Dynamic Card Value Generation for Fraud Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Card-based transactions face security vulnerabilities due to the static nature of primary account numbers (PAN) and verification values (CVV) encoded on magnetic stripes, which can be compromised through skimming and phishing attacks, leading to increased fraud risks.

Innovation Solution

A system and method for generating dynamic card values (DCV) on user devices, which can be used in transactions, replacing static PAN and CVV with dynamic values that are valid for a limited number of transactions or a specific time, ensuring enhanced security by limiting the attacker's usage window.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If static PAN and CVV are used in card transactions, then the system is simple and easy to operate, but security is compromised due to skimming and phishing attacks

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies dynamics by replacing static PAN and CVV with dynamic card values that change over time. The dynamic card value is generated by applying a cryptographic hash function to a seed value combined with a counter, creating a value that evolves with each transaction. This dynamic mechanism prevents skimming attacks because the value on the card changes with each use, while maintaining system simplicity through automated generation and verification processes.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the parameter of card value from static to dynamic by introducing temporal variation. The dynamic card value is computed using a hash function H(seed || counter), where the counter increments with each transaction. This parameter change ensures that even if the seed is compromised, each subsequent card value remains secure, directly addressing the security issue while maintaining operational simplicity through automated parameter updates.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If dynamic card values are generated and used, then fraud is reduced by limiting usage window, but the system complexity increases

Engineering Contradiction:
Improvefraud preventionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies self-service by enabling the card system to automatically generate and manage dynamic card values without external intervention. The dynamic card value is computed locally using the hash function H(seed || counter), and the verification process is automated at the transaction level. This self-service mechanism reduces fraud prevention complexity by eliminating the need for manual value generation and tracking, while maintaining strong security through cryptographic hashing.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent ensures continuity of useful action by maintaining an incrementing counter that persists across transactions. The counter is reset or incremented with each transaction, ensuring that the dynamic card value continuously evolves. This continuous action prevents reuse of compromised values while maintaining system simplicity through automated counter management, directly addressing the fraud prevention requirement without adding significant complexity.

Inventive Principle:
Principle #20Continuity of useful action

3Reliability

If the card value is made dynamic with limited validity, then the attacker's usage window is limited, but the transaction processing time increases

Engineering Contradiction:
Improveusage window limitationVSAvoidtransaction processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-computing the dynamic card value using the hash function H(seed || counter) before the transaction occurs. The dynamic card value is generated in advance and made available for immediate use, eliminating the need for time-consuming computation during the transaction. This preliminary generation of the card value maintains strong usage window limitation while ensuring rapid transaction processing, as the verified value is already prepared and validated.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8930273B2System and method for generating a dynamic card value
Publication Date: 2015.01.06 CA TECH INC
  • US8930273B2 patent drawing
  • US8930273B2 patent drawing
  • US8930273B2 patent drawing

AI summary

A method and system is provided for generating a dynamic card value (DCV) from a mobile user device for use in a transaction between a user cardholder and a transaction provider. The DCV may be configured for use as a card verification value (CVV), also known as a card security code (CSC), a primary account number (PAN), or a portion of a PAN. The DCV may be generated using a DCV generator which may include an algorithm and a DCV generation key. The DCV generation key may be camouflaged. Obtaining a DCV from the user device may require inputting a PIN, a device identifier, a challenge or transaction information. The DCV may be used for any transaction requiring the input of a user identification number and a verification value, including, credit card transactions, debit card transactions, online or telephonic transactions.