Interactive Portable Object for Secure Electronic Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic transaction systems, particularly online transactions, lack sufficient security and convenience due to the risk of fraud and the need for extensive data entry, which complicates the process compared to in-store transactions.
Innovation Solution
A portable object with an interactive screen that securely communicates with a processing unit, allowing direct data entry and display of transaction information, reducing the need for additional interfaces and enhancing security by using a secure graphics controller and communication protocol, enabling secure and convenient transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If online transactions are implemented, then convenience is improved, but security deteriorates due to fraud risks and complex data entry requirements
Solution Approach 1:
The patent introduces a portable object with secure element and trusted processing unit as an intermediary between the user and the transaction system. This mediator handles sensitive operations locally (OTP generation, signature creation, data verification) while communicating with remote servers, thereby maintaining security without requiring complex user data entry. The portable object acts as a trusted intermediary that eliminates the need for users to manually input sensitive information, resolving the contradiction between convenience and security.
Solution Approach 2:
The portable object performs self-service security functions including automatic OTP generation, local cryptographic operations, and automated verification processes. The secure element autonomously generates one-time passwords and digital signatures without user intervention, while the trusted processing unit automatically verifies transaction data. This self-service capability maintains high security standards while simplifying the user experience, as the device handles all complex security operations independently.
2Loss of information
If extensive data entry is required for online transactions, then transaction completeness is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements preliminary action by pre-storing cryptographic keys, certificates, and transaction templates in the portable object's secure element. The device pre-generates OTPs and pre-establishes secure communication channels before transactions occur. This preliminary preparation eliminates the need for users to manually input extensive data during transactions, as all necessary information is already prepared and stored securely in the device.
Solution Approach 2:
The portable object creates and uses digital copies of sensitive information (cryptographic keys, certificates, transaction templates) stored in its secure element. Instead of requiring users to input original sensitive data, the system uses securely stored digital copies for authentication and verification. This copying approach ensures data completeness while eliminating manual entry requirements, as the device automatically retrieves and uses the pre-stored digital representations.
3Productivity
If traditional banking terminals are used, then transaction processing is improved, but security deteriorates due to Trojan horse risks
Solution Approach 1:
The patent inverts the traditional security model by placing the trusted processing unit and secure element in the portable object carried by the user, rather than relying on the security of remote banking terminals. Instead of trusting the terminal environment, the system trusts the user's own device. This inversion allows transaction processing to occur efficiently through automated protocols while security is guaranteed by the locally stored cryptographic materials, eliminating exposure to terminal-based Trojans and malware.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a smart portable object comprising a safety component and a display, characterised in that the display is directly or indirectly interactive between a user and the safety component. The invention also relates to the use of a portable object for implementing an electronic transaction, including a display step for displaying all or some of the information that is useful to a user for the transaction and/or a step of interacting with the user, wherein the display and/or interaction step is carried out via said interactive display.