Pattern-Based Authentication for Payment Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Digital payment systems face security challenges due to the risk of identity theft and PIN theft, particularly through shoulder surfing, as current security measures rely on easily guessable PINs that are not secure against unauthorized access.
Innovation Solution
Implementing pattern-based authentication using a pre-registered sequence of patterns generated within a defined time period, which is unique to the user and not visible on the screen, to authenticate payment transactions, providing an additional layer of security against unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a PIN-based authentication system is used, then the payment process is simple and quick, but the security is weak and susceptible to shoulder surfing and PIN theft
Solution Approach 1:
The authentication process is segmented into multiple independent components: pattern recognition for authentication, PIN for verification, and time-based validation. This segmentation ensures that compromise of one element does not compromise the entire authentication system, resolving the contradiction between simplicity and security.
Solution Approach 2:
A pattern-based intermediary authentication mechanism is introduced between the user and the PIN. The pattern serves as a mediator that must be recognized before the PIN can be entered, adding a security layer without requiring the user to memorize complex credentials while maintaining ease of use through intuitive pattern recognition.
2Speed
If a 4-6 digit PIN is used, then the authentication is fast and simple, but the PIN can be cracked by shoulder surfers who can read 2-3 digits
Solution Approach 1:
The authentication is moved from a one-dimensional numeric code (PIN) to a two-dimensional pattern recognition system. Users draw patterns (e.g., zigzag, spiral, random shapes) on a touch interface, and the system recognizes the pattern geometry. This dimensional transition makes shoulder surfing ineffective as the pattern cannot be read or guessed, while maintaining fast authentication through intuitive pattern recognition.
3Reliability
If pattern-based authentication is implemented, then the security against shoulder surfing is improved, but the system complexity increases
Solution Approach 1:
The system creates a digital copy of the user's drawn pattern and stores it for verification. During authentication, the system compares the newly drawn pattern against the stored pattern copy. This copying mechanism simplifies the verification process by reducing it to pattern matching algorithms rather than complex cryptographic operations, thereby limiting the increase in system complexity while maintaining high security.
Data Source
AI summary
Systems and methods for facilitating authentication for payment transactions using pattern-based time bound passwords. More specifically, techniques disclosed herein enable authentication of payment transactions performed by a user at a merchant terminal based on a pre-registered pattern provided by the user within a pre-defined time period limit. The pre-registered pattern drawn in the pre-defined time period is registered as a password for authenticating any payment transaction performed by the user using a payment card which is associated with an account of the user in an issuing bank. If the user provides the pre-registered pattern within the pre-defined time period limit, the payment transaction is authenticated. In another embodiment, such pattern-based time bound password is used as a second level authentication in which first level authentication is performed by a personal identification number.