Mobile Payment Passcode Validation Time Window Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment transaction systems require frequent user authentication, consuming significant computing resources and user interaction, especially when conducting multiple transactions in a short period, and may involve inconvenient challenge questions.
Innovation Solution
A method where a mobile communication device verifies a passcode and generates a validation message indicating the passcode match, which is used by a server computer in a payment processing network to authorize transactions within a specified time window, reducing the need for repeated authentication and interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If frequent user authentication is required for each transaction, then security is improved, but computing resource usage and user interaction increase
Solution Approach 1:
The system performs authentication in advance by verifying the passcode before the transaction time window begins. The mobile device stores the validated passcode and automatically presents it during transactions within the time window, eliminating the need for repeated authentication and reducing processing overhead while maintaining security
Solution Approach 2:
The system creates a copy of the validated passcode in the mobile device's memory after initial verification. This copied authentication data is then reused for multiple transactions within the time window, reducing computing resource usage while maintaining security equivalence to frequent authentication
2Reliability
If passcode verification is performed for every transaction, then security is improved, but user interaction and convenience deteriorate
Solution Approach 1:
The system performs the cumbersome passcode verification action in advance, before the transaction occurs. The user enters the passcode once during setup, and the system stores the validated result for automatic use during transactions, dramatically improving convenience while maintaining security
Solution Approach 2:
The mobile device automatically retrieves and presents the stored passcode for transactions within the time window without requiring user intervention. The system serves itself by automatically authenticating transactions using the pre-validated passcode, eliminating repeated user interaction
3Reliability
If challenge questions are used to verify transactions, then security is improved, but computing resources are consumed
Solution Approach 1:
The system extracts the authentication verification process from the server and moves it to the mobile device. The mobile device independently verifies the passcode and stores the result, eliminating the need for server-based challenge questions during transactions and reducing computing resource consumption
Solution Approach 2:
The system replaces resource-intensive challenge question verification with a lightweight copied authentication token (validated passcode) stored in the mobile device. This copied verification data can be quickly presented without consuming server computing resources, while maintaining equivalent security
Data Source
AI summary
Embodiments of the invention generally relate to mobile payments. For example, an application running on a phone can verify a passcode of a consumer. An indication of whether the passcode was verified and a time associated with when the passcode was verified is then sent to a mobile gateway. Later, when a user conducts one or more transactions, a payment processing network can use the indication sent to the mobile gateway to determine whether a the one or more transactions were conducted within a time window, which can be used to authorize the one or more transactions.