Detected-Capability Mobile Authentication for Private ATM Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current financial transaction systems require human intervention and physical interaction at ATMs, leading to inconvenience and potential security risks, especially for mobile transactions, as customers need to remember multiple credentials and carry cards, and there is a lack of privacy and security in public settings.
Innovation Solution
A system and method for mobile device-based authentication that allows users to initiate and authorize financial transactions remotely by detecting the mobile device's proximity to a local device, using biometric and other authentication methods, enabling secure and private transactions without physical interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional ATM transactions require physical interaction and human intervention, then security can be maintained through direct supervision, but user convenience is reduced and time is lost
Solution Approach 1:
The system enables self-service transactions where the mobile device automatically initiates and completes financial transactions with the local device without requiring human intervention or physical interaction at the ATM. The mobile device performs authentication and transaction execution autonomously, eliminating the need for users to manually operate ATM interfaces or wait for teller assistance.
Solution Approach 2:
The mobile device serves as an intermediary between the user and the local device (ATM). It transmits authentication data and transaction information wirelessly, mediating the interaction between the user's intent and the local device's execution, thereby eliminating the need for direct physical interaction at the ATM while maintaining security through structured data exchange.
2Reliability
If multiple credentials and cards are required for transactions, then security is maintained through layered authentication, but device complexity increases and ease of operation decreases
Solution Approach 1:
The mobile device serves multiple functions: it stores authentication credentials, performs biometric verification, generates authentication data, and communicates with the local device. This multi-functionality consolidates what would otherwise require multiple separate tools (cards, passwords, biometric scanners) into a single universal device, reducing operational complexity while maintaining layered security.
Solution Approach 2:
The system merges multiple authentication mechanisms (biometric data, stored credentials, device identifiers) into a unified authentication process. The mobile device combines these elements and transmits them as integrated authentication data to the local device, reducing the need for users to manage separate physical cards and credentials while maintaining comprehensive security verification.
3Reliability
If physical interaction at public ATMs is required, then transaction authenticity can be verified through direct presence, but privacy is compromised and security risks increase
Solution Approach 1:
The mobile device acts as an intermediary that transmits authentication data wirelessly without requiring the user to physically interact with the public ATM interface. This eliminates exposure to potential shoulder-surfing, camera recording, or malicious physical interaction at the ATM, while still ensuring transaction authenticity through encrypted data transmission and verification protocols.
Solution Approach 2:
The system replaces mechanical physical interaction (inserting cards, typing PINs, pressing buttons at the ATM) with wireless electronic communication. Authentication data is transmitted through wireless interfaces, eliminating the need for physical contact with potentially compromised ATM components and reducing exposure to environmental security risks at public locations.
Data Source
AI summary
In some embodiments, based on a wireless signal of a mobile device (e.g., obtained by a local device) the mobile device and a first authentication capability of the mobile device may be detected. Based on the detection of the mobile device, the mobile device may present access initiation options on a user interface of the mobile device. Based on a selection of a first option of the access initiation options via the user interface to initiate an access request for an access operation with the local device, an authentication request may be generated, where the authentication request is associated with the first authentication capability and with a first authentication tier. For example, the authentication request may be generated based on (i) the first authentication capability being detected as an authentication capability of the mobile device and (ii) the first authentication tier corresponding to an access amount of the access request.