Wearable Mobile Payment Security via Biometric Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile payment systems face significant security risks due to the potential unauthorized use of payment information if a user's mobile device is lost, leading to potential financial losses.
Innovation Solution
A mobile payment system comprising a wearable device and a mobile device wirelessly connected, where the wearable device verifies user identity information and encrypts payment instructions using a secret key before transmission to the mobile device, allowing secure decryption and authorization for payments only if identity is confirmed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If mobile payment is implemented for convenience and speediness, then payment efficiency is improved, but security risk increases due to potential unauthorized use if device is lost
Solution Approach 1:
The system segments the payment authentication process into two independent parts: biometric authentication (fingerprint recognition) and payment authorization. The biometric data is stored and verified by the wearable device, while the payment instruction is generated and executed by the mobile device. This segmentation ensures that even if the mobile device is lost, the attacker cannot complete payment without the user's biometric data stored in the wearable device.
Solution Approach 2:
The wearable device acts as an intermediary between the user's biometric identity and the payment system. It receives payment instructions from the mobile device, verifies them against stored biometric data, and only authorizes payments when the user's identity is confirmed. This intermediary role prevents direct access to payment functions on the mobile device, adding a security layer that mitigates the risk of device loss.
2Reliability
If biometric authentication is added to verify user identity, then payment security is improved, but system complexity increases
Solution Approach 1:
The wearable device performs self-service by automatically storing and managing the user's biometric data (fingerprint information) locally. When a payment instruction is received, the system automatically verifies the user's identity against the stored biometric data without requiring manual intervention or complex authentication protocols. This self-service approach simplifies the overall system architecture while maintaining high security standards.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances the security of payment information by ensuring that only authorized payments can be made, reducing the risk of unauthorized transactions when a mobile device is lost or compromised.
Implementation Method 1
The carrier transmission module may transmit the encrypted payment-permitted instruction to the mobile device using a low frequency signal of 125 KHz
Implementation Method 2
The ASK receiving module may receive from the carrier transmission module the encrypted payment-permitted instruction
Data Source
AI summary
Mobile payment systems and associated mobile payment methods are disclosed. A mobile payment system may include a wearable device and a mobile device wirelessly connected to the wearable device. The mobile device may transmit a payment instruction to the wearable device, which may verify whether the user's identity information is correct according to the payment instruction. If the user's identity information is correct, the wearable device may generate a payment-permitted instruction and encrypt the payment-permitted instruction by a secret key. The wearable device may transmit the encrypted payment-permitted instruction to the mobile device, which may perform decryption on the encrypted payment-permitted instruction, if the mobile device can correctly decrypt the encrypted payment-permitted instruction, the mobile device can make a payment. Thus, the present disclosure can improve the security of the payment information in mobile payment.