JP4864667B2 - PIN code input device - Google Patents

Description

  The present invention relates to a personal identification number input device in which a personal identification number is not stolen even when an operation for inputting a personal identification number from an input unit is visually observed.

  When making a credit card payment or using an ATM, a customer who is the owner of the card must enter a password that only the principal knows by pressing a numeric key constituting the input unit. In many cases, the input unit of the PIN code input device is provided with an enclosure so that the PIN code cannot be stolen by looking into the PIN code input operation. However, when the arrangement of the numeric keys is fixed, there is a possibility that the password is estimated by carefully observing the movement of the finger or hand. In view of this, an invention has been made in which the arrangement of numeric keys is changed so that the password is not easily guessed from the movement of the finger of the operator who inputs the password.

  For example, Patent Literature 1 discloses an apparatus having a key arrangement control unit that changes a number assigned to a key constituting an input unit such as a button or a touch panel every time an operator changes.

  As another example, Patent Document 2 discloses an information device that displays numeric keys on a touch panel in an arbitrary shape such as an annular shape or a diagonal shape, without being limited to a numeric keypad arrangement.

Japanese Patent Application Laid-Open No. 09-081522 JP-A-06-012440

  However, even if the arrangement of the numeric keys is changed, the point that the operator inputs the personal identification number by relying on the numbers displayed on the respective numeric keys is not different from the conventional one. For this reason, if the operator's fingertip is visually observed during the password input operation, the password may be stolen by following the numeric key indicated by the fingertip.

  An object of the present invention is to provide a personal identification number input device in which a personal identification number is not stolen even when an operation for inputting the personal identification number is visually observed from an input unit.

The personal identification number input device of the present invention includes an input unit having a numeric keypad, a display unit for displaying information, an information processing unit for executing information processing, and the information processing unit separates all digits of the personal identification number into arbitrary digits. A plurality of separated numerical values, and for each of the generated separated numerical values, an operator obtains a converted numerical value converted by a numerical conversion method that is a predetermined bijection to the operator, and the converted numerical value Means for sequentially displaying instructions to be input from the input unit on the display unit, and the information processing unit when calculating a converted numerical value instructing input for each numerical value sequentially input from the input unit Means for obtaining a numerical value corresponding to the separated numerical value by performing an operation reverse to the operation by the numerical value conversion method, and obtaining an input password by combining the obtained numerical values .

  The numerical conversion method that is bijective means that the locality that the domain before the conversion can take and the range that the post-conversion value can match match the value that is converted when different values are converted. This is a numerical conversion method that has a single shot property that the values of are different. If the numerical conversion method is bijective, there is always an inverse conversion method for obtaining the original value from the converted value.

  According to the present invention, since the number key pressed by the operator and the password are different, the actual password is not displayed on the input unit during the input operation, and the fingertip of the operator of the password input device Even if it is directly observed, the password is not stolen.

  An embodiment of the present invention will be described with reference to FIGS.

The personal identification number input device 1 according to the present embodiment includes an IC card with a built-in IC chip and holding a personal identification number and balance information as a part of recording information, and a magnetic stripe and account number information as a part of recording information. It is used when making a payment using a magnetic card to be held.
[Overview of structure]
FIG. 1 is an external perspective view schematically showing a password input device 1 of the present embodiment.

  As shown in FIG. 1, the password input device 1 according to the present embodiment includes a password input terminal 2 and a payment terminal 3. The personal identification number input terminal 2 and the payment terminal 3 are connected to each other via a cord 4 connected to the back of each terminal so that data can be transmitted and received.

  The personal identification number input terminal 2 is used when a customer inputs a personal identification number in the case of payment using either an IC card or a magnetic card.

  The personal identification number input terminal 2 is configured by a housing having a shape in which a flat plate portion 2a and a rectangular parallelepiped portion 2b that is elongated on the left and right are integrally formed. The flat plate portion 2a is in contact with the mounting surface on the front side (operator side) of the bottom surface, and the upper surface is inclined downwardly from the back side toward the near side. The rectangular parallelepiped portion 2b is arranged with the side on the near side of the bottom surface in contact with the placement surface and the side surface on the near side slightly tilted toward the near side. The back side surface of the flat plate portion 2a is connected to the substantially vertical center of the front side surface of the rectangular parallelepiped portion 2b.

