Secure Transaction Device Authorization Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in protecting sensitive information during electronic transactions, particularly on personal computers and mobile devices, where attempts to secure data have not been readily importable.
Innovation Solution
A secure transaction device is configured to receive outbound network traffic from a host device and determine whether the host application is authorized to provide this traffic to a secure resource. Using a second processor distinct from the host processor, the device allows or disallows the forwarding of network traffic based on authorization, thereby managing sensitive information security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure transaction device is introduced to protect sensitive information, then security is improved, but device complexity increases
Solution Approach 1:
The system is divided into separate functional components: a host device for executing applications and a secure transaction device for handling security operations. This segmentation isolates security functions from application logic, improving reliability while managing complexity through modular architecture.
Solution Approach 2:
The secure transaction device acts as an intermediary between the host device and secure resources. It receives outbound network traffic, determines authorization using a second processor, and controls traffic forwarding. This intermediary role protects sensitive information without requiring the host processor to directly handle security operations.
2Reliability
If a second processor is used to determine authorization, then security is improved, but processing time increases
Solution Approach 1:
Authorization decisions are made in advance before network traffic is forwarded to secure resources. The second processor evaluates host application authorization status proactively, allowing the system to prepare security controls ahead of time and reduce processing delays during actual data transmission.
Solution Approach 2:
The secure transaction device autonomously performs authorization determinations using the second processor without requiring continuous intervention from the host processor. This self-service capability allows efficient security checking while minimizing the performance impact on the host system.
3Reliability
If outbound network traffic is blocked or filtered, then security is improved, but productivity decreases
Solution Approach 1:
Security controls are applied selectively based on the specific characteristics of each host application and network traffic flow. Rather than blocking all traffic uniformly, the system evaluates and filters only the outbound network traffic from unauthorized applications, allowing authorized traffic to pass through efficiently and maintain productivity.
Data Source
AI summary
Outbound traffic of a host application may be received from a host device having a host processor. The secure resource may be configured to provide a secure transaction based on the outbound network traffic. Using a second processor different than the host processor, it may be determined whether the host application is authorized to provide the outbound network traffic to the secure resource. The outbound network traffic may be allowed to be forwarded to the secure resource if the host application is authorized. The outbound network traffic may be disallowed to be forwarded to the secure resource if the host application is not authorized.