Dynamic Security Code Verification Service for Payment Issuers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing payment systems face challenges in efficiently verifying dynamic security codes, which can burden card/account issuers and make it uneconomic to incorporate dynamic security codes in payment account practices.

Innovation Solution

A service is provided to detect authorization requests containing dynamic security codes, verify these codes, and append the verification results to the authorization requests, which are then routed to account issuers for approval.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If dynamic security codes are incorporated in payment accounts to enhance security, then security against fraudulent transactions is improved, but the infrastructure complexity and operational burden on account issuers increases

Engineering Contradiction:
Improvesecurity against fraudulent transactionsVSAvoidinfrastructure changes required for account issuers
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A validation service is introduced as an intermediary component that handles the complex verification of dynamic security codes. This service receives authorization requests, validates the dynamic security codes against the current expected values, and returns validation results to the authorization system. This mediator approach allows account issuers to implement dynamic security codes without managing the complex verification infrastructure themselves, thereby improving security while reducing their operational burden.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If dynamic security codes are used to improve transaction security, then security is enhanced, but the operational burden on account issuers increases making it uneconomic

Engineering Contradiction:
Improvesecurity against fraudulent transactionsVSAvoidoperational burden on account issuers
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The validation service operates autonomously to perform the complex task of verifying dynamic security codes. It maintains its own logic for generating expected security code values and comparing them against submitted codes. This self-service capability allows the system to provide enhanced security functionality without requiring account issuers to invest significant operational resources in managing the verification process, thereby making the implementation economically viable.

Inventive Principle:
Principle #25Self-service

3Reliability

If dynamic security code verification is performed for each authorization request, then security is improved, but the processing time and efficiency decrease

Engineering Contradiction:
Improvesecurity verificationVSAvoidtransaction processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The validation service performs preliminary actions by pre-computing and maintaining the expected dynamic security code values in advance. When an authorization request arrives, the service can quickly compare the submitted code against the pre-computed expected value rather than performing complex real-time generation and verification. This preliminary preparation significantly reduces the processing time required for each verification operation, thereby maintaining high transaction processing efficiency while ensuring robust security verification.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12314946B2Dynamic security code authorization verification service
Publication Date: 2025.05.27 MASTERCARD INT INC
  • US12314946B2 patent drawing
  • US12314946B2 patent drawing
  • US12314946B2 patent drawing

AI summary

A method includes receiving a request to verify a dynamic security code included in a transaction authorization request message. The transaction authorization request message was generated in connection with a payment account transaction. The method further includes performing a verification process with respect to the dynamic security code to generate a verification result. In addition, the transaction authorization request message may be modified by adding the verification result to the transaction authorization request message. Also, the modified transaction authorization request message may be transmitted to an issuer of a payment account designated for use in the payment account transaction.