Electronic device for providing request security service through a secure element, and method for controlling the same

Abstract

An electronic device is disclosed, comprising: a touch screen display; a first processor operably connected to the touch screen display; a first memory operably connected to the first processor to store a first application; and a security element operably connected to the touch screen display, the first processor and the first memory, wherein the security element comprises a second processor and a second memory, and the second memory is configured to store a first frame, a plurality of second frames, and a first applet associated with the first application. In addition, various implementations can be determined through the specification.

Description

Technical Field

[0001] Embodiments of the present disclosure relate to a technology for providing a service requiring security. Background Art

[0002] The functions and services provided by portable devices are gradually expanding. Applications are being actively developed to provide various functions and services on portable devices. The development of various application programs (or apps) can increase the effective value of portable devices and meet various needs of users.

[0003] Nowadays, portable devices can provide services that require security by using security functions. In particular, portable devices may include a security element (SE) and may provide services that require high security to users through the security element. In addition, portable devices may provide multiple security services through one security element. Summary of the invention

[0004] [Technical issues]

[0005] When providing services that require security to users through applications, the electronic device may store the information required to run the application in a secure element. Depending on the degree of security required, applications that provide services that require security may be run using a common service framework (CSF) or a dedicated service framework (or an exclusive service framework (ESF)). Applications that provide specific services may depend on a dedicated service framework stored in a secure element. In other words, in order to provide multiple dedicated services that are different from each other, a secure element may not be used. In this way, it may be difficult to embed and use a secure element in an electronic device that provides multiple dedicated services that require security.

[0006] An electronic device according to various embodiments of the present disclosure may execute a plurality of frameworks for providing dedicated services and common services through one secure element.

[0007] [Technical solution]

[0008] According to an embodiment of the present disclosure, an electronic device may include: a touch screen display; a first processor operably connected to the touch screen display; a first memory operably connected to the first processor and storing a first application; and a security element operably connected to the touch screen display, the first processor and the first memory, and including a second processor and a second memory, the second memory storing a first frame, a plurality of second frames, and a first applet associated with the first application. The first memory may include instructions that, when executed, cause the first processor to: receive a first user input requesting to run the first application through the touch screen display; and transmit target information specifying the first applet to the security element based on the first user input received thereby. The second processor may select one of the plurality of second frames based on at least a portion of the information of the first applet corresponding to the target information; may run the selected frame; and may drive the first applet by using the run frame.

[0009] In addition, according to an embodiment of the present disclosure, a method for controlling an electronic device including a security element may include: receiving a first user input requesting to run a first application stored in a first memory; based on the first user input received thereby, transmitting target information specifying a first applet stored in a second memory included in the security element to the security element; based on at least a portion of the information of the first applet corresponding to the target information, selecting one of a plurality of frameworks stored in the second memory; running the selected framework; and driving the first applet by using the run framework.

[0010] [Beneficial Effects]

[0011] According to an embodiment of the present disclosure, an electronic device can install multiple dedicated service frameworks in one security element and can selectively activate the multiple dedicated service frameworks installed thereby, so that multiple dedicated services provided by using the framework to be run exclusively can coexist in one security element.

[0012] In addition, various effects understood directly or indirectly can be provided by the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 is a block diagram showing a configuration of an electronic device according to various embodiments.

[0014] Figure 2 is a block diagram illustrating a configuration of a secure element according to various embodiments.

[0015] Figure 3 is a sequence diagram indicating a method in which an electronic device installs a dedicated service framework in a secure element according to an embodiment.

[0016] Figure 4is a sequence diagram indicating a method in which an electronic device installs a dedicated service applet in a secure element according to an embodiment.

[0017] Figure 5 is a sequence diagram indicating a method in which an electronic device executes a dedicated service applet stored in a secure element according to an embodiment.

[0018] Figure 6 is a diagram illustrating a screen in which an electronic device installs a dedicated service framework and an applet according to an embodiment.

[0019] Figure 7 is a diagram illustrating a screen on which an electronic device sets a basic activation service according to an embodiment.

[0020] Figure 8 is a diagram illustrating a screen in which an electronic device changes a designated service into an activated service according to an embodiment.

[0021] Fig. 9 A block diagram illustrating electronic devices in a network environment according to various embodiments.