  The flat plate portion 2a is provided with an input unit 5 in which various keys are gathered on the front side and a display unit 6 for liquid crystal display for displaying contents such as transaction contents and operation guidance to the operator on the back side.

  The input unit 5 includes a numeric keypad 5a with numbers from “0” to “9”, an execution key 5c, a correction key 5d, and a cancel key 5e on the upper surface of the flat plate portion 2a of the password input terminal 2. The control key 5b is composed of three keys, and function keys 5f, each of which is assigned a function such as a help function and a display density adjustment function in advance, are provided in a direction facing the operator. When the numeric keypad 5a is pressed, the input unit controller 105 (see FIG. 2) connected to the input unit 5 transmits a signal corresponding to the pressed key to the first main control unit 101 (see FIG. 2). . Similarly, when the control key 5 b or the function key 5 f is pressed, the input unit controller 105 transmits a signal corresponding to each key to the first main control unit 101.

  The display unit 6 is connected to a display unit controller 106 (see FIG. 2). When display data transmitted from the first main control unit 101 is input to the display unit controller 106, the display unit controller 106. To display predetermined items.

  The rectangular parallelepiped portion 2b is provided with a card insertion portion 7 having a card insertion slot 8 provided on the upper side surface of the rectangular parallelepiped portion 2b and holding an operator-owned IC card inserted from the card insertion slot 8. . The card insertion slot 8 is formed in a shape into which an IC card can be inserted with the IC chip facing down, and a metal terminal 107 (see FIG. 2) is provided on the inner wall. The metal terminal 107 is connected to an IC card reader / writer controller 108a (see FIG. 2) provided inside the password input terminal 2. An access lamp 9 is provided on the upper side surface of the rectangular parallelepiped portion 2b. When the IC card is inserted into the card insertion unit 7, the IC card reader / writer 108 (see FIG. 2) transmits / receives data to / from the IC card via the metal terminal 107 under the control of the IC card reader / writer controller 108a. Further, while the IC card reader / writer 108 is accessing the IC card, the access lamp 9 is turned on under the control of the IC card reader / writer controller 108a.

  The settlement terminal 3 is used when a store clerk inputs settlement information or scans information recorded on a magnetic stripe of a magnetic card. For example, for a store clerk adjacent to a register counter or a register counter The counter is installed with the front facing the store clerk.

  The settlement terminal 3 is configured by a housing 10 in which the upper surface 11 is inclined downward from the back side toward the near side (operator side) and the bottom surface is installed in contact with the placement surface. On the upper surface 11 of the housing 10, from the front side to the back side, a payment terminal input unit 12 in which various keys are gathered, and a liquid crystal display payment terminal that displays information such as transaction contents and operation guidance to the operator A display unit 13 is provided in order. A slip issuing port for issuing a settlement slip printed on the upper surface 11 of the housing 10 between the settlement terminal input unit 12 and the settlement terminal display unit 13 by a printer mechanism unit 117 (see FIG. 2) built in the housing 10. 14 is formed.

  At the right end of the housing 10, there is provided a magnetic card reader unit 16 provided with a slit-like card reading groove 15 for scanning the magnetic card on the upper surface 11 side of the housing 10. The card reading groove 15 is arranged adjacent to the right side of the payment terminal input unit 12 and the payment terminal display unit 13, and is formed in a shape that can be pulled out by inserting the magnetic stripe side of the magnetic card. The magnetic card reader unit 16 incorporates a magnetic card reader 115 (see FIG. 2) for reading information recorded in the magnetic stripe of the magnetic card scanned within the card reading groove 15.

  The settlement terminal input unit 12 and the settlement terminal display unit 13 have the same functions as the input unit 5 and the display unit 6, and are respectively a settlement terminal input unit controller 113 (see FIG. 2) and a settlement terminal display unit controller 114 (see FIG. 2). 2), data is transmitted / received to / from the second main control unit 109 (see FIG. 2).

  The magnetic card reader 115 is connected to a magnetic card reader controller 116 (see FIG. 2), reads information stored in the magnetic stripe of the magnetic card, and reads the read information by the operation of the magnetic card reader controller 116. Input to the control unit 109.

