Contactless Card Registration With Encrypted Account Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Registering for a third-party payment service using a payment account exposes security risks due to potential fraudulent account generation with compromised information, making it difficult to distinguish between legitimate and fraudulent attempts.
Innovation Solution
A contactless card is used to generate a payment account by encrypting data with key diversification, verifying the encrypted data through a server, and autofilling form fields with account data, ensuring secure account creation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual account registration is used with payment account information, then account creation is straightforward, but security risks increase due to fraudulent account generation
Solution Approach 1:
The contactless card serves as an intermediary device between the user and the payment service provider. It contains secure elements that store account information and cryptographic keys, acting as a trusted mediator that enables secure account registration without exposing sensitive data. The card's secure element communicates with the device through NFC, providing authenticated account information while preventing unauthorized access or fraudulent registration attempts.
2Reliability
If encrypted data verification is implemented through server communication, then security is enhanced, but processing time increases
Solution Approach 1:
The contactless card's secure element performs preliminary cryptographic operations to generate and encrypt account information before transmission. The device also performs preliminary verification by checking cryptographic signatures received from the card before submitting to the server. This preliminary action reduces the computational burden on the server and enables faster overall processing, as the most time-consuming encryption and verification operations are completed in advance during the tap interaction.
Data Source
AI summary
Account registration using a contactless card. A payment application executing on a device may receive a request to generate a payment account using a contactless card. The payment application may receive encrypted data from the contactless card and transmit the encrypted data to a server associated with the contactless card. The device may receive a push notification from the server and open an account application associated with the contactless card responsive to selection of the push notification. The account application may receive confirmation to generate the payment account using the contactless card and transmit the confirmation to the server. The device may open the payment application responsive to receiving verification of the encrypted data from the server. The payment application may fill form fields with account data received from the server and generate the payment account using the account data received from the server filled into the form fields.