Wireless Smart Card PAN Authentication System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional smart card systems require a dedicated reader for each computer, leading to increased costs and security vulnerabilities due to the potential for unauthorized access when users forget to remove their smart cards.

Innovation Solution

Implementing a smart card with a wireless transceiver that communicates over a personal area network (PAN), allowing authentication and secure access without the need for a separate reader, and automatically logging off when the user moves out of range, using a portable device like a cellular telephone or PDA.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a dedicated smart card reader is installed at each computer, then smart card authentication can be performed, but the system cost increases significantly

Engineering Contradiction:
Improveauthentication capabilityVSAvoidsystem cost
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The smart card is equipped with a wireless transceiver that enables it to communicate with multiple computers over a personal area network without requiring dedicated readers at each computer. The smart card itself becomes a universal authentication device that can be used across different computers, eliminating the need for multiple specialized readers and significantly reducing system cost while maintaining authentication capability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If conventional smart card readers are used, then authentication can be performed, but security vulnerabilities arise when users forget to remove their cards

Engineering Contradiction:
Improveauthentication functionVSAvoidunauthorized access risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The computer system continuously monitors the presence of the smart card through wireless communication. When the card is removed or moves out of communication range, the system automatically detects this change and logs off the user. This automatic feedback mechanism eliminates the security vulnerability of users forgetting to remove their cards, as the system proactively responds to card removal without requiring user action.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The authentication system becomes self-managing by automatically detecting card presence or absence and performing log off operations when necessary. The system monitors its own security state through continuous wireless communication with the smart card and takes appropriate actions without human intervention, thereby eliminating the security loophole where users might leave cards in readers.

Inventive Principle:
Principle #25Self-service

3Device complexity

If wireless communication over PAN is implemented, then additional hardware readers are eliminated, but new communication infrastructure is required

Engineering Contradiction:
Improvehardware requirementsVSAvoidcommunication compatibility
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The smart card incorporates a wireless transceiver that enables it to communicate over standard personal area networks using established protocols. This makes the smart card adaptable to existing wireless infrastructure without requiring specialized communication hardware at each computer, thereby reducing hardware requirements while maintaining broad communication compatibility across different devices and platforms.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9060274B2Smart card accessible over a personal area network
Publication Date: 2015.06.16 RED HAT INC
  • US9060274B2 patent drawing
  • US9060274B2 patent drawing
  • US9060274B2 patent drawing

AI summary

Some embodiments of a smart card accessible over a personal area network have been presented. In one embodiment, an apparatus includes a wireless transceiver to communicatively couple to a personal area network (PAN) to receive an authentication request via the PAN from a device. The device may include a computer. The apparatus further includes a storage device to store a digital certificate that uniquely identifies a user. An authentication module in the apparatus may authenticate the user in response to an authentication request from the device using the digital certificate, wherein the user is allowed to access the computer upon authentication.