Payment Verification Using Location and Account Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment verification methods, such as 'account+password' and 'account+password+SMS code' methods, are insufficient in ensuring the security of mobile payment processes, as they can be compromised by unauthorized access, leading to financial losses and inconvenience for legitimate users.
Innovation Solution
A payment verification method that includes verifying account information and geographical location information of a payer's terminal by matching it with pre-stored data, using a receiver access point's geographical location information to confirm the legitimacy of the payment operation, thereby enhancing security and preventing unauthorized transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If 'account+password' verification method is used, then payment process is simple and fast, but security of payment process cannot be guaranteed
Solution Approach 1:
The verification process is segmented into multiple independent stages: account verification, device identification verification, and geographical location verification. Each stage checks a different aspect of legitimacy, creating layered security without requiring complete re-verification at each step.
Solution Approach 2:
The system introduces intermediary verification elements (device identification information and geographical location information) that mediate between the user's account credentials and the final payment authorization. These intermediaries provide additional validation layers that don't directly burden the user.
2Reliability
If 'account+password+SMS code' verification method is used, then payment security is improved, but security risks remain due to text message divulging
Solution Approach 1:
The system extracts the verification process from vulnerable communication channels (SMS messages) and relocates it to more secure channels. Device identification information and geographical location data are obtained through direct device communication and network location services rather than through text messages that can be intercepted.
Solution Approach 2:
The system converts potentially harmful elements into beneficial verification factors. Instead of relying on SMS codes that can be stolen, the system uses the device's inherent identification information and location data - information that is difficult to replicate or steal - to create security advantages.
3Reliability
If multiple verification methods are implemented, then payment security is enhanced, but verification complexity increases
Solution Approach 1:
Device identification information and geographical location information are collected and stored in advance during device registration. This preliminary action eliminates the need for complex real-time verification procedures during actual payment transactions, as the verification data is already prepared and available.
Solution Approach 2:
The system utilizes information that devices and networks provide automatically without requiring active user participation. Device identification information is obtained from the device itself, and geographical location information is obtained from network location services, reducing the operational burden on users.
Data Source
AI summary
Methods, apparatuses and systems of payment verification are disclosed. A method includes receiving a request for connecting to a receiver access point (AP) from a terminal of a payer to be verified and geographical location information of the receiver AP, verifying whether account information included in the request matches with pre-stored payment account information; returning a verification result to the receiver AP; receiving a payer terminal geographical location information verification request from a payment server if the verification result indicates a match; verifying geographical location information of the terminal of the payer to be verified based on the geographical location information of the receiver AP; and returning a verification result of the payer terminal geographical location information verification request to the payment server. The method increases the security of a payment process and prevents a legitimate user from suffering financial losses and unnecessary troubles.