[0022] Fig.10 is a flowchart simply illustrating a process in which an electronic device running an application provides a service by using a secure element according to an embodiment.

[0023] Regarding the description of the drawings, the same or similar components will be marked by the same or similar reference numerals. DETAILED DESCRIPTION

[0024] Hereinafter, various embodiments of the present disclosure will be described with reference to the accompanying drawings. However, those skilled in the art will recognize that various modifications, equivalents and / or substitutions may be made to the various embodiments described herein without departing from the scope and spirit of the present disclosure.

[0025] Throughout the specification, an application refers to a program that is executed by the processor 150 to enable the electronic device 100 to provide a service. In addition, an applet refers to a program that is installed and executed in the secure element 160 to enable the application to provide a service that requires security. The applet can be executed by the secure element 160 to perform a service that requires security.

[0026] Throughout the specification, an applet ID (AID) refers to information about an identifier ID for identifying an applet.

[0027] Figure 1 is a block diagram showing a configuration of an electronic device according to various embodiments.

[0028] Reference Figure 1, the electronic device 100 can run an application program (or app) that provides a service (or function) requiring security by using the secure element 160 .

[0029] According to an embodiment, the electronic device 100 may include a communication interface 110 , an input interface 120 , a memory (or a first memory) 130 , a display 140 , a processor (or a first processor) 150 , and a secure element 160 .

[0030] According to an embodiment, the communication interface 110 may be connected to an external device to send / receive data. The external device may be, for example, a server for providing data required for providing a service requiring security. According to an embodiment, the communication interface 110 may include a wired communication interface and a wireless communication interface.

[0031] According to an embodiment, the input interface 120 may receive user input. For example, the input interface 120 may include a touch panel capable of receiving a user's touch input. The touch panel may be included in, for example, the display 140. In other words, the display 140 may be a touch screen display including a touch panel.

[0032] According to an embodiment, the memory 130 may store at least one application. For example, the memory 130 may store an application that provides a service that requires security. The service that requires security may be, for example, a service in which the data required to provide the service is separated and stored (e.g., an electronic identification service). According to an embodiment, the memory 130 may store a framework for running a public application (or required to run a public application). For example, the memory 130 may store a framework for running an application that provides a service that is not important for security. The framework for running a small program that provides a service that requires security may be separated and stored in the security element 160. According to an embodiment, the memory 130 may include an active memory and a non-active memory. The framework may refer to a software layer that provides a foundation for running a program.

[0033] According to an embodiment, the display 140 may display an image (or a video image). For example, the display 140 may display a screen (e.g., a user interface (UI)) of a running application. According to an embodiment, the display 140 may be a touch screen display including a touch panel. In other words, the display 140 may include a touch panel.

[0034] According to an embodiment, the processor 150 may control the overall operation of the electronic device 100. According to an embodiment, the processor 150 may be operably connected with the communication interface 110, the input interface 120, the memory 130, and the display 140. According to an embodiment, when the instructions stored in the memory 130 are executed, the processor 150 may perform the following operations.

[0035] According to an embodiment, the processor 150 may receive a user input for executing an application through the input interface 120. According to an embodiment, the processor 150 may receive a user input for installing an application or a framework through the input interface 120.

[0036] According to an embodiment, the processor 150 may run an application stored in the memory 130. For example, the processor 150 may run an application that provides a service that requires security in conjunction with one or more applets of the security element 160. An application that provides a service that requires security may, for example, provide a service in conjunction with an applet that includes at least one of an applet that provides a public service (or a public service applet) and an applet that provides a dedicated service (or a dedicated service applet). Public services and dedicated services may be distinguished from each other depending on whether the applet for providing the service relies on a specific framework.

[0037] According to an embodiment, the processor 150 may run applets and frameworks (needed to run the application). For example, when receiving user input for running the application, the processor 150 may run the applets and frameworks required for the application to provide services. According to an embodiment, in the case of running an application that provides services that require security through the security element 160, the processor 150 may run the framework required for the applet that provides services that require security. For example, when receiving user input for running an application that provides services that require security, the processor 150 may transmit a request to the security element 160 for running a framework required for driving the applet that provides services that require security. According to another embodiment, the processor 150 may directly run a framework for running an application that is not important for security. In this way, the processor 150 can enable an application that is run by using the running framework to execute services.

