Encrypted Credential Caching for Secure Transaction Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing transaction systems face delays and connectivity issues when retrieving payment credentials or tokens from an authorizing entity, especially when the connection between processing computers is poor, leading to failed transactions.
Innovation Solution
A method where a processing computer receives and stores user data along with an encrypted data packet from an authorizing entity, allowing it to decrypt the packet using a second cryptographic key upon user request, enabling secure and efficient transaction processing without persistent storage of sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the processing computer retrieves the user's credential or token from the authorizing entity computer in real-time, then the transaction can be authorized, but the process takes additional time and requires additional processing steps
Solution Approach 1:
The patent applies preliminary action by pre-fetching and caching the user's credential or token from the authorizing entity computer before the actual transaction occurs. The processing computer proactively retrieves and stores the credential in its local memory, so that when a transaction is initiated, the credential is already available for immediate use, eliminating the time delay of real-time retrieval during the transaction process
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of a local cache or buffer memory in the processing computer that stores the credential or token. This intermediary storage layer acts as a mediator between the authorizing entity computer and the transaction processing system, allowing the processing computer to access credentials locally without requiring continuous real-time communication with the authorizing entity computer
2Productivity
If the processing computer stores the credential or token locally for quick access, then transaction processing becomes faster, but the system becomes vulnerable to hacking and security breaches
Solution Approach 1:
The patent applies parameter changes by dynamically adjusting the state of stored credentials through encryption and obfuscation. The processing computer stores credentials in an encrypted format using cryptographic algorithms, changing the parameter of data representation from plaintext to ciphertext. This allows the credential to be stored locally for fast access while maintaining security, as the stored data cannot be read or used without the decryption key
Solution Approach 2:
The patent uses copying by creating a secure replica or representation of the credential that can be stored locally. Instead of storing the actual credential directly, the system creates an encrypted copy or a tokenized version that functions equivalently for transaction purposes but cannot be used if compromised. This copying mechanism enables local storage for speed while mitigating security risks
3Reliability
If the connection between the processing computer and the authorizing entity computer is poor, then real-time credential retrieval fails, but the transaction cannot proceed
Solution Approach 1:
The patent applies preliminary action by proactively caching credentials during periods of good connectivity. The processing computer periodically or on-demand retrieves and stores credentials in its local memory when the connection to the authorizing entity computer is reliable. This pre-caching ensures that when the connection deteriorates or becomes unavailable, the credential is already available locally and the transaction can proceed without interruption
Solution Approach 2:
The patent introduces an intermediary local storage mechanism that decouples the transaction processing from real-time network connectivity. The local cache acts as a mediator buffer that can supply credentials independently of the network connection state, allowing transactions to complete even when the connection to the authorizing entity computer is poor or unavailable
Data Source
AI summary
A method is disclosed. The method includes receiving and storing, by a processing computer, a set of user data associated with a user, and an encrypted data packet from an authorizing entity computer, the encrypted data packet comprising sensitive data associated with the user encrypted using a first cryptographic key. The method includes receiving, from a user device, a request comprising at least some user data in the set of user data, determining the encrypted data packet corresponding to the at least some of the user data, and responsive to determining the encrypted data packet, obtaining a second cryptographic key. The method also includes decrypting the encrypted data packet with the second cryptographic key to obtain the sensitive data, and processing a transaction using the sensitive data or a derivative thereof.