Secure Chip Activation Control for Mobile NFC Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current short-range wireless RF communication technologies, such as Near Field Communication (NFC), pose security risks as contactless cards can be read without physical contact, and users lack control over the secure chip's state and security levels, leading to potential misuse and unauthorized transactions.
Innovation Solution
Implementing a secure chip in mobile devices with user-selectable activation levels, allowing users to control the visibility and activity of the secure chip through a processor-driven interface, providing options like 'Always Active', 'Activated by Confirmation', and 'Activated With Password' to manage transaction security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If contactless card transactions are enabled without physical contact, then transaction convenience is improved, but security risk increases due to potential unauthorized reading and misuse
Solution Approach 1:
The secure chip transitions between different operational states (active, inactive, locked) based on authentication outcomes and user actions. The system dynamically adjusts its security posture by enabling the secure chip only after successful authentication and disabling it after transactions or timeout, creating a dynamic security model that adapts to operational context
Solution Approach 2:
The secure chip acts as an intermediary security layer between the NFC interface and transaction processing. It authenticates users through PIN codes or passwords before allowing NFC transactions, and serves as a mediator that can be independently activated or deactivated to control access to financial operations
2Productivity
If the secure chip is always active for convenient transactions, then transaction speed is improved, but security control is reduced as users cannot manage exposure
Solution Approach 1:
The system performs preliminary authentication actions (PIN code entry, password verification) before activating the secure chip for transactions. This preliminary security check ensures that only authorized users can enable the secure chip, and the system prepares the secure chip in an authenticated state ready for immediate transaction processing
Solution Approach 2:
The secure chip operates in periodic cycles of activation and deactivation. It is activated for a transaction, used for the intended purpose, then automatically deactivated after a timeout period or after the transaction completes. This periodic operation pattern balances convenience with security by limiting the window of vulnerability
3Object-affected harmful factors
If authentication requirements are added for contactless transactions, then security is improved, but ease of operation decreases due to additional user steps
Solution Approach 1:
The system provides self-service authentication mechanisms where users can set up their own PIN codes and passwords, and the system automatically manages authentication states. The secure chip itself performs authentication operations and state management, reducing the need for complex external authentication systems
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution reduces the risk of inadvertent transactions and allows users to choose a suitable security level, enhancing transaction security and user control while maintaining user-friendly operation.
Implementation Method 1
NFC operates in the 13.56 MHz frequency range, over a typical distance of a few centimeters
Data Source
AI summary
A mobile device provided with a secure chip and a short-range wireless RF communication module, which can be used for contactless transactions with external short-range wireless RF communication devices, for example at a point of sales. The mobile device is provided with user selectable activity levels of the secure chip to reduce security risks/concerns associated with such a terminal. The user selectable activity levels may include levels in which the secure chip is deactivated by default, and only temporarily activated upon user confirmation or the entry of a password or PIN.