Service Worker Biometric Authentication for Cardholder Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current online credit card transaction authentication methods, such as 3-D Secure, face friction issues that lead to transaction abandonment, particularly in high-risk transactions, and compromise security for low-risk transactions by omitting strong authentication.
Innovation Solution
Implementing a system where cardholders can choose to install merchant or bank apps on their devices, intercepting authentication requests through a service worker to perform biometric authentication and sign transactions with a private key, ensuring strong authentication for both high and low-risk transactions without added friction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If 3-D Secure protocol is used to authenticate cardholders by redirecting to the issuing bank, then security is improved, but transaction friction increases leading to abandonment
Solution Approach 1:
The patent introduces a service worker as an intermediary component that sits between the merchant's authentication request and the issuing bank's verification system. This service worker intercepts the authentication flow and implements biometric verification locally on the cardholder's device, eliminating the need for redirects to the bank's website while maintaining strong authentication security. The service worker acts as a local mediator that handles the entire authentication process without requiring the cardholder to leave the merchant's interface.
Solution Approach 2:
The patent replaces the mechanical redirect-based authentication system with a biometric authentication mechanism. Instead of requiring cardholders to navigate to the bank's website, enter passwords, and potentially receive SMS codes, the system uses fingerprint scanners, facial recognition, or other biometric sensors directly integrated into the cardholder's device. This substitution eliminates the friction of manual password entry and multi-step verification while providing stronger security through biometric uniqueness.
2Reliability
If the bank redirects to its website for authentication, then strong authentication is achieved, but transaction time increases
Solution Approach 1:
The patent implements preliminary action by having the service worker register and set up biometric authentication credentials in advance on the cardholder's device. When a transaction requires authentication, the service worker already has the biometric data and cryptographic keys ready, allowing for immediate verification without redirecting to the bank. The authentication challenge-response mechanism is pre-configured, enabling instant verification that takes only a fraction of a second compared to the multi-step redirect process.
3Reliability
If biometric authentication and private key signing are implemented, then security is enhanced, but device complexity increases
Solution Approach 1:
The patent implements self-service by having the service worker automatically manage the complexity of biometric authentication and cryptographic operations without requiring cardholder intervention. The service worker autonomously handles key generation, key pair management, challenge-response authentication protocols, and encryption/decryption operations. Cardholders simply provide their biometric data through the device's native sensors, and the service worker handles all the complex cryptographic processing in the background, making the system as simple to use as existing biometric features in smartphones.
Data Source
AI summary
A method is provided for cryptographically authenticating a cardholder in an online transaction by sending an authentication request to the issuing bank that is intercepted by a service worker and handled within the cardholder's computing device. The service worker signs a description of the transaction with a private key or forwards the request to a bank app that authenticates the cardholder biometrically in addition to signing the transaction.