Mobile Wallet Authentication for Wireless HSM Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing Hardware Security Module (HSM) authentication methods, such as Pin Entry Devices (PED) and PED keys, are bulky, prone to loss, require physical connection, and involve cumbersome password management, leading to a user experience that is outdated and costly.

Innovation Solution

A Digital Wallet on a Mobile Device is used for user authentication to an HSM, employing wireless communication methods like QR codes, NFC, BLE, and Wi-Fi, eliminating the need for physical connections and providing a more practical interface.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If PED and PED keys are used for HSM authentication, then authentication security is provided, but device bulkiness and physical space requirements increase

Engineering Contradiction:

Improveauthentication securityVSAvoiddevice bulkiness

Core Design Contradiction:

ReliabilityVSVolume of moving object

Solution Approach 1:

The patent creates a digital copy of the authentication mechanism by implementing a mobile application that stores cryptographic credentials and presents them wirelessly via QR codes or NFC, eliminating the need for physical PED devices while maintaining security

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent replaces the mechanical/wired PED interface with wireless communication mechanisms (QR codes, NFC, BLE, Wi-Fi), substituting physical hardware interactions with digital/wireless authentication methods

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If PED devices are used for HSM access, then authentication control is achieved, but hardware requirements and costs increase

Engineering Contradiction:

Improveauthentication controlVSAvoidhardware requirements

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent uses software-based digital credentials stored in mobile devices to replace physical PED hardware, reducing hardware requirements while maintaining authentication control through cryptographic verification

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent makes the mobile device universal for authentication purposes, allowing any smartphone or tablet with the application to access the HSM, eliminating the need for specialized PED hardware

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If PED keys are used for portable access, then device portability is improved, but risk of loss and misplacement increases

Engineering Contradiction:

Improvedevice portabilityVSAvoidrisk of loss

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent enables users to access their authentication credentials through their personal mobile devices without requiring physical retrieval or recall of separate PED keys, as the credentials are automatically available in the mobile application

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent creates digital copies of authentication credentials that can be accessed wirelessly from mobile devices, eliminating the risk of loss associated with physical keys while maintaining portability

Inventive Principle:

Principle #26Copying

4Reliability

If wired PED interface is used for HSM connection, then secure authentication is achieved, but physical space and connection requirements increase

Engineering Contradiction:

Improvesecure authenticationVSAvoidphysical space

Core Design Contradiction:

ReliabilityVSArea of stationary object

Solution Approach 1:

The patent replaces wired mechanical connections with wireless communication protocols (QR codes, NFC, BLE, Wi-Fi), eliminating the need for physical connection space while maintaining secure authentication through cryptographic verification

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20260111533A1Digital wallet authentication with a hardware security module

Publication Date: 2026.04.23 THALES DIS CPL USA INC

AI summary

Provided is a system and method for authenticating a user to a Hardware Security Module (HSM) with a Wallet Reader by way of a Digital Wallet on a Mobile Device. The Digital Wallet contains electronic documents and digital identities signed by at least one entity to certify the user of the Digital Wallet and the electronic documents stored therein are authentic. Certificates are chained to a trust anchor by way of an HSM provisioning process and Digital Wallet creation process. In some embodiments the HSM creates secrets and private key material that are loadable onto a secure element of the Mobile Device for hardened security. Other embodiments are disclosed.