Self-Authenticating Credit Card with PIN Decryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current credit card security measures are inadequate, particularly in preventing unauthorized use of lost or stolen cards, as they often lack verification processes at the point of sale, leading to potential fraudulent charges.

Innovation Solution

A self-authenticating credit card with an integrated micro-controller, input mechanism, and display that requires a user PIN to decrypt and render account data, providing an additional layer of security by ensuring only authorized transactions can proceed, using AES-128 encryption and a timer to limit clear data exposure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional credit card security measures are used, then existing infrastructure is maintained, but security against unauthorized use is insufficient

Engineering Contradiction:
ImprovesecurityVSAvoidcard complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent embeds a microcontroller unit with encryption capabilities, display, and input mechanism within the credit card itself, creating a nested structure where the card contains its own authentication system. This allows the card to perform self-authentication functions without requiring changes to external infrastructure.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The credit card is equipped with autonomous authentication capabilities through the microcontroller that can independently verify user identity via PIN entry and control data transmission. The card serves itself by managing its own security functions without requiring external verification systems.

Inventive Principle:
Principle #25Self-service

2Reliability

If additional security measures are added to credit cards, then unauthorized access is reduced, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidoperation simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent combines the input mechanism, display, and authentication logic into a single integrated unit within the card. The display and input components are merged with the microcontroller to form a cohesive authentication system that operates as one unified device rather than separate components.

Inventive Principle:
Principle #5Merging (Combining)

3Speed

If account data is stored in clear form for quick access, then transaction speed is improved, but security against unauthorized access deteriorates

Engineering Contradiction:
Improvedata access speedVSAvoidsecurity
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The microcontroller pre-loads decrypted account data into its memory before a transaction is initiated. This preliminary decryption action allows the card to quickly transmit authenticated data during the transaction without performing real-time decryption, thus maintaining both security and speed.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements dynamic control where the microcontroller manages the state of account data between encrypted and decrypted forms based on authentication status. The data transitions from encrypted storage to decrypted temporary storage only after successful PIN verification, and is re-encrypted after use, creating a dynamic security model.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11481774B2Security aspects of a self-authenticating credit card
Publication Date: 2022.10.25 CLEVX LLC
  • US11481774B2 patent drawing
  • US11481774B2 patent drawing
  • US11481774B2 patent drawing

AI summary

A self-authenticating credit card includes an input device for entering a PIN. The PIN is accepted by a micro-controller that uses the entered PIN as an encryption key for decrypting stored account information. A portion of the account information includes data, that when decrypted, contains an image that is rendered on an integral display, with account information sent to a transaction terminal. A timer is used to limit access to account data while in the unlocked state.