Contactless Card Application Isolation for Secure NFC Data Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Contactless cards face challenges in securely distinguishing between different communication functions, such as payment and identification, leading to potential data security risks when interacting with various devices.
Innovation Solution
Implementing a contactless card with separate applications for EMV and NDEF data standards, allowing selective communication of payment or identification data based on the device type, using a radio frequency identification (RFID) chip and NFC technology to ensure secure and appropriate data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a contactless card transmits all types of data (payment and identification) to all devices, then the card is universally compatible with different device types, but data security is compromised due to unauthorized access to sensitive information
Solution Approach 1:
The contactless card is divided into separate applications, each dedicated to a specific data type (payment data in first application, identification data in second application). This segmentation ensures that each application can only transmit its designated data type, preventing unauthorized access to sensitive information while maintaining compatibility with different device types through selective transmission based on device type identification
Solution Approach 2:
The system introduces an intermediary mechanism (device type identification and selective transmission control) that mediates between the card's multiple data types and the external devices. The card identifies the device type and selectively transmits only the appropriate data type, acting as a gatekeeper that prevents direct unauthorized access while maintaining universal compatibility
2Reliability
If a contactless card has separate applications for different data standards (EMV and NDEF), then data security is improved through selective transmission, but device complexity increases
Solution Approach 1:
The contactless card is designed with multi-functionality by incorporating multiple applications that support different data standards (EMV for payment, NDEF for identification) within a single device. This universal design allows the card to function across different communication protocols and device types while maintaining a unified physical structure, thereby improving security through protocol-specific isolation without proportionally increasing overall device complexity
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Ensures secure and selective data transmission, preventing unauthorized access by isolating payment and identification data, enhancing transaction security and user privacy.
Implementation Method 1
The card may communicate with the mobile device and/or the point-of-sale device by using near field communication (NFC). Communication between the card and the device may occur when the RFID chip of the card is within an NFC range of a digital reader.
Data Source
AI summary
A card having an antenna, one or processors, and memory having stored thereon a first application and a second application configured to receive an input of the card and determine a request associated with the input. The card is further configured to activate, responsive to determining that the request is consistent with a contactless EuroPay-MasterCard-Visa (EMV) data standard, the first application. The first application is configured to communicate, via near field communication (NFC), data to the communicating device via the antenna based on the EMV data standard for payment purposes. The card is further configured to activate, responsive to determining that the request is consistent with a near field communication data exchange format (NDEF) standard, the second application. The second application is configured to communicate, via NFC, data to the communicating device via the antenna based on the NDEF standard for verification/identification purposes.