Contactless Card Counter Resynchronization for Secure Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Transaction cards face challenges with cryptographic protections that reduce efficiency and user experience, and counter value desynchronization leads to user confusion and frustration.
Innovation Solution
A system and method for synchronizing a counter value using a contactless card with a processor and memory, generating a cryptogram based on a random number and private key, and decrypting it with a public key to ensure both the card and client device are in sync, allowing quick re-syncing and secure transaction verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic protections are implemented to protect data communicated to and from transaction cards, then security against fraud and malicious activity is improved, but transaction efficiency is reduced and user experience is degraded
Solution Approach 1:
The system performs preliminary authentication by obtaining and verifying a digital signature from the transaction card before the actual transaction. This pre-validation ensures security credentials are verified in advance, allowing the subsequent transaction to proceed without repeated cryptographic operations, thus maintaining security while improving transaction efficiency
Solution Approach 2:
The patent extracts the authentication function from the transaction processing flow by using a separate digital signature verification step. The authentication process is separated into obtaining the signature, verifying it against stored credentials, and then using the verified status to authorize the transaction, reducing the cryptographic overhead during the actual transaction
2Reliability
If counter values are used for transaction authentication, then security is improved, but counter value desynchronization occurs leading to user confusion and frustration
Solution Approach 1:
The system implements feedback by storing the authenticated counter value from the transaction card in a database and comparing it with subsequent counter values. This feedback mechanism detects desynchronization conditions and can trigger re-synchronization procedures, ensuring the counter values remain consistent between the card and the system, thereby preventing user confusion while maintaining security
Solution Approach 2:
The patent prepares for potential counter desynchronization by implementing a verification and storage mechanism that cushions against future mismatches. By verifying and storing the counter value immediately after authentication and before transactions proceed, the system creates a buffer that prevents desynchronization issues from affecting user experience
Data Source
AI summary
The present embodiments describe systems and methods for resynchronizing a counter value associated with a contactless card. The system includes a card, a client device, a client device application, and a server. The method includes generating a cryptogram including the counter value, transmitting the cryptogram to the client device, decrypting the cryptogram and thus acquiring the counter value. This method provides a quick and easy way to verify and re-sync the counter value between a card, a server, and a client device.