of the thief and the photograph on the identity verification document do not match, and the thief will not be able to impersonate the agent and withdraw money. Furthermore, even if the thief were to pass the identity verification using their own driver's license, the agent authentication in the transaction management system 110 would fail because the name information written on the driver's license does not match the name of the withdrawal agent in the agent transaction information 210, thus preventing fraudulent withdrawals.

[0050] Thirdly, in the agent authentication system 100 according to this embodiment, the data transmitted from the ATM 120 to the case management system 110 for agent authentication consists only of character data of name information, thus reducing the network load between the case management system 110 and the ATM 120. Looking at the agent authentication as a whole, the other data exchanged between the case management system 110 and the ATM 120 consists of notifications of the success or failure of agent authentication and notifications of the ATM transaction completion date and time, and since the amount of data is small, it is possible to reduce the network load between the case management system 110 and the ATM 120.

[0051] Fourth, according to the agent authentication system 100 of this embodiment, when conducting an agent transaction, the agent 20 only needs to bring the form 161 given to them by the person in charge 10 and their own identification documents to the ATM 120, thus reducing the burden on the agent 20. Furthermore, the fact that no particularly complex operations are required at the ATM 120 also reduces the burden on the agent 20. In addition, since the agent transaction is completed at the ATM 120 without going through a bank teller, the burden on the bank is also reduced. Moreover, since withdrawals are only made for the amount registered in the agent transaction information, the risk of fraudulent withdrawals is low, and the management burden on the person in charge 10 is also reduced.

[0052] (3) Variant It should be noted that the present invention is not limited to the embodiments described above, and includes various modifications. Several modifications are presented below, and their characteristics are explained.

[0053] (3-1) First variation In the embodiment described above, since the name of agent 20 is used as one of the keys in agent authentication, there is a possibility that fraudulent withdrawals could occur if there are people with the same name within the company. Taking this situation into consideration, the agent authentication system 100 may be configured as in the following first modified example.

[0054] In the first modified example, the case management system 110 stores agent transaction information in a form that includes unique identification information (e.g., employee number) that can identify the agent 20 and is not known to third parties. Specifically, for example, the data structure is such that the agent transaction information 210 shown in Figure 4 has an added item called "Disbursement Agent Employee Number". The "Disbursement Agent Employee Number" item in the agent transaction information is entered and registered when the person in charge 10 registers the agent transaction information 210 (step S14 in Figure 3), with the employee number of the agent 20 designated by the person in charge 10 being entered. The employee number is information that can uniquely identify an employee within the company.

[0055] In the first modified example, after the agent 20, who possesses the form 161, undergoes identity verification processing at the ATM 120 (step S17 in Figure 3), the identity verification unit 122 is configured to prompt the agent to additionally enter an "employee number" on the display screen of the ATM 120. After the identity verification of the agent 20 is completed in the identity verification processing, the ATM 120 (identity verification unit 122) transmits the case management number, the character data of the name read from the identity verification document, and the employee number as input keys to the case management system 110, and the case management system 110 performs agent authentication by matching this input key information with the agent transaction information 220.

[0056] By performing agent authentication in this manner, in the first modified example, even if a person with the same name as agent 20 exists within the company, it is possible to prevent fraudulent withdrawals by that person, thereby providing a more secure agent authentication system.

[0057] In this example, the employee number of agent 20 was used as additional information, but the information that can be used is not limited to the employee number, as long as it can reliably identify agent 20. Specifically, for example, in the agent transaction information 220, instead of or in addition to item 221, "withdrawal agent employee number," a secret password known only to agent 20 and responsible person 10 may be registered. In this case, when agent 20 operates the ATM 120, they will be prompted to enter the password registered in the agent transaction information, and the case management system 110 can perform agent authentication using this password as one of the input keys.

[0058] (3-2) Second variation As a second variation, the agent authentication system 100 according to the above-described embodiment or the first variation can also be used for mutual checks and balances within a company regarding cash withdrawals.

[0059] In the second variation, the case management system 110 restricts the registration of agent transaction information 210 by the person in charge 10 so that the same name as item 213 (name of the person in charge of withdrawal) cannot be set for item 214 (name of the withdrawal agent).

[0060] According to this second variation, it is possible to prevent the responsible person 10 from designating himself as the agent 20, thereby creating a check and balance that prevents the responsible person 10 from withdrawing funds from the corporation's bank account on his own.

