Device Authentication Identifier via Challenge-Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices face challenges in authenticating legitimate users during transactions, leading to potential fraudulent activities as non-approved individuals can intercept and misuse transaction information.
Innovation Solution
A computer-implemented method and system for authenticating devices by generating and verifying a device authentication identifier through a challenge-response mechanism, integrating with transaction processing to assess and update a device score based on transaction outcomes, thereby enhancing transaction security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If device authentication is implemented during transactions, then transaction security is improved, but transaction processing complexity increases
Solution Approach 1:
The system performs device authentication in advance by issuing device authentication identifiers and establishing device scores before transactions occur. This preliminary authentication mechanism allows the system to verify device legitimacy upfront, reducing the need for complex real-time verification during transactions while maintaining high security standards.
Solution Approach 2:
The patent introduces device authentication identifiers and device scores as intermediary elements that mediate between the device and transaction processing system. These intermediaries carry authentication information through the transaction flow, enabling security verification without requiring complex direct authentication protocols at each transaction step.
2Reliability
If device authentication identifiers are verified during transactions, then fraudulent transactions are reduced, but transaction processing time increases
Solution Approach 1:
Device authentication identifiers are issued and device scores are established before transactions occur. This preliminary action ensures that authentication data is already available when transactions are processed, eliminating the need for time-consuming real-time authentication verification during transactions while maintaining fraud detection capability.
Solution Approach 2:
The system uses device scores as a feedback mechanism that reflects historical authentication outcomes and device behavior patterns. This feedback allows the system to quickly assess device legitimacy during transactions based on pre-established data, reducing verification time while maintaining effective fraud detection through learned patterns from past transactions.
Data Source
AI summary
Disclosed are non-limiting methods for authenticating devices, including receiving a request for a device authentication identifier, transmitting a device authentication request message via a frame embedded in a webpage of a merchant website, the device authentication request message including challenge data associated with a challenge, receiving a device authentication response message via the frame embedded in the webpage of the merchant website based on the device authentication request message, the device authentication response message including challenge response data associated with a challenge response, transmitting the device authentication identifier message based on the device authentication response message, receiving a transaction request message for a transaction, including the device authentication identifier and transaction data associated with the transaction, determining the device score based on the device authentication identifier, and generating an authorization request message based on the transaction data and the device score. Systems and computer program products are also disclosed.