One-Time Primary Account Number Generation for Mobile Payment Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic payment systems on mobile devices face security challenges due to the exposure of sensitive cardholder data, such as permanent PANs, which can lead to identity theft and unauthorized transactions when used in transactions with untrusted merchants or terminals.
Innovation Solution
Implementing a payment system that generates and uses one-time primary account numbers (PANs) derived from seed data, which can be used instead of the permanent PAN, providing enhanced security by masking the true card identifier and allowing authentication through a card processing system, even in the absence of network connectivity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If permanent PAN is used in mobile payment transactions, then transaction compatibility and processing simplicity are improved, but security against identity theft and unauthorized transactions deteriorates
Solution Approach 1:
The patent segments the account identification function into two parts: a permanent PAN stored securely in the mobile device for long-term use, and temporary PANs generated for each transaction. This segmentation allows the permanent identifier to remain protected while enabling transaction processing with disposable identifiers, thus resolving the contradiction between operational simplicity and security.
Solution Approach 2:
The patent implements disposable temporary PANs that are generated for each transaction and then discarded. These short-living identifiers replace the permanent PAN in transaction communications, ensuring that even if intercepted, they cannot be used for unauthorized transactions. This approach maintains transaction processing simplicity while eliminating the security risk of exposing permanent card identifiers.
2Adaptability or versatility
If permanent PAN is transmitted in transactions, then transaction compatibility with existing systems is improved, but data security and protection against unauthorized access deteriorates
Solution Approach 1:
The patent creates temporary copies of the PAN (temporary PANs) that mimic the format and structure of permanent PANs, allowing them to be processed by existing payment systems without modification. These copied identifiers are then discarded after use, providing system compatibility while preventing unauthorized access to the actual permanent PAN stored in the mobile device.
Solution Approach 2:
The patent introduces temporary PANs as intermediary identifiers that mediate between the secure permanent PAN stored in the mobile device and the external payment processing systems. These intermediaries carry the necessary transaction information while shielding the permanent PAN from exposure, thus maintaining both security and system compatibility.
3Productivity
If cardholder data is stored in mobile devices, then payment convenience and transaction speed are improved, but vulnerability to unauthorized access and data breaches increases
Solution Approach 1:
The patent segments the cardholder data into a permanent PAN stored securely in the mobile device's secure element and temporary PANs generated for transactions. This segmentation enables fast transactions using temporary identifiers while the permanent identifier remains protected, resolving the contradiction between transaction speed and unauthorized access risk.
Solution Approach 2:
The patent uses disposable temporary PANs that are generated quickly for each transaction and then discarded. These short-living identifiers enable rapid transaction processing without exposing the permanent cardholder data stored in the mobile device, thus maintaining productivity while reducing vulnerability to unauthorized access.
Data Source
AI summary
Payment instrument data is received in connection with a transaction, the data including an alternative primary account number (PAN) and an account identifier. A permanent PAN of an account is identified that is based on the account identifier. An alternative PAN associated with the permanent PAN is derived to determine whether the received alternative PAN matches the derived alternative PAN associated with the permanent PAN.