NFC Smart Card Password Generation Without Stored Master Passwords

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional password managers are vulnerable to brute-force attacks, require users to remember a master password, and may not be accessible when the device is unavailable, with password generator randomness being unverifiable.

Innovation Solution

A near-field communication (NFC) enabled contactless smart card generates secure, human-readable passwords using a random number generator or cryptographic hash function, which can be transformed for added security, and serves as a physical 'master' password for the password manager application.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional password managers use stored encrypted databases, then password management is centralized, but the system becomes vulnerable to brute-force attacks and device loss

Engineering Contradiction:

ImprovesecurityVSAvoidvulnerability to brute-force attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the master password functionality from centralized software databases and embeds it directly into the NFC smart card's secure element. This physical extraction means the master password is never stored in accessible memory, eliminating the vulnerability of stored encrypted databases while maintaining centralized security control.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces the conventional mechanical approach of storing passwords in software databases with a physical NFC smart card that uses hardware-based cryptographic operations. The secure element in the card performs cryptographic functions physically, eliminating software-based vulnerability chains.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If users must remember a master password to access the password manager, then the system requires user memory, but this creates a single point of failure for security

Engineering Contradiction:

Improveaccess requirementVSAvoidsecurity effectiveness

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The NFC smart card performs self-authentication through its secure element, which automatically verifies cryptographic credentials without requiring the user to remember or manually input a master password. The card's hardware security module handles authentication autonomously, eliminating the single point of failure while maintaining ease of access.

Inventive Principle:

Principle #25Self-service

3Ease of operation

If the password manager is installed on a device, then it provides convenient access, but the device must be available and the user must have the device with them

Engineering Contradiction:

ImproveaccessibilityVSAvoidavailability

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The NFC smart card serves multiple functions: it acts as the master password store, cryptographic key holder, and authentication credential all in one physical object. This multi-functionality means the card can provide password management access on any NFC-enabled device without requiring a specific installed application or system, ensuring availability wherever the card is physically present.

Inventive Principle:

Principle #6Universality (Multi-functionality)

4Productivity

If a conventional password generator is used, then passwords can be generated automatically, but the randomness cannot be verified

Engineering Contradiction:

Improvepassword generationVSAvoidrandomness verifiability

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

The patent implements feedback through transparent verification mechanisms where the NFC smart card's secure element can provide cryptographic proofs of randomness. The card can generate random numbers and provide verifiable cryptographic hashes that demonstrate true randomness, allowing users to verify the quality of password generation rather than trusting it blindly.

Inventive Principle:

Principle #23Feedback

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

The solution provides highly secure, verifiable password generation and management, minimizing exposure to breaches by eliminating stored passwords and requiring physical possession of the card for access, thus enhancing security and usability.

Implementation Method 1

a near-field communication (NFC) enabled contactless smart card

Methodology Applied

Scientific EffectNear-field communication (NFC): Electromagnetic Induction

Data Source

PatentUS12493679B2Secure password generation and management using NFC and contactless smart cards

Publication Date: 2025.12.09 CAPITAL ONE SERVICES LLC

AI summary

Various embodiments are directed to securely generating and managing passwords using a near-field communication (NFC) enabled contactless smart card. For example, a secure password may be generated by generating a random number via a random number generator of the contactless smart card and converting the random number to one or more human-readable characters. In another example, a secure cryptographic hash function of the contactless smart card may generate a hash output value, which may be converted to one or more human-readable characters. The human-readable characters may be used as the secure password or it may be transformed to add more layers of security and complexity.