Communication Device–User Association via Portable Credential Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying the association between a communication device and a user, particularly for financial transactions, are cumbersome and inconvenient, requiring physical presence and time-consuming processes.
Innovation Solution
A computer-implemented method using a portable credential device, such as a smart card, to derive a token that is validated by a remote server, establishing a secure communication channel to verify the association between the device and the user, eliminating the need for physical presence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional verification methods (physical presence, knowledge questions, MSISDN validation) are used to verify association between communication device and user, then verification security is maintained, but verification process becomes cumbersome and time-consuming
Solution Approach 1:
The patent applies preliminary action by pre-establishing a verified association between the user and their portable credential device (smart card) before the actual verification process. The smart card contains credentials that have already been authenticated and linked to the user's account, so during enrollment or verification, the system simply needs to validate this pre-established association rather than performing time-consuming knowledge questions or physical verification procedures again.
Solution Approach 2:
The patent uses copying by creating a digital representation (token) of the credential from the portable credential device. This token contains encoded information that replicates the authentication capability of the original smart card credential, allowing the system to verify the user's identity through this copied representation without needing to physically handle or re-validate the original credential each time.
2Productivity
If simple verification methods are used to reduce enrollment time, then user convenience is improved, but verification security and reliability are compromised
Solution Approach 1:
The patent introduces an intermediary - the portable credential device (smart card) with embedded credentials - that acts as a trusted mediator between the user and the remote server. The smart card contains authentication credentials that are already verified and linked to the user's account, serving as a reliable intermediary that guarantees the user's identity without requiring complex real-time verification procedures, thus maintaining both speed and security.
Solution Approach 2:
The patent applies parameter changes by transforming the physical smart card credential into a digital token format that can be transmitted electronically. The credential information is encoded into a token with specific parameters (such as encrypted data structures, digital signatures, or authenticated encryption formats) that maintain security while enabling efficient electronic verification, thus changing the physical state from card-based to data-based representation.
3Measurement precision
If physical presence verification is required to ensure device ownership, then verification accuracy is improved, but ease of operation and user convenience are reduced
Solution Approach 1:
The patent replaces the mechanical/physical verification system (requiring user physical presence at a branch or direct interaction with verification officers) with an electronic/digital system. The portable credential device contains credentials that can be electronically read and validated by the remote server, substituting physical presence requirements with cryptographic verification of digitally transmitted tokens, thus maintaining accuracy while eliminating the need for physical presence.
Data Source
Figure 1~5
Figure 2
Figure 3
AI summary
A system and method for verifying an association between a communication device and a user are provided. In a method conducted at a remote server, a token is received from a communication device via a secure communication channel by way of which the communication device is uniquely identifiable by the remote server. At least a portion of the token includes or has been derived from a credential stored within a portable credential device of the user and having previously been associated with the user in a user account. The received token is validated and, if valid, the association between the communication device and the user is verified. In one embodiment the communication device executes an application and the method includes verifying the association between the application and the user. In one embodiment, the user account is a user financial account against which the user may conduct financial transactions.