Email Token Authentication for Secure E-Commerce Checkout

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current online payment systems for website checkouts are cumbersome and insecure, particularly for mobile users, as they often require entering sensitive payment information or using third-party services like PayPal, which can lead to frustration and security concerns.

Innovation Solution

A system that allows customers to complete online checkouts using email, where customer information is stored securely, and a token-based system is used to authenticate and confirm purchases via email, eliminating the need to enter payment information on each transaction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional payment systems (credit card entry, PayPal) are used for online checkout, then payment security can be maintained through authentication, but the checkout process becomes cumbersome and time-consuming due to multiple authentication steps

Engineering Contradiction:
Improvepayment securityVSAvoidcheckout time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-generating authenticated payment tokens during the shopping cart phase. When a customer adds items to their cart, the system proactively creates a secure token that validates both the customer's identity and payment authorization in advance. This preliminary authentication eliminates the need for time-consuming login and payment verification steps at checkout, as the token is already validated and ready for immediate use.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The invention extracts the authentication and payment verification process from the traditional multi-step checkout flow. By separating the authentication step (performed preliminarily when items are added to cart) from the checkout step, the system removes the time-consuming elements from the critical checkout path. The extracted authentication logic is replaced with a simple token presentation, dramatically reducing checkout time while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

2Ease of operation

If customer payment information is collected and stored on vendor systems, then checkout convenience is improved, but security risks increase due to potential data breaches and fraud

Engineering Contradiction:
Improvecheckout convenienceVSAvoidsecurity risks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system introduces a secure token as an intermediary between the customer's payment information and the vendor's system. Instead of storing or transmitting sensitive payment data, the vendor receives only an encrypted token that serves as a proxy. This token contains all necessary authentication and payment authorization information but cannot be reverse-engineered to reveal the customer's actual payment details, thus eliminating security risks while maintaining checkout convenience.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The invention creates a secure copy or representation of the customer's payment authorization in the form of an encrypted token. This token copy contains all the necessary information to process payments and authenticate transactions but is fundamentally different from the original sensitive payment data. The vendor interacts with this safe copy rather than the original payment information, eliminating exposure to security risks while preserving full functionality.

Inventive Principle:
Principle #26Copying

3Reliability

If two-factor authentication systems are implemented, then payment security is enhanced, but user frustration increases due to the burden of managing secondary applications and verification codes

Engineering Contradiction:
Improvepayment securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system merges the authentication and payment authorization processes into a single integrated action. When a customer adds an item to their shopping cart, the system simultaneously performs identity verification, payment authorization, and token generation in one seamless step. This consolidation eliminates the need for separate authentication steps using secondary applications or verification codes, as all security checks are performed preliminarily and combined into the single token creation process.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The system enables self-service authentication by allowing customers to complete verification through simple actions within their existing shopping experience. The authentication process is embedded in the natural flow of adding items to the cart, requiring no additional applications, devices, or complex verification steps. The customer's existing cart interaction serves as the authentication mechanism, making the secure process as convenient as regular shopping.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250111423A1Secure email authentication system for completing e-commerce transactions
Publication Date: 2025.04.03 SWOOP IP HOLDINGS LLC
  • US20250111423A1 patent drawing
  • US20250111423A1 patent drawing
  • US20250111423A1 patent drawing

AI summary

A system for leveraging email to complete an online checkout from a customer accessing a third party vendor website is disclosed. The system may store customer information including a name, email address, shipping address, and billing information. The system may receive a request for a purchase from the third party vendor including a customer email address and an item to be purchased. The system may authenticate the customer email address. The system may send a first email to the customer email address requesting authorization to complete a purchase. The system may receive a second email, from the customer email address, encoded with the token and confirming or canceling the purchase. The system may authenticate the second email using the customer email address and the token. And the system may transmit a confirmation of purchase of the at least one item to the third party vendor website.