Secure Element Card Binding With Universal Personalization Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The storage resources of user terminals are occupied excessively due to the need to store large amounts of personalization data for multiple resource cards, such as bank cards, when managing them for payment transactions.
Innovation Solution
A card management method that utilizes a user terminal with a security element storing first-type and second-type universal personalization data, interacting with a server to allocate dedicated card information, which is then loaded onto the security element, reducing the need to store all personalization data for transaction verification on the user terminal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If contactless cards are used for mobile payments, then payment convenience is improved, but card authenticity verification becomes difficult leading to potential fraud
Solution Approach 1:
The patent introduces a server as an intermediary between the user terminal and the payment verification system. The server stores card information and performs authentication, acting as a mediator that enables secure verification without requiring direct physical access to the card. When a payment is initiated, the terminal communicates with the server to verify card authenticity, thus resolving the contradiction between contactless convenience and verification reliability.
Solution Approach 2:
The system implements feedback mechanisms where the server provides authentication results back to the terminal. The terminal receives confirmation or rejection of payment requests based on server verification of card authenticity. This feedback loop ensures that even though the card is contactless, the system maintains reliability by continuously verifying card status and authenticity through the server's response.
2Productivity
If card information is stored on the terminal for quick access, then payment speed is improved, but security risk increases due to potential theft or loss
Solution Approach 1:
The server acts as a secure intermediary that holds the master card information, not the terminal. The terminal only stores temporary or encrypted references to card data. During payment, the terminal requests authentication from the server, which verifies the transaction without exposing sensitive card information to the terminal. This mediator approach enables fast payments while maintaining security.
Solution Approach 2:
The system uses encrypted copies or tokens of card information rather than storing actual card details on the terminal. The terminal holds a secure representation that can be used for transactions but cannot be used to reconstruct the original card information if stolen. This copying principle allows the terminal to function with card data while minimizing security risks.
3Ease of operation
If multiple cards are managed through a single terminal, then operational simplicity is improved, but error identification becomes difficult
Solution Approach 1:
The system segments card management by associating each card with unique identifiers and organizing them in a structured manner within the terminal. Cards are divided into separate manageable units with distinct properties. When errors occur, the system can isolate and identify the specific card involved rather than treating all cards as a single unit, thus maintaining simplicity while enabling error detection.
Solution Approach 2:
The system uses visual indicators such as color-coded displays or status indicators to differentiate between multiple cards and their states. Each card may be represented with distinct visual characteristics or status colors that indicate its condition (active, inactive, error state). This visual differentiation helps users quickly identify specific cards and detect errors without complicating the user interface.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The present application discloses a card management method, a user terminal, a server, a card management system and a storage medium, and belongs to the field of data processing. The method includes: sending a card binding message to a server, wherein the card binding message includes card authentication information of a card to be bound; receiving a card type of the card to be bound and dedicated card information for the card to be bound sent by the server, wherein the dedicated card information includes a card transaction identifier; loading the dedicated card information for the card to be bound onto a security element, wherein the dedicated card information for the card to be bound together with matching universal personalization data are useable to perform transaction verification of the card to be bound, and the matching universal personalization data is first-type universal personalization data or second-type universal personalization data that matches the card type of the card to be bound. According to the embodiments of the present application, occupation of storage resources of the user terminal can be reduced.