SMS Text Authorization for Mobile Payment Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for mobile online financial transactions are cumbersome and time-consuming due to the need for multiple confirmations and PIN entries, especially on mobile devices, which are less stable and have smaller keypads compared to desktop devices.
Innovation Solution
A system that allows users to initiate and authorize money transfers via SMS using 'yes' or 'y' for trusted recipients, with the option to add recipients as trusted sources for future quick approvals, reducing the need for PIN verification in trusted relationships.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple confirmations and PIN entries are required for mobile transactions, then security is improved, but transaction time and user convenience deteriorate
Solution Approach 1:
The patent segments the authentication process into two distinct modes: a simplified path for trusted recipients using only SMS confirmation, and a secure path for untrusted recipients requiring PIN entry. This segmentation allows the system to apply appropriate security measures selectively, reducing time for trusted transactions while maintaining security for unknown recipients.
Solution Approach 2:
The system performs preliminary action by pre-establishing trusted recipient relationships before transactions occur. Users designate trusted recipients in advance, creating a whitelist that enables rapid SMS-only authentication for future transactions with these contacts, eliminating the need for repeated PIN entries while maintaining security through prior authorization.
2Reliability
If multiple confirmations and PIN entries are required for mobile transactions, then fraud prevention is improved, but user convenience and ease of operation deteriorate
Solution Approach 1:
The authentication process is divided into separate pathways: SMS-only confirmation for trusted recipients and PIN-required confirmation for untrusted recipients. This segmentation provides users with convenient fast-track access for familiar contacts while maintaining robust fraud prevention for unknown recipients, optimizing the balance between ease of operation and security.
Solution Approach 2:
Different authentication requirements are applied locally based on the recipient relationship. Trusted recipients receive the benefit of simplified SMS-only authentication, while untrusted recipients trigger the full PIN-based security protocol. This local differentiation allows the system to be convenient where appropriate and secure where necessary.
3Productivity
If simplified SMS confirmation is used for trusted recipients, then transaction speed and ease of operation are improved, but security risk increases
Solution Approach 1:
Security is addressed in advance by requiring users to explicitly designate trusted recipients before simplified SMS authentication can be used. This preliminary authorization step ensures that only pre-approved contacts benefit from the speedier SMS-only process, while maintaining security through prior user intent and explicit trust establishment.
Solution Approach 2:
The trusted recipient list acts as an intermediary layer between the user and the simplified authentication process. This mediator verifies that the recipient is authorized for fast-track SMS confirmation, thereby enabling high transaction speed while mitigating security risk through an intermediate approval mechanism.
4Reliability
If PIN verification is required for all transactions, then security is improved, but device complexity and operational difficulty increase for mobile devices
Solution Approach 1:
The system segments authentication requirements by recipient type, applying PIN verification only to untrusted recipients while using SMS-only confirmation for trusted recipients. This reduces operational complexity for the majority of transactions with familiar contacts while maintaining security for unknown recipients, avoiding the need for PIN entry in all cases.
Solution Approach 2:
The authentication system dynamically adapts its complexity based on the recipient relationship. For trusted recipients, the system uses the simpler SMS confirmation method; for untrusted recipients, it automatically escalates to the more secure PIN-based process. This dynamic adjustment optimizes for ease of operation when possible while maintaining security when necessary.
Data Source
AI summary
A system and method enables trusted sources to easily approve requests for money transfers by simply typing in a yes or equivalent.