The printer mechanism unit 117 is connected to the printer mechanism unit controller 118 (see FIG. 2), and the print data input from the second main control unit 109 is driven by the printer mechanism unit controller 118 to roll paper (not shown). A predetermined matter is printed, and the roll paper is cut and issued at a predetermined position.
[System Details]
FIG. 2 is a block diagram showing a system configuration of the password input device 1.

  The information processing unit that executes the information processing of the personal identification number input device 1 according to the present embodiment includes a first main control unit 101 provided in the personal identification number input terminal 2, a second main control unit 109 provided in the settlement terminal 3, and Consists of.

  The first main control unit 101 includes a CPU 102 that performs arithmetic processing and centrally controls each unit of the password input terminal 2, a ROM 103 that stores control programs and fixed data, and a RAM 104 that stores variable data in a rewritable manner. Composed. The first main control unit 101 includes an input unit controller 105 that controls detection of a signal transmitted from the input unit 2, a display unit controller 106 that controls the display unit 3, an IC card reader / writer 108, and serial communication. It is connected to the interface 122 via the bus line 121. The IC card reader / writer 108 is configured by connecting an IC card reader / writer controller 108 a to the metal terminal 107 and the access lamp 9.

  The second main control unit 109 includes a CPU 110 that centrally controls each unit of the payment terminal 3, a ROM 111, and a RAM 112. The second main control unit 109 includes a settlement terminal input unit controller 113 that controls detection of a signal transmitted from the settlement terminal input unit 12, a settlement terminal display unit controller 114 that controls the settlement terminal display unit 13, and a magnetic field. A magnetic card reader controller 116 that controls data scanned from the card reader 115, a print mechanism unit controller 118 that controls the print mechanism unit 117, and a serial communication interface 122 are connected via a bus line 121. .

  The personal identification number input terminal 2 and the payment terminal 3 are connected via a code 4 connected to the serial communication interface 122 so that data can be transmitted and received.

  The second main control unit 109 includes an antenna for transmitting and receiving radio waves and a wireless communication module 119 that wirelessly performs information communication with an external device, and an external device connected to the external device via a cable. Are connected to a communication interface 120 for performing wired information communication. The wireless communication module 119 and the communication interface 120 are connected to a payment institution computer provided in a credit company, a bank, or the like via a relay center such as a public line network or CAFIS (Credit And Finance Information Switching System) as a communication line. Communicate information with the clearinghouse computer. The payment terminal 3 is also connected to a server computer of a shopping center in which the store where the payment terminal 3 is installed is a tenant.

  FIG. 3 is a schematic diagram illustrating a data structure of the calculation data 201 managed by the personal identification number input device 1.

The personal identification number input device 1 manages operation data 201 having a two-dimensional array structure composed of one or more digit fields 202 and attribute records 203 that store work values for each digit field 202. The digit field 202 is provided with the number of columns as many times as the number input operation required by the password input device 1 from the operator, and the first field, the second field,. The attribute record 203 includes an operation method record 204, an operand record 205, an input value record 206, and a reverse operation value record 207.
[PIN input processing]
The following description of the password input process performed by the password input device 1 according to the present embodiment is performed by separating the passwords one by one in card payment for inputting a password composed of four digits. This is for the case where the operator performs the numerical value input operation four times from the input unit 5 of the personal identification number input terminal 2 using the four generated separation numbers.

  FIG. 4 is a flowchart of a password input process executed by the password input device 1.

  Hereinafter, a description will be given according to the flowchart shown in FIG.

  When the second main control unit 109 receives the customer payment information input from the payment terminal input unit 12, the password input device 1 starts the password input process. When payment is made with an IC card, the IC card needs to be inserted into the card insertion portion 7 at the start of the password input process.

  First, the personal identification number input device 1 starts a numerical value input process for receiving numerical values from customers (ST11).

  FIG. 5 is a flowchart showing details of the numerical value input process (ST11 in FIG. 4) executed by the password input device 1. The numerical value input process is a process of storing the input value input from the input unit 5 in the input value record 206 of the calculation data 201.

  In the following, description will be given according to the flowchart shown in FIG.

