LPWAN Transaction Card Secure Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Low Power Wide Area Networks (LPWANs) face vulnerabilities in securing the transmission of sensitive data, making it susceptible to attacks during transfers.
Innovation Solution
A low-power network transaction card generates a unique security key based on a personal identifier, transaction card parameters, and a timestamp, which is encrypted and transmitted, and then authenticated by an LPWAN server using stored user and card parameters to ensure secure data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If data is transmitted over LPWAN to enable wide area communication and low power consumption, then network coverage and energy efficiency are improved, but data security and vulnerability to attacks deteriorate
Solution Approach 1:
The system performs preliminary actions by generating and encrypting security keys before data transmission occurs. The transaction card generates a security key that includes a random number and timestamp, encrypts it with the application identifier, and transmits the encrypted key ahead of time. This preliminary security setup enables subsequent secure communications without requiring complex real-time authentication protocols.
Solution Approach 2:
The patent introduces an intermediary mechanism - a security key composed of multiple elements (application identifier, random number, timestamp) that mediates between the transaction card and server. This intermediary key structure allows secure authentication without exposing sensitive data, resolving the contradiction between maintaining security and enabling wide-area low-power transmission.
2Reliability
If encryption and authentication protocols are implemented to secure data transmission, then data security is improved, but device complexity and processing requirements worsen
Solution Approach 1:
The security key is segmented into multiple distinct components: an application identifier, a random number, and a timestamp. This segmentation allows each component to serve a specific security function while keeping the overall implementation manageable. The transaction card and server independently generate and verify these segmented components, reducing the complexity burden on any single device.
Solution Approach 2:
The system changes parameters by using a dynamic security key that incorporates a random number and timestamp rather than static credentials. This parameter change approach allows the same transaction card to generate different security keys for different transmissions, enhancing security without requiring complex key management infrastructure. The simplicity of generating random numbers and timestamps keeps device complexity low.
Data Source
AI summary
Systems, methods, and apparatus are provided for securing transmission of sensitive data on an LPWAN network such as LoRaWAN. Long-range, low-power transmission may enable a transaction card to communicate with a financial institution server without internet or cellular connectivity. The transaction card may generate a first security key. The key may include a transaction timestamp, a random number generated by the transaction card microprocessor, a personal identifier received at the transaction card from a user, one or more card parameters, and/or any suitable factors. A long-range, low-power network server may detect the card transmission. The server may retrieve the card parameters and personal identifiers stored in association with a user account during card registration. The server may generate a second security key. Based on a match between the first security key and the second security key, the server may authenticate the transmission.