Contactless Card Touch Sensor Security Mechanism

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Contact-less smart cards are vulnerable to skimming and relay attacks due to the transmission of account holder information without encryption, rendering them susceptible to unauthorized access and fraudulent transactions.

Innovation Solution

An enhanced contact-less card design incorporating a touch sensor and a touch relay powered by an internal power source, which only enables NFC or RFID communication when both physical contact with the cardholder and a sufficient voltage are detected, ensuring that card information is transmitted only in secure proximity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If contact-less communication is enabled for convenient transactions, then ease of operation is improved, but security against skimming and relay attacks deteriorates

Engineering Contradiction:
Improvecontact-less transaction convenienceVSAvoidsecurity against unauthorized access
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary verification by detecting physical touch through the touch sensor before enabling contact-less communication. This preliminary action ensures that the card is in the cardholder's hand before allowing NFC/RFID transmission, preventing skimming and relay attacks while maintaining convenient contact-less transactions

Inventive Principle:
Principle #10Preliminary action

2Speed

If card information is transmitted without encryption for fast communication, then speed is improved, but security against data theft deteriorates

Engineering Contradiction:
Improvedata transmission speedVSAvoidprotection from theft
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The system applies preliminary anti-action by implementing touch-based authorization that prevents unauthorized reading before data transmission occurs. The touch sensor verifies legitimate cardholder presence, creating a security barrier against skimming and relay attacks while allowing fast encrypted communication with authorized readers

Inventive Principle:
Principle #9Preliminary anti-action

3Reliability

If touch sensor and power source are added to enhance security, then security is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity enhancementVSAvoidnumber of components
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The touch sensor serves multiple functions: it detects physical touch for security authorization, validates cardholder presence, and can potentially serve as an additional authentication interface. This multi-functionality justifies the added component while enhancing security against skimming and relay attacks

Inventive Principle:
Principle #6Universality (Multi-functionality)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This solution significantly enhances security by preventing unauthorized data transmission, thereby protecting cardholders and issuers from theft and fraudulent activities by ensuring that card information is only shared when the cardholder is physically present and the card is in close proximity to a trusted reader.

Implementation Method 1

The antenna transmits card information received from the contact-less communication controller

Methodology Applied
Scientific EffectElectromagnetic radiation: Electromagnetic Induction

Implementation Method 2

A contact-less card may include a touch sensor electrically coupled to a fixed power source

Methodology Applied
Scientific EffectCapacitive sensing: Capacitance

Data Source

PatentUS10628722B2Method and apparatus to enhance the security of contact-less cards
Publication Date: 2020.04.21 KYNDRYL INC
  • US10628722B2 patent drawing
  • US10628722B2 patent drawing
  • US10628722B2 patent drawing

AI summary

A structure for a contact-less card, the contact-less card may include a touch sensor electrically coupled to a fixed power source or electrically coupled to an antenna. The contact-less card may include a contact-less communication controller electrically coupled to the touch sensor. The contact-less communication controller includes an integrated circuit containing card information. The integrated circuit transmits the card information based on a signal from the touch sensor. The contact-less card may include an antenna electrically coupled to the contact-less communication controller. The antenna transmits card information received from the contact-less communication controller.