Mobile Payment Account Activation via Secure Element Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment technologies lack robust authentication methods to ensure that mobile devices initiating transactions are properly authorized, necessitating enhanced verification processes to prevent unauthorized use.
Innovation Solution
A system that authenticates transaction account users via mobile devices by comparing a secret element, stored on the device, with an issuer element using a comparison protocol, enhancing security by validating the user's identity beyond simple credential entry.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional credential verification (PIN, signature) is used for mobile payments, then ease of operation is maintained, but security and authorization reliability are insufficient
Solution Approach 1:
The authentication process is segmented into multiple independent verification stages: device validation (checking device credentials), account validation (checking account credentials), and transaction authorization. This multi-layered segmentation ensures comprehensive security while maintaining user convenience through automated processes.
Solution Approach 2:
The system performs preliminary validation of device and account credentials before the actual transaction occurs. The mobile device validates its credentials against the validation system, and the system pre-authorizes accounts before transactions, ensuring that only properly authorized devices and accounts can complete payments.
2Reliability
If robust multi-step validation is implemented, then transaction security is improved, but processing time and system complexity increase
Solution Approach 1:
Device and account credentials are validated in advance before transactions occur. The mobile device performs self-validation and communicates validation status to the system, so that during actual transactions, already-validated credentials can be quickly recognized and processed, minimizing transaction delay.
Solution Approach 2:
The mobile device autonomously validates its own credentials and manages its authentication state without requiring real-time human intervention or complex multi-factor authentication during each transaction. The device serves itself by maintaining and presenting its validation status.
3Reliability
If device and account credentials are separately validated, then authentication reliability is improved, but device complexity and processing overhead increase
Solution Approach 1:
The validation system is segmented into distinct device validation and account validation components that operate independently but coordinate through standardized protocols. This modular segmentation allows each component to be optimized separately while maintaining overall system reliability.
Solution Approach 2:
The validation system is designed to handle multiple types of credentials (device credentials, account credentials, transaction credentials) through a universal validation framework that can process different credential types using consistent procedures, reducing overall system complexity.
Data Source
AI summary
In various embodiments, a system, method, and computer readable medium of the present disclosure comprises obtaining credential information of a user of the computing device; authenticating the credential information of the user; releasing, in response to authenticating the credential information, a first secret element to a secure element processor of the computing device, wherein the first secret element is associated with a first transaction account; comparing the first secret element with an issuer element associated with the first transaction account; verifying that the user is an authorized user based on the comparison of the first secret element with the issuer element; initiating a payment transaction using first transaction account information with a point of sale terminal; and/or sending an indication that the user has been confirmed as an authorized user to the point of sale terminal to enable authorization of the payment transaction initiated by the computing device.