Virtual Reality Payment Authentication via Risk-Based Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems for user authentication in virtual reality settings face challenges in providing secure and frictionless transactions, as users often need to leave the virtual environment to complete authentication processes, which can be inconvenient and increase transaction risks.

Innovation Solution

The system employs enhanced authentication techniques, such as EMV 3D Secure, using a directory server and access control server to passively authenticate users based on risk assessment, and if necessary, biometric or challenge question responses, all within the virtual reality setting, minimizing user interaction and maintaining security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users leave the virtual reality environment to complete authentication processes, then authentication security is improved, but user convenience and transaction efficiency deteriorate

Engineering Contradiction:
Improveauthentication securityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces an access control server and directory server as intermediaries between the virtual reality environment and the authentication system. These servers enable authentication to occur within the virtual environment by mediating the authentication process, allowing users to be authenticated without leaving the immersive experience while maintaining security through server-mediated verification

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If users leave the virtual reality environment to complete authentication processes, then authentication security is improved, but transaction efficiency deteriorates

Engineering Contradiction:
Improveauthentication securityVSAvoidtransaction efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary action by pre-configuring authentication methods and risk assessment parameters before transactions occur. The system assesses transaction risk and determines authentication methods in advance, allowing the authentication process to flow smoothly within the virtual environment without disrupting the transaction timeline or requiring users to exit the experience

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If passive risk-based authentication is used, then user friction is reduced, but authentication reliability may be compromised

Engineering Contradiction:
Improveuser frictionVSAvoidauthentication reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies dynamics by making the authentication process adaptive rather than static. The system dynamically adjusts authentication requirements based on real-time risk assessment of each transaction. For low-risk transactions, passive authentication with minimal user interaction is used, while higher-risk transactions trigger additional verification steps, ensuring both user convenience and authentication reliability are maintained according to actual needs

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS10915904B2Systems and methods for facilitating network transactions based on user authentication
Publication Date: 2021.02.09 MASTERCARD INT INC
  • US10915904B2 patent drawing
  • US10915904B2 patent drawing
  • US10915904B2 patent drawing

AI summary

Systems and methods are provided for facilitating payment account transactions in virtual settings. One exemplary method includes prompting, by a computing device, a selection of a product for purchase from a user in a virtual reality setting where the virtual reality setting is provided by the computing device. The method further includes transmitting an authentication request to a directory server for a purchase transaction for the product. In response, the computing device receives an authentication response for the purchase transaction from the directory server. When the authentication response includes an authentication value, the computing device compiles and transmits an authorization request for the purchase transaction for the selected product, where the authorization request includes the authentication value. When the authentication response includes an indication that a challenge is required, the computing device instead causes a device associated with the user to carry out the challenge in the virtual reality setting.