Payment Instrument Provisioning Using Transaction-Based Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment instrument provisioning methods are vulnerable to unauthorized provisioning due to the effectiveness of social engineering techniques, allowing unauthorised users to provision payment instruments without the knowledge or consent of the authorised user, leading to potential fraud.
Innovation Solution
A method and system for authenticating a request to provision a payment instrument onto an electronic device, involving secure data entry, server validation, and response messaging to ensure authorized provisioning, including the use of a secure data entry device and server to verify secure data and generate authorization data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional manual entry methods are used for provisioning payment instruments, then the process is simple and quick, but security is compromised as unauthorised users can provision instruments through social engineering
Solution Approach 1:
A secure data entry device is introduced as an intermediary between the user and the provisioning system. This device includes a processor and storage unit that verify secure data (such as PINs or biometric data) before allowing provisioning to proceed. The intermediary validates user identity and authorisation, preventing unauthorised provisioning while maintaining a streamlined user experience.
2Reliability
If additional verification steps are implemented to prevent social engineering, then security is improved, but the provisioning process becomes more time-consuming
Solution Approach 1:
The secure data entry device performs preliminary verification of secure data before the provisioning process begins. By validating authentication credentials in advance, the system ensures that only authorised users can initiate provisioning, eliminating the need for repeated verification steps during the actual provisioning process and thus reducing overall time loss.
Solution Approach 2:
The system implements feedback mechanisms where the secure data entry device provides immediate confirmation of authentication status. This allows users to understand the verification process better and reduces unnecessary repeated attempts, thereby reducing time loss while maintaining high authentication accuracy.
3Ease of operation
If manual entry of payment instrument data is required, then the process is straightforward, but it increases vulnerability to data theft and social engineering
Solution Approach 1:
The manual mechanical process of reading and entering payment instrument data is replaced with an automated secure data entry device. This device uses processors and storage units to automatically verify secure data such as PINs or biometric identifiers, eliminating the need for manual data entry while maintaining ease of operation through automated interfaces.
Data Source
AI summary
The invention relates generally to the provisioning of payment instruments onto electronic devices such as a mobile telephone, tablet, laptop or wearable, and in particular to securely provisioning payment instrument for which authorisation for the provisioning must be provided by a payment instrument issuer. A first embodiment is provided in which data that is generated during a transaction is received by an electronic device and transmitted from the electronic device to a server associated with an acquirer. The data received from the electronic device is compared to the data generated during the transaction and, if these match, provisioning is authorised. A second embodiment is provided in which a server associated with an acquirer generates an identification message that is separate from but based on a response message associated with a transaction, and provisioning is authorised or declined based on the identification message.