Mobile Payment Encryption for Offline Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment handling methods via mobile devices are vulnerable when there is a lack of communication between the device and the bank server, particularly in situations like aircraft flights where communication channels are unreliable or unavailable.
Innovation Solution
A payment handling apparatus and method that uses encryption, specifically one-time passwords generated by a Time-based One-time Password (TOTP) algorithm, to securely convey payment requests and confirmation codes between a purchaser's device and a vendor's device, enabling payment processing even without continuous communication with bank servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If payment is processed through traditional mobile device approaches requiring continuous communication with bank servers, then payment security can be maintained through server verification, but payment processing fails when communication with bank servers is unavailable
Solution Approach 1:
The system performs preliminary actions by generating and exchanging encryption keys between purchaser and vendor devices before payment processing. This preliminary key exchange enables the devices to encrypt and decrypt payment information locally without requiring continuous communication with bank servers, thus maintaining payment processing reliability when servers are unavailable.
Solution Approach 2:
The patent introduces encryption algorithms and cryptographic protocols as intermediaries between the payment devices and bank servers. These intermediaries enable secure local processing of payment information through encryption/decryption operations, allowing the system to adapt to communication failures while maintaining security through cryptographic verification rather than direct server communication.
2Ease of operation
If payment information is transmitted in plain text between devices, then communication simplicity is maintained, but payment security is compromised
Solution Approach 1:
The system changes the parameter of information representation by transforming plain text payment information into encrypted form using cryptographic algorithms. This parameter change maintains communication simplicity at the protocol level while enhancing security through encryption, as the encrypted data appears as random characters that cannot be intercepted or read by unauthorized parties.
Solution Approach 2:
The patent replaces the mechanical approach of plain text transmission with a cryptographic substitution system. Instead of directly transmitting readable payment information, the system uses encryption algorithms to substitute the information with encrypted representations that require specific decryption keys, thus maintaining ease of transmission while eliminating security vulnerabilities.
3Object-affected harmful factors
If encryption is implemented for secure communication between devices, then payment security is improved, but computational complexity increases
Solution Approach 1:
The system applies partial encryption action by encrypting only the critical payment information fields rather than entire communication streams. This selective approach maintains payment security for sensitive data while reducing computational complexity compared to full-system encryption, as only specific parameters requiring protection undergo cryptographic transformation.
Data Source
AI summary
The present invention relates to payment handling apparatus (10) which is operable to effect payment from a purchaser to a vendor. The payment handling apparatus (10) comprises a purchaser's device running a purchaser program (12) which is operable by the purchaser and a vendor's device running a vendor program (16) which is operable by the vendor. The purchaser's device (12) and the vendor's device (16) are in data communication with each other by way of a communication channel (26). The purchaser program is configured to encrypt a payment message and to convey a payment request to the vendor program by way of the communication channel (26). The payment request comprises the encrypted payment message. The payment handling apparatus is configured to encrypt a confirmation message and to convey a confirmation code to the purchaser program in dependence on receipt of the payment request by the vendor program. The confirmation code comprises the encrypted confirmation message.