Contactless Card Identity Authentication via Encrypted Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity verification methods for computing systems are vulnerable to security breaches and impractical due to the need for different types of additional information, such as one-time passcodes, which can be intercepted, and lack uniformity across systems.
Innovation Solution
A contactless card stores identity data like passport and driver's license information, using cryptographic algorithms and key diversification to generate encrypted data for authentication, which is verified by an authentication server before authorizing operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time passcode (OTP) is used for identity verification, then authentication can be performed, but security vulnerabilities exist as the OTP may be intercepted and used to gain unauthorized access
Solution Approach 1:
The patent extracts the authentication data from the contactless card and stores it in a secure element of a remote server. This separation allows the card to perform cryptographic operations locally without exposing sensitive authentication data, thereby eliminating the interception vulnerability while maintaining authentication functionality.
Solution Approach 2:
The patent introduces a secure element in a remote server as an intermediary that holds the authentication data. The contactless card communicates with this intermediary to perform authentication, allowing the card to verify identities without directly handling sensitive data that could be intercepted.
2Adaptability or versatility
If different types of additional information are required for identity verification across different systems, then each system can have customized security, but the solution becomes impractical for users due to lack of uniformity
Solution Approach 1:
The patent implements a universal authentication approach where a single contactless card with a secure element can perform multiple authentication functions across different systems. The card stores authentication data that can be used for various types of operations (purchases, transactions, access control), eliminating the need for users to provide different types of information for different systems while maintaining system-specific security requirements through configurable authentication rules.
Data Source
Figure 1A
Figure 1B
Figure 2A~2B
AI summary
Systems, methods, articles of manufacture, and computer-readable media for secure authentication based on identity data stored in a contactless card associated with an account. An application may receive an indication specifying to perform an operation. The application may receive encrypted data from the card, the encrypted data based on a cryptographic algorithm, a customer identifier, and a private key. The application may receive an indication that the authentication server verified the encrypted data based on the private key for the card. The application may determine a type of data required to authorize the operation. The application may receive data comprising passport data or driver license data from the card. The application may determine that the data satisfies a rule for authorizing the operation and authorize performance of the operation based on the authentication server verifying the encrypted data and the data satisfying the at least one rule.