[0038] According to an embodiment, the processor 150 may display a screen of the executed application in the display 140. For example, the processor 150 may display a UI of the executed application in the display 140.

[0039] According to an embodiment, the security element 160 may provide an environment for providing services that require security. For example, the security element 160 may provide a dedicated environment for providing a specific service. According to an embodiment, the security element 160 may be electrically connected to the processor 150 for interaction. According to an embodiment, the security element 160 may store information required for running an application that provides services that require security.

[0040] According to an embodiment, the security element 160 may store a framework required for running a small program that provides a service that requires security. For example, the security element 160 may store at least one of a public service framework (CSF) and a dedicated service framework (or an exclusive service framework (ESF)). In this specification, the public service framework may be referred to as a "first framework". In addition, the dedicated service framework may be referred to as a "second framework".

[0041] According to an embodiment, a public service framework may be used to run a mini-program that provides public services. A mini-program that provides public services may, for example, not rely on a specific framework. In other words, a framework (or open platform) that provides public functions may be used to run a mini-program that provides public services. A public service framework may be used to drive mini-programs associated with multiple different services.

[0042] According to an embodiment, a dedicated service framework may be used to run a mini-program that provides a dedicated service. The mini-program that provides a dedicated service may, for example, depend on a specific framework. In other words, a specific framework (or closed platform) for providing a dedicated service may be used to run a mini-program that provides a dedicated service. According to an embodiment, at least one mini-program that is run using a specific framework may be grouped into a category. A category may be, for example, a concept corresponding to a specific framework. The dedicated service framework may be used to drive a mini-program that is associated with only one service.

[0043] According to an embodiment, an applet associated with an application providing a service requiring security may be installed in a security element 160. The applet may be published to, for example, a security element 160 in which information required for the application providing a service requiring security is stored. According to an embodiment, the applet may be driven by using a running framework. According to an embodiment, when a running request for an applet for providing a service is received from a processor 150 running an application, the security element 160 may run a framework required for the applet based on information of the applet running the request.

[0044] When providing services that require security to the user through an application, the electronic device 100 may store the information required to run the application in the security element 160. Depending on the characteristics of the service to be provided or the required degree of security, the applet in the security element 160 that provides the service that requires security may be operated by using a public service framework or a dedicated service framework. Since there are cases where an applet that provides a specific service should not share the service framework in the security element 160 with another service, the security element 160 may be attributed to the corresponding applet and may only be used for the corresponding applet. In this way, when the security element 160 is embedded in an electronic device, it may be difficult for the electronic device to provide multiple services that require security. The electronic device 100 according to various embodiments of the present disclosure may run multiple frameworks for providing dedicated services and public services through one security element 160.

[0045] Figure 2 is a block diagram illustrating a configuration of a secure element according to various embodiments.

[0046] Reference Figure 2 The secure element 160 can run a dedicated service framework and a public service framework, which are used to run applets that provide dedicated services and public services.

[0047] According to an embodiment, the security element 160 may include a plurality of applets 161, a plurality of frameworks 163, a dedicated service registry 165, a dedicated service manager 167, and a runtime environment 169. According to an embodiment, the security element 160 may include a memory (or a second memory) and a processor (or a second processor). In other words, the security element 160 may be implemented by a memory and a processor. For example, a plurality of applets 161 and a plurality of frameworks 163 may be programs stored in a memory. The dedicated service registry 165 may be implemented by a memory. The operations of the dedicated service manager 167 and the runtime environment 169 may be operations of a processor executed when instructions stored in the memory are run.

[0048] According to an embodiment, the plurality of applets 161 may include a plurality of dedicated applets 161a and 161b, and a plurality of public applets 161n. According to an embodiment, the plurality of applets 161 may be respectively associated with a plurality of dedicated applets 161a and 161b stored in a memory (eg, Figure 1 The plurality of applets 161 may be associated with a plurality of applications in the memory 130 of the device. For example, a plurality of applets 161 may be driven, and an application corresponding to each of the driven applets may be operable. According to an embodiment, the plurality of applets 161 may correspond to a plurality of applications stored in the memory, respectively. For example, a first dedicated applet 161a and a second dedicated applet 161a may correspond to a plurality of applications providing different dedicated services, respectively. A plurality of public applets 161n may correspond to a plurality of applications providing public services, respectively.

