Dynamic Barcode Authentication Using NFC Card Cryptograms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication mechanisms for financial cards, such as credit cards, are time-consuming and insecure, often relying on log-in credentials that can be compromised, leading to unauthorized access to user accounts.
Innovation Solution
A system that generates a dynamic barcode for transactions using online or offline authentication protocols, involving a contactless card and a user device, where the barcode is valid for a single transaction and expires afterward, enhancing security and convenience by leveraging cryptographic techniques and near-field communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If log-in credentials (username and password) are used for authentication, then account access can be confirmed, but security is compromised if credentials are stolen or phished
Solution Approach 1:
The patent replaces traditional mechanical/password-based authentication systems with a contactless NFC-based authentication system. The contactless card communicates with the user device through near-field communication, eliminating the need for users to manually enter passwords or credentials that can be phished or stolen.
Solution Approach 2:
The patent introduces a contactless card as an intermediary authentication device between the user and the system. The card contains cryptographic credentials that are used to generate authentication tokens, serving as a secure mediator that eliminates direct exposure of sensitive credentials.
2Productivity
If traditional card activation processes are used (calling telephone numbers or visiting websites), then card activation can be completed, but the process is time-consuming
Solution Approach 1:
The patent enables self-service card activation through the contactless card and user device interaction. The system automatically processes activation requests through NFC communication between the card and device, eliminating the need for users to manually call customer service or navigate complex online activation procedures.
Solution Approach 2:
The patent replaces manual activation processes (telephone calls, website navigation) with automated NFC-based communication. The contactless card and user device exchange activation data wirelessly, and the system automatically completes the activation process without requiring user intervention in traditional channels.
3Ease of operation
If static barcodes are used for transactions, then transaction completion is simplified, but security is compromised as barcodes can be reused or stolen
Solution Approach 1:
The patent transforms static barcodes into dynamic authentication tokens. The barcode displayed on the user device is generated based on real-time cryptographic operations between the contactless card and the device, ensuring that each barcode is unique to a specific transaction moment and cannot be reused or stolen for future transactions.
Solution Approach 2:
The patent changes the parameters of the barcode from static to dynamic by incorporating time-sensitive cryptographic elements. The authentication token embedded in the barcode changes with each transaction attempt, based on cryptographic operations involving the contactless card and user device, making each barcode valid only for a single transaction.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
The system provides enhanced security and efficiency in authenticating users across various applications, ensuring secure and convenient transaction completion by utilizing a barcode that is valid for a single transaction, thereby preventing unauthorized use.
Implementation Method 1
The application executed on the system, as part of the transaction, may initiate a communication using near field communication (NFC), with a card associated with the user.
Data Source
AI summary
Various embodiments are generally directed to secure generation of barcodes using cryptographic techniques. An application may receive a request to generate a barcode. The application may receive encrypted data from a communications interface of a contactless card associated with an account. The application may receive, from a server, verification of the encrypted data and an encrypted authorization token associated with the account. The application may generate the barcode utilizing the encrypted authorization token.