Trusted Payment Communication Using Hybrid Cryptographic Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment transaction systems, particularly contactless transactions, are vulnerable to eavesdropping, risking the compromise of sensitive data, and existing security measures like RSA encryption are not sufficient against evolving eavesdropping strategies.
Innovation Solution
Implementing a method that enhances transaction security by using a symmetric cryptographic method, such as AES, for privacy protection and an asymmetric method, like ECC, for digital signatures, within the existing EMV protocol, allowing secure communication channels without fundamental protocol changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RSA encryption is used for securing transaction data, then data security is improved, but the system becomes vulnerable to evolving eavesdropping strategies
Solution Approach 1:
The patent changes the cryptographic parameters from RSA (asymmetric) to AES (symmetric) encryption for transaction data protection. This parameter change provides enhanced security against eavesdropping while maintaining compatibility with existing EMV infrastructure, resolving the contradiction between data security and eavesdropping resistance.
Solution Approach 2:
The patent segments the cryptographic operations into two distinct parts: asymmetric encryption (RSA/ECC) for key exchange and authentication, and symmetric encryption (AES) for data protection. This segmentation allows each component to be optimized for its specific function, improving overall security while maintaining infrastructure compatibility.
2Reliability
If enhanced cryptographic processing is implemented, then transaction security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a communication channel as an intermediary that facilitates secure data exchange between payment devices and terminals. This intermediary layer handles the cryptographic operations, allowing enhanced security without requiring complex cryptographic processing at each individual device, thus reducing overall system complexity.
Solution Approach 2:
The patent implements a universal cryptographic framework that can be applied across different payment scenarios (contactless, contact, mobile payments) using the same AES encryption standard. This multi-functionality approach improves transaction security while avoiding the need for device-specific cryptographic implementations, thereby reducing complexity.
3Loss of information
If symmetric cryptographic method is used for privacy protection, then data privacy is improved, but communication security requirements increase
Solution Approach 1:
The patent performs preliminary cryptographic key exchange using asymmetric encryption before establishing the symmetric communication channel. This preliminary action ensures that the symmetric key is securely transmitted and established before actual data protection begins, thereby improving data privacy while maintaining communication security through the established key exchange mechanism.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
A method of performing a transaction between a first computing device acting as a payment device and a second computing device acting as a terminal is described. The first computing device establishing a communication channel with the second computing device and initiates the transaction. The second computing device sends a request for processing options for the transaction to the first computing device. The first computing device indicates that it supports enhanced processing of the transaction and establishes that the second computing device also supports enhanced processing of the transaction. The first computing device then provides a secure communication to the second computing device, the secure communication comprising cryptographic material comprising material to establish a symmetric cryptographic method encrypted by a public key of an asymmetric cryptographic method for the second computing device to decrypt using a private key of the asymmetric cryptographic method. The first and second computing devices then perform the transaction using enhanced processing, which comprises using a secure channel using the symmetric cryptographic method to protect privacy of information private to an owner or controller of at least the first computing device. A suitable first computing device and second computing device are also described.