Trusted Channel Upgrade Using Split OTP Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure remote commerce (SRC) systems face challenges in transforming untrusted consumer channels into trusted channels for secure one-time password (OTP) processing, particularly in compliance with GDPR regulations, which require explicit consumer consent and avoid confusing consumers with different communication channels.
Innovation Solution
A method to upgrade an untrusted consumer channel into a trusted channel by using a secure remote commerce (SRC) system that offers tokenization, payment assurance data, and handles security assurance services, ensuring GDPR compliance through a two-factor authentication mechanism involving e-mail and mobile telephone numbers, allowing the SRC system to perform OTP processing on behalf of issuer financial institutions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If issuer financial institutions handle security operations themselves, then security control is maintained, but operational complexity and costs increase
Solution Approach 1:
The patent introduces a trusted service provider as an intermediary between the consumer and issuer financial institution. This mediator handles the complex security operations including OTP generation, channel verification, and authentication processes, allowing issuers to maintain security control without directly managing the operational complexity of security infrastructure.
2Reliability
If multiple communication channels are used for authentication, then security is improved, but consumer confusion increases
Solution Approach 1:
The patent implements preliminary channel verification where the trusted service provider validates and verifies the communication channel with the consumer before authentication begins. This preliminary action ensures that only verified, trusted channels are used for OTP delivery, maintaining security while preventing consumer confusion by ensuring channel consistency throughout the authentication process.
3Adaptability or versatility
If untrusted channels are upgraded to trusted channels, then authentication capability is improved, but trust verification complexity increases
Solution Approach 1:
The trusted service provider acts as an intermediary that manages the upgrade process from untrusted to trusted channel. It implements verification mechanisms including consumer consent validation, channel authentication, and trust establishment protocols, thereby improving authentication capability while managing the verification complexity centrally rather than requiring each participant to implement complex verification logic.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, apparatus and systems for upgrading an untrusted channel to a trusted channel. In an embodiment, a verifier server computer receives a request to verify an untrusted channel address from a first service component that is associated with a Consumer identifier, retrieves a trusted channel address from a verifier database, and then generates a one-time password witness value. The verifier server computer then splits the one-time password witness value into a first portion and a second portion, and transmits the first portion to the first service component and transmits the second portion to the second service component. The process includes receiving a recomposed value from the first service component, splitting the recomposed value into a first recomposed value and a second recomposed value, generating a reverted one-time password value, determining that the reverted one-time password value equals the one-time password witness value, and then transmitting an authentication message to the first service component confirming authentication of the consumer enabling upgrading of the untrusted channel to a trusted channel.