Bank Card Transfer via Peer-to-Peer Wireless Secure Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment applications require users to manually input or photograph bank card information to bind physical cards to terminals, leading to a complex process and poor user experience when upgrading or repairing devices.
Innovation Solution
A method utilizing peer-to-peer wireless communication between terminals to transfer encrypted bank card data, leveraging a Trusted Execution Environment (TEE) or Secure Element (SE) for secure data transfer and processing, allowing users to add bank cards without manual input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual input or photographing of bank card information is required to bind physical cards to terminals, then security verification is ensured, but the operation process becomes complex and user experience deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-storing bank card information and verification credentials in the Trusted Execution Environment (TEE) before the actual card binding operation. When a user needs to add a bank card, the system retrieves pre-stored verification data from TEE, eliminating the need for real-time manual input or photographing of card details. This preliminary preparation of verification data streamlines the operation while maintaining security requirements.
Solution Approach 2:
The patent introduces TEE as an intermediary layer between the user input and the bank card binding process. The TEE securely stores and manages bank card information, verification credentials, and cryptographic keys, acting as a mediator that automates the verification process. This intermediary mechanism eliminates direct manual input requirements while ensuring security through encrypted data management and automated verification credential retrieval.
2Reliability
If virtual bank card data is stored in eSE with secure storage capability, then security is improved, but data cannot be copied and requires re-entry when terminal is upgraded or repaired
Solution Approach 1:
The patent applies copying by creating and storing verification credentials and bank card information in the TEE, which can be securely retrieved and used across different terminal instances. The system copies essential verification data to TEE during initial setup, enabling automatic retrieval without manual re-entry when terminals are upgraded or repaired, while maintaining the security constraints of eSE storage.
Solution Approach 2:
The patent uses preliminary action by pre-configuring and storing verification credentials in the TEE before terminal upgrades or repairs occur. This advance preparation ensures that when a terminal is replaced or repaired, the verification data is already available in the secure environment, eliminating the need for users to re-enter bank card information and maintaining operational convenience while preserving security.
3Adaptability or versatility
If multiple physical bank cards need to be bound to a terminal, then users can obtain preferences of different banks, but the information input process becomes time-consuming
Solution Approach 1:
The patent applies self-service by enabling the TEE to automatically manage and retrieve verification credentials for multiple bank cards without requiring user intervention for each card binding. The system autonomously retrieves stored verification data, performs cryptographic operations, and completes the binding process automatically. This self-service mechanism allows users to bind multiple bank cards efficiently while maintaining security, significantly reducing the time required compared to manual verification processes.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
Embodiments of the present invention disclose a bank card adding method and an apparatus, and relate to the terminal field, so that the following problem is resolved: When a user performs virtual bank card issuing on a terminal, an information input process is rather complex, causing poor user experience. A specific solution is: receiving, by a first terminal, a bank card adding request; establishing, by the first terminal, a peer-to-peer wireless communication connection to a second terminal; sending, by the first terminal, a request for obtaining bank card data to the second terminal; receiving, by the first terminal, the bank card data sent by the second terminal; obtaining, by the first terminal, bank card account information based on the bank card data; and sending, by the first terminal, a card issuing request to a first server, to add a bank card to the first terminal, where the card issuing request includes the bank card account information. The embodiments of the present invention are used to improve user experience.