JP4755865B2 - Card authentication device, card authentication system, card authentication method, and card authentication program - Google Patents

Description

  The present invention relates to a card authentication technique for authenticating the validity of a card user, and more particularly to a card authentication technique using position information of a mobile phone.

  In recent years, there has been a problem of skimming in which information recorded on another person's cash card is illegally read to create a counterfeit card for use. In addition, fraudulent use of illegally acquiring and using another person's cash card is also a problem.

In order to prevent such skimming and unauthorized use of a cash card, for example, Patent Document 1 describes a cash card authentication system using a mobile phone with a GPS function.
JP 2003-150884 A

  In Patent Document 1, use of a cash card is authenticated using a GPS signal received from a GPS (Global Positioning System). However, GPS signals generally cannot be received in buildings or underground. Therefore, when receiving a GPS signal in the vicinity of an ATM (Automated Teller Machine) installed in a building, for example, a predetermined system such as a GPS re-radiator described in JP-A-2003-10348 is required. It becomes.

  Moreover, in patent document 1, all the mobile telephones and ATM need to be provided with a GPS function. However, it is difficult to switch all mobile phones of the owner of the cash card to a mobile phone with a GPS function because the cost and work load increase. In addition, incorporating the GPS function into each ATM installed nationwide increases the load in terms of system and cost.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to authenticate a card user who uses a card at a lower cost and with higher accuracy.

  In order to solve the above-mentioned problems, the present invention authenticates the validity of a card user by using time-series position information of a mobile phone carried by a legitimate card holder and the installation location of the card terminal.

  For example, the card authentication device of the present invention reads, for each card number of the card, authentication storage means in which time-series position information of a mobile phone carried by a legitimate card holder is stored, and information stored in the card A receiving means for receiving a card number from the card terminal, and a latest location information corresponding to the card number received by the receiving means from the authentication storage means, and a first location area of the mobile phone based on the latest location information A first calculating means for calculating the second time-series location information corresponding to the card number received by the receiving means from the authentication storage means, and the second of the mobile phone assumed from the past location information. And determining whether or not the card terminal is installed in an overlapping area where the first position area and the second position area overlap with each other. If there is the installation location of the card terminal A has an authentication means for a user of the card is authenticated as a legitimate cardholder.

  In the present invention, a card user who uses a card can be authenticated at a lower cost and with higher accuracy.

  Embodiments of the present invention will be described below.

  FIG. 1 is an overall configuration diagram of a card authentication system to which an embodiment of the present invention is applied. The illustrated card authentication system includes a mobile phone 1 carried by a legitimate card holder, a card terminal 2, and an authentication server 3. The mobile phone 1 is connected to the authentication server 3 via a predetermined base station 4 and a network 5 according to the position of the mobile phone 1. Each card terminal 2 is connected to the authentication server 3 via the network 5.

  It is assumed that the card owner is a legitimate user who owns a card such as a cash card or a credit card, and always carries the mobile phone 1. The mobile phone 1 performs a general call with a position information acquisition unit 11 that acquires position information from the base station 4 and a position information transmission unit 12 that transmits the acquired position information to the authentication server 3 at a predetermined timing. And a call unit 13.

  In the present embodiment, the cell ID of the base station 4 with which the mobile phone 1 can communicate is used as the location information of the mobile phone 1 (that is, the cardholder). The cell ID is identification information for identifying a cover area (cell) covered by each base station 4. Further, the size of the cover area of each base station 4 varies depending on the region and location. For example, the coverage area of the base station 4 in places with a lot of people such as office districts and downtowns is often relatively small (narrow).

  The card terminal 2 is, for example, an ATM (Automated Teller Machine), a debit card terminal, or a credit card terminal, and reads card information stored in the card and transmits it to the authentication server 3. Then, the card terminal 2 performs withdrawal of cash from the account, settlement of the commodity price, etc. according to the authentication result of the authentication server 3. The illustrated card terminal 2 includes a card reading unit 21 that reads card information, an instruction receiving unit 22 that receives an instruction from a card user, and a display unit 23 that displays various data on an output device.

