Secure Element Card User-Selectable Modes for Unauthorized Reading Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Contactless integrated circuit cards may be read without the card holder's awareness, leading to potential fraudulent transactions or denial of service attacks, as existing technologies lack effective user control over data communication modes.
Innovation Solution
An integrated circuit card with a secure element, user-selectable modes, and a storage system that manages response data and correspondence data to ensure only the selected mode's data is sent to an external reader, requiring user re-selection after initial communication, thereby preventing unintended reading.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If contactless interface is used for card reading, then convenience and speed of transaction is improved, but security is worsened due to potential unauthorized reading without user awareness
Solution Approach 1:
The card performs preliminary user authentication before enabling any contactless communication. The user must explicitly activate the contactless interface through a user interface on the card (such as a button or touch sensor), and the card verifies this activation before allowing external readers to access data. This preliminary action ensures that the card holder is aware and consenting to the transaction before it occurs.
Solution Approach 2:
The card provides feedback to the user through visual, auditory, or haptic indicators (such as LED lights, vibrations, or display messages) to confirm that contactless communication is active and authorized. This feedback mechanism keeps the user informed about the card's communication state, allowing them to detect and respond to any unauthorized reading attempts.
2Adaptability or versatility
If multiple applications are hosted on the card, then versatility and functionality is improved, but complexity of managing and selecting applications is worsened
Solution Approach 1:
The card divides its functionality into separate, distinct applications (such as payment, transit, loyalty programs) that can be independently managed. Each application has its own identifier and can be selectively activated or deactivated. The card also segments the user interface into clear categories or icons representing different applications, making it easier for users to navigate and select the desired function.
Solution Approach 2:
The card dynamically adjusts its behavior based on user selections and contextual conditions. When a user selects a specific application, the card dynamically configures its response data and communication parameters to match the selected application's requirements. This dynamic adaptation allows the card to handle multiple applications without requiring the user to manually configure settings for each one.
3Loss of information
If response data is sent for all applications, then completeness of information is improved, but security is worsened due to exposure of all application data to external readers
Solution Approach 1:
The card applies different quality levels of information disclosure to different applications based on user authorization. When a user selects a specific application, the card sends response data containing detailed information only for that selected application, while omitting or masking data for other applications. This localized approach ensures that users receive complete information for their chosen function while preventing unnecessary exposure of other application's data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A card (10) comprises a secure element (20) which hosts a plurality of applications (23), at least one external interface (12, 14) and a user interface (30, 35) having a plurality of user-selectable modes. Each mode is associated with a number N of the applications (23), where N≥0. A store at the secure element holds response data (26) for use when responding to the external card reader (50) and correspondence data (28). The response data (26) comprises data about the applications (23) hosted by the card and the correspondence data (28) indicates, for each of the modes, a correspondence between the mode and the response data (26) to be sent for that mode. The card is configured to allow a user to select one of the plurality of modes for use when the card next communicates with the external reader (50). The card stores a mode indicator (29A) indicative of a mode selected by the user at the user interface (35) and stores a usage indicator (29B) indicative of whether the card has communicated with an external reader since the mode indicator was stored.