Contactless Card Multi-Factor Authentication via Backchannel
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Call center security is compromised due to high rates of fraudulent access attempts and data theft, as existing authentication methods are vulnerable to spoofing and phishing, and external risks from hackers monitoring communications.
Innovation Solution
A system utilizing a contactless card with NFC technology for multi-factor authentication, where pre-verified client data is used to generate a cryptogram, which is verified through different communication channels, reducing the risk of malicious interference and ensuring secure access to sensitive customer information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (passwords, personal questions, biometric data) are used over a single communication channel, then the authentication process is simple and fast, but the system becomes vulnerable to spoofing, phishing, and external hacking risks
Solution Approach 1:
The patent introduces a new dimension to authentication by adding a second communication channel (SMS or email) separate from the voice call channel. This dimensional separation allows authentication data to be transmitted through independent pathways, making it difficult for attackers to compromise both channels simultaneously and thus resolving the security vs. complexity contradiction.
Solution Approach 2:
The patent uses an intermediary authentication server that mediates between the client, customer service agent, and authentication data storage. This intermediary coordinates the multi-channel authentication process, managing the complexity centrally while maintaining simple interfaces for end users, thereby resolving the contradiction between security reliability and system complexity.
2Reliability
If multi-factor authentication using different communication channels is implemented, then security against spoofing and phishing is improved, but the authentication process time and procedural complexity increase
Solution Approach 1:
The system performs preliminary authentication actions by sending verification codes through secondary channels before the actual service interaction begins. This preliminary verification establishes security upfront, allowing the main service interaction to proceed smoothly without repeated authentication delays, thus reducing overall time loss while maintaining high security.
Solution Approach 2:
The authentication process is designed to be self-service oriented, where clients automatically receive and enter verification codes without requiring agent intervention. This automation eliminates manual verification steps and reduces authentication time while maintaining security, resolving the contradiction between reliability and time loss.
3Ease of manufacture
If authentication data is transmitted over the same communication channel as the access request, then the system is simple to implement, but the system is exposed to external hacking risks and communication monitoring
Solution Approach 1:
The patent segments the authentication process into separate communication channels: the primary channel for service requests and a secondary channel (SMS/email) for authentication verification. This segmentation isolates sensitive authentication data from the primary communication channel, reducing exposure to hacking risks while maintaining implementation feasibility through standardized multi-channel integration.
Solution Approach 2:
An intermediary authentication server acts as a mediator that securely manages authentication data transmission through separate channels. This intermediary abstracts the complexity of multi-channel security management, making the system easier to implement while effectively protecting against external hacking risks by preventing direct exposure of authentication data on the primary channel.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by preventing unauthorized access and data theft through multi-factor authentication, ensuring that only authorized clients can access sensitive information, thereby reducing the risk of fraudulent activities and data breaches.
Implementation Method 1
The contactless card may include an NFC interface for wireless communication
Data Source
AI summary
A system and method are disclosed that leverage multi-factor authentication features of a service provider and intelligent call routing to increase security and efficiency at a customer call center. Pre-authentication of customer support requests reduces the potential for misappropriation of sensitive customer data during call handling. A contactless card uniquely associated with a client may provide a second factor of authentication via a backchannel to reduce the potential for malicious third-party impersonation of the client prior to transfer of the call to the customer call center. Pre-authorized customer support calls may be intelligently and efficiently routed directly to call center agents, without incurring further delay. During call handling, call center agents may initiate further client authentication processes, including contactless card authentication requests, over one or more different communication channels for authorizing access to sensitive information or to allay suspicion.