Dynamic Optical Code Generation for Secure Payment Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods of electronic payments, particularly using NFC and QR code technologies, face issues such as compatibility limitations, unreliable scanning, and security concerns, which hinder seamless and secure transaction processes.
Innovation Solution
A computer-implemented method and device for user authentication and transaction staging that generates and displays optical codes, such as barcodes, on a user device, allowing for secure and convenient payment transactions by scanning these codes with a merchant device, while also incorporating unpredictable numbers for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If NFC technology is used for contactless transactions, then transaction speed and convenience are improved, but compatibility with electronic devices and merchants is worsened
Solution Approach 1:
The patent introduces an intermediary encoding system that converts transaction data into universally scannable optical formats (barcodes, QR codes). This intermediary layer allows NFC-enabled devices to communicate with non-NFC merchants by translating the interaction into a compatible optical scanning format, thereby resolving the compatibility issue while maintaining transaction speed benefits.
Solution Approach 2:
The system implements multi-functionality by enabling the same user device to perform both NFC transactions (when available) and optical code generation (when NFC is unavailable). This universal approach allows the solution to adapt to different device capabilities and merchant infrastructures, eliminating the binary choice between speed and compatibility.
2Ease of operation
If QR code technology is used for payments, then device compatibility and ease of operation are improved, but security and reliability are worsened
Solution Approach 1:
The patent implements dynamic optically-scannable codes that change with each transaction rather than using static codes. This dynamic nature ensures that each code is valid only for a specific transaction instance, preventing replay attacks and ensuring transaction freshness. The system dynamically generates codes that incorporate transaction-specific data, making them reliable yet easy to use.
Solution Approach 2:
The system changes the parameters of the optical codes by incorporating unpredictable numbers and transaction-specific data into the code structure. This parameter change ensures that each code represents a unique, secure transaction instance while maintaining the simplicity of optical scanning for users.
3Ease of operation
If static QR codes are used for transactions, then ease of operation is improved, but security against replay attacks is worsened
Solution Approach 1:
The patent transforms static QR codes into dynamic, time-sensitive codes that automatically expire after use or after a predetermined time period. This dynamic characteristic eliminates replay attack vulnerabilities while preserving the simplicity of optical scanning, as users still simply scan the code without needing to understand its temporal nature.
Solution Approach 2:
The system implements periodic code generation where new transaction codes are created for each transaction instance and become invalid after a single use or time threshold. This periodic regeneration of secure codes maintains user convenience while systematically preventing replay attacks through built-in expiration mechanisms.
Data Source
AI summary
There is presented a method and a computing device for user authentication and transaction staging on a user device. The method comprises authenticating a user of the user device by a first device verification method and generating transaction credentials at the user device. The method further comprises generating at least one optical code data corresponding to the transaction credentials and displaying the at least one optical code on the user device in a form suitable for scanning by a second device to progress a transaction with the second device.