Smart Card Authentication via RFID Proximity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-factor authentication systems are cumbersome and expensive for consumer applications, requiring users to enter one-time passwords (OTPs) or carry dedicated hardware tokens, which can be inconvenient and prone to account takeovers due to mass data breaches and phishing attacks.
Innovation Solution
A system that embeds a smart card into a payment card or other medium, allowing users to authenticate through multiple channels without entering OTPs or carrying a dedicated hardware token, using the smart card to generate and verify OTPs via proximity communication, such as RFID, and associating it with user profiles for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users carry dedicated hardware tokens or enter OTPs for authentication, then security is improved, but convenience and ease of operation deteriorate
Solution Approach 1:
The patent combines the authentication function with a payment card that users already carry daily. The smart card embedded in the payment card integrates multiple functions (payment and authentication) into a single device, eliminating the need for separate hardware tokens and manual OTP entry, thus improving convenience while maintaining security
Solution Approach 2:
The payment card is transformed into a multi-functional device that serves both as a payment instrument and an authentication credential. The smart card within the payment card can perform both financial transactions and security authentication, reducing the number of devices users need to carry and operate
2Reliability
If multi-factor authentication is implemented using traditional methods, then account takeover prevention is improved, but system complexity and cost increase
Solution Approach 1:
The patent merges the authentication channel with existing payment card infrastructure. By utilizing the smart card already present in the payment card for authentication purposes, the system avoids adding separate authentication devices or complex hardware tokens, thereby reducing system complexity while preventing account takeovers
Solution Approach 2:
The payment card system is extended to provide both payment and authentication functions through the smart card. This multi-functional approach eliminates the need for separate authentication systems, reducing overall system complexity and deployment costs while maintaining strong security against account takeovers
3Reliability
If dedicated hardware tokens are used for authentication, then security is improved, but portability and ease of carrying deteriorate
Solution Approach 1:
The authentication function is merged into the payment card that users already carry in their wallets. By embedding the smart card within the existing payment card structure, the system eliminates the need for separate hardware tokens, maintaining security while significantly improving portability as users only need to carry their regular payment card
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution enhances security by eliminating the need for manual OTP entry, reduces account takeovers, and simplifies registration by leveraging existing payment card usage, providing a convenient and cost-effective multi-channel authentication method.
Implementation Method 1
using the smart card to generate and verify OTPs via proximity communication, such as RFID
Data Source
AI summary
Embodiments described herein disclose technology for authenticating a user. In some embodiments, a smart card or other similar authentication device can be associated with a user profile. When a request to interact is received via an application associated with a device, the system prompts the user to waive the smart card within a threshold proximity of the device. In response to the smart card being placed within the proximity, the system collects information from the smart card and verifies that the smart card is associated with the user profile of the user. In response to verifying the information from the smart card, the system authenticates the user and allows the user to interact.