Biometric Smartcard Fraud Detection and Restricted Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing use of electronic cards for payments and cash withdrawals poses a risk of fraud, especially with contactless technology that does not require PIN entry, and existing biometric smartcards may be inconvenient or insecure.
Innovation Solution
A smartcard with an embedded biometric sensor that operates in a restricted mode when fraudulent use is detected, allowing limited functionality while requiring higher authorization confidence scores or additional authentication steps, and disabling biometric authorization to prevent unauthorized transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If contactless payment technology is used to improve convenience, then ease of operation is improved, but security is worsened because unauthorised users can make fraudulent transactions without PIN entry
Solution Approach 1:
The patent segments the authentication process into multiple independent factors: possession of the card, biometric verification (fingerprint), and knowledge (PIN). This multi-factor segmentation ensures that convenience is maintained through contactless operation while security is strengthened by requiring multiple authentication elements before authorizing transactions.
Solution Approach 2:
The patent implements preliminary biometric verification and fraud detection checks before authorizing any contactless transaction. The system pre-loads authentication requirements and performs verification in advance, ensuring that even contactless payments require proper authorization, thus preventing fraudulent transactions while maintaining user convenience.
2Reliability
If biometric sensors are embedded in smartcards to improve security, then reliability is improved, but device complexity is worsened
Solution Approach 1:
The patent merges the biometric sensor, processing unit, and secure element into a single integrated smartcard module. This consolidation achieves enhanced security functionality while minimizing the increase in device complexity by combining multiple components into one unified structure that maintains standard card form factors.
Solution Approach 2:
The smartcard is designed with multi-functionality, serving as both a conventional payment card and a biometric authentication device. The card can operate in multiple modes (contactless, contact-based, with or without biometric verification), making the added complexity worthwhile by providing versatile security solutions across different transaction scenarios.
3Reliability
If the smartcard is completely disabled when fraudulent use is detected to improve security, then reliability is improved, but ease of operation is worsened because legitimate users lose access
Solution Approach 1:
The patent implements a dynamic response system that adjusts card functionality based on the specific fraud risk level detected. Rather than a static disabled/enabled state, the system dynamically modifies operational parameters such as transaction limits, required authentication factors, or monitoring intensity, allowing legitimate users to maintain access while fraudulently used cards face progressively restricted functionality.
Solution Approach 2:
The system incorporates continuous feedback loops that monitor transaction patterns and user behavior. When suspicious activity is detected, the system provides feedback by implementing temporary restrictions or additional verification steps, then continuously monitors to determine whether to lift or maintain restrictions. This feedback mechanism ensures that legitimate users can regain full access once their identity is verified, while fraudulent users face sustained limitations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of using a smartcard 102, 202 comprises detecting possible fraudulent use of a biometric sensor 130, 230 embedded within the smartcard 102, 230 and restricting, but not preventing, subsequent use of the smartcard 102, 202 after the possible fraudulent use has stopped. The restriction may include one or more of not permitting the bearer to make an action that they would normally be permitted to make, requiring a higher authorisation confidence score than would normally be required before permitting the bearer to perform one or more actions, and requiring the bearer to pass a secondary authorisation step before permitting the bearer to perform one or more actions.