Virtual Token Payment System Offline Card Number Leakage Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional virtual token systems face issues with card number leakage during payment transactions, especially when wireless communication is not available, and require users to log in for OTP-based authentication, making them inconvenient for offline use.
Innovation Solution
A virtual token-based payment system that generates and verifies virtual tokens without duplication, allowing for real-time search of actual card numbers without wireless communication, using detailed codes and a storage location search algorithm to securely identify and transmit card information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If OTP-based authentication is used to identify users, then user identification accuracy is improved, but login procedure complexity increases and user convenience deteriorates
Solution Approach 1:
The system performs preliminary actions by pre-registering user identification information and generating unique identifiers during an initial setup phase. This allows the system to store and recognize user identities in advance, eliminating the need for login procedures during actual payment transactions. The virtual token generation function is pre-configured with user identification data, enabling direct token generation without authentication steps at the point of use.
2Reliability
If virtual token service server communication is required for virtual token usage, then token verification reliability is improved, but system availability deteriorates when communication is unavailable
Solution Approach 1:
The virtual token generation function is designed with multi-functionality to operate in multiple modes: it can generate tokens using pre-stored user identification information when server communication is unavailable, and can also communicate with the virtual token service server when available for enhanced verification. This universal design allows the system to adapt to different operational conditions, maintaining functionality whether online or offline.
Solution Approach 2:
The system performs preliminary actions by pre-registering user identification information and generating unique identifiers during an initial setup phase. This allows the system to store and recognize user identities in advance, eliminating the need for login procedures during actual payment transactions. The virtual token generation function is pre-configured with user identification data, enabling direct token generation without authentication steps at the point of use.
3Productivity
If actual card number is transmitted during payment, then payment processing completeness is improved, but card number leakage risk increases
Solution Approach 1:
The system creates a virtual copy of the actual card number in the form of a virtual token. This virtual token contains all necessary payment information and can be used for transactions without exposing the real card number. The virtual token serves as a functional duplicate that maintains payment processing completeness while eliminating the security risk of transmitting actual card numbers.
Solution Approach 2:
The virtual token acts as an intermediary between the user's actual card number and the payment processing system. Instead of directly transmitting the sensitive card number, the system uses the virtual token as a mediator that carries payment information in an encrypted or obfuscated form, thereby maintaining payment functionality while protecting the user's actual card number from exposure.
Data Source
AI summary
The present invention relates to a virtual token-based settlement providing system, a virtual token generation apparatus, a virtual token verification server, a virtual token-based settlement providing method, and a virtual token-based settlement providing program. The present invention comprises: a step for receiving a virtual token provided by a virtual token generation means, by a virtual token verification means; a step for extracting multiple detailed codes included in the virtual token by the virtual token verification means; a step for searching for a storage location of an actual card number on the basis of the multiple detailed codes by the virtual token verification means; and a step for transmitting the searched actual card number to a payment settlement service server or a financial company server.