Centralized Authorization System for Transaction Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Client services firms face inefficiencies and security risks in obtaining client consent for transactions due to slow, expensive, and fraud-prone methods such as phone calls and faxes.
Innovation Solution
A centralized authorization system communicably coupled to transaction systems that retrieves user communication preferences and sends approval requests via preferred methods like text messages, emails, or push notifications, automating the approval process and consolidating user approvals across disparate systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized authorization system is implemented, then security and consistency are improved, but system complexity increases
Solution Approach 1:
The patent consolidates multiple authorization systems into a single centralized authorization system that handles authentication for all transaction systems. This merging approach improves security and consistency by eliminating redundant authorization logic and potential vulnerabilities across multiple systems, while the modular design keeps the complexity manageable.
Solution Approach 2:
The centralized authorization system is designed to be universal, handling authentication for various types of transactions (wire transfers, securities trading, bill payments) across different transaction systems. This multi-functional approach improves security without proportionally increasing complexity, as the same core authorization logic serves multiple purposes.
2Speed
If automated electronic authorization is used, then processing speed is improved, but implementation cost increases
Solution Approach 1:
The patent replaces manual authorization methods (phone calls, faxes, mail) with automated electronic authorization systems. This substitution dramatically improves processing speed by eliminating physical communication delays, while the use of standard digital communication protocols keeps implementation costs reasonable compared to maintaining manual processes.
Solution Approach 2:
The authorization system enables users to self-authorize transactions through electronic channels without requiring manual intervention from firm employees. This self-service capability accelerates processing speed significantly while reducing operational costs associated with manual authorization handling.
3Adaptability or versatility
If multiple individual authorization systems are maintained, then system independence is improved, but security vulnerabilities increase
Solution Approach 1:
The patent consolidates multiple independent authorization systems into a single centralized system, reducing the total number of security vulnerabilities that need to be managed. While this reduces system independence, it dramatically improves overall security by eliminating redundant authorization logic and potential attack vectors across multiple systems.
Solution Approach 2:
The centralized authorization system maintains versatility by supporting multiple transaction types and user identities through a universal authorization interface. This approach reduces security vulnerabilities while preserving the ability to handle diverse transaction requirements, effectively balancing security improvement with adaptability.
Data Source
AI summary
A system and method for obtaining user approval for transactions. The system includes an authorization system that is communicably coupled to one or more transaction computer systems that execute at least some transactions that require user approval. When a transaction system is seeking to execute a transaction that requires user approval, the transaction system sends a user approval request to the authorization system. The authorization system then retrieves the user's communication preference from a database and transmits an affirmatively actionable message to the user according to the retrieved communication preference. The messages can include an email with an approval link to click or a text message that the can be replied to. When the authorization system receives confirmation from the user that the user approves the request, the authorization system then transmits approval for the transaction to the appropriate transaction system, which then proceeds to execute the transaction.