Contactless Smart Card Authentication for Secure Mobile Wallet Activation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unauthorized users can activate mobile pay services on their devices using stolen or lost payment cards by obtaining card information visually, leading to unauthorized purchases.
Innovation Solution
A method and system for authenticating smart cards using a mobile device, involving a payment card processing logic to underwrite new applications, provision enabling tokens, and utilize a token provisioning logic to manage and authenticate transactions securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If payment card information is made accessible on the physical card for mobile pay activation, then convenience of mobile payment is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent introduces an intermediary authentication server and token system that mediates between the physical payment card and the mobile device. Instead of directly exposing payment card information, the system uses an authentication server to verify the physical card and issue a token to the mobile device, creating a secure intermediary layer that prevents unauthorized access while enabling convenient mobile payments
Solution Approach 2:
The patent creates a digital copy (token) of the payment card information that is stored on the mobile device rather than directly using the physical card information. This token is a replicated version that enables mobile payments without exposing the actual payment card data, thus maintaining security while providing convenience
2Productivity
If mobile pay service is activated without physical card authentication, then transaction speed is improved, but reliability of authorization deteriorates
Solution Approach 1:
The patent performs authentication in advance by requiring the user to present the physical payment card to an authentication server before the mobile pay service is activated. This preliminary authentication ensures that only authorized users can activate mobile pay, maintaining reliability while allowing subsequent transactions to proceed quickly without repeated physical card verification
Solution Approach 2:
The patent replaces the mechanical system of physical card insertion and manual verification with an automated electronic authentication system. The authentication server automatically verifies the physical card and issues a token to the mobile device, substituting manual mechanical processes with automated electronic processes that maintain security while improving transaction speed
Data Source
AI summary
Systems, methods, and computer-readable storage media of activating a card having a contactless chip are provided. One method includes receiving, from a mobile device via a wireless transmission from the card having the contactless chip to the mobile device, a cryptogram, and decrypting the cryptogram to reveal information. The method further includes comparing the revealed information regarding at least one of the card or the user to information in a customer database, confirming the revealed information, and updating the customer database to indicate that the revealed information regarding the at least one of the card or the user is confirmed. The method further includes activating the card for an initial card transaction based on updating the customer database, and providing, to the mobile device, a payment card token associated with the card as part of a mobile wallet transaction using the mobile device involving the card.