Transaction Authorization System Using Dynamic User Status Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in securely and efficiently authorizing transactions, especially in online environments, where verifying the identity of the account holder is difficult, and there is a need for improved methods to manage authorized users and monitor transaction permissions.
Innovation Solution
A computer-implemented method and system that determines the authorizing user based on a user identifier, communicates authorization requests via mobile device messages or automated telephone calls depending on the user's online status, and completes transactions upon approval from the authorizing user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If account holders provide account data to authorized users for making purchases, then authorized users can conduct transactions on behalf of account holders, but security risks increase and account holders lose control over transaction monitoring
Solution Approach 1:
The patent extracts the authorization decision-making power from the account holder and relocates it to the transaction processing system. Instead of giving account data to authorized users, the system stores authorization rules centrally and evaluates transactions against these rules automatically, removing the security risk of data sharing while preserving purchase capability
Solution Approach 2:
The patent introduces a transaction processing system as an intermediary between account holders and authorized users. This intermediary holds the authorization rules and evaluates transactions, acting as a mediator that enables authorized users to make purchases without exposing account data, thus reducing security risks while maintaining operational ease
2Reliability
If the system requires real-time authorization for all transactions, then transaction security is improved, but transaction processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring authorization rules for different authorized users before transactions occur. The system stores these rules in advance, allowing rapid evaluation during transaction processing without requiring real-time communication with account holders, thus maintaining security while reducing processing time
Solution Approach 2:
The patent implements dynamics by creating a flexible authorization rule evaluation system that can adaptively determine whether real-time authorization is needed. The system dynamically evaluates transactions against stored rules and only requires additional verification when rules are violated, balancing security requirements with processing efficiency
3Adaptability or versatility
If the system supports multiple authorized users with different permissions, then versatility is improved, but system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing authorization management into separate, modular rules for different authorized users. Each user has their own set of authorization rules that can be independently configured, stored, and evaluated. This modular approach enables support for multiple users with different permissions while keeping the system manageable through rule-based organization
Solution Approach 2:
The patent uses parameter changes by representing authorization rules as configurable parameters (user identifiers, permitted transaction types, amount limits, etc.). By changing these parameters, the system can flexibly accommodate different authorized users and their specific permissions without altering the underlying system structure, thus managing complexity through parameterization
Data Source
AI summary
Provided is a computer-implemented method for remotely authorizing a transaction. The method includes receiving a transaction request including at least one user identifier, determining an authorizing user of a plurality of authorizing users based at least partially on the at least one user identifier, determining whether the authorizing user is online, communicating, to a user device associated with the at least one authorizing user, an authorization request message, wherein, if the authorizing user is online, the authorization request message includes a mobile device message configured to prompt the authorizing user to provide an approval of the transaction request, and wherein, if the authorizing user is offline, the authorization request message includes an automated telephone call configured to audibly prompt the authorizing user to provide an approval of the transaction request, and completing the transaction in response to receiving an approval of the transaction request from the authorizing user.


