PIN Distribution Device Using Request Code Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing methods for distributing personal identification numbers (PINs) via mail are vulnerable to 'Man In The Middle' attacks, slow, expensive, and lack tracking capabilities, while digital delivery methods face issues with message handling and user confusion.

Innovation Solution

A method and device for securely delivering PINs via the mobile telephone network using a unique PIN request code, where the PIN is encrypted and decrypted using this code, and sent via SMS, allowing real-time access and tracking, enhancing security by separating the PIN and card delivery channels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If PIN numbers are delivered via standard mail together with cards, then delivery is simple and reliable, but security is compromised and delivery time is extended

Engineering Contradiction:
Improvedelivery reliabilityVSAvoidsecurity vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent divides the delivery process into two separate channels: physical mail for card delivery and electronic communication for PIN delivery. This segmentation ensures that even if one channel is compromised, the other remains secure, directly resolving the security vulnerability while maintaining delivery reliability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an electronic communication system as an intermediary for PIN delivery, replacing direct physical mail delivery. This intermediary layer provides enhanced security through encrypted electronic transmission while maintaining the reliability of PIN delivery to the cardholder

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If PIN numbers are delivered via electronic channels, then delivery speed increases and costs are reduced, but security risks increase and user confusion occurs

Engineering Contradiction:
Improvedelivery speedVSAvoidsecurity risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent sends a request code via electronic channel in advance, which the cardholder must use to retrieve the PIN. This preliminary action ensures that only the legitimate cardholder can access the PIN, preventing unauthorized access while maintaining fast electronic delivery speed

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements a feedback mechanism where the cardholder must actively request the PIN using a code received with the card. This feedback loop confirms the cardholder's identity and intent, reducing security risks while enabling rapid electronic PIN delivery

Inventive Principle:
Principle #23Feedback

3Loss of information

If PIN numbers are sent via mail, then tracking is difficult and costs are high, but if sent electronically, then tracking is improved and costs are reduced

Engineering Contradiction:
Improvetracking capabilityVSAvoidsystem complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent enables the cardholder to self-request the PIN electronically using a code received with the card. This self-service approach provides automatic tracking of PIN delivery status without requiring complex issuer-side tracking systems, reducing both system complexity and costs while improving tracking capability

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP2461297B1Personal identification number distribution device and method
Publication Date: 2020.10.07 IDEMIA DENMARK AS
  • EP2461297B1 patent drawingFigure 1
  • EP2461297B1 patent drawingFigure 2
  • EP2461297B1 patent drawingFigure 3

AI summary

The method of distributing a personal identification number to a user of a card associated with said personal identification number comprises: - a step of sending to the user, via a first channel, a request code (260) associated with said card, - a step of receiving said request code (260) via a second channel, - a step of searching for a record (200) matching the received request code (260), - a step of retrieving, from the matching record, the personal identification number (210) associated with said received request code (260) and - a step of sending the retrieved personal identification number (210) via a third channel to said user.