Dynamic PAN Generation for Magnetic Card Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing transaction processing methods using magnetic credit cards are vulnerable to forgery and exposure of finance information due to static PAN values, requiring costly infrastructure changes to enhance security.
Innovation Solution
A method that divides the PAN area into a first area with a static BIN and a second area, dynamically encrypting the latter, and combining both to form a dynamic PAN for enhanced security without altering existing infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a static PAN value is used in track 2 information, then compatibility with existing magnetic strip card readers is maintained, but security against forgery and information exposure is compromised
Solution Approach 1:
The patent applies dynamics by transforming the static PAN value into a dynamic PAN value that changes for each transaction. The dynamic PAN is generated by encrypting the second area (account information) with a dynamic authentication code while preserving the first area (BIN) for routing purposes. This allows the PAN to adapt to each transaction context, enhancing security while maintaining compatibility with existing infrastructure that expects standard PAN formats.
Solution Approach 2:
The patent changes the parameter state of the PAN from static to dynamic by introducing encryption. The second area of the PAN is encrypted using a dynamic authentication code generated by the payment device, transforming the PAN from a fixed value to a transaction-specific value. This parameter change enables security enhancement without requiring fundamental changes to the card reader infrastructure.
2Reliability
If dynamic encryption is implemented in electronic credit cards, then security is improved, but infrastructure changes or additional construction are required which increases cost
Solution Approach 1:
The patent achieves universality by designing a system where the dynamic PAN generation mechanism works across both magnetic strip cards and IC cards through the same track 2 information interface. The payment device (whether magnetic strip or IC card with embedded IC) generates the dynamic authentication code and encrypted PAN in a unified manner, allowing existing card readers to process both card types without differentiation or infrastructure changes.
Solution Approach 2:
The patent uses copying by maintaining the traditional track 2 information format and structure while embedding encrypted data within it. The dynamic PAN is constructed to follow the standard PAN format (BIN + account information), creating a compatible copy of the traditional PAN structure that incorporates security enhancements. This allows the system to replicate existing functionality while adding security layers.
3Reliability
If the entire PAN area is encrypted dynamically, then security is maximized, but compatibility with existing systems that rely on BIN identification is lost
Solution Approach 1:
The patent applies segmentation by dividing the PAN into two distinct areas: the first area (BIN) that remains unencrypted for routing and identification purposes, and the second area (account information) that is encrypted dynamically for security. This segmentation allows each part to serve its specific function - the BIN enables system routing and compatibility while the encrypted second area protects sensitive account information.
Solution Approach 2:
The patent implements local quality by applying different security treatments to different parts of the PAN. The first area (BIN) maintains its original unencrypted state to ensure routing functionality, while the second area (account information) receives dynamic encryption for security. This localized application of encryption ensures that security enhancements do not compromise the routing capabilities that depend on the BIN.
Data Source
AI summary
A method for processing a transaction using a dynamic PAN (Primary Account Number), performed by a payment device that provides a card reader with ISO (International Standardization Organization) standards of track 2 information. A PAN area of the track 2 information is divided into a first area, in which a BIN (Bank Information Number) is included, and a second area, in which the BIN is not included. A dynamic area is formed by encrypting the second area and a dynamic PAN area is formed by combining the first area with the dynamic area. Track 2 information (which includes the dynamic PAN area) is provided to the card reader.