URL-Bound Virtual Card Number Generation and Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for virtual card numbers (VCNs) lack effective mechanisms to securely bind VCNs to specific URLs and authorize interactions based on URL-specific VCNs, leading to potential fraud and unauthorized transactions.
Innovation Solution
The method involves generating a VCN based on a primary account number (PAN) and associating it with a specific URL, allowing for secure authorization of transactions by comparing the requested URL with the approved URL, thereby enabling secure and controlled use of VCNs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a VCN is generated for a purchase, then the user can make online purchases securely, but the third party can capture and use the payment mechanism information for fraud
Solution Approach 1:
The patent segments the VCN functionality by creating URL-specific VCNs that are divided into multiple distinct identifiers, each tied to a specific merchant URL. This segmentation ensures that a VCN generated for one merchant cannot be used at another merchant, preventing fraud while maintaining secure purchase capability
Solution Approach 2:
The patent applies local quality by making each VCN have different properties depending on the specific URL it is associated with. Each VCN is customized with URL-specific parameters and restrictions, ensuring that the payment mechanism has different security characteristics for different merchants, thereby preventing unauthorized use while enabling legitimate purchases
2Reliability
If a VCN is bound to a specific URL for secure transactions, then fraud is reduced, but the system complexity increases due to URL comparison and validation mechanisms
Solution Approach 1:
The patent applies preliminary action by pre-binding VCNs to specific URLs during the VCN generation process. The URL comparison and validation rules are established in advance when the VCN is created, rather than being configured at the time of each transaction. This reduces system complexity during transaction processing while maintaining high security
Solution Approach 2:
The patent implements feedback mechanisms where the system automatically compares the requested URL against the approved URL associated with the VCN during transaction authorization. This automated feedback loop provides real-time validation without requiring complex manual intervention, balancing security requirements with system simplicity
Data Source
AI summary
A device may receive a VCN generation request comprising a primary account number (PAN) and an approved URL. A device may generate a VCN based on the PAN, the VCN being associated with the approved URL. A device may receive a VCN use request from an external entity, the VCN use request comprising the VCN. A device may receive a use request URL associated with the VCN use request. A device may compare the use request URL to the approved URL. A device may provide a VCN use decision based on the comparing the use request URL to the approved URL, the VCN use decision including a VCN use authorization or a VCN use denial.


