Dynamic Virtual Card Authentication Using Cryptogram Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual card numbers are static, making them vulnerable to brute force attacks and security breaches, and data transmission without encryption is susceptible to interception and unauthorized access, leading to increased security risks and inefficiencies in transactions.
Innovation Solution
A system and method for generating dynamic virtual card numbers and security codes using a cryptogram based on unique identifiers, counters, and session keys, ensuring secure and limited use through encryption and synchronization with a server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static virtual card numbers are used, then system simplicity is maintained, but security against brute force attacks deteriorates
Solution Approach 1:
The patent applies dynamics by transitioning from static to dynamic virtual card numbers that change over time. The system generates new virtual card numbers periodically or per transaction, making them time-dependent. This dynamic approach prevents brute force attacks while maintaining manageable system complexity through automated generation and rotation mechanisms.
Solution Approach 2:
The patent changes the parameter of card number stability from fixed to variable. By implementing parameter changes where card numbers are regenerated based on time, transaction count, or randomization, the system enhances security without requiring fundamentally complex architectural changes.
2Reliability
If data transmission without encryption is used, then transmission speed is maintained, but susceptibility to interception and unauthorized access increases
Solution Approach 1:
The patent introduces encryption as an intermediary layer between data transmission and the network. By implementing encryption protocols, the system protects data during transmission without fundamentally altering the transmission process itself, thus maintaining efficiency while enhancing security.
Solution Approach 2:
The patent extracts the security function from the data itself and places it in the transmission channel through encryption. This separation allows data to remain readable and processing-efficient while the transmission channel provides the security layer, avoiding the need to encrypt every data element individually.
3Reliability
If security measures are implemented, then data protection is improved, but system resource consumption increases
Solution Approach 1:
The patent applies partial action by implementing security measures only where necessary and to the extent needed. Rather than encrypting all data permanently, the system encrypts data during critical transmission phases and uses dynamic card numbers only when needed, reducing overall resource consumption while maintaining adequate protection.
Solution Approach 2:
The patent implements a system where security measures are temporary and discarded after use. Encrypted data is decrypted and reused within a session, and dynamic card numbers are rotated and discarded after single or limited use. This approach reduces cumulative resource consumption compared to persistent encryption of all data.
4Reliability
If dynamic virtual card numbers are generated, then security against brute force attacks is improved, but computational complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing multiple virtual card numbers or cryptographic keys that can be quickly rotated. Instead of performing complex cryptographic operations during each transaction, the system prepares security materials in advance, reducing real-time computational complexity while maintaining dynamic security.
Solution Approach 2:
The patent uses copying by generating virtual card numbers as copies or derivatives of a master card number or cryptographic key. These copies can be rapidly generated and rotated without requiring complex computations during transactions, as they are derived through simpler algorithms from pre-established cryptographic foundations.
Data Source
AI summary
Systems and methods for authentication may include an authentication system. The authentication system may include a processor and a memory. The memory may contain a unique identifier, a counter, a session key, and a PAN sequence number. The processor may be configured to receive an authentication request. The processor may be configured to generate, in response to the authentication request, a virtual card number and a dynamic security code based on mapping with a plurality of parameters of a cryptogram including at least one selected from the group of the unique identifier, the counter, the session key, and the PAN sequence number. The processor may be configured to transmit the virtual card number and the dynamic security code to complete the authentication request.