Mobile Device Secure Checkout Using Physical Authentication Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile point of sale (mPOS) systems require retailers to invest in specialized mobile card readers, increasing costs and risking customer credit card information security.
Innovation Solution
A computer-implemented method using a customer's mobile communication device with a hardware processor and physical authentication unit to securely decode physical communication signals, allowing secure payment transactions without the need for a card reader, by using the customer's mobile device to authenticate and process payments through a secure communication connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If specialized mobile card readers are deployed for mPOS transactions, then payment processing capability is improved, but device complexity and cost increase
Solution Approach 1:
The customer's mobile device is made multi-functional by enabling it to perform both communication and payment authentication functions. The device includes a communication interface for receiving transaction data and a physical authentication unit for securing payment information, allowing the same device to handle multiple tasks without requiring separate specialized equipment.
Solution Approach 2:
The system enables the customer to perform payment authentication themselves using their own mobile device, eliminating the need for the retailer to provide specialized card reading equipment. The customer's device self-services the payment processing function by locally storing and authenticating payment information through the physical authentication unit.
2Reliability
If credit card data is read and encrypted by the card reader, then payment security is improved, but risk of data compromise increases
Solution Approach 1:
The sensitive payment information is extracted from the retailer's system and stored locally in the customer's mobile device within a physical authentication unit. This removes the payment data from environments where it could be compromised during transmission or storage at the retailer's location, keeping it secured in the customer's own device.
Solution Approach 2:
The customer's mobile device acts as an intermediary that securely holds and transmits payment information. Rather than the retailer's system directly handling raw credit card data, the device mediates by storing encrypted information in the physical authentication unit and providing it only when needed for transaction verification, reducing exposure to data compromise.
3Productivity
If encrypted payment data is transmitted through multiple servers, then payment processing completeness is improved, but loss of time increases
Solution Approach 1:
Payment information is pre-stored in the physical authentication unit of the customer's mobile device before the transaction occurs. This preliminary action of having authentication data ready in advance eliminates the need for real-time data transmission and processing during the transaction, significantly reducing transaction time while maintaining security.
Solution Approach 2:
The system replaces the traditional mechanical process of transmitting and processing encrypted payment data through multiple servers with a more efficient electronic verification process. The pre-stored authentication data in the physical authentication unit can be quickly verified electronically, substituting the time-consuming multi-server transmission process with faster local verification.
Data Source
AI summary
A computer-implemented method and device for secure checkout in a retail environment such as at a point of sale location in a store. Each of a customer and a sales associate at the point of sale operate respective mobile communication devices that are equipped to exchange signals and receive the same from one another. The sales associate device sends, inter alia, a physical signal causing the customer device to link to a payment application and server, which is followed by a sequence of authentication steps enabled by a physical authentication unit on the customer's device to ensure and confirm authenticated secure transactions.