Telephone Payment Tokenization for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing telephone-based payment systems are vulnerable to data interception and theft, as they often transmit and store sensitive personal and financial information, making them susceptible to unauthorized access.
Innovation Solution
A system and method that uses tokens to represent sensitive information, where tokens are generated and stored securely, allowing only authorized transactions by verifying the tokens with an issuer server, thereby reducing the risk of data exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive personal and financial information is transmitted and stored for telephone-based payments, then transaction functionality is enabled, but security vulnerability increases due to potential data interception and unauthorized access
Solution Approach 1:
The patent introduces tokens as intermediary elements that replace sensitive personal and financial information in telephone-based transactions. Instead of transmitting actual account numbers, names, and other personally identifiable information (PII), the system uses tokenized representations that serve as secure mediators between the user and the payment processing system. These tokens cannot be reverse-engineered to reveal the underlying sensitive data, thereby eliminating the security vulnerability while maintaining transaction functionality.
Solution Approach 2:
The patent creates secure copies of sensitive information in the form of tokens. Rather than transmitting or storing the actual sensitive data, the system generates token copies that represent the underlying financial account information. These token copies can be safely transmitted and stored without compromising security, as they are mathematically linked to the original account information but cannot be used to derive the actual sensitive data if intercepted.
2Reliability
If tokens are used to replace sensitive information, then security is improved, but system complexity increases due to token generation and verification processes
Solution Approach 1:
The patent merges the token generation, storage, and verification functions into an integrated system architecture. The token service is combined with the existing payment processing infrastructure, allowing tokens to be generated during account setup, stored securely alongside account information, and verified automatically during transaction processing. This consolidation reduces operational complexity compared to maintaining separate token management systems while still providing robust security through tokenization.
Data Source
AI summary
According to one embodiment, a system includes a memory comprising instructions, an interface, and a processor communicatively coupled to the memory and the interface. The interface is configured to receive, from a user telephone device, a request to complete a transaction using a token associated with the user telephone device. The processor is configured, when executing the instructions, to determine one or more tokens associated with the user telephone device. The interface is further configured to send, to an issuer server, a verification request for the token, and receive, in response to the verification request, translated information associated with the token. The processor is further configured to complete the transaction using the translated information.