Mobile Payment Device Encryption for Vending Machine Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless payment transaction systems lack enhanced security measures, particularly in authorization processes, making them vulnerable to tampering and unauthorized access.
Innovation Solution
A secure wireless communication system for vending machines, comprising a mobile payment device, a central server, and cloud storage, utilizing public-key cryptography and session keys for encrypted transactions, with a rewards and loyalty module for secure authorization and transaction settlement.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional wireless payment systems are used, then transaction speed and ease of operation are maintained, but security and authorization reliability are insufficient
Solution Approach 1:
The authorization system is segmented into multiple independent components: mobile payment device, point-of-sale terminal, and central server. Each component performs specific security functions (key generation, encryption, authorization verification) that can operate independently yet contribute to overall system security. This segmentation allows complex security operations to be distributed and managed separately, improving reliability without overwhelming single-point complexity.
Solution Approach 2:
A central server acts as an intermediary between the mobile payment device and the point-of-sale terminal. It manages public key distribution, session key generation, and authorization decisions. This intermediary handles the complex cryptographic operations and authorization logic centrally, allowing the mobile device and terminal to maintain relatively simple local architectures while achieving high security through the mediating server's coordinated operations.
2Reliability
If public-key cryptography and session keys are implemented, then data encryption and transaction security are enhanced, but processing time and computational requirements increase
Solution Approach 1:
Public keys are generated and distributed in advance through the central server before actual transactions occur. The mobile payment device and point-of-sale terminal receive their public keys during an initial setup phase, so that when a transaction occurs, the expensive public-key cryptographic operations have already been prepared. This preliminary key distribution reduces the computational burden during time-critical transaction moments.
Solution Approach 2:
The system uses periodic session key generation where new session keys are created for each transaction or transaction batch. This periodic refresh of cryptographic materials ensures that even if one session is compromised, previous and future sessions remain secure. The central server coordinates these periodic key updates, managing the cryptographic lifecycle systematically to balance security with processing efficiency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods for authorizing wireless payment transactions that include encrypting, with an encryption module on the mobile payment device, a payment account token stored on a mobile payment device and a session key generated on the mobile payment device with a public key. The methods also include transmitting the encrypted payment account token and session key to a vending machine, optionally further encrypting, with the vending machine, the encrypted payment account token and session key with a device key, and transmitting, from the vending machine, the encrypted payment account token and session key to a central server. The methods further include decrypting the payment account token and session key with the device key and/or with a private key stored at the central server and sending an authorization determination and session key from the central server to the vending machine based on the decrypted payment account token and session key.