Trusted Transaction Communication with Layered Cryptographic Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing payment transaction systems, particularly contactless transactions, are vulnerable to eavesdropping, risking the compromise of sensitive data, and existing security measures like RSA encryption are inadequate, necessitating improved security without fundamental infrastructure changes.
Innovation Solution
Implementing a method that uses asymmetric cryptographic methods, such as RSA, to encrypt cryptographic material for initial communication, followed by a further cryptographic method, like symmetric AES for privacy protection, or asymmetric ECC for enhanced digital signatures, within the EMV protocol framework.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If RSA encryption is used to encrypt cryptographic material, then initial secure communication is established, but the security against eavesdropping is inadequate
Solution Approach 1:
The cryptographic system is segmented into two distinct phases: an asymmetric encryption phase (using RSA or other asymmetric methods) for initial secure communication and key exchange, and a symmetric encryption phase (using AES or other symmetric methods) for subsequent data protection. This segmentation allows each phase to use the most appropriate cryptographic method, achieving superior overall security without excessive complexity.
Solution Approach 2:
The system performs preliminary asymmetric encryption to establish a secure communication channel and exchange cryptographic keys before transitioning to symmetric encryption for the actual data transmission. This preliminary action sets up the security foundation that enables more efficient and secure subsequent communication.
2Speed
If contactless payment technology is implemented, then transaction speed is improved, but the risk of eavesdropping and data compromise increases
Solution Approach 1:
The contactless payment security is divided into multiple cryptographic layers: asymmetric encryption for initial authentication and key exchange, and symmetric encryption for protecting the actual transaction data. This multi-layer approach maintains the speed advantage of contactless transactions while providing comprehensive protection against eavesdropping.
Solution Approach 2:
The patent introduces cryptographic material and encryption mechanisms as intermediaries between the payment device and the transaction data. These intermediaries (encrypted keys, authentication tokens) enable fast contactless communication while preventing direct exposure of sensitive data to eavesdroppers.
3Reliability
If existing security measures are enhanced with new cryptographic methods, then transaction security is improved, but the infrastructure modification requirement increases
Solution Approach 1:
The enhancement strategy segments the cryptographic system into legacy asymmetric methods (RSA) that can remain in existing infrastructure, and new symmetric methods (AES) that provide enhanced security. This allows gradual adoption of stronger cryptography without requiring complete infrastructure replacement.
Solution Approach 2:
The patent creates a universal cryptographic framework that supports multiple encryption methods (both asymmetric and symmetric) within a single system architecture. This multi-functionality allows the system to leverage existing infrastructure while incorporating enhanced security measures, avoiding fundamental infrastructure changes.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
Trusted communication between a first computing device and a second computing device in a transaction process is established as follows. A communication channel is established between the first computing device and the second computing device. The first computing device provides a secure communication to the second computing device, this secure communication comprising cryptographic material encrypted by a first cryptographic method. The second computing device decrypts the secure communication using a key already available to it. The first and the second computing device then communicate where trusted communication is required by a second cryptographic method using the cryptographic material. A suitable first computing device and second computing device are also described.