Wearable Biometric Authentication for Secure NFC Payments

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic purse systems in mobile devices and smartphones are vulnerable to skimming attacks during contactless payments, particularly when using NFC technology, as they lack robust security measures to prevent unauthorized transactions.

Innovation Solution

A wearable information device, such as a smartwatch, is integrated with a smartphone via Bluetooth, allowing data exchange and enabling secure payment processing by transmitting and updating payment information while locking the contactless communication function after a transaction to prevent further usage, and a head-mounted display is used to recognize and authenticate the wearable device through image recognition, preventing skimming by ensuring NFC communication only when the device is properly identified.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If contactless communication using NFC is used for electronic payments, then payment convenience is improved, but vulnerability to skimming attacks increases

Engineering Contradiction:
Improvepayment convenienceVSAvoidsecurity against skimming
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary authentication by having the wearable device capture an image of the user's face or iris before enabling NFC communication. This preliminary biometric verification ensures that only the authorized user can initiate contactless payments, preventing skimming attacks that would otherwise exploit the convenience of NFC technology.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The wearable information device acts as an intermediary between the user and the payment terminal. It mediates the authentication process by verifying biometric data and controlling when NFC communication is permitted. This intermediary layer adds security without significantly impacting the user experience, as the wearable device is already worn close to the user.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the wearable information device is integrated with smartphone via Bluetooth, then payment functionality is improved, but device complexity increases

Engineering Contradiction:
Improvepayment functionalityVSAvoidsystem integration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The wearable information device is designed to perform multiple functions: biometric authentication, secure element storage, NFC communication control, and Bluetooth connectivity. By consolidating these diverse functions into a single wearable device, the system achieves high versatility without proportionally increasing complexity, as the wearable device serves as a universal platform for multiple security and communication tasks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11157891B2Information device, mobile device, and wearable information device
Publication Date: 2021.10.26 CASIO COMPUTER CO LTD
  • US11157891B2 patent drawing
  • US11157891B2 patent drawing
  • US11157891B2 patent drawing

AI summary

An information device makes a payment with a payment terminal through a contactless communication, using amount data of an electronic purse function of a mobile device. The mobile device with the electronic purse function permits the information device to be used for performing payment processing with the payment terminal, using amount data of the electronic purse function of the mobile device. A wearable information device includes an image taking unit configured to take an image of an object in the direction of line of vision of a user, and notifies the information device of the presence or absence of the information device in a taken image. The information device makes a payment with the payment terminal through a contactless communication based on the notification from the wearable information device of the presence or absence of the information device.