Multi-function Data Key with Dual-device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current chip-and-pin technology enhances security only when the card is physically present at a point-of-sale terminal, failing to provide adequate security for online transactions, which are vulnerable to hacking due to unencrypted data links over public networks, and is impractical for widespread consumer adoption without significant infrastructure changes.
Innovation Solution
A multi-function data key with a processor, secure memory, and wireless connectivity, enabling secure online transactions by requiring dual-device authentication, encryption, and geo-proximity features, such as pairing with a mobile device for secure access and transactions, and supporting various data types like financial, health, and social media records.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If chip-and-pin technology is used for online transactions, then transaction security is improved, but infrastructure complexity and cost increase significantly
Solution Approach 1:
The patent creates a virtual copy of the chip-and-pin terminal environment within a software application running on the consumer's existing device. Instead of requiring physical chip-and-pin hardware at every location, the system replicates the security functionality through software emulation, allowing consumers to conduct secure transactions using their mobile devices or computers without needing dedicated chip-and-pin terminals.
Solution Approach 2:
The patent introduces a software intermediary layer that acts as a bridge between the consumer's device and the merchant's system. This software application on the consumer's device serves as an intermediary that generates and manages secure transaction data, replacing the need for direct hardware-based chip-and-pin interaction and eliminating the requirement for consumers to have their own chip-and-pin terminals.
2Reliability
If chip-and-pin terminals are distributed to consumers, then online transaction security is improved, but cost and operational complexity increase
Solution Approach 1:
The patent creates a universal software solution that can run on multiple existing consumer devices (smartphones, tablets, computers) without requiring device-specific hardware. This multi-functional approach allows the same security application to serve various platforms, eliminating the need to manufacture and distribute different types of specialized terminals to consumers.
Solution Approach 2:
Instead of physically distributing chip-and-pin terminals to consumers, the patent distributes a software copy that emulates terminal functionality. This digital distribution model eliminates manufacturing, inventory, and logistics costs associated with physical hardware distribution while maintaining the security functionality.
3Ease of operation
If data is stored in browser cookies and on host computer, then transaction convenience is improved, but security vulnerability increases
Solution Approach 1:
The patent extracts sensitive transaction data from vulnerable storage locations like browser cookies and host computer files, and relocates it to a secure environment within the controlled software application. By taking out the sensitive data from unsecured locations and confining it within the application's protected memory space, the system maintains convenience while eliminating the hacking vulnerabilities associated with cookie-based storage.
4Reliability
If encryption is applied only after data reaches secure website, then data security is partially improved, but initial data link remains vulnerable
Solution Approach 1:
The patent performs preliminary encryption of sensitive data within the consumer's device before the data leaves the device and enters the network transmission channel. This advance encryption ensures that even if the initial data link is intercepted, the captured data remains encrypted and unusable. The encryption action is taken beforehand, during data preparation, rather than waiting until the data reaches the secure website.
Data Source
AI summary
A data key for secure financial and other types of data transactions with a key-shaped case, lightbox touch sensor carrying a removable wafer, processor, secure memory, general-purpose memory, battery, antenna, speaker, microphone, and a dual-purpose USB and chip pin pad. Bluetooth, NFC and/or RFID provides the ability to pair the data key through a wireless channel with another device, such as a smartphone, using a pairing button on the back of the data key. The data key provides chip-and-pin type security to online financial transactions. Dual-device security requires both the data key and another communication device registered to an authorized user to be present to activate the data key for secure operations. Device pairing enables geo-proximity features, such as dual-device security with a paired device, key finder, phone finder, and panic button. The data key may provide secure, remotely programmable security for building and equipment access.