NFC Mobile Currency Transfer With Proximity-Verified Card Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sending funds between mobile devices using NFC is challenging due to security vulnerabilities and requires an internet connection, with risks of unauthorized transactions and user errors in data entry.
Innovation Solution
A system utilizing NFC-enabled mobile devices and contactless cards with key diversification techniques, including a master key and counter-based encryption, ensures secure transactions by verifying user proximity and authenticating payment requests through a server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If NFC contactless card data is read without security measures, then transaction speed is improved, but security is worsened due to unauthorized access risks
Solution Approach 1:
The patent applies preliminary anti-action by implementing encryption and authentication mechanisms before the actual transaction occurs. The contactless card data is encrypted using a key diversification algorithm, and the system performs proximity verification and device authentication beforehand to prevent unauthorized access, thus maintaining both speed and security
Solution Approach 2:
The patent introduces an intermediary layer between the contactless card and the transaction processing system. This intermediary includes the encryption algorithm, key diversification mechanism, and server-based verification system that mediates the data transmission, ensuring security while maintaining the contactless nature of the transaction
2Measurement precision
If manual account information entry is required, then transaction accuracy is improved, but user error risk increases due to complex data input
Solution Approach 1:
The patent implements self-service by enabling the system to automatically retrieve and process account information from the contactless card without requiring manual user input. The NFC reader automatically reads the card data, the system performs the necessary encryption and verification, and completes the transaction, eliminating user errors associated with manual data entry
Solution Approach 2:
The patent replaces the mechanical system of manual data entry with an automated electronic system. Instead of users typing account information, the system uses NFC technology to electronically read and process card data, substituting human input with machine-based automatic information retrieval and processing
3Reliability
If Internet connection is required for fund transfer, then transaction security is improved, but system complexity increases due to network dependencies
Solution Approach 1:
The patent applies preliminary action by performing encryption and authentication operations before the actual fund transfer occurs. The contactless card data is encrypted in advance, and the system verifies device proximity and authentication credentials beforehand, allowing secure transactions to proceed without requiring continuous Internet connectivity during the transfer process
Solution Approach 2:
The patent segments the transaction process into distinct phases: local encryption and verification phase that occurs offline on the device, and a separate settlement phase that may require Internet connectivity. This segmentation allows the security-critical operations to be performed locally without network dependency, reducing overall system complexity
Data Source
AI summary
Various embodiments are generally directed to NFC-based mobile currency transfers. A mobile payment may be programmatically initialized when at least two mobile devices come into NFC communications range. A payment card associated with an account used to fund the currency transfer may be tapped to one or more of the devices to allow a server to validate the currency transfer.