Privacy Server Dynamic Account Number Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current online communication systems are vulnerable to data breaches, exposing consumer data to bad actors, and existing security measures like virtual account numbers have limitations such as single-use restrictions and require additional infrastructure, which are not widely adopted.
Innovation Solution
A processor-implemented method that generates and secures privacy communication strings and payment card numbers tagged to specific merchants, allowing for reusable payment cards that cannot be used across different merchants, even if stolen, using asymmetric cryptographic parameters and digital authentication to ensure secure transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual account numbers are used for secure transactions, then transaction security is improved, but the system requires additional infrastructure and has single-use restrictions
Solution Approach 1:
The patent introduces a privacy server as an intermediary between the user and merchant. The privacy server generates and manages dynamic account numbers, eliminating the need for users to directly handle sensitive payment information. This intermediary approach secures transactions while avoiding the infrastructure complexity of traditional virtual account systems, as the privacy server handles all account management centrally.
Solution Approach 2:
The patent implements dynamic account numbers that change with each transaction or time period, rather than static virtual account numbers. This dynamic approach enhances security by preventing reuse attacks while allowing the same account to be used repeatedly across different transactions. The account numbers are generated on-demand and can be configured for single-use, multi-use, or recurring transactions, providing flexibility without requiring separate infrastructure for different account types.
2Reliability
If dynamic account numbers are generated for each transaction, then security against data breaches is improved, but transaction processing time increases
Solution Approach 1:
The patent implements pre-generation of account numbers in batches or ahead of time for anticipated transactions. The privacy server can generate account numbers in advance and store them in a ready-to-use state, reducing the real-time processing burden during actual transactions. This preliminary action maintains security through dynamic number generation while minimizing transaction delays by having numbers prepared beforehand.
Solution Approach 2:
The patent allows configuration of account number generation parameters, including the frequency and timing of generation. System administrators can adjust parameters to balance security requirements against processing time constraints. For high-security scenarios, account numbers can be generated immediately before use. For lower-risk transactions, pre-generated numbers can be used, allowing flexible parameter adjustment to optimize the security-time tradeoff.
3Ease of operation
If reusable payment cards are implemented, then user convenience is improved, but the risk of card theft and fraud increases
Solution Approach 1:
The patent implements dynamically changing account numbers that can be configured for reusable accounts. Instead of static card numbers that remain constant, the system generates new account numbers periodically or per transaction while maintaining the ability to reuse the same underlying payment instrument. This dynamic approach allows users to benefit from reusable payment convenience while significantly reducing fraud risk, as stolen account numbers become invalid after a certain period or number of uses.
Solution Approach 2:
The patent incorporates monitoring and control mechanisms that track account number usage patterns. The system can detect anomalies such as unusual transaction locations, amounts, or frequencies and respond by invalidating account numbers or requiring additional authentication. This feedback loop maintains user convenience through reusable accounts while actively managing fraud risk through real-time monitoring and adaptive response.
Data Source
AI summary
In one embodiment, a method includes transmitting, by a privacy component, to a first server, a privacy communication request consisting of device data and server data associated with a second server, receiving, by the privacy component, from the first server, a privacy communication string tagged to the second server, wherein the privacy communication string and a privacy communication string record are generated in response to the privacy communication request identifying the second server based on the server data, transmitting, by the privacy component to the second server the privacy communication string, configured to be transmitted to the first server as an approval request, identifying the second server as a requesting server associated with the secure exchange, and receiving, by the privacy component, from the second server, an indication that the approval request was validated based on the requesting server matching the second server identified in the privacy communication string record.


