Contactless IoT Service Access for Secure Mobile Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current service devices require manual input of PIN numbers or access cards for authentication, which can be stolen and do not adequately secure transactions, leading to potential security breaches and limited functionality.

Innovation Solution

A system enabling contactless access to IoT service devices through mobile devices using QR codes or NFC tokens, allowing a computing environment to identify the device and user account, and facilitate secure transactions via software applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If contactless authentication is implemented, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a computing environment as an intermediary between the service device and the mobile device. This intermediary handles the complex authentication logic, device identification, and transaction coordination, thereby improving security without increasing the complexity of the service device itself. The computing environment acts as a mediator that processes authentication requests and manages the interaction between multiple components.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional mechanical authentication methods (physical access cards, manual PIN entry) with contactless electronic authentication using mobile devices. This substitution eliminates the need for physical authentication media and manual input, thereby improving security while reducing the mechanical complexity of the authentication process at the service device level.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Device complexity

If manual authentication methods are used, then device complexity is reduced, but security deteriorates

Engineering Contradiction:
Improvedevice complexityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent extracts the complex security and authentication logic from the service device and relocates it to a separate computing environment. This extraction allows the service device to remain simple while handling only basic service functions, whereas the security-critical operations are performed by the dedicated computing environment that specializes in authentication and transaction security.

Inventive Principle:
Principle #2Taking out (Extraction)

3Loss of time

If contactless authentication is implemented, then authentication speed is improved, but device complexity increases

Engineering Contradiction:
Improveauthentication speedVSAvoiddevice complexity
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-establishing the computing environment and its authentication protocols before actual service transactions occur. The system is pre-configured with device identification mechanisms and user account verification processes, allowing for rapid authentication during actual transactions without requiring complex real-time processing at the service device level.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12561690B2Contactless access to service devices to facilitate secure transactions
Publication Date: 2026.02.24 TRUIST BANK
  • US12561690B2 patent drawing
  • US12561690B2 patent drawing
  • US12561690B2 patent drawing

AI summary

A system can be provided that can enable contactless access to service devices to facilitate secure transactions. For example, the system can include Internet of Things (IoT) service devices associated with a service provider. The system can also include a computing environment, which may receive an access request from a mobile device. The access request can be transmitted in response to a user of the mobile device performing a contactless authentication process with an IoT service device. The computing environment can then identify the IoT service device and can identify a user account associated with the mobile device and with the service provider. The computing environment can further provide access for the mobile device to functions of the IoT service device via a software application associated with the service provider. The functions can be used to facilitate secure transactions between the IoT service device and the user account.