Online Access Validation for Secure Device Functionality
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face inefficiencies in securely using native payment credentials for online transactions, particularly in validating online access to secure device functionality for electronic devices with NFC components.
Innovation Solution
A method involving commercial and administration entity subsystems to validate online resources, generate validation data, and secure transaction data, ensuring secure transactions between electronic devices and merchant or processing subsystems through registration, validation, and secure data communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If validation of online access to secure device functionality is implemented, then security is improved, but device complexity increases
Solution Approach 1:
A validation server is introduced as an intermediary component between the electronic device and the secure functionality. The server receives validation requests from the device, performs validation using stored registration data, and returns validation results. This mediator approach allows the complex validation logic to be centralized in the server rather than embedded in the device, thereby improving security while managing device complexity.
Solution Approach 2:
Registration data is pre-stored in the validation server before actual transactions occur. This preliminary action of pre-validating and storing merchant or processing subsystem information allows for rapid validation during transactions without requiring complex real-time verification procedures, thus improving security efficiency while reducing operational complexity.
2Reliability
If validation requests and validation data communication are implemented, then transaction security is improved, but loss of time increases
Solution Approach 1:
The validation server pre-stores registration data for merchants or processing subsystems before transactions occur. This preliminary data preparation eliminates the need for complex real-time validation queries, allowing the server to quickly compare registration data against validation requests and return results rapidly, thereby reducing transaction time while maintaining security.
Solution Approach 2:
Instead of requiring continuous complex verification during transactions, the system creates a simplified copy of the validation process by pre-computing and storing validation results in registration data. This copying approach allows for rapid retrieval and comparison during actual transactions, reducing the time required for security validation.
Data Source
AI summary
Systems, methods, and computer-readable media for validating online access to secure device functionality are provided that may use shared secrets between different subsystems and limited use validation data.