PIN Generation System for Wireless Transaction Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing ubiquity of wireless devices and the growth of messaging services have led to a surge in transactions, but these have also exposed users to identity theft and financial fraud, necessitating enhanced security measures for transactions.
Innovation Solution
A method that generates and manages Personal Identification Numbers (PINs) using information from request messages, registration data, and third-party information, allowing secure transactions through various communication methods like SMS, MMS, or Bluetooth, leveraging a Messaging Inter-Carrier Vendor facility for enhanced security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If messaging services are expanded to support more transaction types and communication methods, then the usefulness and value of messaging to users increases, but the security risks from identity theft and financial fraud increase
Solution Approach 1:
The patent introduces a PIN generation and management system as an intermediary layer between the messaging service and the transaction. The system receives messaging data, processes it through security policies, generates PINs, and delivers them to users. This intermediary PIN mechanism protects the underlying messaging infrastructure while enabling secure transactions, thus resolving the contradiction by adding security without limiting messaging versatility.
Solution Approach 2:
The system performs preliminary security actions by generating and managing PINs before transactions occur. Registration information is collected and processed in advance, and PINs are generated based on security policies before actual transactions take place. This preliminary security preparation allows the system to handle diverse transaction types securely without increasing exposure to fraud risks.
2Reliability
If PIN generation and management functionality is added to enhance security, then transaction security improves, but system complexity increases
Solution Approach 1:
The patent segments the security function into distinct modular components: a PIN generation module that processes messaging data, a policy evaluation module that applies security rules, and a PIN delivery module that communicates with users. This segmentation allows the security functionality to be added as separate, manageable modules rather than a monolithic complex system, thus improving security while controlling complexity.
Solution Approach 2:
The PIN generation system is designed to handle multiple transaction types and communication methods universally. The same core functionality processes SMS, MMS, and other messaging types, and can serve various transaction scenarios (payments, account inquiries, fund transfers). This multi-functionality reduces the need for separate security mechanisms for each transaction type, thereby limiting the increase in system complexity while maintaining high security standards.
3Reliability
If more information is processed and stored for PIN generation, then security policies can be applied more effectively, but data handling requirements and potential vulnerability to information misuse increase
Solution Approach 1:
The patent extracts and processes only the necessary information from the messaging data to generate PINs. Rather than storing or processing all messaging information, the system extracts specific relevant data points, processes them through security policies to generate PINs, and then delivers only the PIN to the user. This extraction approach minimizes the amount of sensitive information handled and stored, reducing vulnerability to information misuse while still enabling effective security policy enforcement.
Solution Approach 2:
The system generates disposable PINs that are valid only for specific transactions or time periods. These PINs are single-use or limited-use credentials that are discarded after their intended purpose is fulfilled. This approach ensures that even if information is compromised, the impact is limited because the PINs are not permanent and cannot be reused. The temporary, disposable nature of the PINs minimizes long-term information vulnerability while maintaining effective security.
Data Source
AI summary
As individuals increasingly engage in different types of transactions they face a growing threat from, possibly among other things, identity theft, financial fraud, information misuse, etc. and the serious consequences or repercussions of same. Leveraging the ubiquitous nature of wireless devices and the popularity of (SMS, MMS, etc.) messaging, an infrastructure that enhances the security of the different types of transactions within which a wireless device user may participate. The infrastructure may optionally leverage the capabilities of a centrally-located Messaging Inter-Carrier Vendor.