  When the personal identification number input device 1 starts the numerical value input process, the first main control unit 101 determines a numerical conversion method that is bijective for each of the four numerical value input operations required of the operator. And an operand P to be used for the calculation method f. (ST21).

  The calculation method f is selected by the first main control unit 101 by selecting from an addition calculation that adds a predetermined integer of 0 or more and a multiplication calculation that multiplies a predetermined positive integer. In addition, for example, the calculation method f may be determined in advance so as to always perform addition calculation, or may be selected randomly by the first main control unit 101 each time a password input process is performed.

  The operand P is determined to be an integer greater than or equal to 0 when the operation method f is an additive operation, and is determined to be a positive integer when the operation method f is a multiplicative operation. Similarly to the calculation method f, the operand P may be a predetermined constant value, or may be a value determined by the first main control unit 101 at random each time a password input process is performed.

  In addition, a counter n indicating a numerical value input operation for inputting an input value in the input value record 206 of which digit field 202 is prepared (ST21a).

  The first main control unit 101 determines the calculation method f and the operand P for all four numerical value input operations, and calculates the calculation method f for the digit field 202 from the first field to the fourth field. In 204, the operand P is stored in the operand record 205, respectively.

  As a subsequent process, the first main control unit 101 displays a message, which is an instruction for the operator to input a numerical value from the input unit 5 on the display unit 6 (ST22).

  FIG. 6 is a schematic diagram of a message displayed on the display unit 6.

  The first main control unit 101 reads the calculation method f from the calculation method record 204 in the nth field of the calculation data 201 and the operand P from the operand record 205, and displays a message corresponding to the calculation method f on the display unit 6. To do. When f is an addition operation, the first main control unit 101 displays a message “Please input a value obtained by adding P to the n-th digit of your personal identification number and press the execution key” on the display unit 6 ( (See FIG. 6 (a)). When f is a multiplicative operation, the first main control unit 101 displays a message on the display unit 6 "Input the value obtained by multiplying the n-th digit of your personal identification number by P and press the execution key" ( (Refer FIG.6 (b)).

  As a subsequent process, the first main control unit 101 determines which key of the input unit 5 is pressed (ST23a to ST23e). When the pressed key is the execution key 5c (Y of ST23a), the first main control unit 101, if the numerical value Q has already been input from the input unit 5 (Y of ST24), sets Q as the input value. Stored in the input value record 206 of the n field (ST25). On the other hand, if a numerical value has not been input (N in ST24), the first main control unit 101 determines the pressed key again (ST23a).

  On the other hand, when the pressed key is the numeric keypad 5a (Y in ST23b), the first main control unit 101 holds the input numerical value in the RAM 104 (ST27) and determines the pressed key again (ST27). ST23a).

  On the other hand, when the pressed key is the correction key 5d (Y in ST23c), the first main control unit 101 clears the numerical value held in the RAM 104 (ST28) and determines the pressed key again. (ST23a).

  On the other hand, if the pressed key is the cancel key 5e (Y in ST23d), the first main control unit 101 cancels the password input process (ST29), and then the password input device 1 performs the password input process. Exit. More specifically, the display unit 6 is displayed to cancel the password input process, and the data stored in the RAM 104 is erased. Further, the second main control unit 109 receives the instruction to cancel the password input process transmitted from the first control unit 101, erases the data stored in the RAM 112, and performs the password input process on the settlement terminal display unit 13. A message to cancel is displayed.

  On the other hand, when the pressed key is a function key 5f other than the above (N in ST23d), the first main control unit 101 performs processing assigned to the pressed key (ST23e), To ST22.

  The personal identification number input device 1 repeats the process of storing numerical values in the input value record 206 of the nth field as described above (ST26). When the number of numerical inputs does not reach 4 (Y in ST26), 1 is added to the counter n, and the digit field 202 for storing the value in the input value record 206 is advanced to the next field (ST30), and the process goes to ST22. return.

  On the other hand, when the numerical value input process reaches four times (N in ST26), the personal identification number input device 1 ends the number input process.

