Network Appliance Secure Element for IoT Transaction Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The proliferation of 'Internet of Things' devices lacking user input mechanisms poses challenges for secure and efficient electronic commerce, as they struggle to securely store and update account data, making it impractical and insecure to conduct transactions without human intervention.

Innovation Solution

A network appliance with a secure element is used to provision and manage account data, allowing secure e-commerce transactions by associating registered physical addresses with network addresses, enabling authorized transactions without manual intervention and reducing the need for individual device provisioning.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If each electronic device stores account data individually, then each device can conduct transactions independently, but security risks increase and provisioning becomes impractical and insecure

Engineering Contradiction:
Improvetransaction capabilityVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts account data storage from individual electronic devices and consolidates it into a centralized secure server. This removes the security burden from resource-constrained IoT devices while maintaining their transaction capability through token-based authentication.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a secure server as an intermediary between IoT devices and transaction systems. This mediator handles sensitive account data storage and provisioning, allowing devices to conduct transactions without directly managing secure credentials.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If account data is provisioned to each device individually, then each device can operate autonomously, but the provisioning process becomes unwieldy and complex

Engineering Contradiction:
Improvedevice autonomyVSAvoidprovisioning process
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent enables devices to self-provision by automatically receiving account data through their network appliance without manual intervention. The system performs automated provisioning based on device identification, eliminating complex manual configuration processes.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent performs preliminary provisioning of account data to network appliances before devices need to conduct transactions. This advance preparation ensures devices are ready for autonomous operation without requiring complex provisioning procedures at the time of use.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If account data is updated on multiple devices, then all devices have current information, but updating becomes inefficient and error-prone

Engineering Contradiction:
Improvedata consistencyVSAvoidupdate efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent merges all account data storage into a single centralized secure server. This consolidation ensures data consistency across all devices automatically, as any update is made in one location and reflected system-wide without requiring synchronized updates to multiple devices.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The centralized secure server serves as a universal repository for all account data, replacing the need for each device to maintain its own copy. This single source of truth provides multi-functional support for all devices in the network, ensuring consistency and improving update efficiency.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If a secure element is added to the network appliance, then account data security is enhanced, but device complexity increases

Engineering Contradiction:
Improveaccount data securityVSAvoidappliance structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security-critical functions into a separate secure element component within the network appliance. This modular approach enhances security by isolating sensitive operations while keeping the main appliance architecture relatively simple and manageable.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12169836B2Network appliance with secure element
Publication Date: 2024.12.17 VISA INTERNATIONAL SERVICE ASSOCIATION
  • US12169836B2 patent drawing
  • US12169836B2 patent drawing
  • US12169836B2 patent drawing

AI summary

Described herein is a network apparatus with secure element and related systems, methods, and apparatuses. A described method includes receiving a request to perform a transaction. The method also includes obtaining confirmation that a network address associated with the request corresponds to a registered physical address. The method further includes obtaining account data and conducting a transaction using the account data.