POS Authentication Flow for Pocket-Free Mobile Payments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile transaction systems require customers to remove their mobile devices from their pockets to perform transactions, exposing sensitive information to security risks and inconveniencing users, while also failing to adapt to customer habits of using physical wallets.
Innovation Solution
A system that allows customers to perform mobile transactions without removing their devices, using a merchant system to establish an in-store session with the customer's mobile device via a passcode, and authenticating payment accounts through a system provider without exposing sensitive information to the merchant.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If customers remove their mobile devices from pockets to perform transactions at POS device, then transaction can be completed, but security risk increases due to exposure of sensitive information and inconvenience occurs
Solution Approach 1:
The patent introduces an intermediary authentication system that mediates between the customer's mobile device and the merchant's POS device. The system uses automated device detection and authentication protocols to enable transactions without requiring customers to physically handle or remove their devices, thus maintaining security while enabling convenient transactions.
Solution Approach 2:
The system enables self-service authentication where the mobile device automatically provides authentication credentials through detected sensors or communication protocols when in proximity to the POS device. This eliminates the need for customers to manually remove or handle their devices, allowing transactions to proceed conveniently while maintaining security through automated authentication.
2Reliability
If check-in procedures are conducted at POS device to identify and authenticate customer, then authentication is achieved, but time is lost due to customer needing to take device out and input information
Solution Approach 1:
The system performs preliminary authentication actions automatically when the mobile device enters the detection range of the POS device. Authentication credentials are pre-configured and automatically presented, eliminating the need for customers to manually input information during the transaction, thus reducing time loss while maintaining authentication reliability.
Solution Approach 2:
The patent replaces manual mechanical input operations with automated sensor-based or communication-based authentication. Instead of requiring customers to physically remove devices and manually input information, the system uses automated detection and authentication protocols to verify customer identity, significantly reducing transaction time while maintaining security.
3Productivity
If sensitive information including payment account identifiers is provisioned to merchant device, then transaction processing is enabled, but security concerns arise due to potential capture or data breach
Solution Approach 1:
The system extracts sensitive authentication and payment information from the merchant's POS device environment and handles it through a secure intermediary authentication system. The mobile device provides authentication credentials directly to the authentication system without provisioning sensitive information to the merchant device, enabling transaction processing while eliminating data security risks associated with information exposure.
Data Source
AI summary
A system includes a service provider device and a point of sale (POS) device. A session between a user device and the POS device is established. An authentication request associated with the user device is provided via a user interface of the POS device. Subsequent to an authentication of information, responsive to the authentication request, the POS device receives funding instrument (FI) proxy information corresponding to FIs, which is unusable to identify the FIs by a merchant. A selectable representation corresponding to the FI proxy information is provided via the user interface. Responsive to receiving an indication of a selected member from the selectable representation, information for the selected member is sent. The service provider device determines that the session corresponds to an account associated with the user device and the merchant, and performs a transaction for the session using a first FI that corresponds to the selected member.