Data Exchange Account Provisioning Without Token Relay Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data exchange methods between user devices and terminal devices, such as in payment transactions, often rely on the terminal device to initiate and relay sensitive information, which increases security risks and computational overhead due to the need for intermediate token service validation.
Innovation Solution
Implementing a push model where the user device establishes an NFC connection with the terminal device, encrypts the data exchange payload, and transmits it to a server for validation before sending it to the backend system, thereby eliminating the need for intermediate token service validation and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the terminal device initiates and relays sensitive information in data exchange, then the data exchange can be completed between backend systems, but security risks increase and computational overhead increases due to intermediate token service validation
Solution Approach 1:
The patent extracts and eliminates the intermediate token service from the data exchange process. Instead of having the terminal device relay sensitive information through multiple validation steps, the user device directly transmits encrypted data exchange payloads to the backend system, removing the problematic intermediate validation layer that caused security risks and computational overhead
Solution Approach 2:
The patent segments the data exchange process into distinct phases: the user device encrypts the payload locally, transmits it securely to the backend, and the backend validates it without requiring intermediate token services. This segmentation allows each component to perform its function independently, eliminating the need for complex intermediate validation
2Productivity
If the terminal device relays account information to backend systems, then the transaction can be processed, but the security and privacy of the data exchange deteriorates
Solution Approach 1:
The user device performs preliminary encryption of the data exchange payload before transmission to the backend system. This preliminary action ensures that sensitive account information is protected end-to-end, maintaining both transaction processing efficiency and data privacy since the encryption occurs before the data leaves the user device
Solution Approach 2:
The patent introduces encryption as an intermediary protective layer between the user device and backend system. Instead of directly exposing sensitive account information during transmission, the encrypted payload acts as a secure mediator that allows the backend to process transactions without accessing the actual sensitive data
Data Source
AI summary
Techniques are disclosed for provisioning a data exchange account to a user device. The user device can transmit a request for account provisioning data for a user account with a third-party service provider and then receive encrypted account provisioning data and an ephemeral public encryption key. The user device can then transmit device registration data to a server configured to decrypt the encrypted account provisioning data and register the user device with the third-party service provider. The user device can receive an encrypted data exchange account identifier and decrypting the encrypted data exchange account identifier.