Deceptive PIN Authentication for Payment Card Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of personal information, such as PINs, associated with payment cards is compromised during transactions due to theft and observation, despite enhanced security measures, as users often write down their PINs or enter them in public spaces, making them vulnerable to fraud.
Innovation Solution
A method and system that facilitates transactions using a deceptive PIN, where a server system identifies and replaces a deceptive character in a PIN with the corresponding actual character based on a predefined mathematical expression and value, ensuring secure authentication without revealing the actual PIN.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users write down their PINs or enter them in public spaces for ease of use, then the ease of operation is improved, but the security of personal information deteriorates
Solution Approach 1:
The PIN is segmented into multiple components: actual characters and deceptive characters. The deceptive characters are distributed throughout the PIN sequence, creating separate identifiable units that can be individually managed and replaced, thereby protecting the actual PIN structure while maintaining usability
Solution Approach 2:
Deceptive characters act as intermediaries between the user and the actual PIN. Instead of directly exposing the actual PIN characters, the system introduces deceptive characters that mask the real values while still allowing authentication through mathematical relationship verification
2Reliability
If surveillance cameras and remote monitoring are installed to safeguard personal information, then the reliability is improved, but the device complexity increases
Solution Approach 1:
The security mechanism extracts the vulnerability from the PIN itself by removing the direct exposure of actual PIN characters. The deceptive character system extracts and isolates the security function from physical surveillance infrastructure, embedding it directly in the authentication protocol
Solution Approach 2:
The system changes the parameter of PIN representation from direct character values to mathematical relationships. Instead of protecting static character values through physical surveillance, the system transforms PIN into a dynamic mathematical expression that can be verified without exposing individual character values
3Loss of information
If the actual PIN is observed or stolen during transactions, then the loss of information increases, but using a deceptive PIN prevents unauthorized access
Solution Approach 1:
The system applies preliminary anti-action by pre-distributing deceptive characters throughout the PIN sequence before any potential observation or theft can occur. This preemptive masking ensures that even if the PIN is observed during entry, the deceptive characters already in place prevent any useful information from being captured
Solution Approach 2:
Instead of protecting the actual PIN characters directly, the system inverts the approach by protecting the mathematical relationship between characters. The authentication verifies the relationship rather than the individual character values, turning the verification process inside out to achieve security
Data Source
AI summary
A method of facilitating a transaction with a payment card of a cardholder. The method includes receiving a deceptive PIN comprising a set of characters in which one character is a deceptive character. The deceptive character is different than each of a set of actual characters of an actual PIN of the payment card. The method includes identifying the deceptive character and a position of the deceptive character among the set of characters of the deceptive PIN. The method includes determining a reconstructed PIN by replacing the deceptive character with a corresponding actual character at the position in the deceptive PIN. The actual character is determined based on a predefined mathematical expression and a predefined value for the predefined mathematical expression. The method includes authenticating the reconstructed PIN by matching the reconstructed PIN with the actual PIN. The method further includes facilitating the transaction upon successful authentication.