Payment De-tokenization with Risk Evaluation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current payment systems using tokenization lack effective mechanisms to securely de-tokenize payment tokens, particularly in transactions conducted through mobile terminals, due to uncertainties in geographic location verification and risk assessment, which can lead to potential fraud and security breaches.

Innovation Solution

A method that involves a processor to receive a request to de-tokenize a secure payment token, generate a risk metric based on geographic locations and usage rules, and compare it to a predetermined threshold to determine whether to honor the de-tokenization request, ensuring secure and authorized transactions by verifying the locations and obtaining additional authentication if necessary.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If de-tokenization is performed without risk evaluation, then transaction processing speed is improved, but security and fraud prevention deteriorate

Engineering Contradiction:
Improvetransaction processing speedVSAvoidsecurity and fraud prevention
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The system performs preliminary risk evaluation by comparing geographic locations and generating risk metrics before de-tokenization occurs. This advance assessment allows the system to prepare appropriate security measures in advance, enabling both fast processing and secure transactions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary risk evaluation mechanism that sits between the de-tokenization request and the actual token conversion. This intermediary layer assesses geographic risk factors and determines whether to proceed with de-tokenization, balancing speed and security requirements.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If geographic location verification is implemented, then fraud prevention is improved, but system complexity increases

Engineering Contradiction:
Improvefraud preventionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system applies local quality by focusing geographic verification specifically on the mobile terminal's location rather than requiring verification of all system components. This targeted approach improves fraud prevention while minimizing overall system complexity.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent changes the parameter being verified from complex multi-factor authentication to geographic location parameters. By monitoring location coordinates and comparing them against expected ranges, the system achieves effective fraud prevention with relatively simple parameter checking.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If risk metrics are generated and evaluated, then transaction security is improved, but processing time increases

Engineering Contradiction:
Improvetransaction securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system replaces complex mechanical security verification processes with automated risk metric generation and comparison. By using algorithmic risk assessment based on geographic data rather than manual or multi-step verification, the system maintains high security while reducing processing time.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9984371B2Payment de-tokenization with risk evaluation for secure transactions
Publication Date: 2018.05.29 CA TECH INC
  • US9984371B2 patent drawing
  • US9984371B2 patent drawing
  • US9984371B2 patent drawing

AI summary

Methods of de-tokenizing secure payment tokens are disclosed. A method according to some embodiments includes receiving a request from an issuer to de-tokenize a secure payment token associated with a transaction conducted using a mobile terminal, generating a metric indicative of a risk of de-tokenizing the secure payment token, comparing the metric indicative of the risk of de-tokenizing the secure payment token to a predetermined threshold, and transmitting a response to the request to de-tokenize the secure payment token, wherein the response is based on the comparison of the metric indicative of the risk of de-tokenizing the secure payment token with the predetermined threshold.