Cloud-Based Transaction Security via Emulated Magnetic Signals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The use of secure elements in portable communication devices for payment transactions is cumbersome and costly, and there is a security concern when these devices do not have or rely on secure elements for transaction security.
Innovation Solution
Implementing cloud-based transactions that utilize limited-use account parameters, which are provisioned from a remote computer and have a limited lifespan, allowing transactions to be conducted without relying on secure elements, and using an inductive coil to generate an emulated magnetic signal for data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure elements are used in portable communication devices for payment transactions, then transaction security is improved, but device manufacturing cost and complexity increase
Solution Approach 1:
The patent extracts the secure element from the portable communication device entirely, replacing it with cloud-based security infrastructure. The secure functionality is moved from device hardware to remote servers, eliminating the need for physical secure elements while maintaining security through distributed cloud-based account parameter management and limited-use credentials
Solution Approach 2:
The patent introduces cloud-based infrastructure as an intermediary between the portable communication device and the payment network. Instead of direct device-to-network communication requiring secure elements, the cloud platform mediates transactions by provisioning limited-use account parameters to devices and verifying transactions remotely, eliminating the need for device-side secure hardware
2Reliability
If secure elements are used in portable communication devices, then transaction security is improved, but provisioning complexity and commercial agreements increase
Solution Approach 1:
The patent implements self-service provisioning where the cloud-based platform automatically manages account parameter provisioning to portable communication devices without requiring manual intervention from secure element manufacturers or complex commercial agreements. The system autonomously provisions limited-use credentials, manages their lifecycles, and handles device enrollment through standardized APIs
Solution Approach 2:
The patent segments the provisioning process into distinct cloud-based functions: device enrollment, credential generation, parameter provisioning, and transaction verification. This segmentation allows each function to be independently implemented and managed through standard protocols, eliminating the need for integrated secure element solutions requiring complex multi-party agreements
3Device complexity
If secure elements are removed from portable communication devices, then manufacturing cost and device complexity are reduced, but transaction security becomes a concern
Solution Approach 1:
The patent replaces the mechanical/physical secure element hardware with a software-based cloud security system. Instead of relying on tamper-resistant physical hardware, the solution uses cryptographic protocols, limited-use account parameters, and remote verification mechanisms to provide equivalent or superior security without physical security modules
Solution Approach 2:
The patent changes the security model from static device-based security (secure elements) to dynamic cloud-based security with time-limited and usage-limited account parameters. Security is maintained through parameter expiration, one-time use credentials, and continuous cloud verification rather than permanent device hardware protection
4Ease of manufacture
If limited-use account parameters are used instead of secure elements, then provisioning process is simplified and device cost is reduced, but security management complexity shifts to cloud infrastructure
Solution Approach 1:
The patent creates a universal cloud-based provisioning platform that serves multiple functions: device enrollment, credential provisioning, transaction authorization, and security management. This single multi-functional cloud infrastructure replaces the need for device-specific secure elements and can serve multiple device types and payment networks through standardized interfaces
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach enhances transaction security by managing limited-use account parameters, reducing reliance on secure elements, and minimizing the risk of malware access, while simplifying the provisioning process for issuers and payment processors.
Implementation Method 1
an inductive coil to generate an emulated magnetic signal representing data that includes the token
Data Source
AI summary
Techniques for enhancing the security of a communication device when conducting a transaction using the communication device may include using a limited-use key (LUK) to generate a transaction cryptogram, and transmitting a token instead of a real account identifier and the transaction cryptogram to an access device to conduct the transaction. The token and the transaction cryptogram can be transmitted to a magnetic stripe reader by generating an emulated magnetic signal. The LUK may be associated with a set of one or more limited-use thresholds that limits usage of the LUK, and the transaction can be authorized based on at least whether usage of the LUK has exceeded the set of one or more limited-use thresholds.