Virtual Certification Number Generation for Secure Payment Transactions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing incidence of fraud, spam, and theft related to payment mechanisms, particularly credit cards, due to unauthorized access and use of payment information, necessitates a secure and efficient method for transaction authorization without exposing sensitive payment account numbers.

Innovation Solution

The implementation of virtual certification numbers (VCNs) that are generated and managed through a system involving risk analysis, secure account access, and encryption, allowing secure transactions without transmitting actual payment account numbers, thereby preventing unauthorized use and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If actual payment account numbers are transmitted for transactions, then transaction authorization is enabled, but security risk and fraud exposure increase

Engineering Contradiction:
Improvetransaction securityVSAvoidfraud and theft risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces virtual certification numbers (VCNs) as intermediary tokens that replace actual payment account numbers in transaction processing. The VCN acts as a mediator between the payment account and the transaction system, enabling authorization while preventing exposure of sensitive account information. The VCN is generated through a tokenization process that creates a surrogate identifier linked to the original account only through secure, one-way mappings.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a virtual copy (VCN) of the actual payment account number that functions similarly in transactions but cannot be used to access the original account. This copy contains no sensitive information from the original account and serves purely as a transactional placeholder, eliminating the security risk associated with transmitting actual account numbers.

Inventive Principle:
Principle #26Copying

2Reliability

If virtual certification numbers are generated and used, then security is enhanced and fraud risk reduced, but system complexity increases

Engineering Contradiction:
Improvepayment securityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the payment authentication system into distinct functional components: a tokenization service that generates VCNs, a VCN management system that handles lifecycle operations, and a transaction processing system that uses VCNs. This segmentation allows each component to be independently developed, deployed, and maintained, reducing overall system complexity despite the added security functionality.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements self-service capabilities where the VCN generation and management processes are automated without requiring manual intervention. The tokenization service automatically generates VCNs when needed, and the system autonomously handles VCN registration, activation, and invalidation, reducing operational complexity despite the enhanced security architecture.

Inventive Principle:
Principle #25Self-service

3Reliability

If risk analysis and authentication verification are performed, then fraud detection capability is improved, but transaction processing time increases

Engineering Contradiction:
Improvefraud detection accuracyVSAvoidtransaction processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary risk analysis and authentication verification during the VCN generation and registration phases, before actual transactions occur. By pre-assessing risk factors and establishing authentication credentials in advance, the system avoids performing these time-consuming operations during every transaction, thereby maintaining fast transaction processing while ensuring thorough fraud detection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback mechanisms where risk analysis results from previous transactions inform subsequent authentication decisions. The system learns from transaction patterns and adjusts its risk assessment, enabling faster processing of low-risk transactions while maintaining rigorous verification for suspicious activities, thus balancing security and speed.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20240362642A1Systems and methods for virtual certification number generation
Publication Date: 2024.10.31 CAPITAL ONE SERVICES LLC
  • US20240362642A1 patent drawing
  • US20240362642A1 patent drawing
  • US20240362642A1 patent drawing

AI summary

Systems and methods for triggering a virtual certification number (VCN) generation for use at a source include receiving a VCN generation request from an external entity, the VCN generation request comprising an external request code, external risk signals, and one or more source data for the source, verifying a registration authentication of an account associated with the external request code by comparing the external request code to a database entry, identifying a certification mechanism reference identifier associated with the external request code based on verifying the registration authentication, generating a risk authentication based on a risk analysis conducted using the external risk signals and the external request code, identifying a source identifier based on the one or more source data, and generating the VCN based on the certification mechanism reference identifier and the source identifier.