Test Payment Card Validation for Terminal Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for testing payment terminals for the presence and correct operation of payment system public keys and offline Card Authentication Mechanism (CAM) are costly, risky, and inefficient, requiring live payment cards and complex auditing processes.
Innovation Solution
Dedicated test payment cards and a self-assessment toolkit that allow for internal issuance and use of test cards to evaluate terminals for proper management of payment system public keys and offline CAM performance without auditing, using dummy transactions and EMV-compliant protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If dedicated test payment cards are internally issued by the payment system operator, then the complexity of testing procedures is reduced and auditing requirements are eliminated, but the security risk of issuing test cards with real payment system public keys increases
Solution Approach 1:
The patent introduces a dedicated test payment card as an intermediary device that contains embedded test data including payment system public keys. This intermediary enables testing functionality while isolating the actual payment system keys from direct exposure during testing operations, thus reducing procedural complexity while maintaining security through controlled key management in the test environment
Solution Approach 2:
The patent creates a copy of the payment system public keys specifically for testing purposes within the dedicated test card. This copying allows testers to validate terminal functionality against authentic key material without requiring access to the live payment system, thereby simplifying testing procedures while preserving the security of the actual payment system through key isolation
2Measurement precision
If live payment cards are used for testing terminal key management, then the validation of correct payment system public keys is achieved, but the cost and risk associated with using real payment cards increases
Solution Approach 1:
The patent creates dedicated test payment cards that function as disposable or limited-use testing instruments. These test cards contain embedded test data and can be used extensively for testing terminal key management without the concerns associated with real payment cards, thereby achieving accurate key validation while eliminating the financial risks and costs of using live payment cards
3Reliability
If auditing processes are implemented for test card usage, then the security and control of testing operations is improved, but the ease of operation and accessibility of testing is reduced
Solution Approach 1:
The dedicated test payment card is designed to be self-contained with all necessary test data and validation logic embedded within it. The card enables terminals to perform self-assessment of key management correctness without requiring external auditing infrastructure or complex verification processes, thus maintaining security through inherent design while dramatically improving ease of operation and accessibility for testers
Data Source
AI summary
Live payment terminals employing payment system public keys are evaluated. Dedicated test payment cards are internally issued by an operator of the payment system. Presentation of at least one of the cards to at least one of the terminals is facilitated. Testing the at least one of the terminals for proper management of the payment system public keys is facilitated. The testing can be in a test transaction conducted when the at least one of the cards is presented to the at least one of the terminals. The steps of facilitating presentation and facilitating testing can be conducted substantially without auditing.