Token Authentication Cryptogram for Secure Online Payments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Consumers face security risks and inefficiencies in online payment transactions due to manual entry of sensitive information, which can lead to fraud and increased computing resource usage in authentication processes.
Innovation Solution
A token service computer combines user authentication verification values with token authentication verification values into a cryptogram, allowing secure transactions without manual entry of payment information, reducing message generation and processing time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual entry of payment information is used, then consumers can conduct online payment transactions, but security risks increase due to vulnerability to eavesdropping and fraud
Solution Approach 1:
The patent uses tokens as copies or substitutes for real payment credentials. Instead of transmitting actual payment information, the system generates tokenized representations that replicate the functionality of payment credentials without exposing the underlying sensitive data, thereby maintaining transaction capability while eliminating security vulnerabilities associated with manual entry
Solution Approach 2:
The patent introduces tokens as an intermediary element between the consumer and the payment processing system. These tokens act as mediators that enable authentication and transaction processing without requiring direct exposure of sensitive payment information, thus reducing security risks while preserving ease of operation
2Object-affected harmful factors
If tokens are used as substitutes for real payment credentials, then security against fraud is improved, but the number of authentication steps increases
Solution Approach 1:
The patent performs authentication actions in advance by pre-generating and storing token authentication verification values. When a transaction occurs, the system retrieves and validates these pre-computed values rather than performing full authentication sequences, thereby maintaining strong security while reducing the time required for authentication during actual transactions
Solution Approach 2:
The patent extracts the authentication verification functionality from the token itself and separates it into distinct verification values. This allows the system to validate tokens efficiently by checking pre-extracted verification data rather than re-processing entire authentication sequences, reducing authentication time while maintaining fraud protection
3Object-affected harmful factors
If multiple authentication and tokenization steps are performed for each transaction, then transaction security is enhanced, but computing resource usage increases significantly
Solution Approach 1:
The patent performs computationally intensive authentication and tokenization operations in advance, generating verification values and establishing security parameters before transactions occur. This pre-processing approach allows the system to store results and reuse them for multiple transactions, thereby maintaining high security standards while significantly reducing computing resource consumption during actual transaction processing
Solution Approach 2:
The patent creates tokenized copies of authentication data that can be reused across multiple transactions without requiring re-computation of security validations. These token authentication verification values serve as reusable security artifacts that maintain transaction security while eliminating the need for repeated computationally expensive authentication operations
Data Source
AI summary
An enhanced authentication system is described. One embodiment of the invention is directed to a method comprising: receiving, by a token service computer and from an initiating computer, a first authentication request message including verification method data and a token; transmitting, by the token service computer, a second authentication request message comprising the token and the verification method data to an access control server; receiving, by the token service computer from the access control server, an authentication response message comprising the token and a user authentication verification value; and transmitting, by the token service computer to the initiating computer, the authentication response message comprising the token, the user authentication verification value, and a token authentication verification value.