Two-Factor Transaction Verification via Device Proximity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional online credit card transactions lack robust security measures, making them vulnerable to fraudulent activities as hackers can steal financial payment information, leading to unauthorized transactions.
Innovation Solution
Implementing a two-factor authentication process using a first device and a second device, where the second device must be in proximity to the first device to confirm transactions, utilizing unique identifiers and short-range communication protocols like Near Field Communication, Bluetooth, or sound to ensure transaction security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional electronic credit card transactions are processed over a network connection, then transaction speed and convenience are improved, but security is worsened due to vulnerability to hacker theft of financial information
Solution Approach 1:
The transaction process is divided into two separate devices: a first device for selecting items and a second device for confirming payment. This segmentation ensures that even if one device is compromised, the other remains secure, thereby maintaining both transaction speed and security.
Solution Approach 2:
A proximity verification mechanism acts as an intermediary between the first and second devices. This intermediary verifies that the devices are physically close to each other before allowing the transaction to proceed, adding a security layer without significantly impacting transaction speed.
2Reliability
If two factor authentication is implemented requiring a second device, then transaction security is improved, but device complexity and operation difficulty are worsened
Solution Approach 1:
The proximity verification function is merged into the existing authentication process. The system automatically checks whether the first and second devices are close to each other using built-in device capabilities (such as Bluetooth or GPS), eliminating the need for separate complex verification steps.
Solution Approach 2:
The devices perform self-verification of proximity using their own built-in capabilities (GPS, Bluetooth, NFC). This self-service approach reduces the need for external verification systems and simplifies the overall authentication process while maintaining high security standards.
3Reliability
If proximity verification is required between devices, then fraudulent transactions are reduced, but transaction time is worsened due to additional verification steps
Solution Approach 1:
The system performs preliminary proximity verification in the background before the user needs to confirm the transaction. By pre-checking whether the devices are close to each other and establishing a secure connection in advance, the actual transaction confirmation becomes faster and more efficient.
Solution Approach 2:
The proximity verification process runs continuously in the background during the shopping and item selection phase. This continuous verification ensures that when the user is ready to complete the transaction, the security check is already in place, eliminating the need for additional time-consuming verification steps at the point of sale.
Data Source
AI summary
In some examples, a system may receive a notification of a transaction using a first device, wherein the notification includes an identifier that identifies at least one of: a user, or a second device associated with the user. The system may send, to the second device, based on the identifier included in the notification, a communication to cause the second device to present a user interface that displays information about the transaction. Further, the system may receive, from the second device, prior to completion of processing the transaction, an indication of a user input received via the user interface indicating a confirmation of the information about the transaction. Based at least on receiving the confirmation from the second device, the system may submit, to a payment processor, information related to the transaction to enable the payment processor to determine whether to approve the transaction.