Validation Identity Token Fragmentation for Secure Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional tokenization processes are vulnerable to fraud and inefficient, as tokens can be stolen during transactions and require users to physically present payment devices and provide manual verification, leading to cumbersome and insecure processes.
Innovation Solution
The system distributes multiple pieces of information to generate a token across multiple entities, reducing the risk of token theft and eliminating the need for physical payment devices by using identification data and validation keys to create a validation identity token for secure and efficient transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a token is transmitted to multiple entities during a transaction process, then the transaction can be processed by all involved parties, but the token becomes vulnerable to theft and interception at any point during transmission
Solution Approach 1:
The patent divides the token into multiple fragmented pieces and distributes them to different entities involved in the transaction process. Each entity receives only a portion of the token data, making it impossible for any single entity to obtain the complete token. This segmentation approach allows transaction processing to continue across multiple parties while eliminating the security vulnerability of transmitting a complete token to all entities.
2Reliability
If a user must physically present a payment device and provide manual verification during a transaction, then authentication can be confirmed, but the process becomes cumbersome and time-consuming
Solution Approach 1:
The patent replaces the mechanical system of physical payment device presentation and manual verification with an electronic identification system. The user provides identification data that is electronically processed to generate an identification token, eliminating the need for physical card handling and manual signature verification. This substitution maintains authentication integrity through cryptographic verification while dramatically reducing transaction time and eliminating cumbersome physical steps.
3Reliability
If dynamic tokens are generated at the time of transaction to reduce risk, then security is improved, but the tokens remain vulnerable to theft during transmission
Solution Approach 1:
The patent applies segmentation by dividing the dynamically generated token into multiple fragmented pieces that are distributed to different entities during the transaction process. Even though the token is generated dynamically at transaction time, the fragmentation ensures that no single entity receives the complete token data. This approach maintains the security benefits of dynamic token generation while eliminating the interception vulnerability that would otherwise exist during transmission to multiple parties.
Data Source
AI summary
A user initiates a transaction by providing identification data at an access device. Certain elements of a validation identity token, such validation keys, may be distributed among several remote server computers. After the elements are retrieved during the transaction, the validation identity token may be generated using the retrieved elements. The validation identity token may indicate whether the user is authenticated. No single entity can possess all elements utilized to generate the validation identity token, which mitigates risk of the validation identity token being compromised. In some embodiments, the validation identity token may be a chromatic identity token, which may indicate validity by color.