IoT Transaction Authorization Using User-Approved Operating Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices capable of autonomous transactions are vulnerable to fraud and lack adequate security and performance capabilities, particularly in Cardholder-Not-Present transactions.
Innovation Solution
A method and system for configuring IoT devices to perform autonomous tasks by sending operating parameters to a user for approval, registering user-approved parameters, and using an IoT authorization device to check compliance with these parameters during transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If IoT devices perform autonomous transactions without user involvement, then transaction speed and convenience are improved, but security and fraud vulnerability worsen
Solution Approach 1:
The system performs preliminary actions by obtaining user approval for operating parameters before autonomous transactions occur. The user approves transaction limits, merchant categories, and time windows in advance, creating a pre-established authorization framework that enables fast autonomous execution while maintaining security oversight.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring transaction parameters against pre-approved limits and providing user notifications for exceptional cases. This closed-loop feedback ensures that autonomous transactions remain within authorized boundaries while maintaining high-speed operation for routine transactions.
2Reliability
If IoT devices are configured with strict security parameters, then transaction integrity is improved, but device complexity and configuration difficulty worsen
Solution Approach 1:
The system achieves universality by implementing a standardized parameter approval framework that works across diverse IoT devices and transaction types. A single configuration interface handles multiple security parameters (transaction limits, merchant categories, time windows) uniformly, reducing configuration complexity while maintaining comprehensive transaction integrity control.
3Reliability
If user approval is required for all transactions, then security is improved, but transaction time and user burden worsen
Solution Approach 1:
The system applies partial action by requiring user approval only for critical security parameters once, rather than for every transaction. This partial approval approach covers the majority of routine transactions without repeated user intervention, significantly reducing transaction time while maintaining security through the pre-established parameter framework.
Data Source
AI summary
A method of operating an Internet of Things (IoT) device, the IoT device capable of communicating with a third-party system in order to perform an autonomous task subject to authorisation by an IoT authorisation device, the method comprising: sending operating parameters relating to the autonomous task to a user for approval; receiving user-approved operating parameters for the autonomous task; configuring the IoT device to perform the autonomous task within the user approved operating parameters; registering the user approved operating parameters with the IoT device management server to enable the IoT authorisation device to check that the IoT device is operating within the user-approved operating parameters when it performs an autonomous task with the third-party system.