NFC Activation Control to Block Shipping-Time Reconfiguration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

NFC devices are vulnerable to unauthorized tampering during shipping and storage, which can compromise their configuration and introduce security risks, making it difficult for users to re-program them for their intended use.

Innovation Solution

NFC devices are configured in a non-enabled mode until activated by an authorized user, using activation sensors such as physical connectors or touch sensors to prevent unauthorized access and tampering, and can communicate a flag indicating tampering status.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If NFC devices are enabled by default after manufacture, then ease of operation is improved, but security is worsened due to unauthorized tampering during shipping and storage

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The NFC device is configured in a non-enabled mode during manufacture and remains in this state until activated by an authorized user. This preliminary configuration prevents unauthorized access during shipping and storage, while still allowing the device to be easily activated later by the intended user through a simple activation process.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If NFC devices are configured in non-enabled mode, then security is improved, but ease of operation is worsened due to additional activation steps

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The activation process is designed to be self-service oriented, where the authorized user can easily activate the device themselves without requiring complex setup procedures or assistance from support staff. The device provides clear indications of its activation status and guides the user through the activation process.

Inventive Principle:
Principle #25Self-service

3Reliability

If NFC interface is disabled until activation, then security is improved, but adaptability is worsened as device cannot communicate during shipping

Engineering Contradiction:
ImprovesecurityVSAvoidadaptability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The NFC device has different operational states with different levels of functionality. During the non-enabled state, the device maintains basic NFC communication capabilities for activation purposes, while restricting access to configuration and data functions. This localized differentiation of functionality allows the device to be both secure and adaptable to different operational contexts.

Inventive Principle:
Principle #3Local quality

4Reliability

If activation sensor is added to detect physical activation, then security is improved, but device complexity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The activation sensor serves multiple functions: it detects physical activation of the device, provides a clear indication to users that the device has been activated, and can be integrated with existing device components. This multi-functionality reduces the need for separate complex activation mechanisms.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP3648494B1Activation for near-field communication device
Publication Date: 2025.12.10 YUBICO
  • EP3648494B1 patent drawingFigure 1
  • EP3648494B1 patent drawingFigure 2A~2B
  • EP3648494B1 patent drawingFigure 3~4

AI summary

An authorization device (300) having an activation module (330) and a wireless interface (310) is configured in a non-enabled mode. In the non-enabled mode, the wireless interface is configured to receive data, and the authorization device (300) is configured to block a request received via the wireless interface to interact with the authorization device. The activation module detects (340) an activation operation. In response to detecting the activation operation, the activation module configures the authorization device in an enabled mode. In the enabled mode, the authorization device is configured to process a request to re-configure the authorization device received via the wireless interface, and to transmit authorization information to a reader device via the wireless interface.