Cross-Channel Authentication for Cardless Branch Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing banking systems require physical identification documents or cards for authentication, which can be inconvenient and time-consuming, especially when they are not available, and involve privacy concerns with ID scanning.
Innovation Solution
A method and communication network that allows individuals to authenticate themselves using their mobile banking application without physical documents by leveraging a trusted computing system and authentication providers, offloading the authentication process to trusted third-party providers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical ID scanning is used for authentication, then authentication reliability is improved, but authentication time increases and privacy concerns arise
Solution Approach 1:
The patent uses a digital copy of the customer's biometric data (stored in the mobile banking application) instead of requiring the physical original document. The authentication provider compares the live biometric scan against this digital copy, achieving fast authentication without handling physical IDs.
Solution Approach 2:
The patent replaces the mechanical ID scanning process with a biometric authentication system. Instead of physically scanning documents through hardware scanners, the system uses biometric sensors and cryptographic verification to authenticate customers, eliminating the need for ID scanning hardware.
2Adaptability or versatility
If physical ID scanning hardware is installed on ITMs, then authentication capability is improved, but device complexity and cost increase
Solution Approach 1:
The patent introduces an authentication provider as an intermediary service between the ITM and the customer's biometric data. The ITM sends authentication requests to the external authentication provider, which handles the biometric verification and returns the authentication result, eliminating the need for built-in scanning hardware.
Solution Approach 2:
The patent makes the authentication system universal by using a standardized API interface that can work with multiple different authentication providers. The ITM itself becomes hardware-agnostic, capable of supporting various authentication methods through the common authentication provider interface.
3Reliability
If customers must present physical cards or ID, then authentication security is improved, but ease of operation deteriorates when documents are not available
Solution Approach 1:
The patent replaces physical authentication documents with digital copies stored in the customer's mobile device. The biometric template and account information are copied to the mobile banking application, allowing customers to authenticate using their phone instead of carrying physical cards or ID documents.
Solution Approach 2:
The patent enables customers to authenticate themselves independently without needing physical documents. The mobile banking application stores the necessary authentication credentials and can perform self-service authentication at the ITM, giving customers control over their own authentication process.
Data Source
AI summary
A method which detects, by a first computing device, an input event indicating that an individual at the first computing device wishes to authenticate their identity. The first computing device transmits an authentication request (a customer identifier) to a server of the trusted computing system. An authentication provider module that authenticates the identity of the individual independently of the trusted computing system determines that the authentication request has been transmitted to the server. The authentication provider module transmits a notification to a mobile device of the individual using the customer identifier which requests a confirmation that they are attempting to authenticate their identity. The authentication provider module authenticates the identity of the individual. The server receives a response to the authentication request from the authentication provider module and transmits the response to the first computing device to thereby authenticate the identity of the individual at the first computing device.