Mobile Transaction Authentication Using Layered Dynamic Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing internet mobile-related transactions face challenges in precise authentication due to the use of multiple input data for generating dynamic credentials, making it difficult for servers to identify the specific cause of authentication failures and requiring a dynamic authentication policy that balances security, device configuration, and channel capabilities.
Innovation Solution
A method where internet transactions are authenticated through a set of individual dynamic credentials, each associated with a given input data, using a mobile device to generate credentials based on parameters such as PIN, transaction amount, time stamp, and geographic coordinates, and transmitting these to a multilayer security system for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple input data are used to generate dynamic credentials, then security is improved, but authentication failure analysis becomes difficult
Solution Approach 1:
The patent segments the authentication process by generating multiple independent dynamic credentials, each derived from a single specific input data element (PIN, timestamp, transaction amount, geographic coordinates). This segmentation allows the server to authenticate each credential independently and precisely identify which specific input data caused authentication failure, resolving the contradiction between security and failure analysis difficulty.
2Measurement precision
If individual dynamic credentials are generated for each input data, then authentication precision is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal credential generation mechanism where a single mobile device application handles multiple input data types (PIN, timestamp, transaction amount, geographic coordinates) and generates corresponding dynamic credentials. This multi-functional approach achieves high authentication precision without requiring separate devices for each credential type, thus managing device complexity while maintaining precision.
3Adaptability or versatility
If dynamic authentication policy is implemented, then adaptability is improved, but system complexity increases
Solution Approach 1:
The patent implements a dynamic authentication policy where the server selectively requires different sets of dynamic credentials based on transaction characteristics, device capabilities, and security requirements. For example, low-value transactions may require fewer credentials while high-value transactions require all credentials. This dynamic approach provides adaptability while managing system complexity through conditional logic rather than rigid complex structures.
Data Source
AI summary
Methods and apparatus to authenticate internet transactions upon a set of authentications of user's mobile device generated dynamic credentials. A mobile device generates dynamic authentication credentials and a transaction terminal transmits at least part of them. One or more providers of authentication services receives from the transaction terminal a first dynamic authentication credential generated by the mobile device using a user's PIN, one or more additional dynamic authentication credentials, calculated by the mobile device upon a different input data, and at least one identifier, and authenticates the first dynamic authentication credential and further authenticates, based on authentication rules and associated authentication parameters, one or more of the one or more additional dynamic authentication credentials, sending the result of the authentication, and the internet transaction being authorized or denied based upon that authentication result, where the transaction being authorized always requires a successful result of the authentication of the first dynamic authentication credential.