Contactless Card Validation Tokens for Secure Network Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tap-to-pay transactions face challenges in securely transmitting and authenticating data over networks, particularly when using contactless cards, as the data may be compromised by unauthorized network operators or communication hubs.
Innovation Solution
A method and system utilizing a validity token generated based on a contactless card identifier, which is validated and transmitted through a validation engine to ensure secure and authenticated data transmission, involving a shared key generation using elliptic-curve Diffie-Hellman key agreement protocol to encrypt and decrypt data between computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is transmitted over a network during tap-to-pay transactions, then transaction convenience is improved, but data security and authentication are compromised by unauthorized network operators or communication hubs
Solution Approach 1:
The patent introduces a validation engine as an intermediary component that sits between the contactless card transaction system and the network. This validation engine verifies the authenticity of data before transmission and validates the trustworthiness of network operators and communication hubs, thereby maintaining data security while enabling convenient network-based transactions
Solution Approach 2:
The system performs preliminary validation of data and network participants before actual transaction data transmission. The validation engine pre-verifies the authenticity of cardholder data and the trustworthiness of network operators in advance, ensuring that only authenticated data passes through the network, thus preventing security compromises before they can occur
2Loss of information
If network operators and communication hubs are excluded from viewing transmitted data, then data confidentiality is improved, but network transmission reliability may be worsened
Solution Approach 1:
The validation engine serves as a mediator that verifies data authenticity and network participant trustworthiness without exposing the actual cardholder data to network operators or communication hubs. This allows the system to maintain confidentiality while still ensuring transmission reliability through cryptographic validation
Solution Approach 2:
The system separates the validation function from the transmission function. The validation engine handles authentication and trust verification as a distinct layer, while the actual data transmission occurs separately through the network. This segmentation allows network operators to verify data integrity without accessing confidential information
Data Source
AI summary
A method, a system, and a computer program product for transmission of information over a network. A validity token is generated based on a received contactless card identifier associated with a contactless card. The validity token is generated upon validating the contactless card using the contactless card identifier, and transmitted to a first computing device. A second computing device is identified based on an information request received from the first computing device. The information request includes a first public key associated with the first computing device and the validity token. An encrypted response to the request and a second public key associated with the second computing device are sent to the first computing device. The second computing device generates the encrypted response and encrypts it using a shared key generated using the first public key. The first computing device decrypts the response upon generation of the shared key using the second public key.