Plastic NFC Card Tokenization via Cryptographic Possession Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing tokenization processes for payment card information on user computing devices require cumbersome verification procedures, deterring users from initiating transactions, and lack efficient methods to verify user possession of the payment card.
Innovation Solution
A method where a payment card with a shared secret generates a cryptographic checksum using an unpredictable number, verified by an issuer system, to associate a token with the user computing device for secure transactions without requiring separate login or out-of-band verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional verification procedures requiring user login and code entry are used, then security verification is achieved, but user convenience and transaction efficiency deteriorate
Solution Approach 1:
The patent extracts the verification code from the traditional web-based login process and embeds it directly onto the payment card itself. This allows the verification code to be read directly from the card during tokenization, eliminating the need for separate login and code entry steps while maintaining security verification.
Solution Approach 2:
The patent combines multiple functions into the payment card: it serves as both the payment instrument and the verification medium. The card contains embedded verification codes that are read during the tokenization process, merging the identification and verification functions into a single object and process step.
2Measurement precision
If traditional verification procedures requiring separate login and code entry are used, then verification accuracy is maintained, but processing time and complexity increase
Solution Approach 1:
The verification code is pre-printed or pre-encoded on the payment card before the user receives it. This preliminary placement of the verification information eliminates the need for real-time generation or retrieval during the tokenization process, reducing processing time while maintaining verification accuracy.
Solution Approach 2:
The patent replaces the manual mechanical process of logging in and entering codes with an automated optical or magnetic reading system. The verification code on the card is read automatically by the system during tokenization, eliminating manual input steps and reducing processing time while maintaining accuracy through automated validation.
Data Source
AI summary
In an example embodiment, an issuer system receives payment card information from a payment processing system, wherein the payment card information is received from a payment card via a user computing device using near field communication. The issuer system generates an unpredictable number for the payment card and communicates the unpredictable number to the payment card via the payment processing system and the user computing device. The payment card calculates a cryptographic checksum based on the unpredictable number and a shared secret and communicates the checksum to the issuer system via the user computing device and payment processing system. The issuer system verifies the checksum using the shared secret and the unpredictable number. The issuer system generates a token associated with the payment card and transmits the token to the user computing device via the payment processing system for use in an online transaction.


