IC Card Authentication Switching for Quantum-Resistant Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IC cards capable of using quantum-resistant cryptography are not widely adopted, limiting their usability, and existing cryptography methods are vulnerable to attacks.

Innovation Solution

An IC card system that performs multiple authentication layers, including quantum-resistant and existing cryptography, with a function control unit allowing or restricting functions based on successful authentication outcomes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If quantum-resistant cryptography is used, then security is improved, but usability is worsened due to limited support environment

Engineering Contradiction:
ImprovesecurityVSAvoidusability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication function is segmented into multiple independent authentication units, each handling a specific authentication method (quantum-resistant cryptography, RSA, ECC). This allows the system to offer quantum-resistant authentication when available while falling back to conventional methods if needed, thus improving both security and usability simultaneously

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The IC card is designed with multi-functionality to support multiple authentication methods through a single unified interface. The receiving unit can accept authentication requests using different cryptography methods, and the function control unit can select the appropriate authentication unit based on the request type, making the card universally compatible with both quantum-resistant and conventional systems

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Ease of operation

If multiple authentication methods are implemented, then usability is improved, but security is worsened due to vulnerability of existing cryptography

Engineering Contradiction:
ImproveusabilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The authentication system is designed dynamically where the function control unit selects which authentication unit to invoke based on the authentication request type. This dynamic selection allows the system to adapt to different security requirements and usage scenarios, enabling flexible authentication while maintaining security through quantum-resistant methods when needed

Inventive Principle:
Principle #15Dynamics

3Ease of operation

If existing cryptography is used, then usability is maintained, but security is worsened due to vulnerability to attacks

Engineering Contradiction:
ImproveusabilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The IC card is pre-configured with multiple authentication units that can handle different cryptography methods. This preliminary preparation allows the system to automatically select and apply the most secure appropriate method (quantum-resistant cryptography) when available, while maintaining compatibility with existing systems, thus proactively addressing security concerns before attacks occur

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4686144A1Integrated circuit card and method for controlling integrated circuit card
Publication Date: 2026.01.28 TOPPAN HOLDINGS INC
  • EP4686144A1 patent drawingFigure 1~3
  • EP4686144A1 patent drawingFigure 4
  • EP4686144A1 patent drawingFigure 5~6

AI summary

The present invention is an IC card (2) including: a receiving unit (20) that receives first information specifying first authentication using quantum-resistant cryptography or second information specifying second authentication using cryptography other than the quantum-resistant cryptography; a first authentication unit (210) that performs the first authentication; a second authentication unit (211) that performs the second authentication; a third authentication unit (212) that performs third authentication; a function execution unit (213) that executes a prescribed function; and a function control unit (214) that permits execution of the prescribed function.