  The authentication server 3 authenticates (determines) whether or not the card user is a valid card holder using the position information received from the mobile phone 1. The illustrated authentication server 3 includes a receiving unit 31, a position calculating unit 32, an authenticating unit 33, an authentication DB 34, and a card terminal table 35. The receiving unit 31 receives position information from the mobile phone 1 and writes the received position information in the authentication DB 34. The receiving unit 31 receives card information and identification information of the card terminal 2 from the card terminal 2.

  The position calculation unit 32 calculates the position (area) where the mobile phone exists based on the time-series position information of the mobile phone 1 stored in the authentication DB 34. The authenticating unit 33 authenticates the validity of the card user using the position calculated by the position calculating unit 32 and the installation location of the card terminal 2. The authentication DB 34 is a database in which time-series position information of the mobile phone 1 is stored. The authentication DB 34 will be described later. The card terminal table 35 stores the identification information of the card terminal 2 and the installation location of the card terminal 2 for each card terminal 2.

  Next, the authentication DB 34 of the authentication server 3 will be described.

  FIG. 2 is a diagram illustrating an example of the authentication DB 34. The illustrated authentication DB 34 has, for each card number 341, a mobile phone ID 342 of the mobile phone 1 possessed by the card owner and location history information 343 and 344. The card number 341 is identification information for identifying each card. For example, an account number or a credit card number can be considered. As the mobile phone ID 342, it is conceivable to use the machine number, the subscriber number or the mobile phone number of the mobile phone 1 or the like.

  In the position history information 343 and 344, position information (cell ID) 344 acquired at a predetermined timing from the base station 4 with which the mobile phone can communicate and an acquisition time 343 are stored in time series. The receiving unit 31 of the authentication server 3 receives the position information 344 and the acquisition time 343 from the mobile phone 1 and stores them in the authentication DB 34.

  The mobile phone 1, the card terminal 2, and the authentication server 3 described above all include, for example, a CPU 901, a memory 902, an external storage device 903 such as an HDD, an input such as a keyboard and a mouse as shown in FIG. 3. A general-purpose computer system including an apparatus 904, an output apparatus 905 such as a display or a printer, and a communication control apparatus 906 for connecting to a network can be used. In this computer system, the CPU 901 executes a predetermined program loaded on the memory 902, thereby realizing each function of each device.

  For example, the functions of the mobile phone 1, the card terminal 2, and the authentication server 3 are as follows: the CPU 901 of the mobile phone 1 in the case of the program for the mobile phone 1, and the CPU 901 of the card terminal 2 in the case of the program for the card terminal 2. In the case of a program for the authentication server 3, the CPU 901 of the authentication server 3 executes the program. It is assumed that the memory 902 or the external storage device 903 of the authentication server 3 is used for the authentication DB 34 and the card terminal table 35 of the authentication server 3. In addition, regarding the input device 904 and the output device 905, each device is provided as necessary.

  Next, the movement locus of the mobile phone 1 (that is, the cardholder) and the installation location of the card terminal 2 will be described.

  FIG. 4 is a diagram schematically showing the movement trajectory of the mobile phone 1. The mobile phone 1 communicates with the communicable base station 4 at a predetermined timing, and receives the cell ID of the base station 4. In the illustrated example, it is assumed that the mobile phone 1 is present at any point y1 in the cover area A1 of the base station x1 at time t1. The illustrated cover area A1 is a circle having a radius e1 with the base station x1 as the center.

  The mobile phone 1 is assumed to be present at any point y2 in the cover area A2 of the base station x2 at the time t2 when a predetermined time has elapsed from the time t1. The mobile phone 1 is assumed to be present at any point y3 in the cover area A3 of the base station x3 at a time t3 when a predetermined time has elapsed from the time t2. At time t3, the card owner's card carrying the mobile phone 1 is inserted into the card terminal 2 and used.

  In this case, the position calculation unit 32 of the authentication server 3 calculates an assumed area B3 where the mobile phone 1 will be present at time t3, based on the past position information. That is, the position calculation unit 32 inputs past time-series position information into a predetermined function (time-series model), and calculates the assumed area B3.

