Multichannel Authentication With Unified Tokenization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing authentication systems struggle with integrating multiple channels (physical and digital) and tokenization processes, leading to complexity, security vulnerabilities, and user inconvenience during transitions between different authentication services.

Innovation Solution

A multichannel authentication and tokenization system that uses a unified tokenization protocol across physical and digital channels, generating and managing tokens in a channel-agnostic manner, and an access token conversion system for seamless transitions between different authentication services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple separate authentication systems are used for different channels (physical and digital), then each channel can have its own customized authentication policy, but the system architecture becomes complex and integration becomes difficult

Engineering Contradiction:
Improvechannel-specific authentication policyVSAvoidsystem architecture complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges multiple channel-specific authentication systems into a single unified authentication service that serves both physical (POS) and digital (e-commerce) channels. This consolidation reduces architectural complexity while maintaining the ability to apply different authentication policies for different channels through a common interface and shared tokenization infrastructure.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The unified authentication service is designed to be universal, handling authentication requests from multiple channels (in-store POS terminals and online e-commerce platforms) through a single system. The service can adapt its authentication policy based on the requesting channel while maintaining a consistent core authentication mechanism and tokenization process.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If channel-specific authentication systems are used, then each system can be optimized for its channel, but integration and user transitions between channels become inconvenient

Engineering Contradiction:
Improvechannel optimizationVSAvoiduser transition convenience
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The unified authentication service acts as an intermediary between different authentication channels. It receives authentication requests from various channels (POS, e-commerce), processes them through a common authentication mechanism, and issues standardized tokens that are recognized across all channels. This intermediary role enables seamless user transitions between channels without requiring separate authentication processes.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements homogeneity in token generation and authentication validation across all channels. By using a unified tokenization process that generates consistent token formats and validation rules regardless of the originating channel, users experience consistent authentication behavior whether transitioning from physical to digital channels or vice versa.

Inventive Principle:
Principle #33Homogeneity

3Reliability

If separate tokenization protocols are used for different authentication services, then each service can have its own security standards, but token conversion and service migration become complex

Engineering Contradiction:
Improveservice-specific securityVSAvoidtoken conversion complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The unified authentication service implements a universal tokenization protocol that serves multiple authentication channels and services. This single tokenization system can issue tokens that are valid across different services (POS transactions, e-commerce purchases, mobile app access) without requiring separate tokenization protocols, thereby eliminating the need for complex token conversion mechanisms while maintaining service-specific security requirements through policy configuration.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If multiple authentication systems operate independently, then each system can maintain its own security policies, but overall system security and bot attack prevention are weakened

Engineering Contradiction:
Improvechannel-specific security policyVSAvoidbot attack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent combines security measures from multiple independent authentication systems into a unified security framework. The unified authentication service implements centralized bot detection, credential validation, and anomaly monitoring that protects all channels simultaneously. This merged security approach maintains channel-specific security policies while providing coordinated bot attack prevention and consistent security enforcement across the entire system.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12463952B2Multichannel authentication and tokenization system
Publication Date: 2025.11.04 WALMART APOLLO LLC
  • US12463952B2 patent drawing
  • US12463952B2 patent drawing
  • US12463952B2 patent drawing

AI summary

In some embodiments, apparatuses and methods are provided herein useful to multichannel authentication and tokenization. A system comprises a first authentication system serving a plurality of in-store point of sale terminals and implementing a physical channel authentication policy and a second authentication system serving a plurality of user devices accessing an e-commerce service and implementing an e-commerce channel authentication policy, and a tokenization system. The tokenization system being configured to generate a first token in response to receiving a first user credential from an in-store point of sale terminal via the first authentication system, generate a second token in response to receiving a second user credential from a user device via the second authentication system, and forward the first token and the second token to the retailer backend system, wherein the first token and the second token are generated based on a same tokenization protocol.