Mobile Smart Card App Local Transaction Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device-based contactless ticket systems face delays and security risks due to the need for online connections and potential data theft or cloning, especially during high-traffic public transport transactions, when ticket data is stored on an online server and accessed via Host Card Emulation (HCE).
Innovation Solution
A method where a mobile device executes a smart card application that receives and stores encrypted transaction data using a cryptographic algorithm, which can be decrypted only with a correct password, and further encrypts data before transmission to a reader device via NFC, utilizing a white-box implementation of look-up tables that are specific to the device, eliminating the need for continuous online access and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If ticket data is stored on an online server and accessed via HCE, then device complexity is reduced, but transaction speed deteriorates due to online connection requirements and data relay delays
Solution Approach 1:
The system segments ticket data into encrypted portions distributed across multiple secure storage locations within the mobile device, rather than storing complete unencrypted data in one location or requiring external server access. This allows local retrieval without online connectivity while maintaining security through distributed encryption.
Solution Approach 2:
Ticket data is pre-encrypted and stored in secure elements within the mobile device before transaction needs arise. This preliminary preparation eliminates the need for real-time server communication during transactions, enabling fast local access while maintaining security through advance cryptographic processing.
2Speed
If ticket data is imported into the app for local storage, then transaction speed improves by eliminating online connection requirements, but security deteriorates due to potential theft or cloning
Solution Approach 1:
The system implements nested security layers where ticket data is encrypted with multiple cryptographic keys stored in different secure elements within the mobile device. The data is protected by hardware-based secure elements containing cryptographic algorithms, creating nested protection rings that prevent unauthorized access even if outer layers are compromised.
Solution Approach 2:
The system changes the security parameters by implementing multi-key encryption schemes where ticket data is protected by multiple cryptographic keys rather than a single key. This transforms the security model from vulnerable single-point access to robust multi-layered protection, making theft and cloning significantly more difficult while maintaining fast local transaction processing.
3Reliability
If cryptographic algorithms with multiple security layers are implemented, then data security improves, but device complexity increases
Solution Approach 1:
The mobile device's secure elements autonomously handle cryptographic operations including key generation, data encryption, and decryption without requiring external intervention or complex user management. The system self-manages its security infrastructure, reducing operational complexity despite implementing multiple cryptographic layers for enhanced security.
Solution Approach 2:
The secure elements within the mobile device are designed with multi-functionality, serving as both hardware security modules and cryptographic processing units. These universal components handle multiple security functions including encryption, decryption, key management, and authentication, reducing overall system complexity despite implementing comprehensive cryptographic protection.
Data Source
AI summary
There is disclosed a method for facilitating transactions carried out by a mobile device, wherein: the mobile device executes a smart card application; the smart card application receives a cryptographic algorithm from a transaction server external to the mobile device; the smart card application further receives transaction data from said transaction server; the cryptographic algorithm encrypts said transaction data and stores the encrypted transaction data in a storage unit of the mobile device. Furthermore, a corresponding computer program product and a corresponding mobile device for carrying out transactions are disclosed.