Digital Receipt Authorization Tokens for Privacy-Preserving Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device systems face challenges in managing digital receipts while ensuring privacy and security, as sensitive transaction information is often accessible to third-party servers, compromising user privacy.
Innovation Solution
Implementing an account server that generates and validates authorization tokens to facilitate secure communication between a wallet application and a receipt service provider, allowing optimized digital receipts to be directly transmitted to the wallet application without exposing sensitive information to the account server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensitive transaction information is made accessible to third-party servers for processing, then service functionality is improved, but user privacy and security are compromised
Solution Approach 1:
The patent introduces an account server as an intermediary between the receipt service provider and the wallet application. The account server receives requests from the wallet application, validates authorization tokens, and coordinates information exchange without exposing sensitive transaction details to the receipt service provider. This mediator architecture enables service functionality while protecting user privacy by controlling what information is shared with third parties.
2Productivity
If detailed transaction information is transmitted to service providers, then service quality is improved, but exposure to unauthorized access increases
Solution Approach 1:
The patent segments transaction information into different categories: sensitive information (kept private on the user's device), semi-sensitive information (shared with the account server), and non-sensitive information (shared with the receipt service provider). This segmentation allows the system to provide detailed transaction information for service quality while limiting exposure of sensitive data, thereby maintaining security against unauthorized access.
Solution Approach 2:
The patent changes the parameter of information disclosure by using authorization tokens that control what level of access is granted. The account server validates these tokens to determine whether to share sensitive, semi-sensitive, or non-sensitive information with the receipt service provider. This dynamic parameter control enables service quality improvement while maintaining security through selective information disclosure.
3Reliability
If authorization mechanisms are implemented to protect privacy, then security is improved, but system complexity increases
Solution Approach 1:
The wallet application generates its own authorization tokens and uses them to request information from the receipt service provider through the account server. The account server validates these self-generated tokens without requiring complex external authentication systems. This self-service approach improves security while minimizing system complexity by using simple token-based authentication rather than complex multi-factor authentication systems.
Data Source
AI summary
Techniques for providing optimized digital information including receiving a request for authorization to access a subset of order information that corresponds to a transaction. A account server can generate a first authorization token based at least in part on the request for authorization. The account server can transmit at least the first authorization token to the application of the user device. The account server can receive a verification request comprising a second authorization token. The account server can verify whether the first authorization token matches the second authorization token. In accordance with a determination that the first authorization token matches the second authorization token, the account server can transmit, to the service provider, a verification response that instructs the service provider to provide the subset of the order information that corresponds to the transaction to the application of the user device.