Dynamic Authorization System for Secure Mobile Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing interactive computing environments face security challenges in online transactions, particularly with mobile devices, as authorization elements can be intercepted or stolen due to insecure wireless transmissions and storage on devices lacking security features.
Innovation Solution
An identification-and-authorization system that communicates between host servers and telecommunication providers to securely manage authorization elements, generating dynamic authorization data structures and presenting masked or transformed elements to the user, reducing the need for storage on the mobile device and minimizing exposure to interception.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authorization elements are stored on mobile devices for online transactions, then ease of operation is improved, but security is worsened due to interception and theft risks
Solution Approach 1:
The patent extracts authorization elements from the mobile device environment and stores them securely on remote servers. The system retrieves authorization elements from a data structure on the server in response to user requests, eliminating the need for devices to store sensitive credentials locally. This resolves the contradiction by maintaining operational convenience while removing security vulnerabilities associated with local storage.
Solution Approach 2:
The patent introduces an intermediary authorization system that acts as a mediator between users and online services. This system manages authorization elements centrally on secure servers, using data structures that store credential information remotely. The intermediary approach allows devices to operate conveniently without directly handling sensitive data, thus improving security while maintaining ease of use.
2Ease of operation
If authorization elements are transmitted wirelessly to mobile devices, then ease of operation is improved, but security is worsened due to interception on insecure networks
Solution Approach 1:
The patent extracts the transmission of authorization elements from the wireless communication channel to a secure server environment. Instead of transmitting credentials to devices over potentially insecure networks, the system maintains authorization elements on remote servers and retrieves them only when needed through controlled server-side processes. This eliminates exposure to network interception while preserving operational convenience.
3Reliability
If authorization elements are masked or transformed before presentation, then security is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complexity of authorization element management from mobile devices and relocates it to server-side systems. The data structure storing authorization elements resides on remote servers, handling masking and transformation operations centrally. This approach improves security through sophisticated credential protection while keeping device complexity minimal, as devices only interact with the authorization system through standard communication protocols.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
In some aspects, a computing system can obtain, from a host server, a data network identifier that identifies a mobile device involved in an online transaction within an interactive computing environment provided by the host server. The computing system can also obtain, from a telecommunication provider server, a credential corresponding to the data network identifier. The computing system can match the credential to a set of authorization elements. Each authorization element can allow the mobile device to access a function for advancing the online transaction within the interactive computing environment. The computing system can generate a dynamic authorization data structure that includes the authorization elements. The computing system can cause the host server to advance, responsive to receiving a selection from the mobile device identifying one of the authorization elements, the online transaction within the interactive computing environment.