Automated Payment Token Updates Using Website Navigation Scripts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face the cumbersome task of updating payment information across multiple platforms after account breaches, which is time-consuming and inefficient.
Innovation Solution
A system and method for automatically updating payment token information on websites using scripts that navigate and update payment information without user interaction, utilizing a 'veneer' webpage to mask the process and securely managing credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If a user manually updates payment information across multiple platforms after a data breach, then the payment information can be updated, but it is time-consuming and arduous
Solution Approach 1:
The system enables self-service by automatically detecting compromised payment tokens and initiating updates without requiring user intervention. The automated system navigates to merchant websites, identifies stored payment information, and replaces compromised tokens with new ones, allowing the system to serve itself in the update process.
Solution Approach 2:
The patent introduces an intermediary system that acts as a mediator between the user's payment token repository and various merchant websites. This intermediary automatically manages the update process by communicating with multiple merchants, retrieving stored payment tokens, and replacing them with new tokens, thereby simplifying the user's task while managing the underlying complexity.
2Reliability
If a user updates payment information on every compromised platform, then security is improved, but the process is time-consuming
Solution Approach 1:
The system performs preliminary actions by proactively monitoring for data breaches and automatically initiating payment token updates before users are even aware of the compromise. When a breach is detected, the system immediately begins the update process across all affected merchants, eliminating the time users would otherwise spend discovering and responding to breaches.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring for data breaches and automatically responding with updates. The system receives feedback about compromised tokens from breach notifications, processes this information, and executes appropriate updates, creating a closed-loop system that rapidly responds to security threats without user intervention.
3Ease of operation
If automated scripts are used to update payment information, then user effort is reduced, but security risks during the update process may increase
Solution Approach 1:
The system extracts and isolates sensitive credentials from the automated update process by storing them in a secure, separate credential repository. The automated scripts reference these stored credentials rather than handling them directly, separating the authentication mechanism from the update logic and reducing security risks associated with credential exposure during automation.
Solution Approach 2:
The system employs disposable, short-lived authentication mechanisms by using time-limited authorization tokens and ephemeral credentials for the automated update process. Rather than using long-term static credentials, the system generates temporary authorization that expires after use, minimizing the window of opportunity for security breaches during the automated update process.
Data Source
Figure 1A
Figure 1B
Figure 2A~2B
AI summary
Various embodiments are generally directed to techniques for generating rules automatically navigate a website and perform updates of payment token information.