Quantum Random Number Generator for POS Settlement Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current financial settlement systems using POS terminals are vulnerable to security breaches due to the use of pseudo random numbers, which can lead to unauthorized access and data leaks.
Innovation Solution
A 3-channel settlement authentication method and system utilizing a quantum random number generator, where a mobile terminal, POS terminal, and bank server periodically exchange and compare quantum random numbers to verify transactions, enhancing security without additional installation costs by using USB-connected quantum random number generators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a pseudo random number is used in the POS terminal, then the system can operate with existing hardware, but security is compromised due to predictable patterns that can be decoded
Solution Approach 1:
The patent changes the fundamental parameter of random number generation from pseudo-random (algorithm-based) to quantum-random (physics-based). The quantum random number generator uses quantum mechanical phenomena (such as photon detection or electron tunneling) to generate truly unpredictable random numbers, fundamentally altering the security parameter while maintaining system operation.
Solution Approach 2:
The patent replaces the computational/mathematical mechanism of pseudo-random number generation with a physical quantum mechanical mechanism. Instead of using algorithms that can be reversed or predicted, the system uses quantum phenomena that are inherently random and physically unpredictable, substituting the computational domain with the physical domain for security-critical operations.
2Reliability
If a quantum random number generator is installed in the POS terminal, then security is enhanced through true random numbers, but installation costs increase
Solution Approach 1:
The patent introduces a quantum random number generator as an intermediary device that bridges the existing POS terminal and the security requirement. Rather than fundamentally redesigning the POS terminal, the quantum RNG is installed as a separate module or peripheral device that provides secure random numbers to the existing system, thereby enhancing security while minimizing disruption to the original system architecture.
Solution Approach 2:
The patent segments the security function from the main POS terminal by using a separate quantum random number generator module. This modular approach allows the quantum security functionality to be added independently without requiring complete redesign of the POS terminal, thereby reducing installation complexity and cost compared to a full system replacement.
3Device complexity
If settlement authentication is performed without quantum random numbers, then the system remains simple, but personal information leaks due to hacking vulnerabilities
Solution Approach 1:
The patent implements preliminary action by generating and exchanging quantum random numbers before the actual settlement transaction occurs. The mobile terminal receives quantum random numbers from both the POS terminal and bank server in advance, and these pre-generated random numbers are then used to authenticate the settlement transaction, ensuring that security measures are established before any potential hacking attempts can occur.
Solution Approach 2:
The patent establishes a feedback mechanism where the mobile terminal periodically receives quantum random numbers from the POS terminal and bank server, compares them to ensure consistency, and uses these feedbacked random numbers for authentication. This continuous feedback loop ensures that the authentication mechanism remains synchronized and secure throughout the settlement process, preventing information leaks by continuously verifying random number integrity.
Data Source
AI summary
Provided is a settlement authentication method and system using a quantum random number generator. The method includes the steps of requesting, by a mobile terminal, a random number from a bank server and a POS terminal each including a quantum random number generator, periodically receiving a first quantum random number generated by the POS terminal and a second quantum random number generated by the bank server, and simultaneously sending a first quantum random number most recently received from the POS terminal to the bank server and a second quantum random number most recently received from the bank server to the POS terminal when the mobile terminal requests settlement.