Contactless Identifier for Secure PIN Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current contactless payment systems using passive RFID identifiers lack sufficient security due to ease of copying and require active power sources or contact-based energy supply, compromising user comfort and security.
Innovation Solution
A contactless authentication method using a separate identifier that receives energy from the payment terminal's electromagnetic field, processes the PIN code, and encrypts it using a private key, ensuring secure communication without the need for a battery, enhancing security and comfort by eliminating the need for manual PIN entry.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passive RFID identifiers are used for contactless payment, then user convenience is improved by eliminating manual PIN entry, but security deteriorates because passive identifiers can be copied easily and are easily imitable
Solution Approach 1:
A separate secure identifier carrier is introduced as an intermediary between the payment card and the payment terminal. This carrier contains the PIN code and cryptographic keys, acting as a mediator that enables contactless authentication while maintaining security. The identifier carrier receives energy from the payment terminal to power its processor for cryptographic operations, allowing secure authentication without manual PIN entry.
Solution Approach 2:
The authentication system is divided into separate components: the payment card, the separate identifier carrier containing PIN and keys, and the payment terminal. This segmentation isolates sensitive cryptographic material in a dedicated secure element, preventing it from being vulnerable to attacks on integrated systems while maintaining contactless convenience.
2Reliability
If active identifiers with their own power source are used, then security is improved by enabling encryption of the approval code, but user comfort deteriorates due to the need for charging and increased device size
Solution Approach 1:
The identifier carrier performs self-service by harvesting energy from the payment terminal's electromagnetic field during the authentication process. This eliminates the need for a separate battery or charging mechanism, as the device draws power only when needed for cryptographic operations. The carrier autonomously processes the PIN code and generates cryptographic signatures using the harvested energy.
Solution Approach 2:
The identifier carrier operates periodically only during the authentication moment when it receives energy from the payment terminal. Instead of continuously consuming power, it activates briefly to perform cryptographic operations and then returns to a passive state, eliminating the need for continuous charging while maintaining security.
3Reliability
If contact-based energy supply is used to power the identifier, then security is improved by enabling encryption operations, but the payment process deteriorates due to requiring physical contact
Solution Approach 1:
The mechanical contact-based energy supply is replaced with electromagnetic field-based wireless energy transfer. The payment terminal's electromagnetic field induces current in the identifier carrier's coil, providing power contactlessly. This substitution eliminates the need for physical contact while enabling the identifier to perform cryptographic operations for secure authentication.
Solution Approach 2:
The system dynamically switches between passive and active states based on the presence of the payment terminal's electromagnetic field. When the terminal is nearby, the identifier carrier activates to perform cryptographic operations; when absent, it remains passive. This dynamic behavior enables contactless operation while maintaining security through on-demand cryptographic processing.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution provides high security and user convenience by maintaining energetic passivity, reducing the identifier's size, and eliminating the need for charging, while accelerating the payment process and ensuring secure PIN verification.
Implementation Method 1
the identifier is supplied with energy in a contactless way over the payment terminal's electromagnetic field
Data Source
Figure 1
AI summary
The method and system of authentication over a PIN code within a separate identifier (3) during a cashless payment realized over the payment terminal (1) is based on the fact that a unique identification file containing the data on a current payment is sent from the payment terminal (1) to a distance lower than 10 cm into the identifier (3) put to the payment terminal (1). The identifier (3) is supplied with energy (received and/or received and accumulated energy) in a contactless way over the payment terminal's (1) electromagnetic field. The PIN code is assigned to the received identification file in the identifier's (3) processor, the resulting file is signed electronically using the private key stored in the identifier's memory (6) and the electronically signed file thus created is sent to the payment processing centre (2) for the verification of the PIN code's correctness.