Multi-Dimensional Hashing for P2P Payment Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Peer-to-peer digital payment networks face challenges in strong authentication due to the reuse of identification means in other transactions, necessitating an enhanced authentication framework that provides visibility into the user's journey and mitigates exposure during resource transfer requests.

Innovation Solution

A system utilizing multi-dimensional hashing, where a user's device is initially registered with a snapshot captured using cryptographic hashing techniques, and subsequent transactions are authorized based on matching hash values within a tolerable limit, requiring additional authentication if the match is outside this limit.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional identification means are used for authentication in peer-to-peer payment networks, then the authentication process is simple and familiar to users, but the authentication strength is reduced because the same identification means are reused in other transactions

Engineering Contradiction:
Improveauthentication strengthVSAvoidauthentication framework complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication framework is segmented into multiple independent components: device fingerprinting module, multi-dimensional hashing engine, biometric verification module, and transaction context analysis system. Each component processes specific aspects of authentication separately, allowing the system to achieve strong authentication through combination rather than relying on a single reused credential

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system transitions from one-dimensional authentication (single credential) to multi-dimensional authentication by creating a unique device fingerprint across multiple dimensions including hardware identifiers, software environment characteristics, biometric data, and transaction behavior patterns. This dimensional expansion ensures that even if one dimension is compromised, authentication strength is maintained through the combination of multiple independent dimensions

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Reliability

If multi-dimensional hashing with device fingerprinting is implemented, then authentication strength is improved, but the complexity of the authentication framework increases

Engineering Contradiction:
Improveauthentication strengthVSAvoidauthentication framework complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary device fingerprinting and baseline multi-dimensional hashing during the device registration phase, storing these reference values in a secure database. This preliminary action allows subsequent transactions to use only lightweight hash comparison operations rather than full re-verification, reducing operational complexity while maintaining strong authentication

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates cryptographic copies (hashes) of the original device fingerprint and biometric data, storing only these derived values rather than the sensitive original data. This copying approach enables repeated authentication operations on the hash copies without exposing or reprocessing the original sensitive information, simplifying the authentication workflow while maintaining security

Inventive Principle:
Principle #26Copying

3Loss of information

If a snapshot of the user's device is captured using cryptographic hashing, then visibility into the user's journey is improved, but the processing time and computational resources increase

Engineering Contradiction:
Improvevisibility into user journeyVSAvoidprocessing time
Core Design Contradiction:
Loss of informationVSLoss of time

Solution Approach 1:

The system changes the parameter of information representation from storing complete device snapshots to storing condensed multi-dimensional hash values. This parameter transformation maintains the essential authentication information while dramatically reducing the computational resources and time required for verification, as hash comparison is significantly faster than full snapshot analysis

Inventive Principle:
Principle #35Parameter changes

4Measurement precision

If facial recognition algorithms are used to identify data files, then the precision of user identification is improved, but the computational complexity and processing time increase

Engineering Contradiction:
Improveuser identification precisionVSAvoidprocessing complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system applies facial recognition algorithms selectively rather than continuously - only during initial device registration and when authentication strength needs to be verified. For routine transactions, the pre-computed device fingerprint and hash comparisons are sufficient. This partial application approach achieves high identification precision when needed while avoiding unnecessary computational overhead during normal operations

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11757649B2Enhanced authentication framework using multi-dimensional hashing
Publication Date: 2023.09.12 BANK OF AMERICA CORP
  • US11757649B2 patent drawing
  • US11757649B2 patent drawing
  • US11757649B2 patent drawing

AI summary

Systems, computer program products, and methods are described herein for enhanced authentication framework using multi-dimensional hashing. The present invention is configured to electronically receive, from a computing device of a user, a resource transfer request; retrieve, from an authentication database, a multi-dimensional hash for a first set of data files for the user and a user identification artifact; retrieve, from the computing device of the user, a second set of data files matching the user identification artifact; initiate an asynchronous hash processing engine on the second set of data files; generate, using the asynchronous hash processing engine, a multi-dimensional hash for the second set of data files; compare the multi-dimensional hash for the first set of data files with the multi-dimensional hash for the second set of data files to determine a match; and authorize the resource transfer request based on at least determining the match.