Mobile Middleware for Secure PIN-Debit Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The widespread adoption of PIN-Debit payments for eCommerce and mobile wallet transactions is hindered by the lack of adequate security measures for protecting cardholder PINs, requiring significant changes to existing networks and infrastructure.
Innovation Solution
A system and method for processing PIN-debit transactions that allows for secure authentication using a mobile device, enabling PIN-debit payments without significant modifications to existing Debit Networks, point-of-sale equipment, or eCommerce transaction sites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PIN-Debit transactions are implemented for eCommerce and mobile wallet payments, then transaction security is improved, but infrastructure complexity and modification requirements increase significantly
Solution Approach 1:
The patent introduces a mobile device as an intermediary authentication tool that bridges the gap between traditional PIN-Debit security requirements and modern eCommerce/mobile wallet transactions. The mobile device captures and transmits authentication data (including PIN verification) without requiring merchants to install specialized PIN capture equipment, thus maintaining security while reducing infrastructure complexity.
Solution Approach 2:
The patent replaces the traditional mechanical PIN pad system (physically attached to POS terminals) with a software-based mobile device system. Instead of requiring physical encrypted PIN pads at merchant locations, the system uses mobile devices with captured authentication data to verify PINs remotely, substituting mechanical infrastructure with software-based solutions.
2Reliability
If encrypted PIN pads are required at all point-of-sale locations, then PIN protection is improved, but device complexity and deployment costs increase
Solution Approach 1:
The patent extracts the PIN capture and verification function from the traditional POS terminal environment and relocates it to mobile devices. Instead of requiring encrypted PIN pads to be physically attached to every POS terminal, the system captures authentication data on mobile devices and processes PIN verification remotely, removing the complex hardware requirement from the point-of-sale location.
Solution Approach 2:
The patent creates a virtual copy of the PIN pad functionality within mobile devices. Rather than requiring physical encrypted PIN pads at merchants, the mobile device replicates the authentication capture capability through software, allowing PIN verification to occur remotely while maintaining the security functions traditionally provided by physical PIN pads.
3Ease of operation
If signature debit is used for online purchases, then ease of operation is improved, but fraud risk increases
Solution Approach 1:
The patent implements preliminary authentication by capturing and verifying the cardholder's PIN through the mobile device before the transaction is authorized. This pre-verification step occurs during the authentication phase, allowing the transaction to proceed with both the convenience of signature debit (no physical signature required online) and the security of PIN verification, preventing fraud before it occurs.
Solution Approach 2:
The mobile device serves as an intermediary that enables PIN verification for online transactions without requiring the merchant to have specialized equipment. The mobile device captures the authentication data and communicates with the authentication server, bridging the gap between the convenience of online signature debit and the security of PIN verification, thereby reducing fraud risk while maintaining ease of operation.
Data Source
AI summary
This invention relates to systems and methods for authenticating transactions using a mobile device based primarily on the introduction of a layer of middleware and wherein the Payment Networks, Merchants, Issuing Banks, Credit Reporting Bureaus, Insurance Companies, Healthcare Providers may customize the implementation of the services based on individual strategy and consumer preferences.