Payment Device Multi-Account Switching via Repersonalization Script
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment devices are limited in their ability to conduct financial transactions using multiple payment accounts due to security measures that render secure storage inaccessible, preventing users from easily switching between accounts.
Innovation Solution
A system and method that allocates a cryptographic personal account number (CPAN) and generates a cryptographic master key set, which is used for selected cryptographic calculations, while a repersonalization script is created and transmitted to the payment device to enable it to use multiple device personal account numbers (DPANs) for financial transactions, allowing the device to switch between payment accounts securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure storage elements are made inaccessible to maintain security, then payment account security is improved, but the ability to exchange payment credentials and use multiple accounts is worsened
Solution Approach 1:
The patent segments the payment credential system into two distinct parts: a secure element that stores the CPAN and cryptographic keys (inaccessible to applications), and a repersonalization script stored in accessible memory that contains the DPAN and transaction logic. This segmentation allows the secure element to maintain security while the accessible script enables multi-account functionality.
Solution Approach 2:
The repersonalization script acts as an intermediary between the inaccessible secure element and the payment processing system. It contains the DPAN and transaction logic needed to conduct payments, while the secure element仅提供 cryptographic verification. This intermediary enables account switching without compromising secure element security.
2Ease of operation
If a single payment device is used for multiple payment accounts, then user convenience is improved, but the complexity of managing multiple credentials is worsened
Solution Approach 1:
The patent uses the concept of copying by creating a repersonalization script that contains a copy of the necessary account information (DPAN) and transaction logic. This script is a simplified representation that enables account switching without requiring users to manage the complex cryptographic credentials stored in the secure element.
3Reliability
If cryptographic operations are centralized in the CPAN issuer, then security is improved, but processing speed for financial transactions is worsened
Solution Approach 1:
The patent applies preliminary action by pre-configuring the payment device with a repersonalization script during device provisioning. This script contains all necessary account information and transaction logic, so when a transaction is needed, the device can execute the pre-prepared script locally without requiring real-time cryptographic processing from the CPAN issuer, thus improving transaction speed while maintaining security.
Data Source
AI summary
A method and system for transmitting multiple payment accounts for use by a payment device. The method includes allocating a cryptographic personal account number (CPAN) and producing at least one cryptographic master key set relating to this CPAN and transmitting, by a transmitting device, at least one produced cryptographic master key set for storage in a payment device. Further, the method includes receiving, by a receiving device, at least one device personal account number (DPAN), wherein each of the at least one DPAN is associated with a payment account associated with a consumer; generating, by a processing device, a repersonalization script for each of the at least one DPAN, wherein the repersonalization script includes a set of data associated with the corresponding DPAN; and transmitting, by the transmitting device, at least one repersonalization script to the payment device. The payment device is configured to use the CPAN for selected cryptographic calculations, and use the DPAN and the associated set of data for other aspects of a financial transaction.