Hash Key Account Access via Backend Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for account access in e-commerce transactions are cumbersome and insecure, as users often need to enter primary account numbers (PANs), card expiration dates, and CVVs, making them vulnerable to fraud, especially when credentials are printed on cards and accessible to fraudsters.
Innovation Solution
The system uses hash keys associated with accounts, where users provide a hash key and their name to initiate transactions, which are then decrypted by a backend to retrieve credentials, providing a one-time passcode for verification, thus omitting the need to display PANs and CVVs on the card, enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users enter PANs, card expiration dates, and CVVs for account access, then transactions can be initiated, but users are vulnerable to fraud and security breaches
Solution Approach 1:
The patent extracts sensitive credentials (PAN, expiration date, CVV) from the card presentation process and replaces them with a hash key. The hash key is a one-way transformation of the PAN that cannot be reversed to obtain the original credentials, thereby removing the security vulnerability while maintaining transaction functionality.
Solution Approach 2:
The patent introduces a hash key as an intermediary between the user's card credentials and the transaction system. Instead of directly exposing PANs and CVVs, the system uses the hash key as a mediator that provides account identification without revealing sensitive information, thus reducing fraud risk while enabling secure transactions.
2Ease of operation
If credentials are printed on cards for user access, then account identification is simplified, but fraudsters can easily access and misuse the credentials
Solution Approach 1:
The patent removes sensitive credential information (PAN, expiration date, CVV) from the card's visible surface and replaces it with a hash key. This extraction eliminates the exposure of actual credentials while maintaining the card's function as an account identifier through the hash key.
Solution Approach 2:
The patent transforms the PAN (Primary Account Number) into a hash key through a one-way hashing function. This parameter change converts the original credential into a form that maintains identification functionality but cannot be reversed to obtain the original sensitive information, thus protecting against fraud while enabling account access.
3Productivity
If users continuously enter account credentials for each transaction, then account access is maintained, but the risk of credential compromise increases
Solution Approach 1:
The patent implements one-time passcodes (OTPs) that are generated for each transaction and become invalid after use. These disposable authentication codes replace reusable credentials, allowing frequent transactions while minimizing security risk since each code can only be used once and expires immediately after validation.
Solution Approach 2:
The patent implements periodic regeneration of authentication credentials through one-time passcodes that are generated for each transaction attempt. This periodic renewal of credentials ensures that even if one code is compromised, it cannot be reused, thereby maintaining security across multiple transactions while enabling high transaction frequency.
Data Source
AI summary
Systems and methods are provided for identifying an account via a hash key specific to the account and presented to a third party, in connection with a network interaction. One example method includes receiving, by a computing device, from the third party, the hash key in connection with the network interaction, determining a primary account number (PAN) for the account based on the hash key, and identifying an issuer of the account based on the determined PAN. The method also includes transmitting a verification request to the issuer, to verify details of the account, and receiving a code from the issuer indicative of the verification. The method further includes intercepting an authorization request for the network interaction based on the authorization request including the hash key and, in response to the authorization request further including said code, directing the authorization request to the issuer.