Secure Payment Data Verification via Independent Channel
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure payment systems do not allow callers to verify whether their credit card information is being stored or disclosed securely during transactions, as they rely on call centre agents to ensure the call is secured, which can lead to potential misuse.
Innovation Solution
A system where the caller can independently verify the security of their communication channel by using a trusted service platform, which confirms the secure transmission of payment data without revealing sensitive information to the call centre agent, utilizing a separate communication channel to ensure the call is secured and the payment details are not intercepted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure mode is used to intercept and modify DTMF tones so that call centre agents cannot intercept data, then security against agent misuse is improved, but the caller cannot independently verify that the call is actually secured
Solution Approach 1:
The system provides feedback to the caller through a display device showing verification information that confirms whether the secure connection is active. This allows the caller to independently verify the security status without relying on agent assurances, resolving the contradiction between security implementation and verifiability.
Solution Approach 2:
A verification system acts as an intermediary between the caller and the secure communication channel. This intermediary provides independent verification by comparing the secure connection status against expected parameters and displaying verification information to the caller, enabling independent security confirmation.
2Ease of operation
If credit card details are transmitted through a call centre agent, then payment processing is enabled, but the caller cannot know whether the amount to be paid is correct or if details are being disclosed
Solution Approach 1:
The system provides real-time feedback to the caller displaying verification information about the transaction, including the amount to be paid and confirmation that secure transmission is active. This feedback loop ensures the caller has full knowledge of transaction details while maintaining ease of payment processing.
3Difficulty of detecting and measuring
If a separate verification channel is provided for callers to verify security, then independent verification capability is improved, but system complexity increases
Solution Approach 1:
The verification system is integrated into the existing secure communication infrastructure, allowing the same system to serve both payment processing and independent verification functions. This multi-functionality approach reduces overall system complexity while providing the needed verification capability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Data signals (e.g DTMF tones) transmitted on a telephone call between a customer terminal (1) and a call centre platform (4) are diverted at the call centre platform 4 to a secure payment system (3) such that the call centre operative cannot intercept them. In order to verify that this has been done, the security system provides access to the user over a connection (23,230) independant of the connection (34,41) to the call centre that allows the user to independently verify that the secure connection 34 has been made. This may take the form of returning the user's calling line identity (CLI) for the connection (34) over the independant connection (23/230) or, where CLI is not available, transmitting a one-time code over one of the links for the user to return over the other. The customer can continue to talk to the call centre operative as only DTMF tones are diverted. The call center operative can confirm that the customer's details have been entered and verified by the security system (but is not told what the verification details are) over a separate link (43) between the call centre platform (4) and security system (3).