Secure Authorization Using Encrypted Records and Dynamic Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authorization systems suffer from latency due to the inherent delays in transmitting authorization request messages through multiple network components, compromising processing speed while maintaining security.
Innovation Solution
A method that involves receiving and authorizing requests using encrypted records and dynamic values with cryptographic keys, allowing direct operation processing within a secure processing computer, bypassing conventional transmission paths, and encrypting records for secure storage and transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization request messages are transmitted through multiple network components (resource provider computer, transport computer, processing network computer), then security is maintained, but latency increases and processing speed decreases
Solution Approach 1:
The system segments authorization data into encrypted records stored locally on user devices, separating the authorization logic from centralized processing. Each user device maintains its own encrypted authorization record, eliminating the need for sequential message transmission through multiple network components while maintaining security through cryptographic protection.
Solution Approach 2:
The system creates encrypted copies of authorization records that are stored locally on user devices. These encrypted records contain all necessary authorization information, allowing devices to process authorization requests locally without transmitting sensitive data through multiple network components, thus reducing latency while maintaining security.
2Reliability
If authorization request messages are transmitted through multiple network components, then security is maintained, but processing speed decreases
Solution Approach 1:
User devices perform self-service authorization processing by locally decrypting and processing authorization requests using encrypted records stored on the device. This eliminates the need for sequential processing through multiple network components, significantly improving processing speed while maintaining security through cryptographic protection of authorization data.
Solution Approach 2:
The system performs preliminary encryption of authorization records and stores them locally on user devices before any authorization request occurs. This pre-prepared encrypted state allows for immediate local processing when authorization requests are made, eliminating transmission delays and improving processing speed while maintaining security.
3Reliability
If encrypted records are stored on user devices, then security is enhanced, but device complexity increases
Solution Approach 1:
The system extracts cryptographic processing capabilities from centralized servers and places them directly on user devices. By implementing local decryption and processing functionality on user devices, the system enhances security through distributed encryption while avoiding the need for complex centralized infrastructure, as the complexity is shifted to standardized device components.
Data Source
AI summary
The system and methods described herein may be utilized to perform operations in a faster and less complex manner than provided by conventional systems. An encrypted record may be stored at a user device. The encrypted record may include entries related to operations that were previously requested by the user device. The encrypted record may have been encrypted using a dynamic value and a key that is associated with an entity associated with the user. A recipient computer of a request by the user device may be configured to utilize the dynamic value provided in the request and the key associated with the entity to derive the encryption key(s) last used to encrypt the record. The recipient computer may decrypt and modify the decrypted record to perform the requested operation while the user device is precluded from doing so.