Encrypted Token Validation for Electronic Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Customers face inefficiencies and security risks when repeatedly entering personal information for electronic transactions, as manual entry is tedious, error-prone, and exposes data to theft, while browser autofill lacks secure storage and control.
Innovation Solution
A system using an encrypted token on a customer device, managed by an application, which securely stores and transmits personal information to vendors upon request, eliminating the need for repeated entry and enhancing security through encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If customers manually enter personal information for each electronic transaction, then the vendor receives complete and accurate data, but the process becomes tedious and time-consuming for the customer
Solution Approach 1:
The system performs preliminary action by storing customer's personal information in an encrypted token on the customer's device before the transaction occurs. When a transaction needs personal information, the encrypted token is already prepared and can be quickly decrypted and provided, eliminating the need for manual entry each time.
Solution Approach 2:
The system creates a copy of the customer's personal information in an encrypted token format. This encrypted copy can be rapidly transmitted to the vendor without requiring the customer to manually re-enter the information, thus reducing time while maintaining accuracy through the encrypted replica.
2Ease of operation
If customers use browser autofill to store personal information, then data entry is automated, but security is compromised due to lack of secure storage and customer control
Solution Approach 1:
The system introduces an intermediary - an encrypted token managed by a customer-controlled application - between the customer's personal information and the vendor. This intermediary provides secure storage and transmission, giving the customer control over their data while enabling automated access during transactions.
Solution Approach 2:
The system changes the state of personal information from plain text storage to encrypted token format. This parameter change in data representation provides security protection while still allowing automated retrieval and usage by the vendor through controlled decryption processes.
3Reliability
If personal information is transmitted repeatedly across different transactions, then the vendor can validate customers, but the data is exposed to increased security risks
Solution Approach 1:
The system transmits an encrypted copy of the personal information token rather than the actual data itself. This allows the vendor to validate customers repeatedly across transactions while the sensitive personal information remains protected in encrypted form, reducing exposure to data theft risks.
Data Source
AI summary
In a method of validating a customer in an electronic transaction, an electronic interface of a vendor requests a first set of personal information to validate a customer. The first set of personal information is requested as a portion of a transaction between the electronic interface and a customer device used by the customer. Responsive to the customer's authorization, the electronic interface receives from the customer device an encrypted token which includes a second set of personal information which identifies the customer and encompasses at least a portion of the first set of personal information. The encrypted token is provided to the customer device from a third-party via an application on the customer device and is configured with the second set of personal information prior to the transaction. The electronic interface completes the transaction using the second set of personal information decrypted from the encrypted token to validate the customer.