Contactless Card NFC Authentication to Secure One-Tap Payments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks and errors when manually entering payment information for online transactions, and existing solutions require exposing sensitive data to potential capture during entry.
Innovation Solution
A contactless card system generates encrypted data upon tapping, which is validated by an authentication server to produce virtual card details, eliminating the need for manual input and securing the actual account number.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users manually enter payment information in online software platforms, then transactions can be completed, but security risks increase and errors occur during data entry
Solution Approach 1:
The patent uses NFC technology to create a wireless copy of the payment card data. Instead of manually typing the card number, users tap their physical card against the device, which automatically copies the encrypted card information to the device's secure element. This eliminates human error in data entry while maintaining security through encrypted data transfer.
Solution Approach 2:
The patent replaces the mechanical manual data entry process with a contactless NFC communication system. The physical act of tapping the card substitutes for typing, and the encrypted wireless data transfer replaces manual input, thereby improving both accuracy and security.
2Productivity
If payment information is transmitted via user device, then transactions can be processed, but security risks increase due to potential data capture
Solution Approach 1:
The patent extracts the actual card data from the user's physical card and transmits only the encrypted version to the device. The real account number never touches the user device or merchant system - only the encrypted NFC data does. This extraction of sensitive data from the transmission path eliminates the risk of data capture while maintaining processing capability.
Solution Approach 2:
The patent introduces an intermediary - the NFC communication layer - between the physical card and the device. This intermediary handles the data transfer securely through encrypted channels, preventing direct exposure of card data to potential capture mechanisms while enabling smooth transaction processing.
3Object-affected harmful factors
If contactless card tapping is implemented, then security is enhanced by avoiding data exposure, but device complexity increases
Solution Approach 1:
The patent leverages the existing NFC capability already present in many smartphones and tablets for payment processing. By using the universal NFC standard, the system avoids adding complex custom hardware while achieving secure contactless data transfer. The same NFC technology used for other purposes (like contactless browsing) is repurposed for secure payments.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security by avoiding data exposure on user devices and ensuring accurate transaction completion with secure server validation and virtual card data generation.
Implementation Method 1
the contactless card to come within communications range of the computing device. Doing so causes the contactless card to generate encrypted data
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
An authentication application may receive, from a merchant application of a client device, a merchant identifier, a transaction identifier of a transaction, encrypted data, and a location of the client device. The authentication application may decrypt the encrypted data based at least in part on a private key. The authentication application may determine that the contactless card has been used to make a previous purchase with the merchant and that the location of the client device is within a threshold distance of a known location associated with a contactless card. A virtual account number generator may generate a virtual account number and transmit the merchant identifier, the transaction identifier, the virtual account number, an expiration date, and a card verification value (CW) to a merchant server associated with the merchant to process the transaction using the transaction identifier, the virtual account number, the expiration date, and the CVV.