Authentication Code Management via Device State Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic devices, such as bank cards and authentication tokens, that deliver dynamic authentication codes face issues with failure detection, as manufacturers and issuers lack information on device state, leading to unnecessary replacements and security risks due to unsynchronized or unavailable codes.

Innovation Solution

A method that involves obtaining a current authentication code, detecting a predefined state of the device, applying a predefined function to the code to generate a modified authentication code, and issuing this code to the user, allowing servers to detect device state and enhance security and management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If dynamic authentication codes are implemented in electronic devices, then transaction security is improved, but device complexity increases due to additional components like microcircuits, screens, batteries, and clocks

Engineering Contradiction:
Improvetransaction securityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication code generation and modification functionality from complex hardware components and implements it through software algorithms. The device uses a microcontroller with cryptographic capabilities to generate authentication codes based on time and counter values, eliminating the need for complex hardware security modules while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent implements a universal authentication code generation mechanism that can be applied across different electronic devices and communication protocols. The same cryptographic algorithm and code modification approach work for various device types (tokens, cards, mobile devices) and authentication scenarios, reducing the need for device-specific complex hardware.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Stability of the object's composition

If multiple components (microcircuit, screen, battery, clock) are added to deliver dynamic codes, then code synchronization is improved, but reliability decreases due to potential component failures

Engineering Contradiction:
Improvecode synchronizationVSAvoiddevice reliability
Core Design Contradiction:
Stability of the object's compositionVSReliability

Solution Approach 1:

The patent implements compensation mechanisms that anticipate and correct for clock drift and synchronization issues before they cause authentication failures. The system uses time synchronization protocols and counter value adjustments to preemptively maintain code synchronization, cushioning against the effects of component imperfections.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Solution Approach 2:

The patent employs feedback mechanisms where the device and server continuously exchange time and authentication information to maintain synchronization. The server validates authentication codes and provides feedback on synchronization status, allowing the device to adjust its timing and counter values to maintain accurate code generation despite component variations.

Inventive Principle:
Principle #23Feedback

3Reliability

If authentication codes are regularly updated, then security against fraud is improved, but loss of time occurs during code generation and synchronization

Engineering Contradiction:
Improvefraud protectionVSAvoidcode generation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent pre-generates authentication codes and prepares cryptographic materials in advance. The device maintains a window of valid authentication codes that can be used during a time period, eliminating the need for real-time code generation during authentication transactions and reducing transaction time.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements periodic authentication code updates at predetermined time intervals or after a certain number of uses. This periodic regeneration balances security requirements with performance, updating codes frequently enough to prevent fraud but not so frequently as to cause excessive synchronization overhead and transaction delays.

Inventive Principle:
Principle #19Periodic action

4Device complexity

If manufacturers and issuers have no information on device failures, then device simplicity is maintained, but productivity decreases due to unnecessary card replacements

Engineering Contradiction:
Improvemanagement system simplicityVSAvoidcard replacement efficiency
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The patent implements feedback mechanisms where authentication devices report their operational status, error conditions, and usage patterns to issuing authorities. This allows manufacturers and banks to monitor device health remotely, identify failing devices before complete failure, and proactively replace only the necessary devices rather than performing blanket replacements.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent enables authentication devices to self-diagnose their operational status and automatically report anomalies to the issuing authority. The device monitors its own components (battery status, clock accuracy, cryptographic module health) and triggers replacement requests only when actual failures or anomalies are detected, eliminating unnecessary replacements and improving fleet management efficiency.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3599564B1A method for managing an electronic device delivering authentication codes, devices and associated servers
Publication Date: 2021.07.14 IDEMIA FRANCE SAS
  • EP3599564B1 patent drawingFigure 1~2
  • EP3599564B1 patent drawingFigure 3~4B
  • EP3599564B1 patent drawingFigure 5A~6D

AI summary

A method for managing an electronic device (500) associated with a user and implemented by the electronic device, the method comprising: a- obtaining a current authentication code, b- detecting a predefined state of the electronic device, c- applying a predefined function associated with the predefined state to the current authentication code to obtain a modified authentication code, and d- issuing the modified authentication code to the user. The invention also relates to the corresponding device (500), a method implemented by a server, and the corresponding server.