Bankcard Password Protection via Processor Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional POS devices face security risks due to exposure of plaintext bankcard passwords during transmission from the application processor to the security processor, compromising the security of bankcard password input and transmission.
Innovation Solution
A bankcard password protection method where the security processor generates a public and private key pair, sends the public key to the application processor, and encrypts the bankcard password, which is then transmitted and decrypted by the security processor, preventing plaintext exposure during transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the application processor transmits bankcard passwords to the security processor, then the password verification function is achieved, but the plaintext passwords are exposed during transmission creating security hazards
Solution Approach 1:
The patent applies preliminary action by having the security processor generate encryption keys and establish encryption channels before any password transmission occurs. The application processor encrypts passwords using pre-shared keys before transmission, ensuring that even if transmission is intercepted, the plaintext is never exposed. This proactive security measure resolves the contradiction by preventing plaintext exposure while maintaining verification functionality.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism between the application processor and security processor. Instead of direct plaintext transmission, an encryption layer mediates the communication, transforming passwords into encrypted form before transmission. This intermediary layer eliminates plaintext exposure risks while preserving the ability to verify passwords through decryption at the security processor.
2Measurement precision
If a physical numeric keypad is used for bankcard password input, then input accuracy is ensured, but the POS device occupies large space and appears rigid and unfashionable
Solution Approach 1:
The patent replaces the mechanical physical numeric keypad with a software-based touch screen interface. The touch screen displays virtual numeric keys that respond to user input, providing the same password input functionality without the physical space requirements and aesthetic limitations of mechanical keypads. This substitution maintains input accuracy through touch detection while eliminating the structural complexity and space occupation of physical keys.
3Ease of operation
If the touch screen is used for bankcard password input, then the device size is reduced and appearance is improved, but the security protection level is compromised compared to physical keypads
Solution Approach 1:
The patent applies preliminary action by establishing encryption keys and security protocols before touch screen password input occurs. The security processor prepares encryption mechanisms in advance, and the application processor configures secure transmission channels before any password data is collected from the touch screen. This proactive security setup ensures that the convenience of touch screen input does not compromise security, as encryption is already in place to protect the transmitted data.
Solution Approach 2:
The patent introduces an intermediary encryption layer that mediates between the touch screen interface and the security processor. This intermediary mechanism transforms the inherently less secure touch screen input into secure communication by encrypting passwords immediately after input and before transmission. The intermediary layer reconciles the contradiction by maintaining the ease of touch screen operation while restoring security protection through cryptographic measures.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A bankcard password protection method includes the steps: a security processor randomly generates a public and private key pair; the security processor sends a public key to an application processor; the application processor acquires a bankcard password, encrypts the bankcard password by means of the public key and sends the encrypted bankcard password to the security processor; and the security processor decrypts the bankcard password by means of a private key. In this way, the bankcard password protection method of the invention improves the security of the bankcard password input process and brings a better experience feeling to customers.