Protected Card Data Authorization for Secure POS Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
POS devices are vulnerable to hacking, allowing unauthorized access to sensitive electronic card information, which poses a security risk.
Innovation Solution
An authorization system that uses an electronic card to generate protected data, which is processed by a personal information server to obtain personal information, and an authorization server to determine transaction authorization based on this data, ensuring secure transactions without exposing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If electronic card information is transmitted to POS devices for transaction processing, then transaction functionality is enabled, but security vulnerability increases due to hacking risks
Solution Approach 1:
The patent introduces protected data as an intermediary element that mediates between the electronic card and the transaction system. Instead of directly transmitting sensitive card information to the POS device, the system uses protected data (which can be encrypted or tokenized) as a mediator. This intermediary layer allows the transaction to proceed while preventing direct exposure of sensitive card information, thereby reducing security vulnerabilities while maintaining transaction functionality.
Solution Approach 2:
The patent extracts sensitive information from the electronic card data transmission process. By separating the essential transaction-authenticating elements from the full card information, the system transmits only the necessary protected data elements to the POS device. This extraction approach enables transaction processing while removing the exposure of complete sensitive card information that would create security vulnerabilities.
2Reliability
If sensitive electronic card information is stored and processed, then transaction authorization is enabled, but data privacy risk increases
Solution Approach 1:
Protected data serves as an intermediary that enables transaction authorization without requiring the storage or processing of complete sensitive card information. The system can verify transaction authenticity using the protected data while maintaining the privacy of underlying personal information, thus achieving reliable authorization without compromising data privacy.
Solution Approach 2:
The patent applies local quality by differentiating between the parts of card information that need to be accessible for authorization and those that should remain private. The protected data contains only the specific elements necessary for transaction verification, while the rest of the sensitive information remains protected. This selective information handling enables authorization functionality while preserving data privacy for the portions of information that don't need to be exposed.
Data Source
AI summary
The disclosure describes techniques to protect personal information stored on an electronic card with which an owner of the electronic card may be authorized to perform a transaction. For example, a point-of-sale (POS) device may receive protected data generated by an electronic card where the protected data may be used by a personal information server to identify the owner of the electronic card. The POS devices sends the protected data and transaction information to an authorization server that sends the protected data to a personal information server. The owner's personal information can be obtained or derived from the protected data by the personal information server and the personal information is sent to the authorization server. The authorization server can determine whether a transaction is authorized or unauthorized based on the transaction information obtained from the POS device and the personal information obtained from the personal information server.