Secure Mobile Payment Processing via Intermediary Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The widespread adoption of mobile payments is hindered by the costly and complex requirements of adding intelligent chips to mobile devices and installing payment processing devices at points of sale, and existing mobile payment systems often lack robust security features.
Innovation Solution
A mobile payment processing system that uses a payment server to facilitate secure electronic payments between payer and recipient terminals without direct communication with the payment server, employing encryption functions to secure payment data transmission and ensuring the security of personal information through pre-stored and pre-defined encryption parameters, allowing for secure and rapid transactions without hardware modifications to the terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If intelligent chips are added to mobile devices and payment processing devices are installed at points of sale, then mobile payment functionality is achieved, but implementation cost and device complexity increase
Solution Approach 1:
The patent introduces a payment server as an intermediary between the payer terminal and the payment processing system. The payment server handles all secure communication and transaction processing, allowing mobile devices to perform payments without embedded intelligent chips or specialized hardware. This mediator approach eliminates the need for complex hardware modifications while enabling mobile payment functionality.
Solution Approach 2:
The patent replaces the traditional mechanical/electronic payment system (requiring intelligent chips and dedicated payment terminals) with a software-based communication system. By using standard mobile communication interfaces and replacing hardware-based security mechanisms with software encryption and server-based authentication, the system achieves mobile payment capability without complex hardware modifications.
2Productivity
If direct communication between payer terminals and payment servers is used, then payment processing speed is improved, but security vulnerability increases
Solution Approach 1:
The patent introduces a payment server as an intermediary that receives encrypted payment data from the payer terminal, processes the transaction, and communicates with the recipient terminal. This intermediary architecture maintains security by keeping encryption keys and sensitive data on the server while allowing rapid processing through efficient server-side authentication and transaction execution.
Solution Approach 2:
The patent implements preliminary encryption of payment data before transmission to the payment server. The payer terminal encrypts payment information using encryption parameters obtained from the recipient terminal, ensuring data security is established in advance of the actual transaction processing, thus maintaining both speed and security.
3Reliability
If encryption functions and pre-stored encryption parameters are used, then security of payment data is improved, but system complexity increases
Solution Approach 1:
The patent uses the payment server as an intermediary that manages all encryption operations. The server stores encryption parameters and handles the complex cryptographic processing, while mobile devices only need to perform simple encryption using parameters received from the server. This mediator approach improves security without requiring complex encryption implementations on the mobile devices.
Solution Approach 2:
The patent uses encrypted copies of payment data that can be transmitted and processed securely. By creating encrypted versions of sensitive information that can be stored and transmitted without exposing the original data, the system achieves security while simplifying the handling of sensitive information throughout the processing pipeline.
Data Source
AI summary
A system for processing payment data includes a payer terminal, a recipient terminal, and a payment server. The payer terminal is adapted to return, to the recipient terminal, encrypted payment request data upon reception of the recipient information transmitted from the recipient terminal, wherein the payment request data comprises payer information, recipient information and a payment amount. The recipient terminal is adapted to forward the encrypted payment request data and the payment amount to the payment server. The payment server is adapted to verify the encrypted payment request data and the payment amount, to perform a payment according to a verification result, and to return encrypted payment result data to the recipient terminal. The recipient terminal is further adapted to return the encrypted payment result data to the payer terminal.


