Server-Assisted Pairing for Wireless Payment Readers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication devices face security risks during the pairing process, as the initial exchange of information, such as passkeys, is not encrypted and can be intercepted by third parties, compromising the security of the pairing process and subsequent encrypted communications.
Innovation Solution
A server-assisted pairing method where the payment reader encrypts the passkey with a shared secret key and broadcasts it, allowing the pairing server to decrypt and transmit the passkey securely to the merchant device over an encrypted channel, ensuring that only authorized devices can complete the pairing process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless communications are used to exchange information between devices, then convenience and mobility are improved, but security is worsened because signals can be intercepted by third parties
Solution Approach 1:
A pairing server is introduced as an intermediary component between the first and second wireless communication devices. The server facilitates the pairing process by receiving encrypted passkeys from devices, decrypting them using shared secret keys, and verifying pairing information. This intermediary architecture allows the devices to establish secure wireless connections without directly exchanging unencrypted pairing information, thus maintaining convenience while preventing third-party interception of critical pairing data.
2Productivity
If pairing information is exchanged over unencrypted channels, then the pairing process is simple and fast, but security is worsened because the passkey can be intercepted
Solution Approach 1:
The system performs preliminary encryption of the passkey before transmission. The first wireless communication device encrypts the passkey using a shared secret key with the pairing server before sending it over the wireless channel. This preliminary encryption action ensures that even though the passkey is transmitted over the air, it cannot be intercepted or read by third parties, thus maintaining both speed and security.
Solution Approach 2:
The pairing server acts as a secure intermediary that receives encrypted passkeys, decrypts them using the shared secret key, and verifies pairing information. This intermediary approach allows the passkey to be transmitted efficiently without direct exposure to the communication channel, maintaining pairing speed while ensuring security through the server's cryptographic verification.
3Reliability
If encryption is implemented for wireless communications, then security is improved, but device complexity increases due to additional encryption and decryption operations
Solution Approach 1:
The pairing server is positioned as a centralized intermediary that handles complex cryptographic operations. Instead of requiring each wireless communication device to perform all encryption and verification functions locally, the server performs these operations centrally, reducing the computational burden and complexity on the client devices while maintaining high security standards.
Solution Approach 2:
The system uses pre-established shared secret keys between devices and the server, allowing devices to autonomously encrypt and decrypt passkeys without requiring complex authentication protocols or additional cryptographic complexity on the device side. The encryption operations leverage existing cryptographic frameworks, minimizing the increase in device complexity while maintaining security.
Data Source
AI summary
A wireless communication device such as a payment reader has a wireless communication interface and is able to establish wireless pairing with an interactive electronic device such as a merchant device running a point of sale application. In order to establish pairing, the wireless communication device accesses a passkey and encrypts the passkey. The encrypted passkey is transmitted to the interactive electronic device via the wireless communication interface, and the interactive electronic device sends the encrypted passkey to a pairing server. The pairing server decrypts the encrypted passkey and sends the decrypted passkey back to the interactive electronic device via a secure connection. The wireless communication device and the interactive electronic device establish wireless pairing based on the passkey and the decrypted passkey.