  Returning to the flowchart of FIG. As processing subsequent to the above number input processing (ST11), the personal identification number input device 1 converts the input value input from the input unit 5 and stored in the calculation data 201 in the reverse of the calculation by the numerical conversion method. A reverse calculation process for obtaining the personal identification number is performed (ST12). For each digit field 202, the first main control unit 101 reads the calculation method f from the calculation method record 204, the operand P from the operand record 205, and the input value Q from the input value record 206, and uses the inverse function of the calculation method f. A certain back calculation method g is determined. For example, if the calculation method f is an addition operation that adds the operand P, the back calculation method g is a subtraction that subtracts the operand P from the input value Q. If the calculation method f is a multiplication operation that multiplies the operand P, the back calculation method g is a division that divides the input value Q by the operand P. The reverse calculation value R is obtained for each digit field 202 by the reverse calculation method g and stored in the reverse calculation value record 207. After the values are stored in all the reverse calculation value records 207, the first main control unit 101 reads the values of the reverse calculation value records 207 in order from the upper digit of the digit field 202, and obtains the code number by combining them in order.

  As a subsequent process, the personal identification number input device 1 transmits data necessary for the settlement (ST13).

  FIG. 7 is a timing chart showing data transmission / reception processing performed between the first main control unit 101, the second main control unit 109, and the IC card.

  FIG. 8 is a timing chart showing data transmission / reception processing performed between the first main control unit 101, the second main control unit 109, and the clearinghouse computer.

  When performing payment using an IC card, the first main control unit 101 of the personal identification number input terminal 2 uses the IC card reader / writer 108 to send the payment information received from the payment terminal 3 and the personal identification number obtained by the reverse calculation process. To the IC card. The IC card performs payment inside the IC card based on the information transmitted from the first main control unit 101, and sends a result signal indicating whether or not the payment is normally completed via the IC card reader / writer 108 to the first main control unit. 101 (see FIG. 7).

  Further, when performing payment using a magnetic card, when the second main control unit 109 of the payment terminal 3 receives the password transmitted from the calculation unit 101 of the password input terminal 2, the password and the payment terminal The payment information input from the input unit 12 and held in the RAM 112 and the account information scanned from the magnetic card by the magnetic card reader 115 and held in the RAM 112 are credited via the wireless communication module 119 and the communication interface 120. The data is sent to a settlement institution computer provided by the company or bank. The settlement institution computer makes a settlement based on the information transmitted from the second main control unit 109, and sends a result signal indicating whether the settlement is normally completed via the wireless communication module 119 or the communication interface 120 to the second main control. To the unit 109. The second main control unit 109 transmits the received result signal to the first main control unit 101 (see FIG. 8).

  As a subsequent process, the personal identification number input device 1 uses the result signal received by the first main control unit 101 (ST14), and determines whether or not the payment is normally completed (ST15). When the result signal indicates an error (Y in ST15), the personal identification number input device 1 executes error processing (ST16). In the error processing, the first main control unit 101 displays on the display unit 6 that the payment has not been made correctly, erases the data stored in the RAM 104, and sends a result signal to the second main control unit 109. This is a process of transmitting a determination result indicating an error (see FIGS. 7 and 8). When the second main control unit 109 receives the determination result that the result signal indicates an error from the first main control unit 101, the second main control unit 109 displays on the payment terminal display unit 13 that the payment has not been correctly performed, and the RAM 112 Delete the data stored in. After the error process, the first main control unit 101 performs the numerical value input process again (ST11).

  On the other hand, when the result signal indicates the normal end of the settlement (N in ST15), the personal identification number input device 1 executes the completion process (ST17), and then terminates the personal identification number input process. In the completion process, the first main control unit 101 displays on the display unit 6 that the payment has been made correctly, erases the data stored in the RAM 104, and the result signal is sent to the second main control unit 109. This is a process for transmitting a determination result indicating normal termination (see FIGS. 7 and 8). When the second main control unit 109 receives a determination result from the first main control unit 101 that the result signal indicates normal completion of the payment, the second main control unit 109 displays on the payment terminal display unit 13 that the payment has been correctly performed. The data stored in the RAM 112 is erased.

  FIG. 9 is a schematic diagram illustrating an example of a numerical value input operation performed by a customer.

