Payment Terminal Encryption Chaining for Clock Desynchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment card systems face desynchronization issues due to external environmental disturbances, leading to invalid transaction codes and increased complexity in architecture requirements, which result in customer abandonment and operational inefficiencies.
Innovation Solution
A method for generating and verifying payment data using a chaining process that involves encrypting current data with an encryption key, allowing for iterative encryption and verification, reducing sensitivity to clock desynchronization and environmental disturbances, and ensuring code validity through public and private key cryptography.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If 3D Secure technique is implemented to add verification step, then transaction security is improved, but device complexity and ease of operation deteriorate
Solution Approach 1:
The patent extracts the verification logic from the complex server-based 3D Secure architecture and embeds it directly into the payment card terminal. The terminal independently generates and validates dynamic verification codes using local cryptographic modules, eliminating the need for complex intermediary verification servers and reducing architectural complexity while maintaining security.
Solution Approach 2:
The payment terminal performs self-verification by generating dynamic verification codes locally and validating transactions independently without requiring external verification servers. The terminal uses its embedded cryptographic module to autonomously handle security operations, reducing dependency on complex external infrastructure.
2Reliability
If dynamic verification code is implemented, then transaction security is improved, but sensitivity to clock desynchronization increases
Solution Approach 1:
The patent pre-generates and stores multiple verification codes in the terminal's memory before they are needed. Instead of generating codes in real-time based on clock time, the terminal has a buffer of pre-computed codes ready for use, eliminating the need for precise clock synchronization while maintaining the security benefits of dynamic codes.
Solution Approach 2:
The terminal maintains a buffer of pre-generated verification codes to cushion against clock desynchronization issues. This buffer acts as a safety margin that allows the system to continue operating securely even when time synchronization drifts occur, preventing transaction failures due to timing errors.
3Reliability
If additional verification step is added, then transaction security is improved, but productivity deteriorates due to customer abandonment
Solution Approach 1:
The patent replaces the manual customer action of entering verification codes with automated generation and display within the terminal. The verification code is automatically generated, displayed on the terminal screen, and transmitted electronically, eliminating the need for customers to manually type codes and reducing abandonment due to inconvenience.
Solution Approach 2:
The verification code is displayed directly on the terminal screen and transmitted electronically to the merchant system, creating an automated copy of the verification process. This eliminates the need for customers to manually transcribe codes from SMS or other external sources, streamlining the verification step and reducing abandonment.
Data Source
AI summary
A method for encrypting a piece of payment means data is disclosed. This method is implemented by a payment means having a data processor. Such a method has at least one iteration of the following steps: obtaining a current piece of payment means data from a memory of the payment means; generating a following piece of payment means data as a function of the current piece of payment means data and as a function of an encryption key of the payment means; replacing the current piece of payment means data by the following piece of payment means data within the memory of the payment means.