Mobile POS App Access Using NFC Payment Credential Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face vulnerabilities in data security and inefficiencies when storing payment credentials in multiple resource provider applications or manually inputting them for transactions, leading to potential data theft and errors.
Innovation Solution
A method and system that registers a user device as a POS terminal associated with a resource provider, using near-field communication to retrieve payment credentials from a credential-storing device and transmit them securely to a server for authorization, bypassing the need for storage on the device or manual input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If payment credentials are stored in each resource provider application, then transaction convenience is improved, but security vulnerability increases
Solution Approach 1:
The patent extracts payment credentials from resource provider applications and stores them centrally in a payment account management system. The credentials are retrieved via API calls to the account management system during transactions, eliminating the need for local storage in each application while maintaining convenient access.
Solution Approach 2:
The patent introduces an account management system as an intermediary between resource provider applications and payment credentials. This intermediary system securely stores credentials and provides controlled access through authenticated API calls, reducing direct exposure of sensitive data in individual applications.
2Reliability
If payment credentials are manually input for each transaction, then security vulnerability decreases, but transaction efficiency deteriorates
Solution Approach 1:
The patent performs preliminary actions by pre-storing payment credentials in the account management system and pre-authenticating users. During transactions, the system automatically retrieves the necessary credentials through authenticated API calls, eliminating manual input while maintaining security through pre-established authentication mechanisms.
3Adaptability or versatility
If payment credentials are stored in multiple locations, then accessibility is improved, but security risk increases
Solution Approach 1:
The patent creates a universal account management system that serves multiple resource provider applications through a common interface. Instead of storing credentials in multiple separate locations, the system provides centralized storage with controlled access to all applications through authenticated API calls, maintaining accessibility while reducing security risks.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by reducing the number of locations where payment credentials are stored, mitigating fraud risks, and improves user experience by eliminating manual input, allowing seamless transactions.
Implementation Method 1
receiving, by the first instance of the resource provider application using the set of platform-specific scripts, the first account credentials from a credential storing device via near field communication capability of the first user device
Data Source
AI summary
Methods and systems for using a mobile device as a point-of-sale (POS) terminal provisioned by a resource provider are provided. A server computer can transmit, to a resource provider computer, a set of platform-specific scripts to be incorporated into a resource provider application provisioned on a user device. The server computer can register each instance of the resource provider application provisioned on any user device as an access terminal associated with the resource provider computer. The server computer can receive, directly from an instance of the resource provider application on a user device, a processing request message to perform a transaction. The server computer can obtain an authorization decision on behalf of the resource provider computer and transmit the authorization decision to the user device and the resource provider computer.