Payment Server Authentication Using Connected Object Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for 'card not present' transactions, such as those online, are complex and cumbersome for users, leading to increased transaction abandonment rates and higher processing costs due to the need for additional verification steps like entering codes or personal data, while also posing security risks.
Innovation Solution
A method that utilizes connected objects associated with the user, such as smartphones and smartwatches, to automatically collect and verify presence and location information, enhancing transaction confidence levels without requiring additional user intervention, by processing this information to determine a confidence level that is then transmitted to the merchant's banking server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (entering codes or personal data) are used, then security level is improved, but user experience and transaction completion rate deteriorate
Solution Approach 1:
The system performs authentication automatically using data from connected objects without requiring user action. The payment server collects operating information from connected objects, processes this information to determine confidence levels, and completes authentication autonomously, eliminating the need for users to manually enter codes or personal data while maintaining security
Solution Approach 2:
The patent replaces manual authentication mechanisms (typing codes, entering data) with an automated electronic system that collects and processes operating information from connected objects. This substitution eliminates the mechanical interaction required in traditional authentication while achieving the same security objective through automated data analysis
2Reliability
If additional verification steps are implemented, then security is improved, but transaction processing time and cost increase
Solution Approach 1:
The system collects operating information from connected objects in advance, before the actual payment transaction occurs. This preliminary data collection enables the authentication process to proceed rapidly during the transaction itself, as the necessary information is already gathered and can be quickly processed to determine confidence levels without adding time to the payment flow
Solution Approach 2:
The automated authentication system processes collected information and determines security confidence levels without requiring manual verification steps, thereby eliminating time loss associated with additional verification procedures while maintaining enhanced security through continuous monitoring of connected objects
3Ease of operation
If automated authentication using connected objects is implemented, then user experience is improved, but system complexity increases
Solution Approach 1:
The payment server performs multiple functions: it processes payments, collects operating information from connected objects, processes this information to determine confidence levels, and manages authentication. By consolidating these diverse functions into a single multi-functional system, the patent avoids the need for separate specialized systems for each function, thereby managing complexity while delivering enhanced user experience
4Measurement precision
If continuous monitoring of connected objects is performed, then authentication accuracy is improved, but data processing requirements increase
Solution Approach 1:
The system collects operating information from connected objects periodically or at specific moments rather than continuously monitoring every aspect of each device. This partial monitoring approach maintains authentication accuracy by gathering sufficient data points to determine confidence levels while reducing the overall data processing burden compared to exhaustive continuous monitoring of all parameters
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
The invention relates to a method for assisting in user authentication, implemented within a payment server. According to the invention, the method comprises: • a collection phase (10) of at least one piece of operational information relating to at least one connected object previously associated with said user; • a management phase (11) of a transaction involving bank details of said user and a merchant, comprising the following steps: ∘ processing (110) of said at least one piece of operational information collected during said collection phase, delivering at least one data point representing a level of trust associated with said transaction; ∘ transmission (111), to at least one bank server of said merchant, of said level of trust associated with said transaction.