IC Card Pairing Authentication via Cryptographic Binding

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional IC cards lack secure authentication methods, allowing unauthorized use when stolen or lost, leading to potential financial and information losses.

Innovation Solution

A pairing authentication method that generates a secret key known only by the cardholder, where electronic devices connected to a closed storage device verify and store public keys, changing the security chip's state to restrict access, ensuring only authorized users can utilize the device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional IC cards are used for transactions, then convenience and speed of transaction are improved, but security against theft and loss deteriorates

Engineering Contradiction:
Improvetransaction convenienceVSAvoidsecurity against theft
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary binding between the IC card and electronic device before transactions occur. The binding process stores encrypted device identifiers in the IC card's secure memory, creating a pre-established trust relationship that prevents unauthorized use of stolen cards.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary binding mechanism that mediates between the IC card and electronic device. This binding layer verifies device authenticity through encrypted identifier matching, acting as a security gate that blocks unauthorized transactions even when the physical card is compromised.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If password protection is implemented for IC cards, then security is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvesecurity protectionVSAvoidoperation convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical/password-based authentication system with a cryptographic binding mechanism. Instead of requiring users to remember and input passwords, the system uses automated encrypted identifier verification between the IC card and electronic device, eliminating password entry while maintaining security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If contactless wireless IC cards are used, then transaction speed is improved, but vulnerability to unauthorized use increases

Engineering Contradiction:
Improvetransaction speedVSAvoidunauthorized access risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system establishes preliminary cryptographic bindings between the contactless IC card and authorized electronic devices before transactions. The binding process stores encrypted device identifiers in the card's secure memory, creating advance authentication credentials that enable fast contactless transactions while preventing unauthorized use.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent changes the authentication parameter from physical card presence to cryptographic identifier verification. The IC card stores and verifies encrypted device identifiers through wireless communication, transforming the authentication mechanism to maintain security while enabling contactless operation.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10555173B2Pairing authentication method for electronic transaction device
Publication Date: 2020.02.04 COOLBITX LTD(GB)
  • US10555173B2 patent drawing
  • US10555173B2 patent drawing
  • US10555173B2 patent drawing

AI summary

A pairing authentication method includes the steps of installing application software on first and second electronic devices to create first and second public keys thereon, respectively; connecting the first electronic device to a closed storage device for the former to generate a checking key; storing the first public and the checking key on a security chip of the closed storage device; connecting the second electronic device to the closed storage device for the former to generate an authorization key that matches the checking key, and transmitting the second public and the authorization key to the closed storage device; and the closed storage device verifying the authorization key matches the checking key and storing the second public key on the security chip. Therefore, only a cardholder knowing the checking key can use the closed storage device and no risk of asset theft exists if the closed storage device was lost.