Smart Card Activation via NFC Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart card security is compromised by fraudulent interception of newly issued cards during delivery, and existing security measures are inadequate for cardholder-not-present transactions, particularly online transactions.
Innovation Solution
A method utilizing a wireless communication device with near field communication (NFC) to authenticate and authorize transactions by establishing a communication path between the cardholder's smart card and a verification entity, requiring user input for transaction approval, and optionally collecting PIN or biometric data for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional smart card security measures (PIN verification, EMV standard) are used, then cardholder present transactions are more secure, but cardholder not present transactions remain vulnerable to fraud
Solution Approach 1:
The patent introduces a mobile device as an intermediary between the smart card and the verification entity. The mobile device contains a NFC reader that communicates with the smart card and establishes a separate communication path to the verification entity, enabling secure cardholder not present transactions by mediating the authentication process
2Productivity
If new smart cards are mailed to cardholders, then card distribution is efficient, but cards can be intercepted during delivery
Solution Approach 1:
The patent applies preliminary action by requiring the cardholder to activate the smart card through NFC communication with their mobile device before the card becomes operational. The card is issued in an inactive state and only becomes functional after the cardholder performs the activation procedure, preventing interception fraud
Solution Approach 2:
The mobile device serves as an intermediary that must be present during card activation. The NFC communication between the mobile device and smart card creates a secure binding that prevents unauthorized use of intercepted cards, as the activation process cannot be completed without the cardholder's mobile device
3Speed
If contactless NFC communication is used between smart card and mobile device, then transaction speed is improved, but new attack vectors are introduced
Solution Approach 1:
The mobile device acts as a trusted intermediary that manages the NFC communication securely. It establishes encrypted communication channels between the smart card and verification entity, and controls the authentication process, thereby enabling fast contactless transactions while maintaining security through the intermediary's control
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances transaction security by ensuring only the authorized cardholder can approve transactions, reducing fraudulent use of new cards and protecting against cardholder-not-present transaction abuse.
Implementation Method 1
a near field communication interface between the smart card and cardholder's wireless communication device
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A smart card (40) is distributed to a cardholder in a non-operative form, with a digital token. The token is sent, via a near field communication interface, to a wireless communication device (10) and forwarded to a verification entity (30) via a wireless communication interface. The communication device (10) receives content for the smart card and sends the content to the smart card (40) to render it into an operative form. A transaction on a cardholder's account is authorised by a process which comprises sending a notification of the transaction to a wireless communication device and notifying the user of the transaction via a user interface of the device. A user can approve the transaction by bringing the smart card within range of the communication device and sending a card identifier via a near field communication interface.