Dual-Device ATM Authentication to Protect Cardless Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current credit/debit card transactions are insecure due to the accessibility of card numbers and PINs, leading to significant fraudulent activities, and smart cards have not been widely adopted due to hardware upgrade requirements.
Innovation Solution
A method using two transaction devices, such as an ATM and a smartphone, both connected securely to an account server, with authentication through secure login and handshaking to confirm device pairing, eliminating the need for hardware upgrades.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smart cards are used to encrypt the account number and add another layer of security, then transaction security is improved, but hardware upgrade requirements increase device complexity and reduce ease of manufacture
Solution Approach 1:
The patent replaces the mechanical hardware-based security system (smart cards requiring physical upgrades to card readers) with a software-based authentication system using portable smart devices. The authentication is achieved through software applications on existing devices that communicate with the account server, eliminating the need for hardware upgrades to card reading devices while maintaining or improving security through encrypted communication protocols.
2Reliability
If two independent devices are used for authentication, then transaction security is improved, but device complexity and authentication process complexity increase
Solution Approach 1:
The patent merges the authentication functions of two independent devices (the user's portable smart device and the transaction device) through a coordinated handshaking process. Both devices independently connect to the account server and verify each other's identities, creating a unified security framework where the combined authentication strength of both devices provides enhanced security without requiring one device to be significantly more complex than the other.
Data Source
AI summary
A technique for conducting secure financial and informational transactions via portable smart devices is disclosed, in which two transaction devices, e.g. an ATM and a smartphone or other smart connected device are both substantially simultaneously accessible by the user and are both independently connected with the account server by a secure connection between the transaction device for the ATM and a secure connection between the smartphone and a cellphone tower. Thus, authentication is provided by secure login on the two devices, i.e. the transaction device and the cellphone. Once the devices are both connected to the account server, handshaking between the two devices to confirm pairing of the right two devices is prompted, at which point, a transaction may proceed.