Virtual Code Verification System for Secure Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual code systems face challenges in verifying the validity of virtual codes without requiring user identification information, as they are prone to leaks and misuse, and lack effective mechanisms for preventing duplicate codes and expiration dates.
Innovation Solution
A transaction method using virtual codes that involves a virtual code verification system which generates and updates control command information for each User Identification (UID) periodically, allowing verification of virtual code validity without revealing user information and preventing misuse by setting expiration dates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If virtual code is used as substitute currency for payment, then transaction convenience is improved, but security risk increases due to code leaks and misuse
Solution Approach 1:
The patent implements dynamic virtual codes that automatically expire after a predetermined period or upon use. The verification system checks both the code validity and its usage status in real-time, making the code dynamic rather than static. This resolves the contradiction by maintaining convenience through automated verification while improving security through time-limited and single-use codes that cannot be misused indefinitely.
Solution Approach 2:
The patent establishes a pre-configured virtual code management system that sets expiration dates and usage limits before the code is issued. The verification means is pre-programmed with algorithms to check code validity, expiration status, and duplicate usage. This preliminary setup ensures security measures are in place before transactions occur, preventing misuse while maintaining operational convenience.
2Reliability
If temporarily generated virtual code is used to prevent leaks, then code security is improved, but applicability decreases due to required login procedures
Solution Approach 1:
The patent extracts the user identification requirement from the virtual code verification process. Instead of requiring login procedures to generate or verify codes, the system uses standalone virtual codes that contain all necessary verification information within the code itself. The verification means checks code validity independently without needing to identify the user, thereby maintaining security while dramatically improving applicability across various transaction scenarios.
Solution Approach 2:
The virtual code system is designed to be self-verifying without requiring external user identification. The code itself carries the necessary validation information, and the verification means autonomously checks its validity, expiration status, and usage state. This self-service mechanism eliminates the need for login procedures while maintaining code security, enabling widespread applicability.
3Measurement precision
If virtual code verification requires user identification data, then code validity can be determined, but information security risk increases
Solution Approach 1:
The patent completely extracts user identification information from the verification process. The virtual code verification means determines code validity using only the code itself and its inherent metadata (expiration time, usage status), without accessing or requiring any user personal information. This separation ensures precise validity determination while eliminating the security risk of user information exposure.
Solution Approach 2:
The patent introduces an intermediary virtual code system that mediates between the user and the verification system. Instead of directly accessing user identification data, the system uses the virtual code as an intermediary carrier that encapsulates all necessary verification information. The verification means interacts only with this intermediary code, achieving precise validity checking without compromising user information security.
4Reliability
If control command information is matched to multiple UIDs periodically, then code forgery resistance is improved, but system complexity increases
Solution Approach 1:
The patent implements periodic updates of control command information mappings between virtual codes and UIDs. The verification means is configured to refresh these mappings at predetermined intervals, ensuring that even if one mapping is compromised, the system regains security in the next period. This periodic action enhances forgery resistance while managing complexity through automated, time-based updates rather than continuous complex verification.
Data Source
AI summary
The present invention provides a virtual code-based transaction system, method and program, wherein the method includes a virtual code reception step in which a virtual code verification means receives a virtual code, and the virtual code is generated by a virtual code generation function included in a virtual code generation means, searching, by the virtual code verification means, for a storage location of a User Identification (UID) in the virtual code, searching, by the virtual code verification means, for control command information stored by matching the searched UID, and performing a control command based on the extracted control command information, wherein the virtual code verification means stores a plurality of UIDs and changes control command information matched to each of the plurality of UIDs every preset period.