Interaction Account Tokenization for Secure User-to-User Exchanges
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User-to-user interactions compromise confidentiality and security by exchanging sensitive account information, risking fraud and requiring complex security measures.
Innovation Solution
A tokenization system and method that processes user account data through a tokenization computer, using a tokenization matrix to determine alternate account data based on user interactions, ensuring secure exchange without altering existing interfaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users exchange account names/numbers directly to complete interactions, then interaction completion is enabled, but confidentiality and security are compromised
Solution Approach 1:
The patent introduces a processing network computer as an intermediary that receives interaction requests containing account data, tokenizes the sensitive account information, and returns alternate account data. This mediator enables interaction completion while protecting confidentiality by never exposing raw account numbers to the receiving user device.
Solution Approach 2:
The system creates a copy of the account data in the form of alternate account data (tokens) that can be used for interaction purposes without revealing the original sensitive account information. The tokenized copy maintains functionality while eliminating security risks.
2Reliability
If users securely store account names/numbers of other users, then interaction security is improved, but security capabilities and system complexity increase
Solution Approach 1:
The patent extracts the security burden from individual user devices by removing the requirement for users to implement complex security storage solutions. The tokenization function is extracted and centralized in the processing network computer, which handles all sensitive data transformation.
Solution Approach 2:
The processing network computer acts as an intermediary that assumes the security responsibility for storing and managing account data. Users interact only with tokenized representations, eliminating the need for them to implement secure storage mechanisms.
Data Source
AI summary
A disclosed method includes a tokenization computer receiving, from a processing network computer, a tokenization request message during an interaction between a first user device and a second user device. The tokenization request message comprises first user account data and second user account data. The tokenization computer can select a tokenization option of a plurality of tokenization options in a tokenization matrix based on the first user account data and the second user account data. The tokenization computer can then determine alternate first user account data and alternate second user account data based on the tokenization option. The tokenization computer can generate a tokenization response message comprising the alternate first user account data and the alternate second user account data. The tokenization computer can then provide the tokenization response message to the processing network computer.