[0061] (3-3) Third variation In the case of the agent authentication system 100 according to the above-described embodiment or modification, if a third party obtains the responsible person ID and password for internet banking 130, logs in, and sets themselves as the agent, they will be able to withdraw funds. To prevent such a situation, a third modification of the agent authentication system 100 can be considered.

[0062] In the third variation, the terminal 150 used by the person in charge 10 is pre-registered with internet banking 130, and the system is configured to require the input of a one-time password when connecting to internet banking 130 from the terminal 150. By configuring it in this way, the risk of fraudulent withdrawals can be reduced even if the person in charge 10's ID and password are stolen.

[0063] (3-4) Fourth variation In the agent authentication system 100 according to the above-described embodiment or modification, if agent 20 loses the document 161, there is no risk of transaction information being leaked as described above. However, agent 20 will have to return to the person in charge 10 to have the document 161 reissued, which may impair convenience. To solve this problem, a fourth modification of the agent authentication system 100 can be considered.

[0064] The agent authentication system 100 according to the fourth modified example is configured such that the case management system 110 holds agent transaction information 210 to which "loss flag" check information has been added, and when the loss flag is checked, it can respond to the loss procedure described later.

[0065] Figure 5 shows an example of agent transaction information registered in the case management system 110 in the fourth modified example. Figure 5 illustrates agent transaction information 220 before the start of the loss procedure and agent transaction information 230 after the start of the loss procedure. Agent transaction information 220 has the data structure of agent transaction information 210 in Figure 4 with the addition of item 221 (loss flag). Agent transaction information 230 has the data structure of agent transaction information 210 in Figure 4 with the addition of items 231 (withdrawal branch) and 232 (withdrawal agent employee number).

[0066] The "Loss Flag" column in item 221 indicates a check flag regarding the loss of document 161, and if no loss has occurred, it is registered with no check. When agent 20 who has lost document 161 contacts the person in charge 10, the person in charge 10 logs into the case management system 110 and selects the case management number for that case. Next, the person in charge 10 checks the loss flag in item 221 in the agent transaction information 220 record corresponding to the selected case management number.

[0067] When the loss flag is checked in the agent transaction information 220, the case management system 110 displays a registration screen for the case as shown in the agent transaction information 230 and requests the person in charge 10 to enter information in items 231 and 232. At this time, the values ​​of items 211 to 216 are carried over from the values ​​of the corresponding items in the agent transaction information 220 for the case.

[0068] In item 231, the "Withdrawal Branch" field, the identification information of the bank branch handling the transaction (e.g., branch code) is registered. In item 232, the "Withdrawal Agent Employee Number" field, the employee number of agent 20 designated by person in charge 10 is registered. The employee number is information that uniquely identifies an employee within the company.

[0069] When the person in charge 10 enters items 231 and 232, the case management system 110 registers agent transaction information 230, and in subsequent loss procedures, this agent transaction information 230 is used to authenticate the agent. In this example, for the sake of simplicity, agent transaction information 220 and agent transaction information 230 are shown separately, but they may be managed as a single integrated record. Also, although it would increase the workload for the person in charge 10, the information in items 231 and 232 may be registered in advance when the record for this case is first created.

[0070] After the lost item flag is checked and the specified information (items 231 and 232) is added to the agent transaction information 230 in the case management system 110, the agent 20 goes to the store registered in item 231 by the person in charge 10 and presses the specified procedure button at the ATM 120, which is set up for when the form 161 is lost. When this procedure button is pressed, the identity verification unit 122 of the ATM 120 starts the lost item procedure.

[0071] In the procedure for when a device is lost, the identity verification unit 122 first performs authenticity and identity verification using the agent's 20's identification document (hereinafter referred to as the driver's license), just as in a normal agent transaction. Furthermore, as a procedure specific to the procedure for when a device is lost, the identity verification unit 122 has the agent 20 enter their employee number. If the authenticity verification unit 122 determines that the driver's license is genuine and the identity verification unit 122 determines that the agent 20 is the person shown on the driver's license, the identity verification unit 122 transmits the name data read from the driver's license, the identification information (store code) of the store where the ATM 120 is installed, and the employee number entered by the agent 20 to the case management system 110.

[0072] Next, the case management system 110 uses the "store code," "employee number," and "name data" received from the ATM as keys to search for the case management number (item 211) of the corresponding case record in the agent transaction information 230 that it holds. If the case management number is found as a result of this search, the case management system 110 determines that it has successfully authenticated the agent. In this case, the case management system 110 notifies the ATM 120 that it is authorized to withdraw the amount registered in the "withdrawal amount" of item 212 in the corresponding case record. Upon receiving the notification, the ATM 120 communicates with the accounting system 140 and withdraws the above amount from the corporation's bank account.

