Dual-Protocol Mobile Payment Cryptograms for DES Key Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile communication devices are prone to compromise by malware that can steal payment tokens, and current security measures, such as key stores, do not adequately protect DES cryptographic keys, making transactions insecure.
Innovation Solution
Implement multiple cryptographic protocols, using a first cryptogram generated in unsecured memory and a second cryptogram generated in a key store, combined via a reversible operation to create a third cryptogram, ensuring security without exposing the DES key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If tokens are stored in unsecured memory for payment transactions, then payment processing speed is improved, but security against malware theft deteriorates
Solution Approach 1:
The patent segments cryptographic protection into two parts: a first cryptogram generated from a DES key stored in unsecured memory, and a second cryptogram generated from an AES key stored in a secure key store. This segmentation allows the system to maintain both fast processing (using DES in unsecured memory) and security (using AES in the key store), resolving the contradiction between speed and security.
2Adaptability or versatility
If DES cryptographic keys are stored in unsecured memory for compatibility, then compatibility with existing payment networks is improved, but security against key exposure deteriorates
Solution Approach 1:
The patent introduces a second cryptographic key (AES key) stored in a secure key store as an intermediary. This intermediary key is used to generate a second cryptogram that combines with the first cryptogram (generated from the DES key in unsecured memory). The payment processing network can verify the combined cryptogram without ever exposing the DES key, thus maintaining compatibility while improving security.
3Reliability
If multiple cryptographic keys are used for enhanced security, then security against malware theft is improved, but device complexity increases
Solution Approach 1:
The patent makes the mobile communication device multi-functional by enabling it to perform both DES-based cryptogram generation (for compatibility with existing payment networks) and AES-based cryptogram generation (for enhanced security). This multi-functionality allows the device to maintain security while working with existing infrastructure, resolving the contradiction between security and complexity.
Data Source
AI summary
Systems, methods, and computer readable media are provided for improving the usability of a cryptogram generated in a first cryptographic protocol such as triple-DES. The methods may generate a first cryptogram using a first identifier in a first cryptographic protocol, stored in a key store within an insecure memory of the mobile communication device, generate, within a secure memory of the mobile communication device, a second cryptogram using a second identifier in a second cryptographic protocol, stored in the secure memory, combining, the first cryptogram and a number of characters of the second cryptogram equal to the length of the first cryptogram to generate a third cryptogram and transmitting the third cryptogram to an payment processing network to validate a transaction. A transaction associated with the third cryptogram may be validated by an authorization entity or an issue entity.