JP3796730B2 - Customer information wiretapping prevention communication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a customer information eavesdropping prevention communication system.
[0002]
[Prior art]
Recently, telephone banking systems, which are becoming increasingly popular, use a method in which an operator listens to customer information (such as a password) obtained from a customer and authenticates the user (the former), and an automatic voice response system in the center device of the financial institution. A method (the latter) is used in which customer information is verified against customer information registered in advance.
[0003]
The former personal authentication method has a drawback in that customer information is leaked to the operator because the operator listens to customer information. On the other hand, since the latter personal authentication method uses an automatic voice response system of the center device, there is an advantage that there is no room for an operator and the security of customer information is greatly improved.
[0004]
However, the telephone banking system currently used is a system in which a customer side communication terminal and a financial institution side center apparatus are connected via a public telephone network and customer information is transmitted to the center apparatus using the communication terminal. There is a risk that customer information may be intercepted by a malicious third party during communication.
[0005]
On the other hand, in Japanese Patent Laid-Open No. 11-15896, a scramble signal is transmitted from the center device to the communication terminal in a time zone that completely overlaps the time zone in which the customer transmits customer information to the center device using the communication terminal. Thus, a means for preventing eavesdropping of customer information by a third party has been proposed. Further, this publication describes that communication between a customer side communication terminal and a financial institution side center device is performed in a push button (PB) signal band.
[0006]
[Problems to be solved by the invention]
The communication system described in Japanese Patent Application Laid-Open No. 11-15896 is limited to communication in the PB signal band. That is, the communication system can be used only when the customer side communication terminal is a device capable of transmitting a DTMF tone signal, such as a push button type telephone, and in a dial type telephone or the like that can only transmit a pulse signal. There was a disadvantage that could not be used. This drawback has become more and more apparent due to the recent diversification of communication terminals such as push-type telephones, dial-type telephones, mobile telephones, international telephones, and public telephones.
[0007]
The present invention has been made in view of the above situation, by transmitting a scramble signal from the center device to the communication terminal in a time zone in which the customer is transmitting customer information to the center device using the communication terminal, Based on the prevention of eavesdropping on customer information by a third party, whether the customer uses a DTMF tone signal type communication terminal or a pulse signal type communication terminal, it is safe for the center device to use that communication terminal. An object of the present invention is to provide a customer information eavesdropping prevention system capable of transmitting customer information to a customer.
[0008]
[Means for Solving the Problems]
In the customer information eavesdropping prevention system according to the present invention, a customer side communication terminal capable of dial input and a financial institution side center device are connected via a public telephone network, and customer information consisting of a personal identification number is transmitted to the center device using the communication terminal. above when transmitting, the customer accesses the center apparatus by the communication system of any of the types of the DTMF tone signaling and the pulse signal system using the communication terminal, the customer by the voice response from the center device to prompting the dial input by the communication terminal, the customer to determine the center device type of the communication method by the communication terminal based on signals dial input using the above communication terminal, the type of communication method determined in the center apparatus comprising a random number signal with a compatible communication system transmitting a scrambled signal from the center apparatus to the communication terminal, center The customer from the device during the transmission of the scrambled signal to the communication terminal transmits customer information to the center apparatus via the communication terminal, city and in this order, connected via the public telephone network and the communication terminal and the center device In addition, the scramble signal is transmitted from the center device to the communication terminal over an indefinite period of time after the customer has transmitted the customer information to the center device using the communication terminal .
[0009]
According to this system, when a customer accesses a center device using a communication terminal and performs dial input prompted by a voice response from the center device using the communication terminal, the communication terminal uses the communication terminal based on the dial input signal. The type of communication method is determined by the center device. Therefore, it is possible to transmit customer information from the communication terminal to the center device regardless of the communication method by the communication terminal such as the DTMF tone signal method or the pulse signal method. During transmission of customer information, wiretapping of customer information by a third party is prevented by a scramble signal transmitted from the center device to the communication terminal.
[0010]
In addition, when a random number signal is used as a scramble signal, it is difficult for a third party to determine the frequency band of the scramble signal and the type of communication method, thereby improving the security of customer information.
[0011]
Then, after the customer has finished transmitting its identification number to the center apparatus via the communication terminal, since the scramble signal from the center apparatus over indefinite time is adapted to transmit to the communication terminal, the customer communication terminal When the customer information is transmitted to the center device by using it, the transmission completion time becomes unknown, and the security of the customer information is further improved.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
FIG. 1 is a flowchart when a personal identification number, which is one of customer information, is transmitted to a financial institution center device using a customer side communication terminal, U represents an operation area by a customer, and B represents processing by a financial institution. Represents an area.
[0013]
