| 摘要 |
The preferred embodiment provides a mechanism for solving the problem of identity theft by introducing a dual-layer authentication system for accessing the funds and/or credit through payment cards. More particularly, the preferred embodiment provides an additional check regarding the identity of a card user to be included within a traditional security protocols for these cards, wherein the additional check is based on an authentication channel which is external to the user's card. To this end, the preferred embodiment leverages the use of a device (owned by the legitimate card owner) to certify that the user of the card at any given instant is the legitimate owner of the card and not someone else. In support of the above, the preferred embodiment includes additional information into a traditional payment card. The additional information includes features that can be used to verify the identity of the registered owner of the card. For example, the additional information could include: a number of the registered owner's mobile phone; a unique International Mobile Equipment Identity (IMEI) code of the registered owner's mobile phone; and an identifier of an RFID tag carried by the registered owner. To process this additional information, the preferred embodiment includes a pluggable component, which in use is installed into a payment system. The pluggable component is adapted to check the identity of the user of a payment card based on the additional information embedded within the card. |
