Contactless Card Authentication Using Gestures and Display Status
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing contactless cards lack robust data security and authentication methods, relying on insecure verification methods like email and SMS, and require cumbersome activation processes, with chip-based cards still vulnerable to unauthorized access.
Innovation Solution
Implementing contactless cards with a processor, visual display, and memory containing a first applet and unique identifier, enabling cryptographic authentication through gestures like tapping or swiping, and updating the display status based on verified transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If email or SMS is used for transaction verification, then authentication can be performed, but security is compromised due to susceptibility to hacking and unauthorized access
Solution Approach 1:
The patent replaces traditional mechanical/authentication systems (email, SMS, passwords) with a contactless card system using NFC technology and cryptographic authentication. The card contains a secure element that performs cryptographic operations to verify transactions without relying on vulnerable communication channels like email or SMS.
Solution Approach 2:
The contactless card acts as an intermediary device between the user and the transaction system. It contains a secure element that mediates authentication by performing cryptographic verification locally, eliminating the need for vulnerable intermediate communication channels.
2Reliability
If chip-based cards are used for in-person purchases, then security is improved over magnetic strip cards, but account access still relies on vulnerable log-in credentials
Solution Approach 1:
The patent extracts the authentication functionality from vulnerable external systems (log-in credentials, passwords) and embeds it directly within the contactless card's secure element. This allows the card to perform self-contained cryptographic authentication without relying on external credential verification.
3Reliability
If card activation requires calling a telephone number or visiting a website, then card information can be verified, but the process is time-consuming
Solution Approach 1:
The contactless card enables self-service activation by allowing the user to simply tap the card against a reader. The cryptographic authentication and verification processes occur automatically within the card and reader systems without requiring user intervention to call or visit external systems.
Solution Approach 2:
The card's secure element performs preliminary cryptographic setup and authentication routines in advance, allowing for rapid activation. The necessary security protocols are pre-configured in the card, eliminating the need for time-consuming verification calls or website visits during activation.
Data Source
AI summary
Example embodiments of systems and methods for data transmission in a contactless card and client application are provided. The contactless card comprises a visual display, processor, and a memory which includes a first applet, unique identifier, and value. A client application comprises instructions for execution on a client device, and is in data communication with the contactless card via one or more communication fields. The contactless card may display the value, the unique identifier, and a first status on the visual display. The first applet may transmit data to the client application in response to one or more gestures by the contactless card within at least one of the fields. The client application may authenticate the received data. The contactless card may update the display via the one or more fields based on the authenticated data, and change the first status to a second status based on the updated display.