Virtual Terminal Encryption for Secure Multipurpose Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods in electronic devices lack robust encryption and decryption mechanisms to secure sensitive data, particularly in multipurpose devices like smartphones and tablets, making them vulnerable to data exposure and unauthorized access.
Innovation Solution
A virtual terminal system integrated into multipurpose devices, utilizing a secure element and encryption keys to encrypt and decrypt data through a secure element, terminal backend, and rewrap backend, ensuring data integrity and privacy by encrypting transaction data with multiple layers of encryption and decryption using PAN and transport server keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is transmitted using conventional methods in multipurpose devices, then device versatility and ease of operation are improved, but data security and protection from unauthorized access deteriorate
Solution Approach 1:
The system segments data transmission into two distinct modes: conventional data mode for general purposes and encrypted data mode for sensitive information. The virtual terminal application acts as a segmentation boundary, routing data through appropriate encryption channels based on data sensitivity, thus maintaining device versatility while protecting sensitive data.
Solution Approach 2:
The virtual terminal application serves as an intermediary between the user/device and the data transmission process. It introduces encryption/decryption functionality as a mediator layer, allowing conventional device operation while secretly protecting data through cryptographic transformations performed by the virtual terminal.
2Reliability
If encryption and decryption mechanisms are implemented to secure sensitive data, then data security is improved, but device complexity increases
Solution Approach 1:
The virtual terminal application provides multiple functions within a single interface: it acts as a terminal emulator, an encryption/decryption engine, and a security management system. By consolidating these functions into one universal application rather than requiring separate hardware components, the system reduces overall device complexity while maintaining strong encryption capabilities.
Solution Approach 2:
The virtual terminal application performs self-configuration and self-management of encryption keys and security parameters. It automatically handles the complex cryptographic operations without requiring user intervention or additional security configuration, thus reducing the perceived complexity for end users while maintaining robust security.
3Loss of information
If multiple layers of encryption and decryption are used with secure element and backend systems, then data confidentiality is improved, but processing time and system complexity increase
Solution Approach 1:
The system performs preliminary encryption of sensitive data at the source device before transmission, and preliminary establishment of secure communication channels with the backend. By preparing encryption keys and security protocols in advance rather than during data transmission, the system reduces real-time processing delays while maintaining strong multi-layer encryption for data confidentiality.
Data Source
AI summary
Techniques for using a virtual terminal on a device to process a data transfer are described herein. These techniques provide the configuring of a virtual terminal for transfer of data, encryption of the data, and rewrapping the data. A server transmits virtual terminal kernel configuration data to the virtual terminal, configuring the terminal with a first public encryption key used to encrypt a second encryption key only known by the terminal. The second encryption key is used to encrypt data for data transfer. The server device is able to decrypt the second encryption key by using a third private encryption key that corresponds to the first public encryption key.