Mobile Payment Token Security via Device Interaction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional payment processing systems do not efficiently support the involvement of customer mobile devices in transactions, leading to security risks as debit or credit card numbers are exposed, potentially resulting in theft and reputational damage.
Innovation Solution
A method and system that utilize a mobile payment token, including a mobile payment indicator and a unique mobile device identifier, to securely facilitate transactions by replacing the primary account number, with a mobile payment server interacting with the customer mobile device to obtain authorization and process payments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the primary account number is transmitted in transaction messages to process payments, then payment processing can be performed, but the card number is exposed to potential discovery by unintended parties
Solution Approach 1:
The patent introduces a mobile device as an intermediary component between the customer and the payment network. The mobile device contains the primary account number and transmits it through a secure channel during the transaction process, preventing direct exposure of the card number in standard transaction messages while enabling payment processing to proceed normally
2Reliability
If the merchant retains the primary account number on a merchant system or database, then payment processing is enabled, but the card number continues to be exposed to potential discovery if the merchant system is breached
Solution Approach 1:
The patent extracts the primary account number from the merchant system entirely. Instead of storing or transmitting the actual card number through the merchant system, the invention uses a token or reference number that the merchant system can process, while the actual primary account number is securely held only in the mobile device, eliminating the exposure risk at the merchant system level
3Productivity
If conventional transaction message formats are used to process payments, then payment transactions can be completed, but efficient interaction with customer mobile devices is not supported
Solution Approach 1:
The patent implements a dynamic transaction message format that can adapt between conventional formats for standard transactions and an extended format for mobile device interactions. The system dynamically selects and uses the appropriate message format based on whether a mobile device is involved, allowing efficient conventional processing while enabling mobile-specific functions such as notification and confirmation
Data Source
AI summary
In a transaction between a merchant and a customer, a mobile payment token is provided which includes a mobile payment indicator that indicates payment is to be facilitated by interaction with a customer mobile device, and a mobile device identifier that uniquely identifies the customer mobile device. The mobile payment token is provided in a transaction message to a transaction processing component in place of, and consistent with a format of, a primary account number (PAN). The transaction processing component, upon determining the transaction message contains a mobile payment indicator, sends the mobile device identifier to a mobile payment server which uses the mobile device identifier to interact with the customer mobile device to facilitate the payment transaction. Based on a reply from the customer mobile device, the mobile payment server provides information to the transaction processing component to complete the transaction.