[0049] According to an embodiment, the plurality of frameworks 163 may include a plurality of dedicated service frameworks 163a and 163b, and a public service framework 163n. Each of the dedicated service frameworks 163a and 163b may be a framework dedicated to a specific service. For example, the dedicated service framework may be a framework dedicated to identification-related services. Here, the applet for providing services may include one or more applet. As an example associated with the situation where there are a plurality of applets for providing services, the applet for providing identification-related services may include an ID card applet and a driver's license applet. For another example, there may be a plurality of applets for providing services related to ID cards. The public service framework 163n may be a framework for implementing public functions. According to an embodiment, when a plurality of applications stored in a memory provide services respectively, a plurality of frameworks 163 may be used. For example, when one of the plurality of frameworks 163 is run, the applet may be driven based on the run framework. When the applet is driven, the application corresponding to the driven applet may provide services by using the driven applet. In other words, the applet that interacts with the application may be run by using the run framework. According to an embodiment, each of the plurality of frameworks 163 may correspond to one or more of the plurality of applets 161. For example, the first dedicated service framework 163a and the second dedicated service framework 163b may correspond to the first dedicated applet 161a and the second dedicated applet 161b, respectively. For another example, in the case where the first dedicated service framework 163a is used to provide a service framework for identification services provided by the government, an applet related to an ID card and an applet related to a driver's license may be run based on the first dedicated service framework 163a. ​​The public service framework 163n may correspond to a plurality of public applet 161n.

[0050] According to an embodiment, the dedicated service registry 165 may store information about multiple dedicated service frameworks 163a and 163b, and multiple applets corresponding to the multiple dedicated service frameworks 163a and 163b. In other words, the dedicated service registry 165 may store information binding multiple dedicated service frameworks 163a and 163b and multiple applets. According to an embodiment, the dedicated service registry 165 may store information about multiple categories corresponding to multiple dedicated service frameworks 163a and 163b (e.g., CPARAM_1). In addition, the dedicated service registry 165 may store the AIDs (e.g., AID_1) of multiple dedicated applets 161a and 161b respectively included in multiple categories. In this way, the dedicated service registry 165 may store information (e.g., list information) about the dedicated service framework required to run the applets of the security element 160.

[0051] According to an embodiment, the dedicated service manager 167 may determine whether the dedicated service framework is installed. For example, the dedicated service manager 167 may determine whether the dedicated service framework is installed by using the category information stored in the dedicated service registry 165. According to an embodiment, when a request to run an applet is received, the dedicated service manager 167 may determine whether to install the dedicated service framework corresponding to the applet requested to run. In this specification, the dedicated service framework corresponding to the applet requested to run may be referred to as a "third framework". For example, by determining whether information including the category of the applet ID (AID) corresponding to the applet requested to run is stored in the dedicated service registry 165, the dedicated service manager 167 may determine whether the dedicated service framework corresponding to the applet requested to run is installed. According to an embodiment, when a request to install a dedicated service framework or an applet is received, the dedicated service manager 167 may determine whether the dedicated service framework requested to be installed or the dedicated service framework corresponding to the applet requested to be installed is installed. For example, by determining whether information of the category corresponding to the dedicated service framework requested to run is stored in the dedicated service registry 165, the dedicated service manager 167 may determine whether the dedicated service framework is installed. Alternatively, the dedicated service manager 167 may determine whether the dedicated service framework is installed by determining whether information including a category of an applet ID (AID) corresponding to an applet requested to be installed is stored in the dedicated service registration table 165 .

[0052] According to an embodiment, the dedicated service manager 167 may manage information stored in the dedicated service registry 165. For example, the dedicated service manager 167 may store information about a plurality of dedicated applets 161a and 161b, and a plurality of dedicated service frameworks 163a and 163b. According to an embodiment, the dedicated service manager 167 may store information about installed dedicated service frameworks in the dedicated service registry 165. For example, the dedicated service manager 167 may register a category corresponding to the installed dedicated service framework in the dedicated service registry 165. According to an embodiment, the dedicated service manager 167 may store information about a dedicated applet corresponding to an application installed by the processor 150 to provide a service in the dedicated service registry 165. For example, the dedicated service manager 167 may register an AID of a dedicated applet corresponding to an application installed by the processor 150 in a specified category. The specified category may be, for example, a category corresponding to a dedicated service framework required to run an application installed by the processor 150. According to an embodiment, the dedicated service manager 167 may be implemented independently of the runtime environment 169, or may be implemented as part of the runtime environment 169.

