Device-Linked Wallet for Seamless Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
On-line financial transactions require tedious user authentication processes, such as entering usernames and passwords, which can be cumbersome, especially for small purchases, and lack sufficient security measures to prevent fraudulent use.
Innovation Solution
A 'wallet' system associated with a machine or web browser, allowing users to pre-fund accounts with a payment provider, enabling seamless payments through icons or unique device motions, which enhance security by linking authentication to the device rather than requiring traditional login credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (username/password) are used for online payments, then security is provided, but the payment process becomes tedious and time-consuming
Solution Approach 1:
The system performs authentication preliminarily by associating the user's device identifier with their account during a initial setup phase. This preliminary action stores the device-fingerprint mapping in the payment provider's system, so that subsequent payments can be authenticated automatically without requiring the user to re-enter credentials, thus resolving the contradiction between security and authentication time
Solution Approach 2:
The system enables self-service authentication by using the device itself (through its unique identifier) as the authentication credential. The device automatically provides its identifier to the payment provider, which then retrieves the associated account information and processes the payment without human intervention for authentication, eliminating the time-consuming password entry while maintaining security through the pre-established device-account linkage
2Ease of operation
If traditional authentication methods are used, then account access is controlled, but fraudulent use can still occur and the process is cumbersome
Solution Approach 1:
The system extracts the authentication functionality from the traditional username/password paradigm and replaces it with a device identifier-based approach. By taking out the complex credential verification process and replacing it with simple device identification, the system dramatically simplifies the authentication process while maintaining account access control, thus improving ease of operation without increasing device complexity
Solution Approach 2:
The device identifier acts as an intermediary between the user's device and their account. Instead of directly using passwords or complex authentication protocols, the system uses the device identifier as a mediator to automatically retrieve account information and process payments, simplifying the interaction while maintaining security through the pre-established associations in the payment provider's system
3Productivity
If device-associated wallets are used, then authentication is streamlined, but security against device theft must be addressed
Solution Approach 1:
The system changes the authentication parameter from static credentials (passwords) to dynamic device-specific identifiers. By using parameters that are inherently tied to the physical device (device identifiers, hardware fingerprints), the system enables faster authentication while addressing security concerns - if a device is stolen, the fraudulent user would need to compromise the device's unique identifier or gain access to the payment provider's association database, providing a different security model that balances speed and fraud prevention
Data Source
AI summary
An easy authentication or payment is made by creating an account associated with a particular web browser or device that accesses an on-line page. Payments are made, such as for full-access viewing of an article or viewing content without visible ads, by selecting a payment button on the on-line page. Selection can be with a specific swiping motion or device motion previously defined for the user. Once selected, the payment is made without the user having to authorize or authenticate. The motion can be used independently to authorize or authenticate the user through the device.