NFC Role Inversion for Secure Digital Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current proximity-based digital transaction systems using NFC technology are limited by the master-slave paradigm where the charge terminal is the master and the payment device is the slave, restricting functionality and security, particularly in ensuring authenticity and integrity of transactions.
Innovation Solution
A proximity-based secure communication system where the slave terminal activates the NFC channel and sends an ATR to the master device, reversing the roles, allowing for secure APDU command exchanges that represent digital transactions, ensuring authentication, integrity, and encryption, and enabling various transaction types such as financial, travel document, and access transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the charge terminal is the master and the payment device is the slave in NFC communication, then the communication protocol is standardized and compatible, but the functionality and security are restricted
Solution Approach 1:
The patent inverts the traditional master-slave roles in NFC communication. Instead of the charge terminal being the master and the payment device being the slave, the payment device becomes the master that initiates communication by sending an ATR signal, while the charge terminal becomes the slave that responds to APDU commands. This role reversal enables the payment device to control the transaction flow, enhancing security and functionality while maintaining protocol compatibility through standardized APDU command-response interactions.
2Reliability
If the charge terminal requests data from the smartphone and the smartphone answers, then the communication follows traditional master-slave paradigm, but security and authenticity cannot be fully ensured
Solution Approach 1:
The patent reverses the traditional data request flow where the charge terminal (master) requests data from the smartphone (slave). Instead, the smartphone (now master) initiates the transaction by sending an ATR signal and subsequently sends APDU commands to the charge terminal (now slave), which responds with transaction data. This inversion ensures that the payment device controls the authentication process, enhancing security while maintaining ease of operation through automated command-response sequences.
Solution Approach 2:
The patent implements preliminary action by requiring the payment device (smartphone) to send an ATR (Answer to Reset) signal before any transaction data exchange occurs. This preliminary signal establishes the payment device as the master and initiates the secure communication channel. Subsequent APDU commands and responses follow this established protocol, ensuring that authentication and security measures are in place before any sensitive transaction data is transmitted, thereby enhancing security without complicating the user experience.
3Adaptability or versatility
If NFC antenna is limited to certain functions such as payment, then security is maintained, but versatility and functionality are reduced
Solution Approach 1:
The patent implements universality by enabling the NFC antenna to handle multiple transaction types beyond just payments. By making the payment device the master that controls the communication flow through ATR and APDU commands, the system can securely support various transaction types including financial transactions, travel document verification, and access control. The standardized APDU command structure provides a universal interface that can be adapted to different transaction types while maintaining security through the payment device's control over the authentication process.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This system enhances security and functionality by ensuring that neither party can refuse a transaction and maintains transaction secrecy, allowing for various transaction types while adhering to ISO 7816 standards, reducing merchant costs, and simplifying payment processes.
Implementation Method 1
a slave terminal comprising an NFC radio frequency communication channel, wherein the slave terminal is configured to remain in the listening mode in the NFC radio frequency communication channel
Data Source
AI summary
The present disclosure discloses a proximity-based secure communication system and method for digital transactions. The system comprises: a slave terminal with a near field communication (NFC) radio frequency communication channel, wherein the slave terminal remains in the listening mode in the NFC radio frequency communication channel; and a master electronic device with an NFC radio frequency communication channel. The slave terminal is configured to send an Answer-to-Reset (ATR) to the master electronic device when, by proximity, the slave terminal detects the activation of the NFC radio frequency channel. The slave terminal and the master electronic device exchange Application Protocol Data Unit (APDU) commands that represent a digital transaction by means of the NFC radio frequency channel, such that the master electronic device sends request APDU commands to the slave terminal, and the master electronic device receives reply APDU commands from the slave terminal.