Smart Card PIN Modification via Mobile NFC and Server Script

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Cardholders face inconvenience in changing their PIN codes for EMV-compliant smart cards, as current methods require access to ATMs or Point of Sale terminals, which may not be readily available or practical, especially for personalizing or updating PINs in offline modes.

Innovation Solution

A method using a mobile telecommunication device to transmit commands to a smart card, receive transaction information, and generate a script to change the PIN code, allowing the cardholder to modify the reference PIN stored in the card without needing an ATM or Point of Sale terminal, utilizing Near Field Communication and a server to encrypt and execute the script for PIN modification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a transaction apparatus (ATM or PoS terminal) is used to change the PIN code, then the reference PIN stored in the smart card can be modified, but the cardholder must physically access public equipment which may not be readily available or convenient

Engineering Contradiction:

ImprovePIN code changing convenienceVSAvoidAvailability of changing location

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

A mobile telecommunication device acts as an intermediary between the cardholder and the smart card, enabling PIN code changes through wireless communication (NFC) without requiring physical access to ATMs or PoS terminals. The mobile device transmits commands to the smart card and coordinates with a server to execute the PIN modification remotely

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical/physical interaction required by traditional ATMs and PoS terminals with wireless electromagnetic communication. The mobile device uses NFC (Near Field Communication) technology to transmit commands to the smart card, eliminating the need for physical presence at public equipment locations

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Ease of operation

If the PIN code is changed using a Point of Sale terminal, then the reference PIN can be updated, but the cardholder is subject to time pressure and queue waiting

Engineering Contradiction:

ImprovePIN code changing speedVSAvoidWaiting time in queue

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system enables self-service PIN code changes where the cardholder can initiate and complete the PIN modification process independently using their own mobile device, without requiring assistance from PoS terminal operators or waiting in queues at merchant locations

Inventive Principle:

Principle #25Self-service

3Reliability

If the reference PIN is stored and modified only in the smart card chip, then offline authentication works, but online mode requires server updates which may not be synchronized immediately

Engineering Contradiction:

ImproveOffline authentication reliabilityVSAvoidPIN code synchronization consistency

Core Design Contradiction:

ReliabilityVSStability of the object's composition

Solution Approach 1:

The system implements a feedback mechanism where the server receives notification of PIN code changes, validates them against the PVV, and updates its records. The server then sends confirmation back to the mobile device, ensuring both offline (card) and online (server) authentication systems are synchronized with the new PIN code

Inventive Principle:

Principle #23Feedback

Data Source

PatentEP3702990A1Change of reference pin code value of smart card by a mobile device and a distinct telecommunication device

Publication Date: 2020.09.02 EQUENSWORLDLINE SE

Figure 1~2
Figure 3a~3b
Figure 4a~4b

AI summary

This invention relates to a server (S) comprising means configured to - receive (S4) first transaction information from a browser executing on a distinct telecommunication device (DD); - receive (S5) a PIN code; - generating (S6) at said server (S) a script coding the change into said new PIN code and containing said new PIN code encrypted with a session key based at least on an element predicted from said selected part; - transmit (S7, S8, S7a) said script to the mobile telecommunication device (MD).