  Hereinafter, an example of the numerical value input operation performed by the customer according to the input instruction display (ST22 in FIG. 5) performed by the personal identification number input device 1 will be described. In this example, it is assumed that the customer's personal identification number is a 4-digit numerical value “1234”, and the first main control unit 101 performs the numerical input operation from the first to the fourth time by the processing performed in ST21 (see FIG. 5). , The operation method f is sequentially determined as “additive operation”, “multiplication operation”, “additive operation”, “multiplication operation”, and the operand P is sequentially determined as “2”, “5”, “1”, “6”. It is assumed that the calculation data 201 is stored.

  First, as a first numerical value input operation, the customer inputs “a value obtained by adding 2 to the first digit of your personal identification number” displayed on the display unit 6 of the personal identification number input terminal 2 as shown in FIG. In accordance with the instruction "Please press the execution key", the numerical value "3" obtained by adding the operand "2" displayed on the display unit 6 to the first digit "1" of the personal identification number "1234" is input unit 5 And press the execution key 5c. The main control unit 101 stores and stores the input value “3” in the input value record 206 of the first field.

  Next, as shown in FIG. 9, the customer inputs “the value obtained by multiplying the second digit of your personal identification number by 5” displayed on the display unit 6 and presses the execution key as the second numerical input operation. In accordance with the instruction “.”, The numeric value “10” obtained by multiplying the second digit “2” of the personal identification number “1234” and the operand “5” displayed on the display unit 6 is input from the numeric keypad 5a. Press the execution key 5c. The main control unit 101 stores and stores the input value “10” in the input value record 206 of the second field.

  Similarly, as the third and fourth numerical value input operations, the customer inputs numerical values “4” and “24” obtained by calculation in accordance with the instructions displayed on the display unit 6 as shown in FIG. . The main control unit 101 stores and stores the input values that are input in the input value records 206 of the third field and the fourth field, respectively.

  As a result of the customer performing the numerical value input operation four times as described above, the input value record 206 of the calculation data 201 includes the input values “3”, “10”, “4” and the input values input from the input unit 5. “24” is sequentially stored in each digit field 202. The first main control unit 101 performs a reverse calculation process (ST12 in FIG. 4) using the input value stored in this manner to obtain each digit of the personal identification number. For example, when the first main control unit 101 obtains the first digit of the personal identification number, the calculation method stored in the calculation method record 204 of the first field is “additional calculation”, so that it is stored in the input value record 206. The subtraction value “1” is obtained by subtracting the operand “2” stored in the operand record 205 from the input value “3”, and the reverse operation value “1” obtained in the reverse operation value record 207 of the first field is obtained. Store and remember. Similarly, the main control unit 101 obtains the reverse calculation values “2”, “3”, and “4” for each digit field 202 from the second field to the fourth field, and stores them in the reverse calculation value record 207 in order. . The main control unit 101 obtains the reverse calculation values for all the digit fields 202 and stores the reverse calculation values obtained in the reverse calculation value record 207, and then the values stored in the reverse calculation value record 207 in order from the first field to the fourth field. “1”, “2”, “3”, and “4” are read and combined in order to obtain a personal identification number “1234”.

  As described above, in addition to the case where the numerical value input operation is performed four times using four separated numbers generated by separating the four-digit password for each digit, 4 When a numerical value input operation is performed twice using two separated numbers generated by separating a personal identification number composed of a digit number into two digits, the numerical value input operation is 1 without separating the personal identification number. When the number is entered only three times, the number input operation is performed three times using three separate numbers generated by separating the PIN consisting of nine digits into 2, 3, and 4 digits. Even when all the digits of the password are separated into arbitrary digits, the same processing can be performed.

Further, when the payment terminal 3 communicates information with an external device via the communication interface 120, all the information to be communicated is encrypted, but it goes without saying that the numerical values are embodied in the above description. .
[effect]
According to the password input device 1 of the present embodiment, since the number key pressed by the operator is different from the password, the actual password is not displayed by the input unit 5 during the input operation. Even if the fingertip of the operator of the personal identification number input device 1 is directly observed, the personal identification number is not stolen. Further, the numerical value conversion method required by the operator of the personal identification number input device 1 of the present embodiment is a calculation using the numerical value of the personal identification number, and the actual personal identification number cannot be estimated only by looking at the number indicated by the fingertip. For this reason, the risk of the password being stolen by visually checking the password input operation is further reduced.
[Another embodiment]
Next, another embodiment will be described with reference to FIGS. In this case, the same portions as those in the embodiment described with reference to FIGS. 1 to 9 are denoted by the same reference numerals, and description thereof is also omitted.

