Mobile Payment App Secure Issuer Updates via Session Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing systems for mobile payment transactions over unsecure over-the-air (OTA) networks lack sufficient encryption mechanisms and integrity verification, making it difficult for issuers to securely update mobile payment applications and protect sensitive customer credentials.
Innovation Solution
A method and system for securing transaction messages between a mobile payment application and a gateway by generating encryption and integrity session keys using gateway master keys and an application identifier, allowing for secure encryption and verification of sensitive data, enabling secure over-the-air issuer updates without the need for mutual authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive customer credentials are transferred over OTA network for issuer authentication, then the issuer can authenticate the mobile payment application, but the credentials are exposed to fraudsters for card-not-present transactions
Solution Approach 1:
The patent segments the authentication process into two independent parts: (1) the mobile device transmits only a one-time use authentication token derived from credentials, not the credentials themselves, and (2) the issuer validates this token. This segmentation prevents credential exposure while maintaining authentication reliability, as the token is useless without the original credentials stored securely in the mobile device.
Solution Approach 2:
The patent introduces an intermediary authentication token that mediates between the mobile payment application and the issuer. Instead of direct credential transmission, the token acts as a secure intermediary that carries authentication information without exposing the actual credentials, thereby preventing fraud while enabling reliable authentication.
2Ease of operation
If the mobile device remains in user's hands during contactless transaction, then user convenience is maintained, but the communication window is less than half a second which is insufficient for issuer updates
Solution Approach 1:
The patent transitions from synchronous real-time communication (single time dimension) to asynchronous communication with store-and-forward capability (adding a time storage dimension). The mobile device stores authentication tokens and transaction data locally, enabling communication to resume later when the issuer is available, thus extending the effective communication window without compromising user convenience during the actual transaction.
3Reliability
If encryption mechanisms are implemented over OTA network, then security is improved, but the complexity of key management and authentication increases
Solution Approach 1:
The patent performs preliminary key establishment and authentication token generation before the actual transaction occurs. The mobile device pre-generates authentication tokens using stored credentials, and the key hierarchy is established during device provisioning. This preliminary action eliminates the need for complex real-time key negotiation during transactions, reducing operational complexity while maintaining strong security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention generally relates to systems and methods for performing issuer updates of data stored in a mobile device, a remote authentication, a remote payment transaction or enable the configuration of mobile application functions or operations. More specifically, the present invention relates to a method and system for securing an issuer updates processing for mobile payment application. When an update transaction is initiated, the payment application increments an Application Transaction Counter ATC and derives from this ATC a session keys. Sensitive user credential data are encrypted with the computed session keys before transmission to a gateway which is configured to compute the session keys for decryption. The decrypted user credential data are forwarded to a payment application issuer for updates.