Portable Data Carrier Authentication Without Terminal Software

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for accessing a computer system or program require installing specific software on a terminal, which is problematic when accessing a third-party terminal, and traditional security tokens are insecure due to the need for manual input and potential loss.

Innovation Solution

A portable data carrier with a security chip and USB interface establishes a data connection to a terminal without requiring additional software, enabling user authentication and generating an access code for secure access, using biometric data or secret personal information, and can simulate an input device for automatic code transmission.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a portable security data carrier is used for authentication, then security is improved, but the terminal requires installation of special software which reduces ease of operation

Engineering Contradiction:
ImprovesecurityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a portable data carrier as an intermediary device that bridges the user and the terminal system. The carrier contains authentication data and can be read by the terminal without requiring software installation, thus maintaining security while improving ease of operation on third-party terminals

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the software-based authentication system with a hardware-based portable data carrier system. Instead of installing software on the terminal, the authentication data is stored on a physical carrier that can be read directly, eliminating the software installation requirement while maintaining security

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If a one-time password device is used, then ease of operation is improved, but security is reduced because anyone with the device can access the system

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent merges multiple security functions into a single portable data carrier: authentication verification, access code generation, and controlled transmission. This integration ensures that the device cannot be used for unauthorized access while maintaining ease of operation through automatic code transmission

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If manual typing of access codes is required, then security is improved, but productivity is reduced due to time-consuming input

Engineering Contradiction:
ImprovesecurityVSAvoidproductivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The portable data carrier performs self-service by automatically generating and transmitting the access code to the terminal without requiring manual typing. The carrier reads its own authentication data and transmits the access code through the data connection, maintaining security while significantly improving productivity by eliminating manual input time

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8739277B2Process for releasing the access to a computer system or to a program
Publication Date: 2014.05.27 YUBICO
  • US8739277B2 patent drawing
  • US8739277B2 patent drawing
  • US8739277B2 patent drawing

AI summary

The invention relates to a process for releasing the access to a computer system or to a program for a user via a terminal (2) without software having to be installed solely for this purpose on the terminal (2). A data connection is established between a portable data carrier (1) of the user and the terminal (2). An authentication of the user is performed by the portable data carrier (1). If the authentication is successful, an access code is made available by the portable data carrier (1) for releasing the access to the computer system or to the program for a transmission via the data connection.