NFC Credential Validation for Secure Digital Wallet Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital credentials are vulnerable to unauthorized provisioning when physically handed over, posing a risk of fraud during contactless transactions.
Innovation Solution
A mechanism for securely provisioning digital credentials by tapping a contactless physical credential to an electronic device, utilizing NFC technology and cryptographic methods, including PIN entry for added authentication, to validate and generate digital credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital credentials are stored on electronic devices for convenient access, then ease of operation is improved, but vulnerability to unauthorized provisioning increases
Solution Approach 1:
The patent introduces a secure element as an intermediary component between the NFC controller and the host processor. This secure element acts as a trusted mediator that validates credential data before provisioning, preventing unauthorized credentials from being stored while maintaining convenient digital access. The secure element mediates the interaction between the physical credential and the electronic device's memory systems.
Solution Approach 2:
The system performs preliminary validation of credential data within the secure element before the credential is actually provisioned to the electronic device. This preliminary action ensures that only authenticated credentials are stored, preventing unauthorized provisioning attempts from succeeding while maintaining the convenience of digital credential storage and access.
2Productivity
If contactless transactions are enabled for faster processing, then productivity is improved, but risk of fraud increases
Solution Approach 1:
The secure element serves as a trusted intermediary that validates credential authenticity during contactless transactions. By mediating the transaction process and verifying credentials before authorization, the system enables fast contactless processing while mitigating fraud risk through the secure element's validation capabilities.
Solution Approach 2:
The patent replaces manual verification mechanisms with automated cryptographic validation performed by the secure element during contactless transactions. This substitution maintains the speed advantage of contactless transactions while eliminating the need for manual fraud checking, as the secure element automatically validates credential authenticity.
3Measurement precision
If physical credentials are handed over for verification, then authentication is improved, but risk of unauthorized copying increases
Solution Approach 1:
The secure element acts as a trusted intermediary that receives and validates credential data during the handover process. Instead of directly storing received credentials, the secure element mediates by verifying authenticity through cryptographic validation, preventing unauthorized copying while maintaining accurate authentication.
Solution Approach 2:
The system applies preliminary anti-action by validating credentials through cryptographic verification before provisioning them to the electronic device. This preemptive validation prevents unauthorized credentials from being stored, countering the potential harm of credential copying before it can occur.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances security and convenience in digital credential transactions by ensuring authenticity and preventing unauthorized provisioning, while maintaining data integrity and user privacy.
Implementation Method 1
A mechanism for securely provisioning digital credentials by tapping a contactless physical credential to an electronic device, utilizing NFC technology
Data Source
AI summary
The subject system may be implemented by a processor circuit configured to receive, by a digital wallet on the electronic device and from a provider server via an intermediate server, a digital credential, receive, via a near-field communication (NFC) component of the electronic device and from a physical credential corresponding to the digital credential, credential information associated with the physical credential, transmit, by the digital wallet on the electronic device and to the provider server via the intermediate server, the credential information to verify the credential information, receive, by the digital wallet and from the provider server via the intermediate server, an indication that the physical credential is verified by the provider server, and provision, by the digital wallet, the digital credential on a secure element of the electronic device.


