Test Token Validation for EMV Contactless Payment Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mass transportation systems face challenges in validating EMV contactless payment devices for secure access, as not all devices universally comply with Dynamic Data Authentication mechanisms, leading to potential fraudulent access attempts.
Innovation Solution
A system using near field communication to generate a test token by processing user device identifiers and application data, comparing it against a list of valid tokens, and optionally requesting validation from an issuing bank to ensure the token's validity, thereby preventing fraudulent access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Dynamic Data Authentication is used to authenticate contactless payment devices, then security is improved, but compatibility deteriorates because not all EMV payment devices support this mechanism
Solution Approach 1:
The patent creates a test token that copies and combines key identifying features from both the user device identifier and application data. This test token serves as a simplified representation that can be validated without requiring the complex Dynamic Data Authentication protocol, thus maintaining security verification while improving compatibility with devices that lack ODA support.
Solution Approach 2:
The test token acts as an intermediary mechanism between the coupling device and the issuing bank validation system. Instead of directly requiring ODA-capable devices to perform complex authentication, the system uses this intermediate test token that can be generated by any EMV device and then validated online, bridging the gap between security requirements and device capabilities.
2Reliability
If multiple validity checks are performed to prevent fraudulent access, then security is improved, but processing time increases
Solution Approach 1:
The system performs preliminary validation by generating and checking a test token locally at the coupling device before initiating online validation with the issuing bank. This preliminary check filters out obviously invalid transactions early in the process, reducing the number of transactions that require time-consuming online verification and thus reducing overall processing time while maintaining security.
Solution Approach 2:
The validation process is segmented into two distinct stages: a fast local test token generation and check, followed by a more thorough online validation only when needed. This segmentation allows the system to perform rapid initial screening that prevents most fraudulent attempts immediately, while reserving the more time-consuming online validation for cases where the initial check requires further verification.
3Productivity
If test token validation is performed offline using a list of valid tokens, then processing speed is improved, but security deteriorates compared to online validation
Solution Approach 1:
The system dynamically adapts its validation approach based on the situation. The test token can be validated offline against a cached list of valid tokens for fast processing in normal circumstances. However, the system retains the capability to perform online validation with the issuing bank when needed, creating a dynamic validation strategy that optimizes between speed and security based on contextual factors such as transaction risk assessment or system availability.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution effectively prevents fraudulent access attempts by ensuring a valid combination of user device identifier and application data, even when Dynamic Data Authentication is not supported, and reduces the need for online communication with the issuing bank, enhancing security and efficiency in mass transportation systems.
Implementation Method 1
a coupling device operable to communicate with the user device via near field communication
Data Source
AI summary
There is disclosed a system for performing a validity check of a user device having an application stored thereon. The apparatus comprises a coupling device operable to communicate with the user device via near field communication, a processor, and memory storing program code for execution by the processor and validity check data. The program code comprises executable instructions to receive a determinate user device identifier from the user device via the coupling device and to receive application data from the user device via the coupling device, the application data being characteristic of the application stored on the user device. The program code processes the user device identifier and the application data to generate a test token, and determines whether the test token is a valid token using the validity check data.