NFC Tag Dual Storage for Secure Contactless Payments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Near field communication (NFC) systems face the risk of data eavesdropping due to automatic data transmission from NFC chips in mobile devices, exposing sensitive information like credit/debit card numbers to unauthorized readers during transactions.
Innovation Solution
Implementing a dual storage system in NFC tags where personal or financial data is stored in a first non-accessible storage device and temporarily transferred to a second accessible storage device only when prompted by an electromagnetic signal from a reader device, ensuring data is removed post-transmission and not available for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is automatically transmitted from NFC chip to reader device, then payment transaction speed is improved, but data security deteriorates due to eavesdropping risk
Solution Approach 1:
The NFC tag is divided into two separate storage devices: a first storage device for secure long-term data storage and a second storage device for temporary transmission. This segmentation allows data to be kept secure in the first storage device while enabling fast transmission from the second storage device, resolving the contradiction between security and transaction speed.
Solution Approach 2:
The second storage device acts as an intermediary between the first storage device and the reader device. It receives data from the first storage device only when needed for a transaction, transmits it to the reader, and then deletes it. This intermediary mechanism enables fast payment while preventing eavesdropping, as the data exists in transmittable form only briefly during the transaction.
2Ease of operation
If real card number is stored in NFC tag for payment, then payment convenience is improved, but card number exposure to merchant deteriorates security
Solution Approach 1:
Instead of storing and transmitting the real card number, the system creates a temporary copy in the second storage device. This copy contains the necessary payment information for the transaction but is deleted immediately after use. This copying approach maintains payment convenience while eliminating the risk of card number exposure to the merchant or unauthorized readers.
Solution Approach 2:
The system discards the temporary payment data in the second storage device after each transaction is completed. The data is recovered (re-created) in the second storage device only when a new transaction is initiated. This discard-and-recover cycle ensures that card number information is never persistently stored in a transmittable form, maintaining both convenience and security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method effectively prevents data eavesdropping by ensuring sensitive information is not exposed to unauthorized readers, maintaining security during NFC transactions while allowing secure and convenient contactless payments.
Implementation Method 1
Near Field Communications technology is commonly used for contactless short-range communications based on radio frequency identification (RFID) standards, using magnetic field induction to enable communication between electronic devices
Data Source
AI summary
In various embodiments, the mobile device includes an NFC tag for near-field communication. The NFC tag includes a first storage device and a second storage device. Personal data is stored on the first storage device, which is not accessible by an NFC reader device. Prior to a transaction, the personal data is transmitted from the first storage device to the second storage device, where the data is readable or accessible by the reader device. In one embodiment, the data remains stored in the first storage device and available for future use. In another embodiment, the data comprises financial product data.