Smart contract security system for NFC data transactions
Summary
The USPTO has published a new patent application from Bank of America Corporation for a smart contract-based security system designed to prevent replay attacks in NFC data transactions. The system uses smart contracts to validate transaction tokens before completing data transfers.
What changed
This document is a publication of a patent application (US20260087482A1) filed by Bank of America Corporation. It describes a novel system employing smart contracts to enhance the security of near field communication (NFC) data transactions. The system generates a transaction token for NFC transactions, which is then processed by a remote device via a smart contract. The smart contract analyzes the token for validity; if valid, the transaction proceeds, and if invalid, it is inhibited. Upon processing, the smart contract modifies transaction parameters and generates a stale token to prevent replay attacks.
While this is a patent application and not a regulation, it signals potential future technological developments in financial transaction security. Compliance officers in the financial sector, particularly those involved with digital payments and cybersecurity, should be aware of such innovations. The application highlights the increasing use of smart contracts and blockchain-like technologies to secure financial data and prevent fraud. No immediate compliance actions are required, but monitoring patent filings in this area can provide insights into emerging security standards and practices.
Source document (simplified)
Replay Attack Preventtion System
Application US20260087482A1 Kind: A1 Mar 26, 2026
Assignee
Bank of America Corporation
Inventors
Maneesh Kumar Sethia, Abhijit Behera
Abstract
Various aspects of the disclosure relate to a smart contract-based security system for near field communication (NFC) data transactions. An NFC data transaction initiated by a first computing device generates a transaction token used to complete the NFC data transaction with a second computing device via an NFC communication link between the two devices. The transaction token is communicated to a remote device with transaction information, where the transaction information may be embedded with the transaction token. The transaction token is processed via smart contract operation to analyze the transaction token to determine whether the token is valid. If valid, the smart contract triggers completion of the data transaction. If invalid, the data transaction is inhibited by the smart contract. Once processed, the smart contract modifies transaction parameters and generates a stale token.
CPC Classifications
G06Q 20/3278 G06Q 20/3825 G06Q 20/389
Filing Date
2024-09-24
Application No.
18894368
Named provisions
Related changes
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get Banking & Finance alerts
Weekly digest. AI-summarized, no noise.
Free. Unsubscribe anytime.
Get alerts for this source
We'll email you when ChangeBridge: Patent Apps - Business Methods (G06Q) publishes new changes.