Transaction Authentication via Dual-Channel TAN Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current transaction authorization methods using transaction numbers (TAN) are vulnerable to manipulation due to insecure communication channels and lack of robust authentication processes, particularly in online banking systems.
Innovation Solution
A method that generates a unique transaction number, transmits it securely through a first channel, and uses a second channel for an authentication request with a public key to encrypt and decrypt the TAN, ensuring secure communication and authentication by comparing the transmitted and received TANs, while also employing time signatures and encryption to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the TAN is transmitted via standard SMS through the second communication channel, then the authentication process is simplified and widely accessible, but the security is compromised due to the insecure nature of SMS channels
Solution Approach 1:
The patent segments the authentication process into two distinct communication channels: a first secure communication channel for transmitting the TAN from the transaction unit to the transaction terminal, and a second communication channel (SMS) for sending the authentication request to the communication terminal. This segmentation allows each channel to be optimized for its specific purpose, maintaining security while ensuring accessibility.
Solution Approach 2:
The patent introduces an intermediary application on the communication terminal that acts as a mediator between the SMS message and the authentication process. This application receives the SMS containing the authentication request, extracts the TAN, and forwards it through the secure first communication channel to the transaction unit, thereby preventing direct exposure of the TAN to the insecure SMS channel.
2Reliability
If the TAN is transmitted through multiple communication channels, then the authentication security is enhanced, but the device complexity and process steps increase
Solution Approach 1:
The patent implements a universal application on the communication terminal that can handle both receiving SMS messages and securely transmitting authentication data through the first communication channel. This multi-functional approach consolidates what could be separate complex systems into a single integrated solution, reducing overall device complexity while maintaining dual-channel security.
Solution Approach 2:
The system enables self-service authentication where the user's own communication terminal and application automatically manage the secure transmission of the TAN through the first communication channel after receiving the SMS request. This eliminates the need for additional manual authentication steps or external intermediary systems, simplifying the overall process while maintaining security.
3Reliability
If encryption with public key is implemented, then the data protection is significantly improved, but the computational energy consumption and processing time increase
Solution Approach 1:
The patent applies encryption with public key locally and selectively only to the TAN data that requires secure transmission through the first communication channel, rather than encrypting all communication data. This localized approach ensures that encryption is applied only where absolutely necessary for security, minimizing computational energy consumption while maintaining data protection for critical authentication information.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for authorizing transactions, the method comprising the following steps: - generating a unique transaction number by means of a transaction unit (150) in response to a transaction request from a transaction terminal (160) of a user; - transmitting the transaction number from the transaction unit (150) to the transaction terminal (160) by means of a first communication channel; - transmitting an authentication request from the transaction unit (150) to a communication terminal (101) of the user by means of a second communication channel, which is different from the first communication channel, wherein the transmission of the authentication request includes the receipt of a short message by the communication terminal (101); - calling up an application on the communication terminal (101) after receiving the short message; - receiving the transaction number by means of the application;- Transmitting the transaction number to the transaction unit (150) via a short message; and - Authenticating the transaction by comparing the transaction number transmitted to the transaction terminal (160) with the transaction number received by the communication terminal (101). The invention further relates to a correspondingly adapted communication terminal (101) and system. The invention makes it more difficult for third parties to manipulate transactions.