Mobile Merchant Payment Device Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic payment transactions using mobile devices are vulnerable to fraud due to the potential security weaknesses in cash register applications, which may send incorrect payment information, compromising the transaction process.
Innovation Solution
A mobile merchant communication device with processing circuitry and a communication interface that transmits payment data to a cash register cloud server via a secure channel, authenticates the server, and authorizes transactions, ensuring secure processing through authentication and encryption, and communicates with a payment processing cloud server using secure channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a cash register application from a different vendor is used to send payment information to the payment control application, then the functionality and versatility of the payment system is improved, but the security and reliability of the transaction is worsened due to potential weak points and fraudulent information
Solution Approach 1:
A secure communication channel acts as an intermediary between the cash register application and the payment control application. This channel includes authentication mechanisms that verify the identity of communicating parties and encryption mechanisms that protect the integrity and confidentiality of transmitted payment information, thereby resolving the security concerns while maintaining system versatility
Solution Approach 2:
Authentication is performed preliminarily before the actual payment transaction takes place. The payment control application authenticates the cash register application through the secure channel, verifying credentials and establishing trust before any payment data is exchanged, preventing fraudulent transactions in advance
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A mobile merchant communication device (120) for processing an electronic payment with a customer payment device (110) is disclosed. The mobile merchant communication device (120) comprises a processing circuitry (121) configured to implement a payment control application (121a) for controlling processing of the electronic payment and a communication interface (123) configured to transmit electronic payment data, based on an user input, to a cash register cloud server (150). The communication interface (123) is further configured to receive an electronic payment authorization request from the cash register cloud server (150) via a secure channel, wherein the electronic payment authorization request comprises electronic payment data, in particular an electronic payment amount, and authentication information. The processing circuitry (121) is further configured to authenticate the cash register cloud server (150) based on the authentication information and to authorize further processing of the electronic payment transaction, if the authentication is successful.