Check Image Masking and Interdiction System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Financial institutions face challenges in protecting sensitive information on check images from unauthorized access, as users can view these images on devices in public places, where others may inadvertently or deliberately capture this information, leading to potential identity theft and fraud.
Innovation Solution
Implementing a system and method for check masking and interdiction, where a financial institution computing system transmits a check image to a user device with masked fields, requiring the user to pass an additional interdiction layer by providing an interdiction factor to unmask the sensitive information, ensuring only authorized users can view the sensitive fields.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If check images are transmitted to user devices for viewing, then users can conveniently access and view check information, but sensitive information on the check images may be exposed to unauthorized personnel leading to fraud and identity theft
Solution Approach 1:
The check image is segmented into multiple fields (e.g., account number, routing number, check number, authorized signature) that can be independently masked or unmasked. This allows selective disclosure of sensitive information based on authentication status, enabling convenient viewing of non-sensitive portions while protecting sensitive fields from unauthorized access.
Solution Approach 2:
The system performs preliminary masking of sensitive fields before transmitting the check image to the user device. This preliminary action ensures that sensitive information is protected by default, and only unmasked after successful interdiction verification, preventing exposure before authentication occurs.
2Loss of information
If sensitive fields on check images are always visible, then users can access all check information without restrictions, but unauthorized personnel can capture and misuse this information for fraudulent transactions
Solution Approach 1:
The visibility state of sensitive fields is made dynamic rather than static. Fields transition from a masked state to an unmasked state based on authentication status. This dynamic control allows the system to adapt information disclosure to the user's authorization level, ensuring security while maintaining necessary access when authenticated.
Solution Approach 2:
The system changes the visibility parameter of sensitive fields based on authentication results. When a user passes interdiction, the visibility parameter changes from hidden to visible for authenticated users only. This parameter change mechanism enables selective information disclosure that maintains security reliability while preventing unauthorized access.
3Reliability
If an interdiction system is implemented to protect sensitive information, then security against fraud is improved, but the system complexity and user authentication requirements increase
Solution Approach 1:
The financial institution computing system performs multiple functions using the same interdiction infrastructure: it authenticates users, verifies interdiction factors, controls field masking/unmasking, and manages check image transmission. This multi-functionality reduces the need for separate dedicated systems, thereby limiting the increase in overall device complexity while maintaining strong security protection.
Data Source
AI summary
A method comprises receiving a request to display a first digital image on a user device associated with a user. The first digital image is representative of a first side of a physical check, and the physical check has sensitive information in a field. Sensitive information is deleted from the first digital image so that the sensitive information is unrecoverable and unretrievable from the first digital image. After deleting the sensitive information from the first digital image, the first digital image is displayed on the user device. In response to determining that the user has failed to pass interdiction, an interdiction factor is received. In response to the interdiction factor matching a stored interdiction factor, the user is passed from interdiction. After passing the user from interdiction, a second digital image is displayed on the user device and the field is then unmasked.