[0073] As described above, by following the procedure for handling loss, in the fourth modified example, if agent 20 loses the document 161, he can carry out the agent transaction after agent authentication without having to return to the person in charge 10 to have the document 161 reissued. Therefore, the agent authentication system 100 in the fourth modified example can provide agent transactions that are both confidential and convenient.

[0074] Furthermore, the agent authentication system 100 in the fourth modified example is configured to perform agent authentication using the identification information of the agent 20 (employee number in the above explanation) instead of the case management number. Therefore, as a further modified example, if the case management system 110 is configured to maintain agent transaction information 230 corresponding to the procedure in case of loss from the outset, then agent authentication and proxy withdrawal will be possible from the outset, without printing a form 161 (e.g., a two-dimensional barcode), based on pre-registered information (agent transaction information), information from identity verification documents, and information entered by the agent 20.

[0075] Furthermore, in the above embodiments and their variations, other information can also be registered in the agent transaction information. For example, in addition to specifying the branch where the transaction will be conducted, the "expiration date" of the transaction can be specified and registered in the agent transaction information in advance. The expiration date may specify a specific time period. If the expiration date is registered in the agent transaction information, the current date and time can be used as a search key during agent authentication by the case management system 110 to determine whether the expiration date conditions are met. By making it possible to register the expiration date in the agent transaction information, agent transactions can be implemented more securely. Also, since the expiration date can be said to be information that "is not included in the information indicating the transaction details," it may be output to the form 161. When outputting the expiration date on the form 161, it may be embedded in a two-dimensional barcode, etc., or it may be printed in a separate area from the two-dimensional barcode so that it is easy for the agent 20 to recognize. If the agent 20 can recognize the expiration date, convenience can be increased. Also, if the expiration date is output on the form 161, the expiration date may be read at the stage of identity verification by the ATM 120, etc., and the transaction may be interrupted if the current date and time do not meet the expiration date conditions. By configuring it in this way, the number of communication opportunities to the case management system 110 can be reduced, resulting in a reduction in the network load.

[0076] The embodiments and modifications described above are examples for the purpose of clearly illustrating the present invention, and have been appropriately omitted and simplified for clarity. Furthermore, not all combinations of features described in the embodiments and modifications are necessarily essential to the solution of the invention. The present invention is not limited to the embodiments, and any application that is consistent with the spirit of the present invention is included within the technical scope of the present invention. Those skilled in the art can make various additions and modifications within the scope of the present invention. The present invention can also be implemented in various other forms. Unless otherwise specified, each component may be singular or plural.

[0077] Furthermore, the present invention is applicable to all cash withdrawal transactions using an automated cash transaction device equipped with an identity verification function. Moreover, the present invention is not limited to corporate transactions such as agent transactions from corporate accounts, but is also applicable to all agent transactions based on requests, such as those between a guardian and a ward. [Explanation of Symbols]

[0078] 10 Person in Charge 20 Agent 100 Agent Authentication System 110 Project Management System 120. Automatic cash transaction machine (ATM) with identity verification function. 121 Camera Department 122 Identity Verification Department 123 Automated Cash Transaction Department 130 Internet Banking 140 Accounting Systems 150 devices 160 Printers 161 Forms 210,220,230 Agent Transaction Information

Claims

1. An agent authentication system that performs agent authentication in agent transactions conducted by an agent designated by the person in charge, A case management system for managing agent transaction information consisting of information on predetermined items relating to the aforementioned agent transaction, An automated cash transaction device that has a function to verify the identity of the operator, Equipped with, The aforementioned case management system generates and registers agent transaction information for each agent transaction based on input from the person in charge, and outputs the case identification information of the registered agent transaction information to a report. The ATM performs identity verification on the operator who presents the form and identification documents, and if the identity verification is successful, it transmits the case identification information obtained from the form and the name information obtained from the identification documents to the case management system. The case management system searches for agent transaction information based on the combination of the case identification information and name information received from the ATM, and if a case with that combination exists in the agent transaction information, it determines that the operator is the agent and that agent authentication is successful, and notifies the ATM of permission to proceed with the transaction based on the transaction details of the case registered in the agent transaction information. The aforementioned automated cash transaction device executes transactions in accordance with notifications from the transaction management system. In the event that the agent loses the aforementioned documents, the agent will be responsible for the agent's transaction. The aforementioned case management system is capable of registering the identification information of the store conducting the agent transaction and the identification information of the agent in the agent transaction information at a predetermined time. If the loss of the aforementioned document is notified to the case management system by the person in charge, The ATM installed in the store matching the store's identification information verifies the identity of the operator who presents identification documents, requests the operator to input the agent's identification information, and if the identity verification is successful, transmits the agent's identification information entered by the operator and the name information obtained from the identification documents to the case management system. The case management system searches for agent transaction information based on the combination of the agent's identification information and name information received from the ATM, and if a case with that combination exists in the agent transaction information, it determines that the operator is the agent and that agent authentication is successful, and notifies the ATM of permission to proceed with the transaction based on the transaction details of the case registered in the agent transaction information. The aforementioned automated cash transaction device executes a transaction in accordance with a notification from the transaction management system. A proxy authentication system characterized by the following features.

