Secure Data Communications With Dynamic Device Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Transitioning between different user interfaces during electronic payments causes compatibility issues and a challenging user experience due to differences in presentation and content accessibility, particularly in merchant web portals, impacting trust and security.
Innovation Solution
A system for secure data communications that adaptively handles transaction requests through a hybrid 'pay by bank' mechanism, utilizing a real-time decision engine for automatic 'step up' authentication, with a computational binding process that updates a secure data binding payload to match device characteristics over time, and employs a graph data structure for fraud detection based on historical purchases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security authentication is implemented through separate security pages, then security verification is achieved, but user experience friction increases due to interface transitions and unfamiliar UI elements
Solution Approach 1:
The patent merges the security authentication interface with the merchant's existing web interface by embedding security challenges directly within the payment flow. Instead of redirecting users to separate security pages with different UI paradigms, the system integrates authentication elements (such as challenge screens, verification prompts, and security questions) seamlessly into the merchant's familiar interface, maintaining consistent presentation and reducing user experience friction while preserving security verification capabilities
Solution Approach 2:
The system implements a universal authentication mechanism that can handle multiple authentication methods (biometric, password, security questions, device verification) through a single integrated interface framework. This multi-functional approach allows the same interface structure to accommodate various authentication types without requiring users to adapt to different UI patterns, thereby maintaining both security rigor and ease of operation across diverse authentication scenarios
2Reliability
If device fingerprinting is performed at a single point in time, then initial binding is established, but false positives increase when device characteristics change over time
Solution Approach 1:
The patent implements dynamic device fingerprinting that continuously monitors and updates device characteristics over time rather than relying on a static single-point-in-time snapshot. The system tracks changes in device properties (such as installed applications, system configurations, hardware identifiers) and adaptively adjusts the binding validation threshold. When device characteristics evolve naturally, the system recognizes these as legitimate changes and adjusts accordingly, thereby reducing false positives while maintaining binding accuracy
Solution Approach 2:
The system dynamically modifies the parameters used for device binding validation based on observed device behavior and characteristic changes over time. Instead of using fixed thresholds for comparing device fingerprints, the system adapts validation parameters (such as tolerance levels, weighting of different device attributes, and comparison algorithms) to account for legitimate device evolution. This parameter adaptation allows the system to distinguish between legitimate device changes and fraudulent attempts, reducing false positives while maintaining security
3Reliability
If step-up authentication is triggered frequently, then fraud detection capability is enhanced, but transaction processing time increases
Solution Approach 1:
The patent implements risk-based authentication that applies step-up authentication selectively based on the specific characteristics of each transaction and user context. Instead of uniformly triggering step-up authentication for all transactions, the system analyzes local factors such as transaction amount, purchase history, device familiarity, location, and behavioral patterns to determine the appropriate authentication level. This localized approach applies enhanced authentication only when fraud risk is elevated, thereby maintaining strong fraud detection capability while minimizing unnecessary delays for low-risk transactions
4Reliability
If multiple different user interfaces are used for security pages, then security protocols are enforced, but content accessibility and user trust decrease
Solution Approach 1:
The patent enforces security protocols through a homogeneous interface structure that matches the merchant's existing web interface design patterns, presentation styles, and navigation conventions. Instead of using disparate security page templates with different layouts, color schemes, and interaction models, the system renders security challenges and verification elements using the same CSS frameworks, typography, and UI components as the merchant's main interface. This homogeneity ensures that security content is as accessible and familiar to users as the rest of the site, maintaining both protocol enforcement and user trust
Data Source
AI summary
A system for secure data communications for streamlined electronic transaction processing is described in some embodiments that is adapted to adaptively handle a new transaction request from a user from a portable device through a web interface, which may be accessed, for example, through a web browser or through a mobile application residing on the user's portable device. The adaptation can include a dynamically set device binding and/or fingerprint data payload, which can be automatically updated in certain situations to account for feature drift, avoiding issues associated with stale bindings.