Transit Verification Value for Offline Card Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional payment card systems face challenges in providing efficient and secure transaction processing, especially in transit fare collection environments, where online authentication is impractical due to speed requirements and the need for fraud prevention, and existing systems lack effective offline card authentication and key management mechanisms.
Innovation Solution
A portable consumer device with a contactless smart card configuration that includes a transit verification value (TCVV) and separate data fields for retail and access transactions, allowing for offline processing and selective authorization, enabling quick and secure transactions without the need for pre-registration or advanced issuer-agency relationships.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If offline authentication with transit verification value is implemented, then transaction speed is improved, but fraud prevention capability deteriorates
Solution Approach 1:
The patent segments authentication into two independent parts: a static transit verification value (TCVV) stored on the card for offline validation, and a dynamic card authentication process that can occur online. This segmentation allows the system to achieve fast offline transactions while maintaining fraud prevention through the separate authentication mechanism, resolving the contradiction between speed and security.
Solution Approach 2:
The patent introduces a transit verification value (TCVV) as an intermediary element that enables offline authentication. The TCVV acts as a mediator between the card and the authentication system, allowing validation without direct online communication. This intermediary mechanism maintains transaction speed while the system can still perform fraud detection through additional authentication steps, balancing speed and security requirements.
2Ease of operation
If contactless smart card processing is used, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal contactless smart card system that can process both retail and transit transactions using the same card infrastructure. The card contains multiple application areas (retail, transit, venue access) that can be activated as needed. This multi-functionality approach improves ease of operation by consolidating multiple payment functions into a single device while managing complexity through standardized processing protocols.
Solution Approach 2:
The patent uses magnetic stripe data as a simplified copy or representation of the contactless smart card data. The magnetic stripe contains a condensed version of card information that can be read by traditional readers, providing a fallback mechanism. This copying approach maintains ease of operation across different reader types while the full contactless functionality provides enhanced security and speed, balancing simplicity and complexity.
3Adaptability or versatility
If selective authorization data is stored on card, then adaptability is improved, but data security risks increase
Solution Approach 1:
The patent applies local quality by storing different types of authorization data in separate, isolated application areas on the card. The card contains distinct data structures for retail transactions, transit transactions, and venue access, each with its own verification values and authorization parameters. This localized storage approach improves adaptability by enabling selective authorization for different transaction types while containing security risks to specific data segments rather than exposing the entire card database.
Solution Approach 2:
The patent implements preliminary action by pre-storing transit verification values and authorization data on the card during issuance, before the card is used for transactions. The TCVV and other security parameters are embedded in the card at manufacture or during initial activation. This preliminary preparation enables fast offline transactions and selective authorization without requiring real-time data retrieval, improving adaptability while the pre-computed verification values reduce the attack surface for real-time security breaches.
Data Source
AI summary
Transaction processing involves receiving data from an access transaction application of a portable consumer device, wherein the received data comprises data from an access transaction data string that includes a transit verification value wherein, with the exception of the transit verification value, the access transaction data string is substantially similar to a retail data string comprising retail data, wherein the access application data string is adapted for use with an access transaction processing system and the retail data string is adapted for use with a retail processing system. The transaction processing involves processing access transaction application data for selective authorization of the transaction.