  For example, it is conceivable that the position calculation unit 32 calculates the assumed area B3 using a speed function. In the case illustrated, the position calculation unit 32 calculates the speed s2 of the mobile phone 1 (cardholder) at time t2 by the following calculation formula. Note that the distance l2 from the point x1 to the point x2 is regarded as the distance that the mobile phone 1 has moved from the time point t1 to the time point t2.

s2 = l2 / (elapsed time from t1 to t2)
Then, the position calculation unit 32 uses the speed s2 at the time point t2 to calculate the distance l3 that moves between the time point t2 and the time point t3 using the following calculation formula.

l3 = s2 × (elapsed time from t2 to t3)
Note that l3 may be provided with a minimum value corresponding to the elapsed time from time t2 to time t3. As a result, even if the card holder does not move between time t1 and time t2, the cardholder moves within the minimum distance set in l3 between time t2 and time t3. If it is, it can be determined that the card holder uses the card properly.

  Then, the position calculation unit 32 calculates a circle B3 having a radius l3 centered on the base station x2 at time t2 as an assumed area.

  Then, the authentication unit 33 of the authentication server 3 estimates that the mobile phone 1 exists in one of the overlapping areas C where the cover area A3 and the assumed area B3 at time t3 overlap. Therefore, when the installation location z of the card terminal 2 exists in the overlap area C, the authentication unit 33 determines that the authorized cardholder is using his / her card properly. On the other hand, when the card terminal 2 is installed in a place other than the overlapping area C, the mobile phone 1 possessed by the card holder and the card terminal 2 in which the card is used are located at separate positions. Become. In this case, the authentication unit 33 determines that a third party other than the card owner has illegally used the card using a forged card or an illegally acquired card. By specifying the overlapping area C in this way, it is possible to authenticate the card user with higher accuracy even if the cover area A3 at time t3 is a wide range.

  FIG. 5 is a diagram schematically showing the movement locus of the mobile phone 1 when the cover area A3 at time t3 shown in FIG. 4 is small. In the case illustrated in FIG. 5, the cover area A3 at time t3 is included in the assumed area B3. That is, the entire cover area A3 at the time point t3 becomes an overlapping area C with the assumed area B3. In this case, when the installation location z of the card terminal 2 exists in the cover area A3 at the time point t3 which is the overlapping area C, the authentication unit 33 of the authentication server 3 uses the card properly by the authorized cardholder himself. It is determined that

  Next, an authentication process of the card authentication system of this embodiment will be described.

  FIG. 6 is an overall flowchart of the authentication process. First, the location information acquisition unit 11 of the mobile phone 1 acquires location information (cell ID) of the base station 4 from the base station 4 that can communicate at a predetermined timing (predetermined time interval). Then, the position information transmitting unit 12 transmits the position information acquired by the position information acquiring unit 11 and the acquired time to the authentication server 3 via the base station 4 (S11). Note that the location information transmitting unit 12 also transmits the mobile phone ID of the mobile phone 1 when transmitting location information or the like.

  Then, the card user inserts the card into the card terminal 2 when cash is withdrawn from the account or when the product price is settled. The card reading unit 21 of the card terminal 2 transmits the card number of the inserted card and the card terminal identification information of the own card terminal 2 to the authentication server 3 (S12). It is assumed that the card terminal identification information is stored in advance in the memory of the card terminal 2 or an external storage device.

  Then, the authentication server 3 uses the card by operating the card terminal 2 based on the time-series position information received from the mobile phone 1 and the card number and card terminal identification information received from the card terminal 2. It is authenticated whether or not the existing card user is a valid card owner (S13). The authentication process in S13 will be described later.

  When authenticating as a valid cardholder (S14: YES), the authentication unit 33 of the authentication server 3 transmits an OK message indicating that the authentication is successful to the card terminal 2 (S15). The display unit 23 of the card terminal 2 receives the OK message and displays a password input screen on the output device (S16). The instruction receiving unit 22 of the card terminal 2 receives the password entered by the card user and transmits the password to the authentication server 3 or another device (not shown). Then, the card terminal 2 performs a predetermined process according to the authentication result of the personal identification number.

  On the other hand, when authenticating that it is a third party other than the card owner (S14: NO), the authentication server 3 transmits an NG message indicating that the authentication has failed to the card terminal 2 (S17). The display unit 23 of the card terminal 2 receives the NG message, displays an error screen on the output device, and ends the process (S18).

  Next, the process of S13 shown in FIG. 6 will be described in more detail.

