Dynamic Cardholder Verification at POS for Mobile Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment infrastructure struggles to adapt to the diverse landscape of point-of-sale (POS) devices, leading to inefficiencies and security challenges in transactions, particularly with mobile POS devices, as traditional card networks and issuing banks lack flexibility in configuring cardholder verification methods (CVMs) based on the dynamic nature of these devices and transaction contexts.
Innovation Solution
A system that dynamically configures or reconfigures CVMs at POS devices based on the payment instrument, user device registration, and transaction attributes, allowing for tailored verification methods such as PIN, signature, biometrics, or no verification, depending on risk analysis and device proximity, thereby enhancing security and transaction efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional fixed CVM specifications are used, then security requirements are met, but transaction efficiency and user experience deteriorate due to unnecessary verification steps
Solution Approach 1:
The patent implements dynamic CVM configuration that adapts verification requirements based on real-time transaction attributes, device characteristics, and risk assessments. The system transitions from static, predetermined CVM specifications to dynamic, context-aware verification methods, allowing the CVM to be reconfigured during transaction processing to optimize both security and efficiency.
Solution Approach 2:
The system changes verification parameters based on multiple factors including transaction amount, merchant category, device type, and risk scores. By dynamically adjusting verification parameters rather than applying fixed rules, the system reduces unnecessary verification steps for low-risk transactions while maintaining stringent verification for high-risk scenarios.
2Adaptability or versatility
If dynamic CVM configuration is implemented, then transaction efficiency and security are improved, but system complexity increases
Solution Approach 1:
The patent segments the CVM configuration process into distinct functional modules: transaction attribute analysis, device characteristic evaluation, risk assessment, and verification method selection. This modular segmentation allows each component to handle specific aspects of the dynamic configuration, reducing overall system complexity while maintaining adaptability.
Solution Approach 2:
The system introduces an intermediary CVM configuration layer between the payment terminal and the verification process. This intermediary component receives transaction data, evaluates multiple factors, and determines appropriate verification methods, thereby simplifying the complexity by centralizing the decision-making logic in a dedicated module rather than distributing it throughout the entire system.
3Ease of operation
If verification requirements are reduced for mobile devices, then user experience improves, but security risks increase
Solution Approach 1:
The patent applies different verification quality levels to different device types and transaction contexts. Mobile devices receive optimized verification methods that consider their specific characteristics (such as integrated biometric sensors and device-level security), while stationary terminals may use traditional verification methods. This localized quality adjustment improves user experience for mobile payments without compromising overall security.
Solution Approach 2:
The system implements feedback loops that continuously monitor transaction outcomes, security incidents, and device performance. This feedback mechanism allows the system to learn from actual security events and adjust verification requirements dynamically, ensuring that reduced verification for mobile devices does not lead to increased security risks over time.
Data Source
AI summary
Storing, in a database associated with an issuer, an association between a device identifier of a device of a user and a card identifier of a physical payment card of the user; receiving, by the issuer from a point-of-sale (POS) device via a card network, a request to authorize use of the payment card, the request including the card network and card identifier and generated responsive to interaction between the POS device and the payment card; determining, utilizing the card identifier, that an issuer application has been installed on the device; determining, based on the application being installed and the type of the payment card, a cardholder verification method (CVM) for verifying the payment card, wherein the CVM differs from a default CVM for the card network; and based on determining the CVM, sending, to the POS device, a request for input according to the CVM.