Chip Card Display for Secure Transaction Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online banking security methods, such as iTAN and SMS TAN, are outdated and do not adequately protect users from unauthorized transactions, especially in scenarios where additional devices like smart card readers are required, and there is a need for a more secure method to display and verify transaction numbers without compromising user burden or security.
Innovation Solution
A method using a chip card with a display that shows transaction details and numbers, where authentication ensures the transaction details originate from a trustworthy computer system, and the transaction number is generated independently by the chip card and computer system, utilizing a shared secret key and including current time in the generation process to enhance diversity and security, with transaction details received via near-field communication or visual/acoustic detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security methods like iTAN or SMS TAN are used, then transaction security is provided, but additional devices like smart card readers are required which increases device complexity and user burden
Solution Approach 1:
The patent combines the security functions into the mobile device itself by integrating a display and processing capabilities. The mobile device displays transaction details and numbers directly, merging the security verification function with the mobile device's existing display capability, eliminating the need for separate smart card readers or additional authentication devices.
Solution Approach 2:
The mobile device is made multi-functional by enabling it to not only communicate transactions but also display transaction details and verification numbers. This universal approach allows the mobile device to serve multiple purposes: communication, display, and security verification, replacing the need for specialized authentication devices.
2Productivity
If transaction numbers are transmitted without displaying details, then communication efficiency is improved, but users cannot verify if the transaction number is intended for the correct transaction
Solution Approach 1:
The patent applies preliminary action by displaying the transaction details and number on the mobile device screen before the user transmits the number. This allows the user to verify that the transaction details match their intent before proceeding, ensuring accuracy while maintaining efficient communication.
Solution Approach 2:
The mobile device provides visual feedback by displaying the transaction details and number that will be transmitted. This feedback mechanism allows the user to confirm the correctness of the transaction information before submission, ensuring reliable verification without delaying the process.
3Extent of automation
If transaction details are transmitted via data communication, then automation is improved, but the transmission path may be compromised by unauthorized parties
Solution Approach 1:
The patent uses the mobile device display as an intermediary between the automated data transmission and the user. The display shows the transaction details and number, acting as a mediator that allows the user to verify the automated transmission content before confirmation, adding a security layer against compromised transmission paths.
Solution Approach 2:
The mobile device performs self-service by automatically receiving and displaying transaction details and numbers. The device handles the data transmission and presentation autonomously, reducing manual intervention while maintaining security through automatic display verification that allows user confirmation.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for releasing a transaction by a computer system (100), the method comprising: - transmission (200) of transaction details from the computer system (100) to a chip card (102), wherein the transaction details include specific information about the transaction, - reception (202) of the transaction details by the chip card (102), - display (212) of the transaction details and a transaction number on a display (104) of the chip card (102), wherein the transaction number is specific to the transaction, - reception (214) of the transaction number by the computer system (100) based on user input of the transaction number, - validation (216) of the transaction number by the computer system (100), and - release (222) of the transaction when the received transaction number has been validated as valid, wherein the transaction details are received by the chip card (102) via a near-field communication interface (106).wherein the transfer of the transaction details from the computer system (100) to the chip card (102) includes a transfer of the transaction details to a mobile telecommunications device (124) and from the mobile telecommunications device (124) to the interface of the chip card (102).