In this customer information wiretapping prevention system, a customer side communication terminal 1 capable of dial input and a financial institution side center device 2 are connected via a public telephone network, and a personal identification number as customer information is transmitted using the communication terminal 1. It is transmitted to the center device 2. The communication terminal 1 includes a communication terminal (for example, a push-type telephone) that employs a DTMF tone signal system and a communication terminal (for example, a dial-type telephone) that employs a pulse signal system. That is, as the communication terminal 1, all existing communication terminals such as push-type telephones, dial-type telephones, mobile telephones (mobile telephones), international telephones, public telephones, and card readers are targeted.
[0014]
In this customer information eavesdropping prevention system, the customer needs to access the center device 2 using the communication terminal 1. Many of these operations are performed by an operation in which a customer makes a call to the center device 2 using the communication terminal 1. When the customer accesses the center device 2 using the communication terminal 1 in this way, the automatic voice response device of the center device 2 accepts the access, and prompts the customer to dial by the communication terminal 1 by voice response. In this embodiment, the dial input prompting the customer is a one-digit number “0”. Therefore, the voice response is, for example, “We will verify your identity. If you do not mind, please dial“ 0 ”. Is performed by the voice.
[0015]
When the customer dials “0” using the communication terminal 1 in response to the voice response, the dialed signal is transmitted to the center device 2, and the center device 2 receives the customer side communication terminal 1 based on the input signal. The type of the communication method employed by is determined. This determination is performed by the communication method determination training device 22 provided in the center device 2.
[0016]
When the type determination of the communication method by the training device 22 is completed, the automatic voice response device 21 of the center device 2 transmits to the communication terminal 1 guidance to input the personal identification number as customer information to the communication terminal 1. This guidance is performed, for example, by a voice “Please dial 4 digits of the cash card PIN”, and immediately after that, a start sound (beep sound) of input timing is transmitted to the communication terminal 1. Then, immediately after the transmission of the start sound, the center device 2 transmits a scramble signal to the communication terminal 1 using a communication method suitable for the determined communication method type. That is, when the communication terminal 1 adopts the DTMF tone signal system, a scramble signal is transmitted using the same DTMF tone signal system. When the communication terminal 1 employs the pulse signal system, the same pulse signal is transmitted. A scramble signal is transmitted using the method. During transmission of this scramble signal, the customer uses the communication terminal 1 to dial the 4-digit cash card code number to the center device. Since the scramble signal is a signal in a frequency band different from the transmission signal of the communication terminal 1, the center device 2 can identify the transmission signal of the communication terminal 1. 1 transmission signal cannot be identified. This prevents eavesdropping.
[0017]
In this embodiment, a random number signal is used as the scramble signal. Random number signals are randomly selected from a total of 250 types of random numbers, for example, 10 types from “0” to “9”, 5 types of signal transmission time in units of 100 ms, and signal transmission intervals in units of 100 ms. The By doing so, it becomes difficult for a third party to determine the frequency band of the scrambled signal and the type of communication method, and the security of customer information is greatly improved.
[0018]
Although the transmission of the personal identification number is performed during the transmission of the scrambled signal, the transmission of the scrambled signal is continued for an indefinite time even after the transmission of the personal identification number is completed. For this reason, since the transmission completion time becomes unknown when the customer transmits the personal identification number to the center device 2 using the communication terminal 1, the security of the customer information is further improved.
[0019]
The entered personal identification number is collated with a registration number for each customer registered in the center device 2 in advance. If the two match, the authentication of the person is completed. If the two do not match, the automatic voice response device 21 transmits guidance to the communication terminal 1 or the operator responds. Guidance of the automatic voice response device 21 is performed by, for example, a voice “The input cannot be confirmed.” After that, the customer returns to the first step after accessing the center device 2 using the communication terminal 1.
[0020]
【The invention's effect】
As described above, according to the customer information eavesdropping prevention system according to the present invention, it is possible for customers to securely send customer information to the center apparatus via the communication terminal.
[Brief description of the drawings]
FIG. 1 is a flowchart for transmission to a financial institution-side center device using a customer-side communication terminal.
[Explanation of symbols]
1 Customer side communication terminal 2 Financial institution side center device

Claims (1)

When the customer side communication terminal capable of dial input and the financial institution side center device are connected via a public telephone network and customer information consisting of a personal identification number is transmitted to the center device using the communication terminal,
The customer accesses the center device by using any one of the DTMF tone signal method and the pulse signal method using the communication terminal,
Customers to encourage the dial input by the communication terminal by the voice response from the center device,
Customers to determine the center device type of the communication method by the communication terminal based on signals dialing using the communication terminal,
Transmitting a scramble signal consisting of a random number signal from the center device to the communication terminal using a communication method suitable for the type of communication method determined by the center device;
The customer uses the communication terminal to send customer information to the center device during transmission of the scramble signal from the center device to the communication terminal,
In this order, the communication terminal and the center device are connected to each other via the public telephone network, and after the customer finishes transmitting the customer information to the center device using the communication terminal, the indefinite time is passed. A customer information wiretapping prevention communication system for transmitting a scramble signal from a center device to a communication terminal .

Images