[0053] According to an embodiment, the runtime environment 169 may run (or activate) a framework required for the applet to run. In this specification, the expression "running a framework" may include the concept of performing an operation to activate a framework. In other words, the runtime environment 169 may be an operating system (OS) for running a framework. For example, the runtime environment 169 may run a dedicated service framework or a public service framework for running applet. According to an embodiment, the runtime environment 169 may drive an applet corresponding to the running framework. For example, the runtime environment 169 may drive a dedicated applet or a public applet corresponding to the running framework. In this way, an applet that provides a dedicated service that requires security can be run by using a framework running in the runtime environment 169.

[0054] Figure 3 300 is a sequence diagram illustrating a method for an electronic device to install a dedicated service framework in a secure element according to an embodiment.

[0055] Reference Figure 3 , electronic devices (e.g. Figure 1 The electronic device 100 may install a dedicated service framework (or an ESF) according to user input. The dedicated service framework may be installed during the production of the electronic device, or may be installed by a user or the like during the use of the electronic device. The user may install the dedicated service framework in the secure element 160 through a path to a market where applications can be downloaded.

[0056] According to an embodiment, the electronic device may include a security element (eg, security element 160) and a component (or external environment) external to the security element (eg, Figure 1 processor 150).

[0057] According to an embodiment, in operation 311, the external environment 150 of the electronic device may receive a user input (or a first user input) for installing an application-specific service framework (ESF) (or a first application-specific service framework). For example, the processor of the electronic device may receive a user input (or a first user input) for installing an application-specific service framework (ESF) (or a first application-specific service framework). Figure 1 The input interface 120) receives user input for installing the dedicated service framework.

[0058] According to an embodiment, the external environment 150 of the electronic device may transmit a request to install a dedicated service framework to the runtime environment 169 of the secure element in response to a user input in operation 313. The installation request may include information of a category corresponding to the requested dedicated service framework installation.

[0059] According to an embodiment, in operation 320, the runtime environment 169 of the secure element may determine whether the dedicated service framework requested to be installed is installed through the dedicated service manager 167. For example, the runtime environment 169 may transmit an installation check request for a specified additional dedicated service framework to the dedicated service manager 167. The specified additional dedicated service framework may be, for example, a new dedicated service framework that is not installed in the secure element.

[0060] According to an embodiment, in operation 330, the dedicated service manager 167 may register a dedicated service registry (eg, Figure 2 The dedicated service manager 167 may determine whether the specified dedicated service framework is installed by using the dedicated service registry 165 of the dedicated service manager 167. For example, the dedicated service manager 167 may determine whether the category of the dedicated service framework requested to be installed is registered in the dedicated service registry. Alternatively, it may be determined whether the category corresponding to the dedicated service framework requested to be installed is stored in the memory of the secure element 160. According to an embodiment, the dedicated service manager 167 may transmit the installation check information of the specified dedicated service framework to the runtime environment 169.

[0061] According to an embodiment, in operation 341, the runtime environment 169 may install the dedicated service framework based on the transmitted installation check information. For example, when the designated dedicated service framework is not installed, the runtime environment 169 may install the designated dedicated service framework. The designated dedicated service framework may be installed in the same layer as the common service framework. According to an embodiment, when the designated dedicated service framework is in an installed state, the runtime environment 169 may transmit the installation check information to the external environment 150. The installation check information may be provided to the user.

[0062] According to an embodiment, the runtime environment 169 may transmit the category information to the dedicated service manager 167 in operation 343. For example, the runtime environment 169 may transmit the category information included in the installation request of the dedicated service framework to the dedicated service manager 167.

[0063] According to an embodiment, in operation 351, the dedicated service manager 167 may register in a dedicated service registry by using the transmitted class information (or the class information may be stored in a memory of the secure element 160). According to an embodiment, in operation 353, the dedicated service manager 167 may transmit the registration information to the runtime environment 169.

[0064] According to an embodiment, the dedicated service manager 167 may transmit the transmitted registration information to the external environment 150 in operation 360. As such, the external environment 150 of the electronic device may recognize that the requested dedicated service framework is installed.

