Smartphone Security Token for ATM Optical Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems, such as those used in ATMs, lack robustness and are vulnerable to fraudulent activities, with both human and machine trustworthiness being compromised, necessitating a more secure method for authenticating transactions.
Innovation Solution
A smartphone serves as a security token by sharing secret information with a bank's computer system, generating a digitally watermarked image that is sensed by the ATM, allowing for one-way optical communication and two-way network communication to authenticate transactions, ensuring the authenticity of both the user and the counter-party system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security systems (plastic card and PIN code) are used in ATMs, then the system is simple to operate, but the security and reliability are compromised due to vulnerabilities to fraudulent activities
Solution Approach 1:
The patent introduces a smartphone as an intermediary security token between the user and the ATM system. The smartphone contains an authentication application that generates and transmits visual authentication data (watermarked images) to the ATM, serving as a mediator that enhances security without requiring the user to directly interact with complex security mechanisms. This resolves the contradiction by providing robust authentication through the smartphone intermediary while keeping the user interface simple.
Solution Approach 2:
The patent replaces the traditional mechanical security system (physical card insertion and manual PIN entry) with an optical-based authentication system. The ATM captures images of the smartphone display showing watermarked authentication data, and the authentication is performed through optical recognition and digital verification. This substitution eliminates the vulnerabilities of physical card handling and manual PIN entry while maintaining ease of operation through the smartphone's display and camera capabilities.
2Reliability
If both user and machine trustworthiness are required to be verified, then the security is enhanced, but the authentication process becomes more complex
Solution Approach 1:
The patent implements preliminary action by pre-installing the authentication application on the user's smartphone and pre-configuring it with the necessary security credentials and watermarked image generation capabilities. The smartphone is prepared in advance to automatically generate and display authentication data when required. This preliminary setup enables mutual authentication to occur seamlessly during the transaction without requiring complex real-time negotiations or additional user actions, thus enhancing security while maintaining process simplicity.
3Reliability
If optical communication is used between ATM and smartphone, then the authentication becomes more secure against interception, but the system requires additional hardware components
Solution Approach 1:
The patent uses copying by transmitting visual information (watermarked images) from the smartphone display to the ATM camera. Instead of using complex cryptographic protocols or specialized hardware tokens, the system creates a visual copy of the authentication data that can be captured by the ATM's existing camera. This approach enhances security through optical communication while avoiding additional specialized hardware requirements, as both the smartphone display and ATM camera are standard components.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method enhances transaction security by providing robust authentication, preventing fraudulent activities and ensuring the trustworthiness of both the user and the ATM system, while being applicable beyond ATMs to various man-machine transactions.
Implementation Method 1
authentication of the transaction involves one-way optical communication of visual information between the ATM and the smartphone
Implementation Method 2
The displayed image is sensed by a camera in the ATM, which sends corresponding data back to the bank computer system
Data Source
AI summary
A person's smartphone serves as a security token—used variously to establish the user's authorization, and to test the bona fides of the counter-party system. In one illustrative ATM arrangement, a bank's computer system and the user's smartphone share secret information across a network. The smartphone employs this shared secret to generate a corresponding image, which is displayed on its screen. The displayed image is sensed by a camera in the ATM, which sends corresponding data back to the bank computer system. The bank computer system analyzes the received data and responds by sending information to the ATM authorizing a transaction. By such arrangement, authentication of the transaction involves one-way optical communication of visual information between the ATM and the smartphone, and two-way network communication of information between the ATM and the bank computer system. A great number of other features and arrangements are also detailed.