ICC Reader Switch Emulation for FIDO2 Smart Card Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The industry faces a shortage of FIDO USB HID devices due to semiconductor shortages, and software-based solutions are difficult to develop and maintain across different platforms, necessitating an alternative for multifactor authentication.
Innovation Solution
An Integrated Chip Card (ICC) reader with a microcontroller, ICC connector, and an activatable 2-position built-in switch that emulates ICC withdrawal and re-insertion to comply with FIDO2 requirements, using standard ICC readers and supporting USB CCID protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If FIDO USB HID devices are used for multifactor authentication, then authentication security is improved, but device availability deteriorates due to semiconductor shortages
Solution Approach 1:
The patent uses a standard ICC reader as a substitute copy for the proprietary FIDO USB HID device. By implementing the same authentication functionality through a different hardware platform (ICC reader with smart card) that is not subject to semiconductor shortages, the solution maintains authentication security while improving device availability
Solution Approach 2:
The ICC reader is designed to perform multiple functions: it can read standard smart cards and simultaneously function as a FIDO2 authentication device. This multi-functionality allows existing ICC readers to be repurposed for secure authentication without requiring specialized FIDO USB HID hardware
2Productivity
If software-based authentication solutions are implemented, then device availability is improved, but development and maintenance complexity increases across different platforms
Solution Approach 1:
The patent replaces software-based authentication mechanisms with a hardware-based solution using an ICC reader and smart card. This hardware approach eliminates the need for platform-specific software drivers and complex cross-platform development, thereby reducing maintenance complexity while maintaining device availability
Solution Approach 2:
The ICC reader with built-in switch operates autonomously using standard protocols. The device self-configures and works across different platforms without requiring platform-specific software adaptation, eliminating the development and maintenance burden associated with multi-platform software solutions
3Reliability
If FIDO2 proprietary protocols are used, then authentication security is improved, but certification complexity increases
Solution Approach 1:
The ICC reader is designed to support both standard smart card operations and FIDO2 authentication protocols simultaneously. This multi-functionality allows the device to maintain high security standards while using well-established, widely-supported communication protocols that simplify certification processes
4Productivity
If standard ICC readers are used instead of FIDO USB HID devices, then device availability is improved, but compatibility with FIDO2 requirements may deteriorate
Solution Approach 1:
The patent incorporates an activatable switch that dynamically changes the ICC reader's operational state. The switch enables the reader to transition between standard smart card mode and FIDO2 authentication mode, allowing the device to adapt to different protocol requirements while maintaining hardware simplicity and availability
Data Source
Figure 1~2a
Figure 2b
Figure 3
AI summary
The present invention provides an ICC reader comprising: - a microcontroller configured to exchange data with an insertable ICC while the insertable ICC is inserted and powered, and with an end-user entity, - an ICC connector configured to allow the exchange of data between the microcontroller and the inserted ICC, and - an end-user entity interface connector configured to allow the exchange of data between the microcontroller and an end-user entity, wherein the ICC reader is characterized in that it further comprises an activatable 2-position built-in switch defining two states: i. a first state wherein the exchange of data between the microcontroller and the inserted ICC is allowed, and ii. a second state wherein the exchange of data between the microcontroller and the inserted ICC is interrupted emulating an ICC withdrawal.