Email Token Authentication for Secure E-Commerce Checkout
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current online payment systems for website checkouts are cumbersome and insecure, particularly for mobile users, as they often require entering sensitive payment information or using third-party services like PayPal, which can lead to frustration and security concerns.
Innovation Solution
A system that allows customers to complete online checkouts using email, where customer information is stored securely, and a token-based system is used to authenticate and confirm purchases via email, eliminating the need to enter payment information on each transaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional payment systems (credit card entry, PayPal) are used for online checkout, then payment security can be maintained through authentication, but the checkout process becomes cumbersome and time-consuming due to multiple authentication steps
Solution Approach 1:
The system performs preliminary actions by pre-generating authenticated payment tokens during the shopping cart phase. When a customer adds items to their cart, the system proactively creates a secure token that validates both the customer's identity and payment authorization in advance. This preliminary authentication eliminates the need for time-consuming login and payment verification steps at checkout, as the token is already validated and ready for immediate use.
Solution Approach 2:
The invention extracts the authentication and payment verification process from the traditional multi-step checkout flow. By separating the authentication step (performed preliminarily when items are added to cart) from the checkout step, the system removes the time-consuming elements from the critical checkout path. The extracted authentication logic is replaced with a simple token presentation, dramatically reducing checkout time while maintaining security.
2Ease of operation
If customer payment information is collected and stored on vendor systems, then checkout convenience is improved, but security risks increase due to potential data breaches and fraud
Solution Approach 1:
The system introduces a secure token as an intermediary between the customer's payment information and the vendor's system. Instead of storing or transmitting sensitive payment data, the vendor receives only an encrypted token that serves as a proxy. This token contains all necessary authentication and payment authorization information but cannot be reverse-engineered to reveal the customer's actual payment details, thus eliminating security risks while maintaining checkout convenience.
Solution Approach 2:
The invention creates a secure copy or representation of the customer's payment authorization in the form of an encrypted token. This token copy contains all the necessary information to process payments and authenticate transactions but is fundamentally different from the original sensitive payment data. The vendor interacts with this safe copy rather than the original payment information, eliminating exposure to security risks while preserving full functionality.
3Reliability
If two-factor authentication systems are implemented, then payment security is enhanced, but user frustration increases due to the burden of managing secondary applications and verification codes
Solution Approach 1:
The system merges the authentication and payment authorization processes into a single integrated action. When a customer adds an item to their shopping cart, the system simultaneously performs identity verification, payment authorization, and token generation in one seamless step. This consolidation eliminates the need for separate authentication steps using secondary applications or verification codes, as all security checks are performed preliminarily and combined into the single token creation process.
Solution Approach 2:
The system enables self-service authentication by allowing customers to complete verification through simple actions within their existing shopping experience. The authentication process is embedded in the natural flow of adding items to the cart, requiring no additional applications, devices, or complex verification steps. The customer's existing cart interaction serves as the authentication mechanism, making the secure process as convenient as regular shopping.
Data Source
AI summary
A system for leveraging email to complete an online checkout from a customer accessing a third party vendor website is disclosed. The system may store customer information including a name, email address, shipping address, and billing information. The system may receive a request for a purchase from the third party vendor including a customer email address and an item to be purchased. The system may authenticate the customer email address. The system may send a first email to the customer email address requesting authorization to complete a purchase. The system may receive a second email, from the customer email address, encoded with the token and confirming or canceling the purchase. The system may authenticate the second email using the customer email address and the token. And the system may transmit a confirmation of purchase of the at least one item to the third party vendor website.


