Browser Extension Payment Autofill With QR-Linked Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Online payment transactions are often insecure due to compromised devices and communications, allowing unscrupulous individuals to observe and collect confidential financial details.
Innovation Solution
A browser extension that securely collects payment details from a financial institution system and populates online forms with masked information, using a key pair generation and QR code authentication to link with a user's mobile device for secure authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually fill out payment forms with financial details, then the payment process is simple and direct, but the security of financial information is compromised due to potential observation and collection by unscrupulous individuals
Solution Approach 1:
The patent introduces a browser extension as an intermediary component that sits between the user and the payment form. This extension automatically fills payment details without requiring the user to manually enter sensitive information, thereby enhancing security while maintaining ease of use. The extension acts as a mediator that handles the sensitive data input process securely.
Solution Approach 2:
The browser extension operates autonomously to fill payment forms without requiring user intervention for each transaction. Once configured, the extension automatically populates payment fields with stored credentials, enabling self-service functionality that reduces manual input while maintaining security through automated, secure data retrieval and entry.
2Reliability
If a browser extension automatically populates payment forms, then security is improved by reducing manual entry, but the system complexity increases due to key pair generation and QR code authentication mechanisms
Solution Approach 1:
The system performs key pair generation and device binding as preliminary actions during initial setup, rather than requiring these complex operations during each payment transaction. The QR code authentication and device association are completed in advance, establishing secure credentials that can be automatically used for subsequent payments without repeating the complex authentication process.
Solution Approach 2:
The patent uses cryptographic key pairs where a public key is shared with the payment system while the private key remains securely stored locally in the browser extension. This copying mechanism allows the system to verify payments using the public key without ever exposing or transmitting the sensitive private key, thereby maintaining security while enabling automated payment functionality.
3Reliability
If QR code authentication is used to link devices, then secure device binding is achieved, but the user experience is slowed down by the additional authentication step
Solution Approach 1:
The QR code authentication and device binding process is performed as a preliminary one-time action during initial setup. Once the device is bound through QR code scanning and authentication, the system establishes secure credentials that enable automatic payment processing without requiring repeated QR code authentication, thus minimizing time loss for subsequent transactions.
Solution Approach 2:
After initial QR code authentication, the system enables self-service functionality where the browser extension automatically handles payment form population and authentication using stored credentials. This eliminates the need for repeated manual authentication steps, reducing time loss while maintaining the security established during the initial device binding process.
Data Source
AI summary
A computer system and method for populating electronic payment credentials is provided. The system comprises at least one processor and a memory storing instructions which when executed by the processor configure the processor to perform the method. The method comprises receiving a browser extension activation input, sending a payment details request message to a financial institution system, receiving payment details from the financial institution system following authentication at a mobile device, and populating a payment form on the browser using the payment details.