NFC Messaging Protocol Using Unique PIN for Secure Relay Routing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need to enhance the security of Near Field Communication (NFC) messages involving Secure Element (SE) embedded data transmitted over a network between a mobile device and a trusted service manager (TSM) or payment company (PC).

Innovation Solution

A messaging control device and system that utilizes a unique personal identification number (PIN) in the header field to distinguish messages, routing those with the PIN number to a trusted relay for processing, ensuring secure communication between the mobile device and the TSM or PC, while using a PIN-based network protocol to maintain security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If NFC messages with SE embedded data are transmitted over a public network, then communication convenience is improved, but security is worsened

Engineering Contradiction:
Improvecommunication convenienceVSAvoidmessage security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a trusted relay server as an intermediary component between the mobile device and the network. The relay server receives NFC messages containing SE embedded data, validates them, and forwards them to the destination. This intermediary architecture allows convenient public network transmission while maintaining security through centralized control and validation at the relay server.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If all NFC messages are routed through a trusted relay, then security is improved, but network processing efficiency is worsened

Engineering Contradiction:
Improvemessage securityVSAvoidnetwork processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements selective routing based on message characteristics. Messages containing SE embedded data are routed through the trusted relay server for secure processing, while ordinary messages without SE data are processed directly by the network without relay intervention. This local quality approach ensures high security for sensitive messages while maintaining normal processing efficiency for routine communications.

Inventive Principle:
Principle #3Local quality

3Measurement precision

If a unique PIN is added to distinguish messages in the header field, then message identification accuracy is improved, but message structure complexity is worsened

Engineering Contradiction:
Improvemessage identification accuracyVSAvoidmessage structure complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent utilizes the existing PIN field in the NFC message header structure, which is already a standard component of NFC messaging. By repurposing this existing field for dual functions (both as a universal message identifier and as a security credential), the patent achieves accurate message identification without adding structural complexity. The PIN serves multiple purposes: routing identification, security authentication, and message tracking.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9984364B2Messaging protocol for secure communication
Publication Date: 2018.05.29 BUMILLER GEORGE BALDWIN
  • US9984364B2 patent drawing
  • US9984364B2 patent drawing
  • US9984364B2 patent drawing

AI summary

An illustrative method, system, and device for communicating a message over a network between a trusted service manager and a mobile device having a security element includes the steps of: providing a message having a header field and a message field; providing a number in the header field that is unique to the mobile device; providing a message in the message field, the message coming from the mobile device if communicated from the mobile device to a trusted service manager and coming from the trusted service manager if communicated from the trusted service manager to the mobile device; and providing a messaging protocol that enables the network to distinguish between a message having the unique mobile device number in the header field and a message that is without the unique mobile device number in the header field.