One-Time Token Generation for Controlled Fuel Purchases
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment systems for companies, such as those used in the trucking industry, lack control over purchases made by employees or contractors, are susceptible to fraud, and allow unauthorized use of company funds.
Innovation Solution
A cloud-based payment system generates one-time tokens for authorized purchases, using a user device to request and authenticate transactions based on driver and company identifiers, location, and predefined rules, ensuring compliance with fuel or item limits and expiration times.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a company provides employees with credit or debit cards for purchases, then employees can make purchases related to their job, but the company loses control over what is purchased, when purchases are made, and where
Solution Approach 1:
The payment system is segmented into multiple components: a central server that manages authorization, a mobile application that generates one-time tokens, and a point-of-sale system that validates tokens. This segmentation allows the company to maintain control over purchases while enabling employees to make purchases easily using simple token codes.
Solution Approach 2:
A one-time token serves as an intermediary between the employee's request to purchase and the company's authorization. The token is generated by the mobile application after authentication and is validated by the point-of-sale system, mediating the transaction control without requiring direct company intervention for each purchase.
2Productivity
If a company uses a simple payment card system, then employees can make purchases quickly, but the system is susceptible to fraud and unauthorized use
Solution Approach 1:
The system performs preliminary authentication and authorization actions before the actual purchase occurs. The mobile application authenticates the employee and generates a one-time token in advance, which is then validated by the point-of-sale system. This preliminary action ensures fraud resistance while maintaining purchase speed during the actual transaction.
Solution Approach 2:
The one-time token is a disposable, short-lived authorization object that can be used only once for a single purchase transaction. After use, the token becomes invalid, preventing fraud through token reuse. This disposable nature ensures security without complicating the purchase process.
3Reliability
If a company implements strict control over employee purchases, then fraud is reduced, but the complexity of the payment system increases
Solution Approach 1:
The employee performs self-service authentication through the mobile application, which automatically generates the one-time token based on their credentials. This self-service approach maintains strict purchase control through automated validation at the point of sale without requiring manual approval or complex administrative systems.
Solution Approach 2:
The mobile application serves multiple functions: authenticating the employee, generating the one-time token, and providing purchase history tracking. The point-of-sale system also performs multiple functions including token validation, purchase authorization, and transaction recording. This multi-functionality reduces the need for separate specialized systems.
4Adaptability or versatility
If a company uses traditional payment cards, then employees can make purchases at any location, but lost cards can be used by unauthorized individuals
Solution Approach 1:
The one-time token replaces the traditional reusable payment card with a disposable authorization code that is valid for only one transaction. Even if an unauthorized individual obtains the token, it cannot be used again, eliminating the risk of repeated unauthorized purchases while maintaining flexibility in purchase locations.
Solution Approach 2:
The payment system transitions from a static payment card to a dynamic one-time token that is generated fresh for each purchase transaction. This dynamic approach allows the system to adapt to each transaction independently, maintaining location flexibility while reducing unauthorized use risk through constant regeneration of authorization credentials.
Data Source
AI summary
Systems and methods are disclosed for payment system that uses one-time use tokens for securely facilitating and controlling user purchases using company funds. A user (e.g., driver) may generate a request to make a purchase using a user application. The request may be sent to a server running a payment system that may generate a one-time use token for the purchase of an item (e.g., fuel). The one-time use token may have an expiration time and may only be redeemable at certain locations (e.g., fueling stations) that have been preapproved. The system may send the user application running on the user device the token for purchasing fuel and approved locations. The user may input the token to a controller at an approved location which may request that the server authenticate the token and approve the purchase. Once authenticated and approved, the controller may permit the purchase of the desired item.