Peer-to-Peer Mobile Wallet Security via Cryptographic Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile wallet technologies face challenges in establishing secure, peer-to-peer wireless communications over short-range networks, particularly in discovering compatible devices and ensuring the legitimacy and security of transactions, which are vulnerable to man-in-the-middle attacks and eavesdropping.
Innovation Solution
The implementation of peer-to-peer mobile wallet (P2PMW) communications using Wireless LAN, BLUETOOTH, and BLE technologies, with methods for device discovery, preliminary information exchange, and cryptographic key management to secure transactions, including identity verification and encryption key passing through mobile wallet issuer systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile devices use multiple wireless technologies for connections, then connectivity versatility is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal peer-to-peer communication framework that supports multiple wireless technologies (Wi-Fi, Bluetooth, NFC) through a single integrated system. The mobile wallet application can discover and connect with other devices using any of these technologies, providing multi-functionality without requiring separate dedicated systems for each communication method.
Solution Approach 2:
The patent introduces an intermediary authentication and key exchange mechanism that mediates between different wireless communication protocols. This intermediary layer handles the complexity of protocol-specific operations while presenting a unified simplified interface to the user, allowing seamless switching between Wi-Fi, Bluetooth, and NFC without increasing user-side complexity.
2Ease of operation
If peer-to-peer wireless connections are established without dedicated hardware, then device accessibility is improved, but security vulnerability increases
Solution Approach 1:
The patent implements self-service security mechanisms where the mobile wallet application automatically performs device discovery, authentication, and key exchange without requiring dedicated hardware or manual user intervention. The system autonomously negotiates secure connections using standard wireless protocols, making security as easy to use as connectivity while maintaining robust protection against man-in-the-middle attacks.
Solution Approach 2:
The patent performs preliminary authentication and key establishment actions before actual transaction occurs. By verifying device identities and establishing encrypted channels in advance through the mobile wallet application, the system prevents security vulnerabilities from arising during the transaction phase, even when using general-purpose devices without dedicated hardware.
3Speed
If device discovery methods are simplified, then connection speed is improved, but reliability of legitimate connection decreases
Solution Approach 1:
The patent performs preliminary device discovery and authentication actions simultaneously rather than sequentially. The mobile wallet application discovers potential devices while also verifying their legitimacy through cryptographic authentication, so that by the time a connection is established, both speed and reliability are achieved without compromise. This preliminary dual-action eliminates the need for separate discovery and verification steps.
Solution Approach 2:
The patent implements feedback mechanisms where the mobile wallet application continuously verifies device legitimacy during the connection process. Authentication responses and cryptographic challenges provide immediate feedback on device trustworthiness, allowing the system to accept only verified devices while maintaining fast connection speeds through parallel processing of discovery and verification operations.
Data Source
AI summary
Disclosed in some examples are devices, systems, and machine readable mediums for establishing peer to peer mobile wallet communications (P2PMW) over short range wireless communication networks. These P2PMW communications allow exchange of information between two wallet clients. Example communications include payments, providing identification, providing loans, and the like. The use of P2PMW communications opens up the prospect of anyone accepting payment from anybody else at any time. All that is needed is a computing device with a mobile wallet. Example short range wireless communications include Wireless LANs (WLAN) such as WIFI (e.g., communicating according to an Institute for Electrical and Electronics Engineers (IEEE) 802.11 family of standards), BLUETOOTH® or the like.