Motion-Based Transaction Authentication Using Sensor Data Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current transaction authentication methods at point-of-sale systems, such as using PINs or one-time-use codes, are insecure and can lead to unauthorized charges, and geolocation-based authentication may be unreliable due to signal attenuation issues.
Innovation Solution
The system activates and compares movement data from merchant and purchaser devices equipped with sensors, such as gyroscopes and accelerometers, to verify that the actions performed on both devices match, thereby authenticating transactions without requiring user input of sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PIN or one-time-use code authentication is used, then transaction authentication is achieved, but security is compromised due to recording and unauthorized charges
Solution Approach 1:
The patent replaces traditional input-based authentication mechanisms (PIN entry, code entry) with motion-based authentication using gyroscopes and accelerometers. The system captures motion data from the user's physical movements and compares it to pre-enrolled motion patterns, eliminating the need for users to input sensitive authentication data that could be recorded or intercepted.
Solution Approach 2:
The system creates a motion profile copy of the user's characteristic movements during enrollment, storing this behavioral biometric template securely. During authentication, the system captures new motion data and compares it against the stored motion profile, verifying the user's identity through motion pattern matching rather than requiring direct input of secret data.
2Reliability
If geolocation-based authentication is used, then location verification is achieved, but reliability is reduced due to signal attenuation issues
Solution Approach 1:
The patent replaces geolocation-based authentication (which relies on satellite signals susceptible to attenuation) with motion-based authentication using onboard sensors. This substitution eliminates dependency on external signal transmission and reception, providing reliable authentication that works independently of signal strength or environmental interference.
3Reliability
If motion data comparison is implemented, then security is enhanced by eliminating PIN input, but device complexity increases due to sensor requirements
Solution Approach 1:
The patent leverages the fact that modern mobile devices already contain gyroscopes and accelerometers for other purposes (screen orientation, step counting, gaming). By repurposing these existing sensors for authentication, the system adds security functionality without requiring additional specialized hardware, thereby minimizing the increase in device complexity.
Solution Approach 2:
The system uses the device's own built-in sensors to perform authentication, eliminating the need for external authentication hardware or infrastructure. The motion data is captured, processed, and verified entirely through the mobile device itself, reducing system complexity compared to solutions requiring additional dedicated authentication devices or infrastructure.
Data Source
AI summary
The present disclosure relates to authenticating transactions based on actions performed on a merchant and a customer device. An example method generally includes receiving, from a point of sale system, data identifying a transaction, wherein the data includes a merchant identifier and a payment account identifier. A transaction system determines, based on the merchant identifier and the payment account identifier, a merchant device and a customer device on which user movement recording is to be activated; and instructs the merchant device and customer device to activate movement recording. The transaction system receives merchant movement data describing a recorded user movement performed using the merchant device and customer movement data describing a recorded user movement performed using the customer device. Upon determining that the data describing the recorded merchant movement data and the recorded customer movement data satisfy predefined criteria, the transaction system processes the transaction using the payment account identifier.