  FIG. 7 is a flowchart of the authentication process (FIG. 6: S13) of the authentication server. The receiving unit 31 of the authentication server 3 receives the position information and the acquisition time from the mobile phone 1 at a predetermined timing, and stores them in the authentication DB 34 (S21). The receiving unit 31 stores the received position information and the like in the record of the authentication DB 34 corresponding to the mobile phone ID transmitted together with the position information and the like. As a result, time series position information for each mobile phone 1 is stored in the authentication DB 34.

  And the receiving part 31 receives a card number and card terminal identification information from the card terminal 2 (S22). And the authentication part 33 specifies the installation place corresponding to the received card terminal identification information with reference to the card terminal table 35 (S23).

  Then, the position calculation unit 32 refers to the authentication DB 34 and identifies the latest position information (cell ID) corresponding to the received card number. Then, the position calculation unit 32 refers to a cell ID table (not shown) and identifies the cover area of the latest identified position information (cell ID) (S24). The cell ID table is a table in which the cover area and the size (range) of the cover area are set for each position information (cell ID) and stored in the memory of the authentication server 3 or the external storage device. To do. Note that the cover area of the latest position information is the cover area A3 at time t3 in the case of the schematic diagram of FIG.

  Then, the position calculation unit 32 determines whether or not the specified cover area is larger than the predetermined area with reference to the cell ID table (S25). When the latest cover area is larger than the predetermined area (S25: YES), the position calculation unit 32 refers to the authentication DB 34 and specifies past time-series position information corresponding to the received card number. Then, as described with reference to FIG. 4, the position calculation unit 32 inputs past time-series position information to a predetermined function, and calculates an assumed area where the mobile phone 1 will exist at the present time (S26). . In the case of the schematic diagram of FIG. 4, the assumed area is a circle B3 having a radius l3 centered on the base station x2 at time t2.

  And the authentication part 33 discriminate | determines whether the overlapping area C with which the newest cover area A3 specified by S24 and the assumption area B3 calculated by S26 exist (S27). When the overlapping area C exists (S27: YES), the authentication unit 33 determines whether or not the installation location of the card terminal 2 specified in S23 exists in the overlapping area C (S28).

  When the card terminal 2 is present in the overlapping area C (S28: YES), the mobile phone 1 possessed by the card holder and the card terminal 2 in which the card is used are present in the vicinity. Therefore, the authenticating unit 33 determines that the authorized cardholder is using his / her own card (S30).

  On the other hand, when the card terminal 2 does not exist in the overlapping area C (S28: NO), the mobile phone 1 possessed by the card holder and the card terminal 2 in which the card is used exist at a distant position. Become. In this case, the authentication unit 33 determines that a third party other than the card owner is using the card illegally using a counterfeit card or an illegally acquired card (S31).

  In addition, when the latest cover area A3 is smaller than the predetermined area (S25: NO) or when the overlapping area C does not exist (S27: NO), the authentication unit 33 identifies the latest cover area A3 in S23. It is determined whether or not the installation location of the card terminal 2 exists (S29). When the card terminal 2 is present in the latest cover area A3 (S29: YES), the authentication unit 33 determines that the legitimate card holder is legitimately using his / her card (S30). On the other hand, when the card terminal 2 does not exist in the latest cover area A3 (S29: NO), the authentication unit 33 illegally uses a counterfeit card or a card illegally acquired by a third party other than the card owner. Is used (S31).

  The embodiment of the present invention has been described above.

  In the present embodiment, the validity of the card user is authenticated using the location information (cell ID) acquired by the mobile phone 1 from the base station 4. Accordingly, the validity of the card user can be authenticated at a lower cost without the mobile phone 1 having a GPS reception function.

  In the present embodiment, the mobile phone 1 acquires position information at a predetermined timing, and automatically transmits the acquired position information to the authentication server 3. As a result, the location information can be transmitted without the card holder carrying the mobile phone 1 being conscious, so the user interface is improved.

  In this embodiment, the overlap area between the latest cover area and the assumed area is calculated using time-series position information, and the validity of the card user is determined depending on whether or not the card terminal 2 exists in the overlap area. Is authenticated (see FIG. 4). Thereby, even if the latest cover area is a wide range, it is possible to authenticate the card user with higher accuracy.

