Offline IC Card PIN Authentication via Dynamic Challenge and Digital Signature
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IC card off-line PIN verification processes are vulnerable to man-in-middle attacks, where the authenticity of the cardholder is determined solely based on a plaintext status code, making them susceptible to false verification and subsequent unauthorized transactions.
Innovation Solution
The implementation of a method using a dynamic challenge code and XOR operations between the POS terminal and IC card, where a signature is generated and verified using public and private keys to ensure the PIN is correctly authenticated, preventing unauthorized access by ensuring the PIN is not transmitted in plaintext.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the terminal determines authentication success solely based on the plaintext status code returned by the IC card, then the authentication process is simple and fast, but the system becomes vulnerable to man-in-middle attacks where the status code can be modified to indicate false success
Solution Approach 1:
The patent introduces a challenge-response mechanism as an intermediary verification layer. The terminal sends a random challenge code to the IC card, which must be processed through cryptographic operations (XOR with PIN, then encrypted with private key) to produce a response. This intermediary process prevents direct manipulation of the status code because the response is tied to the specific challenge and cannot be forged without the private key stored in the IC card.
Solution Approach 2:
The patent transforms the static authentication process into a dynamic one by introducing a random challenge code that changes with each authentication attempt. The response parameter is generated through cryptographic operations (XOR and encryption) rather than simple status code return. This parameter transformation ensures that even if the same PIN is used, each authentication produces a unique response, preventing replay attacks and code modification.
2Productivity
If the status code is transmitted in plaintext to inform authentication result, then the communication process is efficient, but the plaintext status code can be easily modified by attackers to indicate successful verification
Solution Approach 1:
The patent uses cryptographic operations as intermediaries to protect the authentication result. Instead of transmitting the PIN or status code in plaintext, the system transmits a challenge code and receives an encrypted response. The verification of this response serves as the intermediary mechanism that confirms authentication success without exposing sensitive data to modification.
Solution Approach 2:
The patent replaces the mechanical/simple status code transmission with cryptographic mechanisms. The authentication result is not conveyed through a simple plaintext code that can be modified, but through a cryptographic response that requires the IC card's private key to generate. This substitution of cryptographic operations for simple status code exchange prevents harmful modifications while maintaining communication efficiency.
3Device complexity
If the terminal passively receives the status code from the IC card without active verification, then the authentication process is straightforward, but the terminal cannot detect if the returned status code has been tampered with
Solution Approach 1:
The patent implements a feedback mechanism where the terminal actively verifies the IC card's response against the challenge code. The IC card receives the challenge, processes it through cryptographic operations, and returns a response. The terminal then verifies this response to confirm authentication success. This feedback loop enables the terminal to actively detect tampering rather than passively accepting the status code.
Solution Approach 2:
The patent performs preliminary cryptographic setup by generating and transmitting a random challenge code before the actual authentication verification. This preliminary action sets up a unique verification context that the IC card must process. The terminal then uses this pre-established challenge to verify the response, enabling active detection of tampering before the authentication result is finalized.
Data Source
AI summary
The present invention relates to an off-line PIN authentication and an off-line PIN authentication system. The method comprises: inputting an off-line PIN1 to a POS terminal, the POS terminal generating a dynamic challenge code, and transmitting the dynamic challenge code and the off-line PIN1 to a card application; the card application verifying the first off-line PIN1 and the second off-line PIN2 are consistent with each other or not; if consistent, a digital signature being made on the first off-line PIN1 and the second off-line PIN2 to return signature data and a success status code to the POS terminal; the POS terminal verifying the signature data in case of receiving the success status code, and starting the subsequent transaction procedure if the signature data is verified successfully. According to the present invention, it not only can realize the verification of the IC card to the off-line PIN, but also can realize the verification of the terminal to the off-line PIN. The method is implemented simply, is practical, safe and reliable.