Portable Data Carrier Personalization via Chip-Embedded Data

Solution Overview

Problem

The existing methods for personalizing portable data carriers, such as chip cards, require sensitive personal information to be transmitted over public networks, necessitating cryptographic encryption and security modules, which complicates the infrastructure and increases security risks.

Innovation Solution

The method involves pre-depositing personalization data for the body of the portable data carrier in the chip, allowing the personalization unit to receive and apply these data directly, eliminating the need for encrypted transfers and security modules, and enabling flexible infrastructure configurations by separating the personalization processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If personalization data are transmitted via public networks from service provider to personalization unit, then the personalization can be performed remotely, but cryptographic encryption mechanisms and security modules are required which complicates the infrastructure

Engineering Contradiction:

Improveremote personalization capabilityVSAvoidinfrastructure complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The personalization data are pre-loaded into the chip of the portable data carrier at the service provider location before the card is issued to the customer. This preliminary action eliminates the need to transmit sensitive data over public networks later, as all necessary data are already present in the chip when the card reaches the personalization unit.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The sensitive personalization data are extracted from the transmission channel and stored directly in the chip memory. By taking the data out of the public network transmission path and placing them permanently in the chip, the system eliminates the need for encryption mechanisms and security modules at the personalization unit.

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If cryptographic encryption is used to protect personalization data during transmission, then security is improved, but the infrastructure requires additional security modules and encryption mechanisms

Engineering Contradiction:

Improvedata securityVSAvoidsecurity infrastructure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The personalization data are pre-loaded into the chip of the portable data carrier at the service provider location before the card is issued to the customer. This preliminary action eliminates the need to transmit sensitive data over public networks later, as all necessary data are already present in the chip when the card reaches the personalization unit.

Inventive Principle:

Principle #10Preliminary action

3Device complexity

If all personalization processes are centralized at one location, then security control is simplified, but flexibility and on-site personalization capability are reduced

Engineering Contradiction:

Improvesecurity managementVSAvoidon-site personalization flexibility

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The personalization process is segmented into two independent stages: (1) data loading into the chip at the service provider location, and (2) body personalization at any decentralized personalization unit. This segmentation allows security-critical data loading to be centralized while enabling flexible on-site personalization anywhere a personalization unit exists.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The personalization data are pre-loaded into the chip of the portable data carrier at the service provider location before the card is issued to the customer. This preliminary action eliminates the need to transmit sensitive data over public networks later, as all necessary data are already present in the chip when the card reaches the personalization unit.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS8973836B2Method for personalizing a portable data carrier, in particular a chip card

Publication Date: 2015.03.10 GIESECKE & DEVRIENT EPAYMENTS GMBH

AI summary

A method for personalizing a portable data carrier having a chip provided in a body of the portable data carrier. A portable data carrier whose chip contains data for personalizing the body of the portable data carrier is provided to a personalization unit. The personalization unit receives the data for personalizing the body of the portable data carrier from the chip of the supplied portable data carrier, and personalizes the body on the basis of the received data.