2. The agent transaction information includes, at a minimum, the name of the person in charge, the name of the agent designated by that person in charge, and information indicating the amount of the transaction to be withdrawn. The agent authentication system according to feature 1.

3. The aforementioned case management system permits the output of information other than information indicating transaction details from the information included in the agent transaction information to the aforementioned report. The agent authentication system according to feature 1.

4. The aforementioned form outputs a two-dimensional barcode showing the encrypted case identification information. The agent authentication system according to feature 3.

5. The aforementioned automated cash transaction device has a camera that photographs the operator, The ATM determines that identity verification has been successful if it successfully determines the authenticity of the identity verification document presented by the operator, and if it successfully determines the operator's identity by comparing the facial image obtained from the identity verification document with the facial image of the operator captured by the camera. The agent authentication system according to feature 1.

6. The aforementioned case management system is configured independently of the internet banking of the account from which funds are withdrawn in the agent transaction, and accepts operations from the person in charge via the internet banking. The agent authentication system according to feature 1.

7. The aforementioned case management system will refuse to register the agent transaction information in which the name of the person in charge and the name of the agent are the same. The agent authentication system according to feature 2.

8. The aforementioned case management system can register an expiration date for the agent transaction information, and if the ATM is operated outside of the expiration period, it will not permit the agent transaction for the case in question. The agent authentication system according to feature 2.

9. An agent authentication method in which an agent authentication system performs agent authentication in an agent transaction by an agent designated by the person in charge, The agent authentication system comprises a case management system for managing agent transaction information consisting of information on predetermined items relating to the agent transaction, and an automated cash transaction device having a function for verifying the identity of the operator. The aforementioned case management system includes a registration step in which, for each case of the agent transaction, the agent transaction information is generated and registered based on input from the person in charge, The aforementioned case management system includes a report output step that outputs the case identification information of the agent transaction information registered in the registration step to a report, The aforementioned automated cash transaction device performs identity verification on the operator who presents the aforementioned form and identity verification documents, and if the identity verification is successful, transmits the case identification information obtained from the aforementioned form and the name information obtained from the identity verification documents to the case management system. The aforementioned case management system searches for agent transaction information based on the combination of the case identification information and name information received from the ATM in the identity verification step, and if a case with the said combination exists in the agent transaction information, it determines that the operator is the agent and that agent authentication is successful, and notifies the ATM of permission to proceed with the transaction based on the transaction details of the case registered in the agent transaction information in the agent authentication step. The aforementioned automated cash transaction device performs a transaction in accordance with the notification from the agent authentication step, Equipped with, In the event that the agent loses the aforementioned documents, the agent will be responsible for the agent's transaction. The aforementioned case management system is capable of registering the identification information of the store conducting the agent transaction and the identification information of the agent in the agent transaction information at a predetermined time. If the loss of the aforementioned document is notified to the case management system by the person in charge, In the identity verification step, the ATM installed in the store matching the store's identification information verifies the identity of the operator who presents the identification documents, requests the operator to input the agent's identification information, and if the identity verification is successful, transmits the agent's identification information entered by the operator and the name information obtained from the identification documents to the case management system. In the agent authentication step, the case management system searches for agent transaction information based on the combination of the agent's identification information and name information received from the ATM, and if a case with that combination exists in the agent transaction information, it determines that the operator is the agent and that agent authentication is successful, and notifies the ATM of permission to proceed with the transaction based on the transaction details of the case registered in the agent transaction information. In the transaction execution step, the automated cash transaction device executes the transaction in accordance with the notification from the transaction management system. A method of authenticating an agent characterized by the following features.

Images