Mobile Payment Module Neutralization via Issuer Trigger
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a secure method to prevent unauthorized transactions on mobile devices that are lost or stolen, as existing mobile payment systems do not effectively protect user data from misuse.
Innovation Solution
A method is implemented where an authorization request is generated on a mobile device, transmitted to an issuer system, and upon detection of the device as lost or stolen, a neutralization trigger is sent to disable the payment module, either by deleting sensitive data or blocking its functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If mobile payment systems store sensitive data on mobile devices for convenient transactions, then ease of operation is improved, but security against unauthorized transactions deteriorates when devices are lost or stolen
Solution Approach 1:
The system performs preliminary actions by establishing a communication channel between the mobile device and issuer system before a loss event occurs. The device continuously attempts to establish communication during authorization requests, so that when loss is detected, the neutralization trigger can be immediately sent through this pre-established channel to disable the payment module before unauthorized transactions occur.
Solution Approach 2:
The system implements feedback by having the mobile device send authorization requests to the issuer system, which responds with authorization decisions. This feedback loop allows the issuer system to detect when a device is lost or stolen based on unauthorized authorization attempts, and subsequently send a neutralization trigger to disable the payment module, creating a closed-loop security mechanism.
2Reliability
If the payment module continuously transmits authorization requests to verify transactions, then transaction monitoring capability is improved, but loss of time increases due to additional communication overhead
Solution Approach 1:
The system applies partial action by having the mobile device attempt to establish communication only during specific authorization request events rather than continuously monitoring. This reduces time loss while maintaining effective monitoring capability, as the device engages in the communication protocol only when a transaction is initiated, allowing the issuer system to detect loss conditions without constant background communication.
Data Source
AI summary
A method for preventing mobile payment is described. The method comprises generating an authorization request, via a payment module, based on sensitive data on a mobile device. The authorization request is transmitted from the payment module to an issuer system. The issuer system sends a neutralization trigger. In response to receiving the neutralization trigger, the payment module is disabled.