  The password input device 1 according to another embodiment of the present invention is different from the above-described embodiment in the password input process numerical value input process (ST11) and reverse calculation process (ST12).

  FIG. 10 is a schematic diagram illustrating an example of a data structure of the calculation data 201 managed by the personal identification number input device 1 according to the present embodiment. FIG. 10 does not show the calculation method record 204 and the reverse calculation value record 207 that are not used in the password input processing in the present embodiment.

  FIG. 11 is a schematic diagram of a message displayed on the display unit 6 according to the present embodiment.

  In the numerical value input process (ST12 in FIG. 4) in the present embodiment, the personal identification number input device 1 switches the order of numerical values constituting the personal identification number from the input unit 5 of the personal identification number input terminal 2 to the operator. Thus, a numerical value is input from the input unit 5. More specifically, as shown in FIG. 10, the first main control unit 101 assigns the numerical values 1 to 4 to the operand records 205 from the first field to the fourth field so that the numerical values do not overlap. Store. The method of assigning a numerical value to the operand record 205 may be assigned randomly each time the PIN number input process is performed, or may be a predetermined allocation method no matter how many times the PIN number input process is performed. Good.

  As a subsequent process, the first main control unit 101 reads the operand P from the operand record 205 of the first field and displays a message “Please input the P digit of your PIN” on the display unit 6. The input value Q input from the input unit 5 is stored in the input value record 206 of the first field. For example, as shown in FIG. 10, when the numerical value “3” is stored in the operand record 205 of the first field, the first main control unit 101 displays the display unit 6 during the first numerical input process. , The message “Please enter the third digit of your PIN” is displayed (see FIG. 11A).

  The first main control unit 101 repeats the process of storing the input value input from the input unit 5 in the input value record 206 of the digit field 202 until the fourth field.

  In the reverse calculation process (ST12 in FIG. 4) in the present embodiment, the personal identification number input device 1 rearranges the personal identification numbers in the numerical value input process so that the input values are returned to the original order. The code number is obtained by performing reverse conversion to restore the code number. More specifically, the first main control unit 101 searches the digit field 202 whose operand record 205 has a value of 1 and reads the value of the input value record 206 of the digit field 202 to thereby obtain one digit of the password. Find the eye number. For example, as shown in FIG. 10, when the numerical value “1” is stored in the operand record 205 of the third field, the first main control unit 101 reads the value of the input value record 206 of the third field. The first digit of the code number is determined to be “8”.

  In this way, the first main control unit 101 obtains a personal identification number by sequentially combining all digits of the personal identification number obtained by searching the values of the operand record 205 in the order of 2, 3, and 4.

  FIG. 12 is a schematic diagram illustrating an example of a numerical value input operation performed by a customer.

  Hereinafter, an example of the numerical value input operation performed by the customer according to the input instruction display (ST22 in FIG. 5) performed by the personal identification number input device 1 will be described. In this example, it is assumed that the customer's personal identification number is a 4-digit numerical value “6789”, and the first main control unit 101 performs the numerical input operation from the first to the fourth time by the processing performed in ST21 (see FIG. 5). , It is assumed that the operand P is sequentially determined as “3”, “4”, “1”, “2” and stored in the operation data 201.

  First, as a first numerical value input operation, the customer instructs “Please enter the third digit of your personal identification number” displayed on the display unit 6 of the personal identification number input terminal 2 as shown in FIG. Then, the third digit “8” of the password “6789” is input from the numeric keypad 5 a of the input unit 5. The main control unit 101 stores and stores the input value “8” in the input value record 206 of the first field.

  Subsequently, as shown in FIG. 12, the customer follows the instruction “Please enter the fourth digit of your password” displayed on the display unit 6 as the second numerical value input operation. The numeric value “9” of the fourth digit of “6789” is input from the numeric keypad 5a. The main control unit 101 stores and stores the input value “9” in the input value record 206 of the second field.