  Further, in the present embodiment, when the latest cover area is smaller than a predetermined area (see FIG. 5), the card user is determined by whether or not the card terminal 2 exists in the latest cover area without calculating the assumed area. Is authenticated (FIG. 7: S25, S29). Thereby, the system load of the authentication server 3 can be reduced, and the validity of the card user can be authenticated more easily.

  Further, in the present embodiment, when there is no overlapping area between the latest cover area and the assumed area, the validity of the card user is authenticated based on whether or not the card terminal 2 exists in the latest cover area (FIG. 7). : S27, S29). This allows the cardholder to authenticate the card user's legitimacy even when the cardholder has moved from a past time-series location information to an unpredictable location by using transportation or the like. it can.

  In addition, this invention is not limited to said embodiment, Many deformation | transformation are possible within the range of the summary. For example, in the above embodiment, the mobile phone 1 transmits the position information to the authentication server 3 at a predetermined timing. However, the location information acquisition unit 11 of the mobile phone 1 may sequentially store the location information acquired at a predetermined timing in the memory of the mobile phone 1 or an external storage device. Then, the location information transmission unit 12 of the mobile phone 1 may receive an instruction from the card owner and collectively transmit the location information stored in the memory or the like to the authentication server 3. It is assumed that the card holder inputs an instruction for transmitting location information to the mobile phone 1 when using the card.

  In the above embodiment, the cell ID of the base station 4 is used for the position information. However, when the mobile phone 1 has a GPS reception function, a GPS signal and a cell ID may be used for position information in a hybrid manner. For example, in the case of the schematic diagram shown in FIG. 4, it is assumed that the mobile phone 1 can receive GPS signals at time t1 and time t2. However, since it is indoors at time t3, the mobile phone 1 cannot receive the GPS signal and receives the cell ID of the base station. Then, the cellular phone 1 transmits the GPS signal and the cell ID to the authentication server 3. The authentication server 3 can acquire highly accurate position information from the GPS signals at the time points t1 and t2, and can calculate a more reliable assumed area B3.

  Moreover, in the said embodiment, after discriminating whether an overlapping area exists, it is discriminate | determining whether the installation place of a card terminal exists in an overlapping area (FIG. 7: S25-S28). However, without determining whether or not there is an overlapping area, the determination whether or not the card terminal exists in the latest call area and the determination whether or not the card terminal exists in the assumed area are performed in order. It is good also to do.

Moreover, in the said embodiment, after authenticating that a card user is a valid card holder using the positional information on a mobile telephone, the input screen of a PIN code is displayed on a card terminal. However, the password input screen may be displayed first, and when the input password is correct, authentication processing using the position information may be performed.

1 is a diagram illustrating an overall configuration of a card authentication system to which an embodiment of the present invention is applied. It is a figure which shows an example of authentication DB. It is a figure which shows the hardware structural example of each apparatus. It is the figure which showed typically the movement locus | trajectory of a mobile telephone. It is the figure which showed typically the movement locus | trajectory of a mobile telephone. It is a whole flowchart of an authentication process. It is a flowchart of the authentication process of an authentication server.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1: Mobile phone, 11: Location information acquisition part, 12: Position information transmission part, 13: Call part, 2: Card terminal, 21: Card reading part, 22: Instruction reception part, 23: Display part, 3: Authentication server , 31: receiving unit, 32: position calculating unit, 33: authentication unit, 34: authentication DB, 35: card terminal table, 4: base station, 5: network

Claims (8)

