Mobile Payment Authentication Using Verification Identity Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment systems for online purchases require users to log in with usernames and passwords, which can be inconvenient and painful to retrieve or update, especially when users forget their credentials.
Innovation Solution
A mobile payment method that uses a verification identity (VID) input on a web browsing device to connect with a server, which then verifies the VID and sends a token request to a mobile device for payment authentication, creating a cookie for database archiving and facilitating authorization requests through a separate server that interacts with both the web browsing device and mobile payment device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users log in with usernames and passwords for mobile payment, then authentication security is provided, but user convenience deteriorates due to frequent retrieval and updating of credentials
Solution Approach 1:
The patent extracts the authentication credential from the user's memory and stores it securely in a token vault within the mobile device. Instead of requiring users to remember usernames and passwords, the system generates and stores payment tokens locally on the device, eliminating the need for users to retrieve or update credentials while maintaining security through cryptographic protection of the token vault.
2Loss of information
If traditional login systems are used for online payment, then user identification is achieved, but system complexity increases due to password management and session handling
Solution Approach 1:
The patent creates a copy of the authentication mechanism by generating payment tokens that replicate the functionality of usernames and passwords without requiring the complex infrastructure of password management, session handling, and credential verification. The token, once generated, serves as a standalone authentication credential that simplifies the overall system architecture.
3Reliability
If payment tokens are generated through mobile device authentication, then payment security is enhanced, but processing time increases due to additional verification steps
Solution Approach 1:
The patent performs authentication preliminarily by generating payment tokens in advance and storing them securely in the mobile device's token vault. When a payment is needed, the pre-generated token can be immediately used without requiring real-time authentication verification, thus maintaining high security while minimizing processing time during actual transactions.
Data Source
AI summary
A mobile payment method includes the steps of making an online purchase at an online store with payment information being received by a web browsing capable device. The web browsing capable device connects to a server and a payment request including a VID is sent to the server. The server verifies the VID. A mobile payment device is connected to the server. A token request is sent to the mobile device upon verification of the VID. A token response is sent to the server. Information is archived to a database and a cookie associated with the VID is created. The cookie with associated VID is archived. A payment response is sent to the web browsing capable device. An authorization request is sent to the online store, and the online store authorizes the transaction with a payment network.