Asynchronous OTP Authentication for Contactless Digital Wallet Payments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing contactless payment systems require manual input of PINs or authentication codes, which are inconvenient and pose security risks, and there is a need for secure authentication methods that eliminate the need for such inputs.
Innovation Solution
The system employs asynchronous authentication using near-field-communication between a payor device and a payment terminal, involving a payment network validation server that generates and verifies one-time-passwords (OTPs) to authenticate transactions without requiring manual PIN entry, ensuring secure transaction completion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual PIN or authentication code input is required at the POS terminal, then transaction security is improved, but ease of operation deteriorates and wait time increases
Solution Approach 1:
The patent extracts the authentication code generation function from the POS terminal and relocates it to the payor's mobile device. The mobile device generates and stores authentication codes locally, eliminating the need for manual input at the terminal while maintaining security. This resolves the contradiction by removing the cumbersome manual input step while preserving the security function through automated code presentation.
Solution Approach 2:
The mobile device performs self-service by automatically generating, storing, and presenting authentication codes without requiring manual user input at the POS terminal. The device manages its own authentication credentials and presents them on-demand, eliminating the need for users to manually type PINs or codes while maintaining security verification.
2Reliability
If manual PIN or authentication code input is required at the POS terminal, then transaction security is improved, but wait time deteriorates
Solution Approach 1:
The authentication code is generated and stored in advance in the mobile device before the transaction occurs. This preliminary generation eliminates the need for real-time code creation or manual input during the transaction, significantly reducing wait time while maintaining security through pre-generated valid authentication codes.
Solution Approach 2:
The mobile device automatically presents the stored authentication code to the terminal without requiring user input or manual processing time, eliminating the delays associated with manual PIN entry while preserving security verification.
3Ease of operation
If contactless payment without authentication is used for transactions under predefined value, then ease of operation is improved, but transaction security deteriorates
Solution Approach 1:
The patent applies different authentication mechanisms based on transaction characteristics. For low-value transactions, a simplified authentication code is used, while for higher-value transactions, more robust authentication methods are applied. This local differentiation maintains ease of operation for small purchases while preserving security for larger amounts.
4Ease of operation
If digital wallet contactless communication is used, then ease of operation is improved and wait time is reduced, but authentication security deteriorates without proper verification
Solution Approach 1:
The patent introduces an intermediary authentication code that bridges the gap between contactless convenience and security verification. The mobile device generates this intermediary credential, which is then verified by the terminal, providing automated security verification that maintains both ease of operation and authentication security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method enables secure, contactless payment transactions by verifying transaction and identity through OTPs, enhancing security and convenience by eliminating the need for manual authentication inputs.
Implementation Method 1
Near field communication refers to a contactless-type short-range wireless communication that operates at a frequency bandwidth of 13.56 MHz
Data Source
AI summary
The invention provides systems, methods and computer program products for asynchronous authentication of digital wallet based payment transactions. The invention enables secure authentication of contactless payment card based payment transactions that have been implemented through contactless communication between a payor device and a payment terminal device using near-field-communication. In various embodiments, the invention provides methods, systems, servers, and computer program products for authentication of a contactless communication protocol based digital wallet payment transaction, as substantially described herein.