Blockchain Transaction Authentication via Contextual Cryptographic Fingerprints
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user authentication methods for mobile transactions in 'Card Not Present' (CNP) mode are prone to fraud due to the inability to verify the cardholder's PIN code and the risk of stolen devices being used for fraudulent transactions.
Innovation Solution
A method that records user authentications within a distributed database using contextual cryptographic imprints, which are validated within a chain of blocks to ensure the integrity and uniqueness of the authentication, thereby preventing fraudulent transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC address verification is used for transaction authentication, then device identification is improved, but the system is vulnerable to spoofing attacks and requires users to always use the same device
Solution Approach 1:
The patent creates cryptographic fingerprints (hashes) of the device's unique identifier that are stored on the blockchain. Instead of directly using the raw device identifier for verification, the system uses its cryptographic copy, which maintains the uniqueness and verification capabilities while eliminating spoofing vulnerabilities since the fingerprint is irreversibly derived from the original device identity.
Solution Approach 2:
The patent replaces the mechanical/physical verification method (comparing MAC addresses directly) with a cryptographic verification system. The device identifier is transformed into a cryptographic fingerprint through hashing, and this fingerprint is verified against the blockchain record, substituting direct identifier comparison with cryptographic proof validation.
2Reliability
If SMS-based authentication with password verification is used, then transaction security is improved, but the system requires users to provide phone numbers securely and only works with the user's own bank
Solution Approach 1:
The patent creates a universal authentication system based on blockchain that can be used across different banks and payment providers. The cryptographic fingerprint verification mechanism is not tied to any specific bank's SMS system, allowing users to authenticate transactions with any merchant or service provider that implements the blockchain verification, eliminating the limitation of bank-specific authentication.
Solution Approach 2:
The patent extracts the authentication verification process from the traditional bank-SMS-dependent system and moves it to the blockchain infrastructure. By separating the authentication mechanism from bank-specific systems and anchoring it in the decentralized blockchain, the system removes the dependency on phone number provisioning and bank-specific integration while maintaining security.
3Ease of operation
If cryptographic fingerprints are stored in a centralized database, then authentication verification is simplified, but the system becomes vulnerable to centralized attacks and data breaches
Solution Approach 1:
The patent segments the authentication data storage across multiple decentralized nodes in the blockchain network rather than concentrating it in a single centralized database. Each node holds a copy of the cryptographic fingerprints, distributing the security burden and eliminating the single point of failure that exists in centralized systems.
Solution Approach 2:
The patent introduces the blockchain as an intermediary layer between the authentication system and the underlying data storage. The blockchain acts as a trusted mediator that verifies and stores cryptographic fingerprints in a decentralized, tamper-proof manner, eliminating the need for a centralized database while maintaining verification simplicity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention concerns a method for processing a transaction, the method being implemented by an electronic transaction processing device, accessible via a communication network, the processing method comprising a transaction processing phase. Such a phase comprises: - a step (T10, T20, I10, I20, I21) of obtaining a contextual cryptographic fingerprint, previously generated during the authentication of a user on a communication terminal; - a step (T30, I30) of verifying the validity of the contextual cryptographic fingerprint within a blockchain comprising a set of cryptographic fingerprints; - a step (T40, I40) of validating a transaction when the step (T30, I30) of verifying the validity of the contextual cryptographic fingerprint within a blockchain is positive.