Server-Based Clock Deviation Compensation for Dynamic CVV Bank Cards
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Bank cards with dynamic CVV mechanisms face security vulnerabilities due to clock deviations caused by frequency variations in the embedded crystal, leading to potential unauthorized transactions, as existing solutions like time windows and temperature sensors are insufficient in correcting timing drifts.
Innovation Solution
A server-based method to synchronize the card's time base by receiving a dynamic CVV code, providing a set of dCVV codes within a defined time period, determining the minimum timing drift, and updating the time base with a correction to align with the server's time base, while optionally adjusting the clock frequency using a deviation coefficient.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a time window is defined to accommodate clock deviations, then transaction reliability is improved, but security is worsened because a larger time window increases the probability of accepting incorrect dCVV codes
Solution Approach 1:
The patent implements a feedback mechanism where the server receives the dCVV code from the card, compares it with the expected code, and based on the comparison result and timestamp, adjusts the time base for future dCVV generation. This closed-loop feedback allows the system to adapt to actual clock deviations while maintaining strict security validation, resolving the contradiction between reliability and security.
Solution Approach 2:
The patent dynamically changes the time base parameter used for dCVV verification based on observed deviations. Instead of using a fixed time window that compromises security, the system adjusts the time base offset parameter to accommodate legitimate clock variations, thereby maintaining both security and reliability.
2Object-affected harmful factors
If the time base is strictly synchronized with server time, then security is improved, but reliability is worsened due to frequency deviations causing time drift
Solution Approach 1:
The patent makes the time base dynamic rather than static. The time base is initially set to server time for security, but is then dynamically adjusted based on the actual dCVV codes received from the card. This allows the system to adapt to frequency deviations while maintaining security through controlled adjustments rather than rigid synchronization.
Solution Approach 2:
The system performs self-correction by using the dCVV codes themselves as reference points to detect and compensate for clock deviations. The card and server work together where the card generates codes based on its time base, and the server uses these codes to automatically detect and correct time drift without external intervention, resolving the contradiction between strict synchronization and frequency deviations.
3Measurement precision
If temperature compensation is implemented, then timing accuracy is improved, but device complexity is worsened
Solution Approach 1:
The patent uses the dCVV code comparison mechanism as an intermediary to indirectly measure and compensate for timing drift. Instead of directly measuring temperature or clock frequency, the system uses the dCVV codes as a mediator to detect time deviations and trigger appropriate compensation, avoiding the need for additional temperature sensors or complex compensation hardware.
Data Source
AI summary
This invention relates to a method to compensate by a server a clock deviation of a card i by maintaining a time base Tbase (i) synchronized with card i, the method comprising the steps of: receiving at a time TS a dynamic card verification dCVV code value generated by card i; providing a set of at least two dCVV code corresponding to two successive dCVV time periods; if the dCVV code received from card i corresponds to one of the dCVV codes of the provided set but is different from the reference dCVV code, determine the minimum possible timing drift Min_td between the time base maintained by the server for the card and the time base Tbase(i) of the card; updating time base Tbase(i) by addition of a time drift correction equal to the minimum possible time drift Min_td.