Secure Payment Authentication via IVR and HSM Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment systems, particularly online and recurring transactions, face security risks due to the vulnerability of PIN-based authentication systems, as they rely on hardware like PIN pads and are susceptible to malware and hacking, leading to unauthorized use and financial losses.
Innovation Solution
Implementing a system that uses an Interactive Voice Response (IVR) system combined with a Hardware Security Module (HSM) to securely prompt and encrypt Personal Identification Numbers (PINs) over a separate communication channel from the initial payment information, eliminating the need for PIN pads and reducing online transmission risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PIN-based authentication is implemented using PIN pads in brick-and-mortar stores, then security is enhanced, but device complexity increases and online transactions cannot benefit from PIN protection
Solution Approach 1:
The patent replaces the mechanical PIN pad system with an automated telephonic interface. Instead of requiring physical PIN pads at point-of-sale terminals, the system uses automated phone calls with voice recognition and DTMF tone input to collect PINs remotely. This substitution eliminates the need for specialized hardware while maintaining PIN-based authentication security, thereby resolving the contradiction between enhanced security and reduced device complexity.
2Reliability
If PIN-based authentication is used for online transactions, then security is improved, but vulnerability to malware and spyware increases
Solution Approach 1:
The patent segments the authentication process into two distinct channels: (1) online transaction initiation and card information entry through the retailer's website, and (2) PIN collection through a separate automated telephonic system. This segmentation isolates the PIN collection process from potential malware on the consumer's computer, as the PIN is entered during a phone call rather than through a web form. The separation of these functions resolves the contradiction by maintaining security while eliminating the malware vulnerability associated with online PIN entry.
Solution Approach 2:
The patent introduces an automated telephonic system as an intermediary between the consumer and the payment processing system. This intermediary collects the PIN over the telephone network, which is inherently more secure against malware than web-based input methods. The automated phone system acts as a trusted mediator that prevents direct interaction between the consumer's computer and the PIN collection process, thereby resolving the security-malware vulnerability contradiction.
3Productivity
If recurring payment information is stored on biller computers, then payment processing efficiency is improved, but security risks from data breaches increase
Solution Approach 1:
The patent implements preliminary authentication actions before recurring payments are processed. Instead of storing sensitive payment information on biller computers for later use, the system performs PIN verification through automated phone calls at the time of each recurring payment transaction. This preliminary security action ensures that even if payment information is stored, it cannot be used without the cardholder's active verification, thereby resolving the contradiction between processing efficiency and security by adding a security layer that does not impede operational efficiency.
4Reliability
If separate communication channels are used for payment information and PIN collection, then security is enhanced, but system complexity and processing time increase
Solution Approach 1:
The patent makes the automated telephonic system perform multiple functions: it serves as both the customer notification channel for transaction details and the secure PIN collection mechanism. By combining these functions into a single unified system, the patent avoids the need for separate complex infrastructure for each function. The automated phone system universally handles both informational and authentication roles, thereby resolving the contradiction between enhanced security through channel separation and reduced system complexity through functional integration.
Data Source
AI summary
A system and method for secure payment transactions is provided. The system may include an adaptive payment server including one or more processors configured to receive a first communication including first identification information from a first communication device on a first communication channel. The adaptive payment server may identify a second communication device based on the first identification information and initiate a second communication to the second communication device on a second communication channel, which may be discrete from the first communication channel. The adaptive payment server may receive second identification information from the second communication device on the second communication channel and authenticate the payment transaction using the first identification information and the second identification information.