Smartcard Virtual Terminal Emulation for Secure Identity Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing online commerce systems fail to provide adequate personal identity verification and security while being cost-effective, user-friendly, and backward compatible with existing bankcard infrastructure, leading to ongoing issues with identity theft and security breaches.

Innovation Solution

A smartcard that emulates a secure virtual transaction terminal and uses Federated ID information stored on the card to prevent exposure of personal identity data to host computer resources, offering high-level personal identity verification and secure transaction processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If personal identity verification and security are enhanced for online commerce, then security and reliability improve, but device complexity and cost increase

Engineering Contradiction:

Improvepersonal identity verification securityVSAvoidsmartcard system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent embeds a complete virtual terminal emulation environment within the smartcard chip itself. The card contains its own operating system, application logic, and security protocols nested within the physical card structure. This allows the card to independently execute secure transactions without exposing sensitive data to the host computer, resolving the contradiction by containing complexity within the card while maintaining simplicity at the host level.

Inventive Principle:

Principle #7Nested doll (Nesting)

Solution Approach 2:

The smartcard acts as an intermediary between the user and the host computer system. It mediates all communication by processing transactions locally and only exchanging encrypted results with the host. This intermediary role allows enhanced security functionality to be introduced without requiring changes to the existing host system architecture, thus managing complexity while improving reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If secure virtual terminal emulation is implemented to prevent data exposure, then security improves, but ease of operation and user-friendliness worsen

Engineering Contradiction:

Improvedata protection securityVSAvoidtransaction process simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The smartcard automatically performs all security-critical operations including data encryption, decryption, and validation without requiring user intervention. The card's embedded operating system autonomously manages the secure transaction process, handling complex security protocols in the background while presenting a simple interface to the user. This self-service capability maintains high security while preserving ease of operation.

Inventive Principle:

Principle #25Self-service

3Reliability

If Federated ID information is stored on the smartcard for high-level verification, then personal identity verification capability improves, but risk of information theft and exposure increases

Engineering Contradiction:

Improvepersonal identity verification accuracyVSAvoidrisk of information theft

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The smartcard implements different security characteristics for different types of data stored on the card. Federated ID information is stored in secure, encrypted memory regions with restricted access permissions, while other data uses different protection mechanisms. This local differentiation of security qualities allows high-level verification capability while minimizing exposure risk for each specific data type through tailored protection strategies.

Inventive Principle:

Principle #3Local quality

4Reliability

If a new secure transaction system is introduced, then security and personal identity verification improve, but backward compatibility with existing bankcard infrastructure worsens

Engineering Contradiction:

Improveonline transaction securityVSAvoidcompatibility with existing infrastructure

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The smartcard is designed with multi-functionality to operate in multiple modes. It can execute both traditional magnetic stripe transactions and new secure chip-based transactions, supporting both legacy and modern protocols. This universal design allows the card to function with existing bankcard infrastructure while simultaneously enabling enhanced security features, thus maintaining adaptability while improving reliability.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS8678294B2Federated ID secure virtual terminal emulation smartcard

Publication Date: 2014.03.25 ORANGEHOOK INC

AI summary

A smartcard using a combination of secure virtual terminal emulation implemented by the smartcard and Federated ID information stored on the smartcard (and optionally on a transaction processor server) to provide secure verification of the personal identity of the cardholder. The Federated ID information provides a high level personal identity verification for the cardholder while secure virtual terminal emulation by the smartcard prevents the Federated ID information from being exposed to the microprocessor and memory resources of a host computer station when the smartcard is used with the host computer station to engage in transactions. The Federated ID smartcard provides a flexible, dynamically adjustable, highly efficient and secure system for personal identity verification for online commerce and a wide range of other application involving personal identity verification.