A card authentication device for authenticating a card user,
For each card number of the card, an authentication storage means in which time-series position information of a mobile phone carried by a legitimate card holder is stored;
Receiving means for receiving the card number from a card terminal that reads information stored in the card;
First calculation means for specifying the latest position information corresponding to the card number received by the receiving means from the authentication storage means and calculating the first position area of the mobile phone based on the latest position information. When,
The past time-series position information corresponding to the card number received by the receiving means is identified from the authentication storage means, and the mobile phone is present when the receiving means receives the card number from the past position information. Then, a second calculation means for calculating a second position area that is assumed ,
It is determined whether or not the installation location of the card terminal exists in an overlap area where the first location area and the second location area overlap, and the installation location of the card terminal exists in the overlap area. A card authenticating device for authenticating that the card user is an authorized cardholder. The card authentication device according to claim 1,
For each card terminal, further includes a card terminal storage means in which identification information and installation location of the card terminal are stored, and the receiving means further receives the identification information of the card terminal from the card terminal,
The authentication means refers to the card terminal storage means, specifies an installation location corresponding to the card terminal identification information received by the reception means, and determines whether or not the installation location exists in the overlapping area. A card authentication device. The card authentication device according to claim 1,
The authentication unit determines whether or not the first position area is smaller than a predetermined area, and the first position area is smaller than the predetermined area, and the first position area is in the first position area. A card authentication device that authenticates that a user of the card is a legitimate card holder when an installation location of the card terminal exists. The card authentication device according to claim 1,
The authentication means determines whether the installation location of the card terminal exists in the first location area when the overlap area does not exist, and the installation location of the card terminal exists in the first location area. If present, the card authentication device authenticates that the user of the card is a valid card holder. A card authentication system for authenticating a card user,
A card terminal that reads information stored in the card, and an authentication device that authenticates the validity of the user of the card,
The card terminal
Reading means for reading the card number stored in the card;
Transmitting means for transmitting the card number read by the reading means to the authentication device;
The authentication device
For each of the card numbers, an authentication storage means in which time-series position information of a mobile phone carried by a legitimate card holder is stored;
Receiving means for receiving the card number from the card terminal;
First calculation means for specifying the latest position information corresponding to the card number received by the receiving means from the authentication storage means and calculating the first position area of the mobile phone based on the latest position information. When,
The past time-series position information corresponding to the card number received by the receiving means is identified from the authentication storage means, and the mobile phone is present when the receiving means receives the card number from the past position information. Then, a second calculation means for calculating a second position area that is assumed ,
It is determined whether or not the installation location of the card terminal exists in an overlap area where the first location area and the second location area overlap, and the installation location of the card terminal exists in the overlap area. A card authentication system comprising: authentication means for authenticating that a user of the card is a valid card holder. A card authentication method for authenticating a card user performed by an information processing apparatus,
The information processing apparatus includes:
An authentication storage unit that stores time-series position information of a mobile phone carried by a valid cardholder for each card number of the card, and a processing unit,
The processor is
A receiving step of receiving the card number from a card terminal that reads the card information of the card;
First calculation step of identifying the latest location information corresponding to the card number received in the reception step from the authentication storage unit and calculating the first location area of the mobile phone based on the latest location information When,
The past time-series location information corresponding to the card number received in the reception step is identified from the authentication storage unit, and the mobile phone exists at the time when the card number is received in the reception step from the past location information. Then, a second calculation step for calculating a second position area that is assumed ,
It is determined whether or not the installation location of the card terminal exists in an overlap area where the first location area and the second location area overlap, and the installation location of the card terminal exists in the overlap area. An authentication step of authenticating that the user of the card is a valid cardholder. A card authentication program for authenticating a card user executed by an information processing apparatus,
The information processing apparatus includes:
An authentication storage unit that stores time-series position information of a mobile phone carried by a valid cardholder for each card number of the card, and a processing unit,
In the processing unit,
A receiving step of receiving the card number from a card terminal that reads the card information of the card;
First calculation step of identifying the latest location information corresponding to the card number received in the reception step from the authentication storage unit and calculating the first location area of the mobile phone based on the latest location information When,
The past time-series location information corresponding to the card number received in the reception step is identified from the authentication storage unit, and the mobile phone exists at the time when the card number is received in the reception step from the past location information. Then, a second calculation step for calculating a second position area that is assumed ,
It is determined whether or not the installation location of the card terminal exists in an overlap area where the first location area and the second location area overlap, and the installation location of the card terminal exists in the overlap area. An authentication step for authenticating that the card user is a valid cardholder.   The card authentication device according to claim 1,
  The second calculating means calculates the moving speed of the mobile phone from the specified past time-series position information, and acquires the moving speed and the immediately preceding position information immediately before the latest position information. And the elapsed time from the time until the second time at which the latest position information is acquired to calculate a movable distance, and the first position assumed within the range of the movable distance is calculated from the immediately preceding position information. Calculate as 2 position area
  A card authentication device.

Images