Distributed Transaction System Isolating Sensitive Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing transaction methods face challenges in protecting sensitive user data and preventing health risks due to the need for users to interact with potentially contaminated terminal devices, leading to reduced acceptance and security concerns.
Innovation Solution
A distributed transaction system where a backend server and two terminal devices, each running a distinct application frontend, facilitate a transaction by separating the input of transaction data and authorization, ensuring that sensitive data is not shared on the first terminal device, and using near-field communication or Bluetooth for secure data exchange, with an edge cloud server for low latency and quality of service optimization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the further user provides transaction data and authorization directly at the terminal device, then the transaction can be completed efficiently, but the user's sensitive data and health are exposed to risks from the foreign and potentially contaminated terminal device
Solution Approach 1:
The patent introduces a communication network as an intermediary between the terminal device and the user's own device. Instead of the user directly interacting with the terminal device, the terminal device sends authorization requests to the user's device via the communication network, and the user's device returns the authorization. This mediator approach allows the transaction to be completed efficiently while the user never exposes sensitive data or physically contacts the potentially contaminated terminal device.
Solution Approach 2:
The patent segments the transaction process into two separate parts: (1) the terminal device handles transaction initiation and communication, and (2) the user's own device handles sensitive data input and authorization. This segmentation ensures that the user interacts only with their own device, eliminating exposure to foreign devices while maintaining transaction efficiency through coordinated communication between the segmented components.
2Reliability
If the user interacts with the terminal device to provide authorization, then the transaction authorization can be obtained, but the user may become infected via the terminal device operated by multiple users
Solution Approach 1:
The communication network serves as a hygienic intermediary that transmits authorization requests and responses without requiring physical contact. The user provides authorization by interacting with their own device, which communicates the authorization decision to the terminal device through the network. This eliminates direct contact with potentially contaminated surfaces while maintaining secure authentication.
Solution Approach 2:
The patent replaces the mechanical/physical interaction model (user touching terminal device buttons or inserting cards) with an electronic communication model. The terminal device sends electronic authorization requests to the user's device, and the user's device returns electronic authorization responses. This substitution eliminates physical contact entirely, removing the infection risk while preserving authorization reliability.
3Reliability
If the user presents sensitive account data and personal key to the terminal device, then the transaction can be authorized, but the user suffers from discomfort and security concerns
Solution Approach 1:
The user's own device acts as an intermediary that the user trusts completely. Instead of presenting sensitive data to a foreign terminal device, the user's device receives the authorization request from the terminal device via the network and processes the sensitive data locally. The user interacts only with their own trusted device, eliminating discomfort and security concerns while maintaining authorization reliability.
Solution Approach 2:
The patent inverts the traditional authorization flow. Instead of the user actively presenting data at the terminal device, the terminal device passively receives authorization by having the user's device actively send the authorization decision to it. This inversion allows the user to maintain control of sensitive data on their own device while still completing the transaction authorization.
Data Source
AI summary
A method for completing a transaction includes: a backend server connected to a communication network executes an application backend of a transaction application; a first terminal device connected to the communication network via a first connection executes a first application frontend of the transaction application; the first application frontend transmits a transaction request indicating the transaction to be started and a second application frontend and comprising transaction data associated with the indicated transaction to the application backend via the first connection; a second terminal device connected to the communication network via a second connection executes the second application frontend of the transaction application; the application backend transmits an authorization request to the second application frontend via the second connection; the second application frontend authorizes the requested transaction and transmits a transaction authorization to the application backend via the second connection; and the application backend completes the transaction.