Contactless Card Validation via Unique Nonce Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing contactless card systems face challenges in distinguishing between multiple card functions simultaneously and processing multiple cards performing different functions, which compromises data security and authentication.
Innovation Solution
A method involving a server that initiates a validation session for a contactless card, generates a unique nonce, and uses near-field communication (NFC) to encrypt data with the nonce, which is then validated by a switchboard node and forwarded to a validation server for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If contactless card systems process multiple cards simultaneously for multiple functions, then transaction throughput and user convenience are improved, but data security and authentication reliability deteriorate due to difficulty in distinguishing card usage for multiple functions
Solution Approach 1:
The patent segments the authentication process by introducing unique nonces for each validation session and encrypting them separately. Each card function request receives a distinct nonce (e.g., nonce1 for first function, nonce2 for second function), allowing the system to track and validate each transaction independently even when multiple cards are processed simultaneously. This segmentation maintains authentication reliability while enabling parallel processing.
Solution Approach 2:
The patent introduces an intermediary validation session mechanism that mediates between the card processing system and the authentication system. The validation session, identified by unique nonces, acts as an intermediary layer that tracks each card's specific function requests and validates them individually. This intermediary structure enables the system to maintain security boundaries while processing multiple cards concurrently.
2Reliability
If the system validates each card function with unique identifiers and encryption, then data security and transaction integrity are improved, but processing complexity and system resource requirements worsen
Solution Approach 1:
The patent implements a universal validation session framework that handles multiple card functions through a common process. The same validation mechanism (nonce generation, encryption, validation) is reused across different card functions and multiple cards simultaneously. This universal approach maintains high data security while avoiding the need for separate complex validation systems for each function, thereby limiting the increase in system complexity.
3Speed
If the system processes multiple validation sessions concurrently, then user convenience and transaction speed are improved, but the ability to distinguish and track individual card functions deteriorates
Solution Approach 1:
The patent applies preliminary action by generating and assigning unique nonces to each validation session before the actual card processing occurs. This pre-identification ensures that even when multiple validation sessions are processed concurrently, each transaction maintains its unique identifier from the outset. The nonce is embedded in the encrypted data before transmission, preventing any loss of function distinction information during parallel processing.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution enhances data security and authentication by ensuring that each card function is uniquely validated and processed, thereby improving transaction integrity and user verification.
Implementation Method 1
during a near field near-field communication (NFC) exchange with the contactless card
Data Source
AI summary
Disclosed herein are systems and methods to perform card functions in a computer environment. In some embodiments, a switchboard node is provided. The switchboard node receives a request to establish a validation session. The validation session is established and encrypted data from a contactless card is validated by a validator. Once the encrypted data is validated, the switchboard node requests that an issuer server completes a requested function. The issuer completes a portion of the function and then encrypts a message to a merchant indicating to the merchant that the function is complete. The encrypted message is received and decrypted by the merchant and the merchant completes the remainder of the function in communication with a user device.