Authentication Platform for Secure PIN Debit Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for processing PIN debit transactions in e-commerce and m-commerce lack secure mechanisms to capture credentials, making them vulnerable to security breaches, such as keyloggers intercepting PINs during transactions.
Innovation Solution
A system and method where a third-party processor assesses the security of a consumer's digital processing device before processing a transaction, aborting it if insecure and authenticating and authorizing it if secure, using a payment processing supply chain to translate credit authorization messages into debit authorization messages for secure PIN debit transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional PIN debit transaction systems are used for e-commerce and m-commerce, then transaction convenience is improved, but security is worsened due to vulnerability to keyloggers and credential interception
Solution Approach 1:
The system performs preliminary security assessment of the consumer's digital processing device before allowing the transaction to proceed. The authentication platform evaluates security credentials and device integrity in advance, blocking potentially compromised devices before they can complete transactions, thus preventing credential interception while maintaining convenience for legitimate users
Solution Approach 2:
An authentication platform is introduced as an intermediary between the consumer's digital processing device and the payment processing supply chain. This intermediary assesses device security, validates credentials, and authorizes transactions, creating a security layer that protects against keyloggers and credential theft while enabling convenient e-commerce and m-commerce transactions
2Reliability
If security assessment mechanisms are added to PIN debit transactions, then security is improved, but device complexity is worsened
Solution Approach 1:
The security assessment functionality is extracted from the consumer's digital processing device and relocated to a separate authentication platform. The device only needs to communicate with the authentication platform, which handles the complex security evaluation, credential validation, and device integrity assessment, thereby maintaining security while minimizing the complexity burden on the consumer's device
Solution Approach 2:
The authentication platform is designed as a universal system that can assess multiple types of digital processing devices (mobile phones, tablets, computers) using a standardized security evaluation framework. This multi-functional approach allows the same platform to handle diverse devices without requiring device-specific security implementations, reducing overall system complexity
Data Source
AI summary
A system and method processes a transaction between a merchant and a consumer. Data indicate of the security of a digital processing device being used by the consumer to carry out the transaction with the merchant is received. A determination as to whether the digital processing device is secure is made using the received data. In response to determining the digital processing device is insecure, the transaction is aborted. In response to determining the digital processing device is in secure, the transaction is processed by at least one of authenticating the consumer, authorizing the transaction using a payment processing supply chain, and capturing funds for the transaction using a payment processing supply chain.