  Similarly, as the third and fourth numerical value input operations, the customer inputs numerical values “6” and “7” in accordance with the instructions displayed on the display unit 6 as shown in FIG. The main control unit 101 stores and stores the input values that are input in the input value records 206 of the third field and the fourth field, respectively.

  As a result of the customer performing the numerical value input operation four times as described above, the input value record 206 of the calculation data 201 includes the input values “8”, “9”, “6” and “7” is sequentially stored in each digit field 202. The first main control unit 101 performs a reverse calculation process (ST12 in FIG. 4) using the input values stored in this manner, and rearranges the input values in the original order and combines them to obtain a password. For example, when the first main control unit 101 obtains the first digit of the password, the first main control unit 101 searches the digit field 202 in which “1” is stored as the operand value in the operand record 205, The input value “6” stored in the input value record 206 of the third field in which the operand is stored is read. Similarly, the main control unit 101 sequentially searches the digit field 202 in which “2”, “3”, and “4” are stored as operand values in the operand record 205, and the digit in which the operand is stored. The input values “7”, “8”, and “9” stored in the input value record of the field 202 are read in order, and these input values are combined in the read order to obtain the password “6789”.

The above description is for the case where a password consisting of a 4-digit number is entered for settlement, but the number is not limited to the case where the password is 4-digit. However, the same processing is possible.
[effect]
Also with the personal identification number input device 1 of the present embodiment, unlike the number keys and personal identification numbers pressed by the operator, the actual personal identification number is not displayed by the input unit 5 during the input operation, and the operator Even if the fingertips are directly viewed, the password is not stolen. Furthermore, the numerical value conversion method required by the personal identification number input device 1 of the present embodiment for the operator is rearrangement of personal identification numbers, and the instructions displayed on the display unit 6 are also simple, so that the operator can input numerical values. Less time is taken into consideration during the operation, and the time at which the operator's fingertips are directly exposed to the danger is also reduced.

It is an external appearance perspective view which shows roughly the PIN code input device of this Embodiment. It is a block diagram which shows the system configuration | structure of a PIN code input device. It is a schematic diagram which shows the data structure of the calculation data which a PIN code input device manages. It is a flowchart of the PIN code input process which a PIN code input device performs. It is a flowchart which shows the detail of the numerical value input process which a PIN code input device performs. It is a schematic diagram of the message which a display part displays. It is a timing chart which shows the transmission / reception process of the data performed between a 1st main control part, a 2nd main control part, and an IC card. It is a timing chart which shows the transmission / reception process of the data performed between a 1st main control part, a 2nd main control part, and a settlement organization computer. It is a schematic diagram which shows an example of the numerical value input operation which a customer performs. It is a schematic diagram which shows an example of the data structure of the data for a calculation which a PIN code input device manages. It is a schematic diagram of the message which a display part displays. It is a schematic diagram which shows an example of the numerical value input operation which a customer performs.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... PIN code input device, 5 ... Input part, 5a ... Numeric keypad, 6 ... Display part, 101 ... 1st main control part, 109 ... 2nd main control part

Claims (4)

An input unit with a numeric keypad;
A display for displaying information;
An information processing unit for executing information processing;
The information processing unit generates a plurality of separated numerical values by separating all digits of the code number into arbitrary digits, and converts each generated separated numerical value by a numerical conversion method that is a predetermined bijection to the operator. Means for calculating the converted numeric value, and sequentially displaying an instruction to input the converted numeric value from the input unit on the display unit;
For each numerical value sequentially input from the input unit , the information processing unit performs an operation opposite to the operation by the numerical value conversion method when calculating the converted numerical value instructing the input to correspond to the separated numerical value Means for determining a numerical value and obtaining an input PIN by combining the determined numerical values ;
A personal identification number input device. The information processing unit further includes means for selecting any one of the numerical conversion methods of an addition operation that adds an integer of 0 or more and a multiplication operation that multiplies a positive integer.
The personal identification number input device according to claim 1.   The personal identification number input device according to claim 1, wherein the separation numerical value is generated by separating the personal identification number for each digit.   The code number input device according to claim 1, wherein the numerical value conversion method is a calculation method for changing a sequence of numerical values constituting the code number.

Images