NFC Payment Authentication via Data Capture and Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current payment authentication methods, such as PIN entry and user identity verification, are insufficient to prevent fraudulent transactions due to human error or compromise of personal identification numbers.
Innovation Solution
The system uses near field communication (NFC) to capture payment instrument data from a contactless device, comparing it with stored data to authenticate the user, providing a strong second authentication factor and ensuring the user physically possesses the payment instrument.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (PIN entry, identity verification) are used, then the authentication process is simple and quick, but the security against fraudulent transactions is insufficient
Solution Approach 1:
The authentication process is divided into two distinct stages: enrollment (where payment instrument data is captured and stored) and verification (where the captured data is compared with presented data). This segmentation allows the system to implement strong security without requiring complex authentication during every transaction, as the heavy lifting is done during the initial enrollment phase.
Solution Approach 2:
The system performs preliminary authentication by capturing and storing payment instrument data (such as card images, CVV, expiration dates) during an enrollment phase before the actual transaction occurs. This pre-captured data serves as a reference for subsequent quick verifications, enabling both strong security and fast transaction processing.
2Reliability
If payment instrument data is captured and stored for verification, then fraud prevention is enhanced, but data storage and processing requirements increase
Solution Approach 1:
The system extracts only the essential payment instrument data elements needed for verification (such as card number, CVV, expiration date, cardholder name) and stores them separately from the actual payment transaction data. This extraction approach captures only what is necessary for authentication, minimizing data storage requirements while maintaining strong fraud prevention capabilities.
Solution Approach 2:
Instead of storing sensitive payment card data in its original form, the system creates verified copies of the payment instrument information during enrollment and stores these copies for comparison during transactions. This copying mechanism enables fraud prevention by having a reference version to compare against, while reducing the need to repeatedly handle and store sensitive original data.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly reduces fraudulent transactions by ensuring the user is authenticated through possession of a valid payment instrument, enhancing transaction security without relying solely on PINs or user identity verification.
Implementation Method 1
a near field communication (NFC) device captures payment instrument data, such as card data, from a contactless device
Data Source
AI summary
A method and apparatus for authentication of a user is described. A system can include a memory and a processor, where the processor identifies a trigger event corresponding to an application executed by the processor of the system. Then, in response to identification of the trigger event, the processor causes an authentication process to execute on the application, including prompting the user to provide a payment instrument information via the NFC device of the system. The processor then determines if the received payment instrument information is designated as an authentication instrument for the user, in response to receipt of the payment instrument information via the NFC device of the system, determine. Additionally, in response to a determination that the received payment instrument information is designated as the authentication instrument for the user, the processor authenticates the user.