POS Device Password Generator for Secure Transactions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current two-factor authentication systems for financial transactions, such as those using One-Time PIN/Passwords (OTPs), do not provide sufficient security against fraud and potential disputes in online and in-person purchases, necessitating enhanced security features for authentication.

Innovation Solution

A method and system utilizing a point of sale (POS) device with a password generator to create and transmit dynamic passwords associated with account information to a remote location for verification, ensuring secure financial transactions by combining the POS-generated password with account and digital signature information for authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If two-factor authentication systems using OTPs are implemented, then security level is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity levelVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines the password generator functionality directly into the POS device, merging two separate components (POS terminal and OTP generator) into a single integrated system. This integration maintains the security benefits of two-factor authentication while reducing the complexity of having separate devices and synchronization mechanisms.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The POS device is enhanced with multi-functionality by incorporating a password generator that can create dynamic authentication codes. This allows the POS device to serve both as a transaction processing terminal and as an authentication system, eliminating the need for separate OTP generation devices and reducing overall system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If dynamic OTPs are used for authentication, then fraud protection is improved, but transaction time increases

Engineering Contradiction:
Improvefraud protectionVSAvoidtransaction time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The password generator in the POS device pre-generates and stores multiple dynamic passwords locally before they are needed for authentication. This preliminary action eliminates the time-consuming synchronization process with remote servers, allowing instant generation of authentication codes during transactions while maintaining fraud protection through dynamic password usage.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The POS device performs self-service by generating its own dynamic passwords locally without requiring real-time communication with remote authentication servers. This autonomous password generation capability maintains high security through dynamic codes while significantly reducing transaction time by eliminating network dependency for password generation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10037516B2Secure transactions using a point of sale device
Publication Date: 2018.07.31 PAYPAL INC
  • US10037516B2 patent drawing
  • US10037516B2 patent drawing
  • US10037516B2 patent drawing

AI summary

Systems and methods are provided for secure transactions according to one or more embodiments. According to an embodiment, a method for providing secure transactions comprises initiating a transaction via a point of sale device having a one time password generator. The method also comprises generating at least one password by the point of sale device. The method further comprises associating the at least one password with account information. The method further comprises transmitting the password associated with the account information to a remote location. If the transmitted password matches predetermined associated information at the remote location, the method further comprises confirming the transaction.