NFC Controller Secure Mode for Payment Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional mobile devices, when used for payment transactions, risk exposing sensitive payment-related data to general-purpose processing units that may be infected with malware, compromising security, especially when they act as terminal devices at a point-of-sale.
Innovation Solution
A device comprising a host component, a near field communication (NFC) controller, and a secure element, where the NFC controller operates in a secure mode to inhibit the host component from performing transactions while allowing the secure element to perform transactions, thereby protecting payment-related data by blocking select-application commands from the host component and ensuring only the secure element can initiate transactions with a payment card.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the host component is used to perform transactions with the transaction device, then the device can perform general-purpose processing and transactions, but sensitive payment-related data may be exposed to malware on the host component
Solution Approach 1:
The device is segmented into two distinct components: a host component for general-purpose processing and a secure element for secure payment transactions. The secure element is a separate, isolated component that stores payment data and performs transactions independently, preventing exposure of sensitive data to the host component even if the host is compromised by malware.
Solution Approach 2:
The secure element is extracted as a separate, isolated component from the host component. Payment-related data and transaction functions are removed from the general-purpose host and placed into the secure element, which has its own protected environment and cannot be accessed by the host component, thereby extracting the security risk from the system.
2Object-affected harmful factors
If the host component is inhibited from performing transactions, then payment data security is improved, but the device loses general-purpose transaction capability
Solution Approach 1:
The secure element acts as an intermediary that enables transaction capability while maintaining security. Instead of allowing the host component to directly perform transactions (which would expose data), the secure element mediates all transaction operations, receiving commands from the host but executing them in its own protected environment, thus providing both security and functionality.
3Object-affected harmful factors
If a secure element is used for transactions, then payment data security is enhanced, but the device architecture becomes more complex
Solution Approach 1:
The secure element is merged with the host component to form an integrated device architecture. Rather than being a completely separate external device, the secure element is combined with the host in a unified device, sharing common resources such as power supply and communication interfaces, thereby reducing overall system complexity while maintaining the security benefits of separation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is disclosed a device for facilitating a transaction, comprising at least one host component, a communication controller and a secure element, said communication controller being communicatively coupled to the host component and to the secure element, wherein said communication controller is arranged to establish a communication with an external transaction device, and wherein said communication controller is further arranged to operate in a secure mode of operation in which the communication controller inhibits the host component from performing transactions with said transaction device and does not inhibit the secure element to perform transactions with said transaction device. Furthermore, there is disclosed a corresponding method for facilitating a transaction, as well as a corresponding computer program product.