Securing Telephone Card Payments via Web Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mail-Order/Telephone-Order (MOTO) card payment transactions over the telephone lack effective security measures due to technical limitations, leading to high fraud rates and false-positive transaction rejections, as Strong Customer Authentication methods like 3-D Secure cannot be implemented over telephone lines.
Innovation Solution
A computer-implemented method and system that generates a customized webpage with data retrieval mechanisms to securely obtain additional information from a user device associated with the cardholder, allowing for enhanced authentication and transaction security by leveraging data communication protocols not available over telephone channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Strong Customer Authentication methods like 3-D Secure are implemented, then transaction security is improved, but they cannot be implemented over telephone lines due to technical limitations
Solution Approach 1:
The patent introduces a webpage as an intermediary between the telephone channel and the authentication system. The system receives card information via telephone, then redirects the user to a webpage where Strong Customer Authentication can be properly implemented. This intermediary webpage bridges the gap between the limitations of telephone communication and the requirements of secure authentication protocols.
Solution Approach 2:
The patent transitions the authentication process from a single-dimensional telephone channel to a multi-dimensional approach by incorporating web-based communication. The system moves the authentication process to a different dimension (web interface) where advanced security protocols can operate, while maintaining the initial customer contact through telephone.
2Ease of operation
If card information is obtained over telephone, then MOTO payment convenience is maintained, but fraud risk increases due to inability to verify cardholder identity
Solution Approach 1:
The system performs preliminary authentication actions by redirecting the user to a webpage where identity verification can be conducted before finalizing the transaction. This preliminary step on the web interface ensures that only authenticated users can complete the MOTO payment, preventing fraud while maintaining convenience.
Solution Approach 2:
The webpage serves as an intermediary verification layer between the telephone-based payment initiation and the final transaction authorization. This intermediary step allows the system to verify cardholder identity through multiple channels (telephone + web authentication) without compromising the convenience of MOTO payments.
3Reliability
If multiple transaction attempts are made due to false-positive rejections, then customer frustration increases, but network and computer resources are wasted
Solution Approach 1:
The system implements feedback mechanisms by using the additional authenticated information from the webpage to improve the accuracy of transaction authorization decisions. This feedback loop ensures that legitimate transactions are not falsely rejected, reducing the need for multiple attempts and thereby conserving network and computer resources.
Solution Approach 2:
By performing authentication actions in advance on the webpage, the system prepares verified information that can be used for more accurate transaction authorization. This preliminary verification prevents false-positive rejections and reduces the need for multiple transaction attempts, thereby reducing resource waste.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer implemented method (200) for securing card payment transactions made via telephone. The method (200) comprising: receiving (202) payment card data associated with a card payment transaction initiated by a cardholder (102) via a telephone call; obtaining (204) one or more additional data fields for which corresponding additional information is required for securing the transaction, the additional information being information not included with the received payment card data; obtaining (206) device information of a user device (110) associated with the cardholder (102); generating (208) customised webpage content associated with the transaction based on the additional information, the webpage content including one or more data retrieval mechanisms to be included in a webpage, the data retrieval mechanisms being configured to retrieve the additional information; sending (210) a link, by which the webpage can be accessed, to the user device (110) using the device information; receiving (212) additional information from the user device (110) obtained via the one or more data retrieval mechanisms; and attempting (214) to perform the card payment transaction using the payment card data and the received additional information. Also disclosed is a transaction system (100) for securing card payment transactions, and a computer program product.