Offline Mobile Payment Security via Pre-established Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment systems require a network connection for authentication and security operations, making offline transactions impossible, which can be inconvenient or unfeasible in situations without internet access.
Innovation Solution
Implementing offline payment modules on mobile devices that accumulate, encrypt, and store information for secure transactions, allowing payments to be processed without a network connection and later funded when connectivity is restored, using modules like connection monitoring, encryption, risk assessment, and transaction pooling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network connection is required for authentication and security operations, then transaction security is improved, but transaction availability deteriorates
Solution Approach 1:
The system performs authentication and security operations in advance by establishing trust credentials between the mobile device and merchant device before the actual transaction occurs. These pre-established credentials enable offline transactions without requiring network connection at the time of payment, thus maintaining security while improving availability.
Solution Approach 2:
The patent introduces trust credentials as an intermediary mechanism that mediates between the mobile device and merchant device. These credentials act as a trusted intermediary that verifies transaction authenticity without requiring direct network connection to the payment provider during offline transactions, resolving the contradiction between security and availability.
2Measurement precision
If network connection is required for authentication, then authorization accuracy is improved, but operation convenience deteriorates
Solution Approach 1:
The system pre-establishes trust credentials and authorization parameters before offline transactions. The mobile device and merchant device exchange and store authentication data in advance, enabling quick offline authorization without real-time network verification, thus maintaining authorization accuracy while improving operation convenience.
Solution Approach 2:
The patent creates copies of authentication credentials and authorization data that are stored locally on the mobile device and merchant device. These credential copies enable offline authorization decisions without requiring continuous network connection, maintaining security verification accuracy while significantly improving ease of operation during offline transactions.
Data Source
AI summary
Systems and methods are provided for secure offline transactions using a mobile device. The mobile device may include an encrypted data store in which encrypted payment processing data is stored, a risk assessment engine configured to retrieve the encrypted payment processing data and determine, based on the encrypted payment processing data, whether an offline payment is authorized, and a transaction pool configured to store the offline payment after the offline payment has been provided to a recipient. The mobile device may provide the offline payment that has been performed to a payment provider server for completion and/or funding when the mobile device obtains a network connection to the payment provider server following the offline payment.