Portable USB Key Secure Transaction Intermediary

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current e-commerce transactions face security and complexity issues, such as the need for users to manually enter bank card numbers on browsers, which can be intercepted by malicious programs, and the requirement for installing drivers and applications on computers to secure transactions, lacking secure communication between smart cards and remote servers.

Innovation Solution

A portable USB key with secure communication means, including cryptographic and authentication protocols, allows for secure transactions by generating a temporary common key using master keys and serial numbers, enabling secure communication between the USB key, host station, and remote server, eliminating the need for driver installation and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual entry of bank card numbers on browsers is used, then ease of operation is improved, but security deteriorates due to interception by malicious programs

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a USB key as an intermediary device between the user and the browser. This USB key contains secure communication means that automatically handle card number transmission to the server, eliminating the need for manual entry while maintaining security through encrypted communication channels.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical manual entry process with an automated secure communication system. The USB key's secure communication means automatically transmits card number data through encrypted channels, substituting the vulnerable manual typing process with a secure electronic transmission mechanism.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Object-affected harmful factors

If driver installation and application setup are required for secure transactions, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent merges multiple functions into a single USB key device. It combines secure communication means, authentication mechanisms, and transaction management capabilities into one integrated portable device, eliminating the need for separate drivers and applications while maintaining security.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The USB key is designed as a universal device that can perform multiple functions: secure communication with servers, authentication, card number transmission, and transaction management. This multi-functionality eliminates the need for multiple separate components and installations, reducing overall system complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Object-affected harmful factors

If secure communication means with master keys and cryptographic protocols are implemented, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The USB key's secure communication means automatically handles authentication and encryption operations without requiring manual intervention. The device self-manages key exchange, authentication protocols, and data encryption, making the complex security mechanisms transparent to the user while maintaining high security standards.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP2118825B1Portable electronic entity and communication method
Publication Date: 2017.11.22 OBERTHUR TECH SA
  • EP2118825B1 patent drawingFigure 1
  • EP2118825B1 patent drawingFigure 2

AI summary

The invention relates to a pocket portable electronic entity (400) that comprises : removable connection means (420) to a host station (300), first secured communication means (460, 470, 471) with a remote server (100) via said connection means and said host station, second communication means (450, 455) between said first secured communication means and a second portable electronic entity (500), and means (440, 445) for communicating to said remote server, via said first secured communication means, the data received from the second portable electronic entity via the second communication means.