Server Smart Chip Authentication Public Key Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication methods for electronic transactions using smart cards are vulnerable to unauthorized access, as they rely on password and card number knowledge, lacking verification of the card holder's possession during online and offline transactions.
Innovation Solution
A server and method for authenticating a smart chip using only publicly exposed data, including a card identifier and a common factor, where the server generates an authentication key to verify the smart chip's validity by decrypting a randomly generated number using the card identifier and common factor, ensuring secure transactions without revealing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication is performed using certificate passwords and card numbers, then electronic transaction authentication is enabled, but security is compromised as unauthorized access becomes possible when these data are known
Solution Approach 1:
The invention extracts the authentication verification process from reliance on secret data (passwords, card numbers) that can be compromised. Instead, it uses publicly exposed data (card identifier, common factor) combined with cryptographic operations to achieve secure authentication without depending on data that must be kept secret.
Solution Approach 2:
The server acts as an intermediary that performs cryptographic verification using public data. The server generates an authentication key from the card identifier and common factor, then verifies the decrypted text without exposing sensitive information, thereby mediating secure authentication between terminal and user.
2Reliability
If public key infrastructure with asymmetric cryptography is used, then secure electronic signature and decryption are enabled, but the system requires protection of private keys which limits accessibility
Solution Approach 1:
The system enables self-service authentication where the terminal can perform encryption using the public card identifier, and the server can verify authentication using only public data (card identifier and common factor). No private key exposure or complex key management is required from the user side, making the system both secure and easily operable.
3Reliability
If verification of card holder possession is implemented, then transaction authenticity is improved, but system complexity increases due to additional verification requirements
Solution Approach 1:
The server performs multiple functions using a unified approach: it generates the authentication key from public data, encrypts the random number, and verifies the decrypted text all in one authentication process. This multi-functional design achieves possession verification without requiring separate complex verification systems for each step.
Data Source
AI summary
The present invention provides a server for authenticating a smart chip, which is connected to a terminal transmitting and receiving data to and from the smart chip through a network, the server including: a server transceiving unit receiving a card identifier identifying a user from the terminal; and an authentication unit generating an authentication key from the card identifier and authenticating the smart chip from the authentication key, in which the smart chip receives the encrypted text to generate the decrypted text from a private key, and the card identifier is a public key corresponding to the private key. Accordingly, the present invention has the advantages of increasing the safety of a transaction to confirm whether a user has a medium in possession during online and offline transactions.