Proxy Service Manager for Secure Mobile Payment Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment systems face challenges in implementing 'card not present' payment capabilities due to the need for substantial changes in authorization systems and regulatory requirements, such as cardholder authentication and issuer verification, which hinder widespread adoption.
Innovation Solution
A system involving an Authentication Service Manager and a Proxy Service Manager that uses a dynamic and unique Accountholder Authentication Value (AAV) to authenticate consumers and verify transactions, ensuring both cardholder authentication and issuer validation, facilitating secure and efficient mobile payments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cardholder authentication and issuer verification are implemented to meet regulatory requirements, then payment security is improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The patent introduces an authentication service manager as an intermediary component that mediates between the mobile device, payment terminals, and issuer financial institutions. This intermediary handles the complex authentication and verification processes, shielding end users from complexity while maintaining security. The service manager receives authentication requests, performs verification, and returns results, thus resolving the contradiction by centralizing complex security functions.
Solution Approach 2:
The patent segments the payment authentication system into distinct functional components: mobile device authentication module, authentication service manager, payment terminal, and issuer financial institution verification system. Each segment handles specific tasks independently, making the overall complex system manageable through modular design. This segmentation allows each component to be optimized separately while maintaining overall security requirements.
2Adaptability or versatility
If substantial changes are made to existing payment authorization systems to enable mobile payments, then payment capability is improved, but implementation difficulty and adoption barriers increase
Solution Approach 1:
The authentication service manager is designed as a universal platform that can serve multiple payment scenarios and work with different issuer financial institutions through standardized interfaces. It handles various authentication methods (PIN, biometric, token-based) and communicates with different payment terminals and mobile devices using common protocols. This multi-functionality enables widespread adoption without requiring each participant to implement custom solutions.
Solution Approach 2:
The system performs preliminary authentication and verification actions before the actual payment transaction occurs. The authentication service manager pre-validates cardholder credentials and issuer verification status, generating authentication tokens in advance. This preliminary action ensures that when transactions occur, the complex verification processes have already been completed, reducing implementation complexity during actual payment operations.
3Reliability
If real-time authentication and verification are performed during transactions, then chargeback protection is improved, but transaction processing time increases
Solution Approach 1:
The system performs authentication and issuer verification in advance of the actual payment transaction, generating authentication tokens and verification results beforehand. This preliminary action ensures that chargeback protection is established prior to transaction completion, while the actual payment processing only requires validating the pre-generated tokens, significantly reducing transaction processing time.
Solution Approach 2:
The authentication service manager implements feedback mechanisms where authentication results and verification status are immediately communicated back to the payment terminal and mobile device. This real-time feedback confirms successful authentication and issuer verification during the transaction, providing chargeback protection while maintaining fast processing through efficient communication protocols and immediate result delivery.
Data Source
AI summary
Payments assurance methods and systems are described. In some embodiments, a Proxy Service Manager Server computer receives a consumer authentication request from a merchant device, and transmits that request to an Authentication Service Manager Server computer. The Proxy Service Manager Server computer then receives a non-repudiable accountholder authentication value (“AAV”) token, generates a payment authorization request that includes the AAV token, and transmits the payment authorization request to an Acquirer financial institution (FI) Server computer. The Proxy Service Manager Server computer is then operable to receive a payment authorization message, and to transmit the payment authorization message to the merchant device to enable a merchant to complete a purchase transaction with a consumer.