Secure Element Payment Card Authentication Against EMV Cloning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Fraudsters can clone EMV cards by exploiting optional authentication and verification steps, allowing them to perform fraudulent transactions without cryptographic operations.
Innovation Solution
Implement a secure element payment card with a micromodule containing a primary memory component, secure memory component, and an electronic switch that limits access to secure data, using cryptographic keys and a secure data element for authentication, and a method to update the card with user-selected changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If EMV cards use optional data authentication and cardholder verification steps, then transaction convenience is improved, but security against fraud deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-configuring the EMV card with a fraud prevention application during card initialization that automatically executes cryptographic authentication and PIN verification, preventing fraudsters from skipping these steps later during transactions
Solution Approach 2:
The patent implements feedback by having the fraud prevention application continuously monitor transaction processes and provide real-time verification that authentication steps are being properly executed, blocking transactions that attempt to bypass security protocols
2Adaptability or versatility
If fraud application is installed on EMV chip, then card cloning capability is improved, but transaction security deteriorates
Solution Approach 1:
The patent converts the potential harm of fraud applications into benefit by implementing a security mechanism that detects the presence of unauthorized applications and uses the card's own processing power to authenticate and block them, turning the card's versatility into a security feature
Solution Approach 2:
The patent applies preliminary anti-action by pre-installing security protocols that proactively identify and neutralize fraud applications before they can be executed, preventing card cloning by detecting unauthorized software during the transaction initialization phase
3Productivity
If cryptographic operations are skipped during transaction, then processing speed is improved, but authentication reliability deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic verification data on the card during manufacturing, enabling rapid authentication during transactions without requiring real-time cryptographic operations, thus maintaining both speed and security
Data Source
AI summary
Authenticating a secure element payment card includes transmitting a cold reset signal to the payment card and receiving an answer-to-reset message therefrom. The answer-to-reset message includes governing rules for performing a transaction, including a rule indicating that a secure data element is to be used to authenticate the payment card. The process also includes receiving payment account details for a payment account associated with the payment card. A payment authorization request message is transmitted to an interchange network and a card authentication request message is then received from the interchange network. The card authentication request message includes an encrypted instruction, which is transmitted to the secure element payment card. The secure data element is received from the payment card and a card authentication request response message is then transmitted to the interchange network. A payment authorization request response message is then received from the interchange network.