Mobile Payment Module Neutralization via Issuer Trigger
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a secure method to prevent unauthorized transactions on mobile devices that are lost or stolen, as existing mobile payment systems do not effectively protect user data from misuse.
Innovation Solution
A method is implemented where an issuer system can send a neutralization trigger to a mobile device, disabling the payment module by deleting sensitive data or blocking its functionality, thereby preventing unauthorized transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If mobile payment systems store sensitive data on mobile devices for convenient transactions, then transaction convenience is improved, but security against unauthorized transactions deteriorates when devices are lost or stolen
Solution Approach 1:
The system performs preliminary action by proactively detecting device loss or theft through sensors (accelerometer, GPS, network status) and automatically initiating neutralization of the payment module before unauthorized transactions can occur. This preventive approach eliminates sensitive data while the device is still compromised, preventing future misuse.
Solution Approach 2:
The system implements feedback mechanisms where the payment module continuously monitors device status through sensors and communicates with remote servers. When loss or theft is detected, the system receives confirmation and executes neutralization. This closed-loop feedback ensures security responses are triggered only when actual compromise is detected, maintaining both convenience and security.
2Reliability
If the payment module continuously monitors for device loss to prevent unauthorized transactions, then security is improved, but device complexity and power consumption increase
Solution Approach 1:
The payment module leverages existing multi-functional sensors in the mobile device (accelerometer for fall detection, GPS for location tracking, network module for connectivity status) already present for other purposes. By making these sensors serve dual purposes—both their original functions and security monitoring—the system improves security without adding dedicated hardware or significantly increasing device complexity.
Solution Approach 2:
The payment module performs self-service by autonomously monitoring device status, detecting compromise conditions, and executing neutralization without requiring external intervention or complex centralized control. This self-managed approach reduces system complexity by eliminating the need for constant server communication and complex coordination protocols.
3Reliability
If sensitive data is deleted from the mobile device to prevent unauthorized transactions, then security is improved, but transaction capability is lost requiring reconfiguration
Solution Approach 1:
The system applies discarding and recovering by securely deleting (discarding) sensitive payment data when device compromise is detected, then enabling the user to recover transaction capability by simply re-adding payment information to the wallet application. This approach prioritizes security through complete data destruction while maintaining ease of recovery through simple re-enrollment procedures.
Data Source
AI summary
A method for preventing mobile payment is described. The method comprises receiving an authorization request at an issuer system from a payment module on a mobile device. The authorization request may be based on sensitive data on the mobile device. The issuer system determines whether the mobile device is missing. The issuer system sends a neutralization trigger to the mobile device, and in response to receiving the neutralization trigger, the payment module is disabled.