Access Control Server Authentication for Secure Payment Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for authenticating online transactions, particularly those using credit or debit cards, face challenges in ensuring secure authentication while being compatible with industry standards like 3-D Secure and EMV, and there is a need for enhanced methods to reduce fraud and ensure payment integrity.
Innovation Solution
The implementation of Secure Payment Algorithms (SPA) using an Access Control Server (ACS) to generate an encrypted Accountholder Authentication Value (AAV), which is compatible with 3-D Secure protocols, incorporating various authentication methods such as password-based, chip-based, or PC identification, and utilizing encryption processes like DES to create a Merchant Authentication Code (MAC) for secure transaction authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standardized protocols like 3-D Secure are implemented to authenticate transactions, then fraud reduction and payment security are improved, but system complexity and integration requirements increase
Solution Approach 1:
The patent introduces an Access Control Server (ACS) as an intermediary component that mediates between the merchant system and the card issuer. The ACS receives authentication requests, generates the CAVV using Secure Payment Algorithms, and returns the authenticated value to the merchant. This intermediary approach simplifies the merchant's implementation burden while maintaining strong security through standardized protocols like 3-D Secure.
Solution Approach 2:
The patent extracts the complex cryptographic authentication logic from the merchant system and places it in the issuer's ACS. The merchant only needs to collect authentication data (PAReq) and send it to the ACS, which then performs the secure payment algorithms and generates the CAVV. This extraction reduces the merchant system's complexity while preserving security.
2Adaptability or versatility
If multiple authentication methods are supported (password, chip, PC ID), then adaptability and fraud prevention are improved, but implementation complexity increases
Solution Approach 1:
The Access Control Server is designed with multi-functionality to handle various authentication methods (password-based, chip-based, PC identification) through a unified interface. The ACS receives authentication data regardless of the method used and processes it through appropriate Secure Payment Algorithms, returning a standardized CAVV format that works across all authentication types. This universal approach enables adaptability without proportionally increasing implementation complexity for individual merchants.
Data Source
AI summary
A formatted data structure is provided for conveying the results of ecommerce authentication programs that are used to authenticate a cardholder's on-line transactions. The data structure, which has at most a 20-byte length, is designed to be compatible with 3-D Secure message protocols used in e-commerce. The data structure includes designated fields that include a hash of the merchant's name, identify an authentication service provider, identify the authentication method used, and include a merchant authentication code which ties cardholder information to the transaction. Secure payment algorithms are provided for use by the e-commerce authentication programs to generate authentication results in the desired format. In one secure payment algorithm, a secret key is used to encrypt a concatenation of a cardholder account number with information from designated fields of the data structure. In another secure payment algorithm, a pair of secret keys is used to encrypt a concatenation of the cardholder's account number, card expiration date and service code. In both cases, portions of the encryption results are used to define the merchant authentication code.