Secure Offline Data Transfer Between Wireless Smart Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for wireless smart devices lack the ability to securely restrict and monitor access to accounts, particularly in scenarios where account owners want to control access for their children or third parties, as existing systems do not allow for secure offline data transfer and account management.
Innovation Solution
A method for registering wireless smart devices as account owner devices (AOD) and account sharer devices (ASD) using a server for secure offline data transfer via near field communications (NFC), where AODs manage online access and ASDs receive data in offline mode, ensuring secure and controlled account information sharing without granting full online access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If online access to bank account is provided to wireless smart device users, then account replenishment functionality is enabled, but account security and access control are compromised
Solution Approach 1:
The system segments account access rights by introducing two distinct device roles: Account Owner Device (AOD) that maintains full online access control, and Account Sharer Device (ASD) that receives limited offline access. This segmentation allows the parent to retain security control while enabling the child to perform replenishment operations without compromising account security.
Solution Approach 2:
The wireless smart device acts as an intermediary between the bank account and the university bucks application. Instead of providing direct online access to the bank account, the device receives account information via NFC from the AOD and uses this information offline to perform replenishment, thereby mediating access and preventing direct exposure of sensitive bank account credentials.
2Ease of operation
If bank account authentication information is shared with third parties, then account replenishment is enabled, but access monitoring and control are lost
Solution Approach 1:
The system divides access control information into two parts: the AOD retains the master account credentials and online access control, while the ASD receives only limited offline access credentials through secure NFC transfer. This ensures that even if the ASD is compromised, the parent retains full control through the AOD.
Solution Approach 2:
The system implements feedback mechanisms where the AOD can monitor and control ASD operations. The parent receives notifications and can revoke access rights, ensuring continuous monitoring and control over third-party access to the account.
3Ease of manufacture
If conventional provisioning methods are used, then device setup is simple, but secure offline data transfer capability is not achieved
Solution Approach 1:
The system performs preliminary provisioning of security credentials and NFC communication capabilities during device setup. The AOD and ASD are pre-configured with necessary security parameters and NFC protocols, enabling them to securely exchange account information offline without requiring complex subsequent configuration.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enables secure offline account data transfer between wireless smart devices, allowing account owners to maintain control over their data and restrict access while enabling authorized sharers to receive updates or funds without compromising the primary account's security.
Implementation Method 1
Near field communications enable the exchange of data between devices over short distances (approx. 4 inches) by amplitude modulating a radio frequency field
Data Source
AI summary
According to one aspect of the subject matter described herein, a method for registering wireless smart devices for secure offline data transfer is provided. The method includes, for an application configured to execute on a wireless smart device and that requires access to information regarding an account that does not reside on the wireless smart device, register, at a server having access to the information regarding the account, a first wireless smart device has an account owner device (AOD) for operating in an online mode for obtaining the information regarding the account from the server and for operating in an offline mode for transferring the information regarding the account to at least one additional device via a secure offline data transfer using near field communications (NFC). The method further includes registering, at the server, at least one second wireless smart device as an account sharer device (ASD) for operating in an offline mode for receiving the information regarding the account from the first wireless smart device via the secure offline data transfer using NFC.