Systems and methods for a transaction card having a cryptographic key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing transaction cards are cumbersome to activate, often requiring lengthy online setups or phone calls, and accessing associated accounts is difficult.
Innovation Solution
A contactless transaction card with an embedded URL that activates via contactless communication with a customer device, allowing for streamlined activation and account access through a mobile device without the need for phone calls or extensive online processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional activation methods are used (phone calls or extensive online processes), then security is maintained, but ease of operation deteriorates due to cumbersome procedures
Solution Approach 1:
The card is pre-configured with a unique URL and cryptographic key during manufacturing, enabling the customer to simply tap the card to their mobile device to initiate activation. This preliminary preparation eliminates the need for complex phone calls or extensive online forms, reducing activation steps to a simple contactless tap that automatically launches the pre-configured URL on the customer's device.
Solution Approach 2:
The patent introduces a mobile device as an intermediary between the transaction card and the card issuer system. The mobile device receives the unique URL and cryptographic key from the card via contactless communication, then uses these to securely communicate with the issuer for activation. This intermediary simplifies the customer's interaction while maintaining security through the cryptographic key.
2Loss of time
If traditional account access methods are used (extensive online setup), then security is maintained, but loss of time increases due to lengthy processes
Solution Approach 1:
The unique URL and cryptographic key are pre-configured on the card during manufacturing, enabling immediate account access setup. When the customer taps the card to their mobile device, the pre-configured URL automatically launches in their browser, pre-populating account information and eliminating the need for manual entry of personal details, thereby reducing setup time from potentially lengthy online forms to a single tap action.
Solution Approach 2:
The patent uses the card's embedded URL as a digital copy of the account access pathway. Instead of requiring customers to navigate complex online account setup procedures, the unique URL serves as a direct copy of the activation pathway that automatically routes them through the necessary steps, copying the efficient card tap action into the online activation process.
3Reliability
If contactless communication with cryptographic keys is implemented, then security is enhanced, but device complexity increases due to cryptographic operations
Solution Approach 1:
The patent extracts the cryptographic key from the card issuer system and embeds it directly on the transaction card during manufacturing. This extraction places the security credential at the source (the card itself) rather than requiring complex cryptographic operations at the issuer system during activation. The mobile device then acts as a simple intermediary that transmits this embedded key without performing complex cryptographic processing.
Solution Approach 2:
The transaction card performs self-service security by containing its own unique cryptographic key and URL. The card autonomously provides these security credentials to the mobile device via contactless communication without requiring the issuer system to perform complex cryptographic operations during activation. This self-service approach embeds security directly in the card, reducing the computational burden on external systems.
Data Source
AI summary
A method of accessing an account includes receiving, from a device, randomly generated seed information and an encrypted key or token generated by a card using the randomly generated seed information via a contactless communication between the card and the device; decrypting the encrypted key or token using a decryption process that includes the randomly generated seed information and the encrypted key or token as inputs in response to determining that the randomly generated seed information does not match previously received seed information; and providing, to the device and based on the decrypted key or token, access to the account.