Mobile Payment Token Offline Authorization via Local Network
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment systems require network connectivity to authorize and process transactions using payment tokens, limiting their use in scenarios without internet access.
Innovation Solution
Mobile devices can obtain and store payment tokens, which are then used to facilitate transactions with contactless payment terminals over a local network, eliminating the need for network connectivity to a financial service provider system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network connectivity to financial service provider is required for payment token transactions, then transaction authorization and processing can be performed securely, but the system becomes unavailable in scenarios without network access
Solution Approach 1:
The system performs preliminary actions by obtaining and storing payment tokens on the mobile device before network connectivity is needed. The payment token is cached in the device memory so that when network access becomes unavailable, the stored token can still be used to complete the transaction, thus resolving the contradiction between secure authorization and offline adaptability
Solution Approach 2:
The payment token acts as an intermediary that bridges the mobile device and the financial service provider. Instead of requiring direct continuous network connectivity, the token serves as a mediator that enables transaction processing locally while still representing the user's financial account, allowing offline operation without compromising security
2Productivity
If continuous network connectivity is maintained for payment transactions, then real-time authorization is available, but system complexity and dependency on external networks increases
Solution Approach 1:
The system extracts the essential payment authorization functionality from the continuous network dependency. By obtaining and storing the payment token locally, the critical authorization capability is extracted from the network connection, allowing the device to process transactions independently without requiring persistent network connectivity, thus reducing system complexity while maintaining productivity
3Adaptability or versatility
If payment tokens are stored on mobile device without network connectivity, then offline transactions are enabled, but security risks increase
Solution Approach 1:
The system creates a secure copy of the payment token on the mobile device rather than storing the actual sensitive financial data. The stored token is a localized representation that can be used for transactions but does not expose the underlying account credentials, thus enabling offline capability while mitigating security risks through this copying approach
Solution Approach 2:
The payment token is segmented into specific parameters including expiration date, amount limits, and usage restrictions. This segmentation allows the system to store only the necessary transaction information locally while maintaining security through parameter-based access controls, enabling offline transactions without creating universal security vulnerabilities
Data Source
AI summary
The disclosed embodiments include methods and systems for providing payment token transactions by a mobile device. The mobile device may be operable to obtain a payment token, where the payment token is associated with one or more payment token parameters and the mobile device may be configured to communicate with a financial service provider system over a first network when connectivity to the first network is available to the mobile device. The mobile device may provide the payment token to a contactless payment terminal (CPT) associated with a merchant, during a purchase transaction involving a product provided by the merchant, where the mobile device may communicate the payment token to the CPT over a local network that is different from the first network such that connectivity between the mobile device and the first network is not required.