[0065] Figure 4is a sequence diagram 400 indicating a method for an electronic device to install a dedicated service applet according to an embodiment.

[0066] Reference Figure 4 , electronic devices (e.g. Figure 1 The electronic device 100) can install a dedicated service applet (ESA) according to user input.

[0067] According to an embodiment, in operation 411, the external environment 150 of the electronic device may receive a user input (or a second user input) for installing an ESA (or a first ESA). For example, the processor of the electronic device may receive a user input (or a second user input) for installing an ESA (or a first ESA). Figure 1 The input interface 120 of the external environment 150 receives a user input for installing a dedicated applet. For example, when receiving a user input for executing an instruction to cause the external environment 150 to install a new application (or a second application), the external environment 150 may obtain information about a dedicated service applet associated with the application to be installed (e.g., information including an AID or category information) through a path to a market where applications can be downloaded, etc.

[0068] According to an embodiment, in operation 413, the external environment 150 of the electronic device may transmit a request for installing a dedicated service applet to the runtime environment 169 of the secure element in response to a user input. The installation request may include the AID of the dedicated service applet requested to be installed, and information of a category corresponding to a dedicated service framework required to run the dedicated service applet.

[0069] According to an embodiment, in operation 420, the runtime environment 169 of the secure element may determine whether a dedicated service framework for running the dedicated service applet requested to be installed is installed through the dedicated service manager 167. For example, the runtime environment 169 may transmit an installation check request for a specified dedicated service framework to the dedicated service manager 167.

[0070] According to an embodiment, in operation 430, the dedicated service manager 167 may register a dedicated service registry (eg, Figure 2 The dedicated service manager 167 may determine whether the specified dedicated service framework is installed by using the dedicated service registry 165 of the dedicated service manager 167. For example, the dedicated service manager 167 may determine whether the category of the dedicated service framework for running the dedicated service applet requested to be installed is registered in the dedicated service registry. The dedicated service manager 167 may determine whether the specified dedicated service framework is installed by using the category information included in the installation request. According to an embodiment, the dedicated service manager 167 may transmit the installation check information of the specified dedicated service framework to the runtime environment 169.

[0071] According to an embodiment, in operation 441, the runtime environment 169 may install a dedicated service applet based on the transmitted installation check information. For example, when a dedicated service framework for running an applet requested to be installed is not installed, the runtime environment 169 may install a specified dedicated service framework. When the specified dedicated service framework is not installed, the runtime environment 169 may transmit boot information for installing the specified dedicated service framework to the external environment 150. The installation boot information may be provided to the user. According to an embodiment, in operation 441, the runtime environment 169 may install a specified dedicated service applet through the external environment 150. For example, the runtime environment 169 may transmit installation information of the dedicated service framework to the external environment 150, and in response to the installation information, the runtime environment 169 may install the specified dedicated service applet from the external environment 150. According to an embodiment, the runtime environment 169 may store an applet (or a second applet) corresponding to an application installed by the processor 150.

[0072] According to an embodiment, the runtime environment 169 may transmit the ID information to the dedicated service manager 167 in operation 443. For example, the runtime environment 169 may transmit the AID information included in the installation request of the dedicated service applet to the dedicated service manager 167.

[0073] According to an embodiment, in operation 451, the dedicated service manager 167 may update the specified category by using the transmitted AID information. For example, the dedicated service manager 167 may register the transmitted AID information in the specified category. The specified category may be, for example, a category corresponding to a dedicated service framework for running the installed dedicated service applet. According to an embodiment, in operation 453, the dedicated service manager 167 may transmit the registration information to the runtime environment 169.

[0074] According to an embodiment, the dedicated service manager 167 may transmit the transmitted registration information to the external environment 150 in operation 460. As such, the external environment 150 of the electronic device may recognize that the requested dedicated service applet is installed.

[0075] According to an embodiment, the external environment 150 may be configured to install the application requested to be installed only if a dedicated service framework required to drive an applet for providing the service of the application requested to be installed is stored in the secure element 160 .

[0076] Figure 5 is a sequence diagram 500 indicating a method in which an electronic device executes a dedicated service applet according to an embodiment.

[0077] Reference Figure 5 , electronic devices (e.g. Figure 1The electronic device 100) may run a dedicated service applet (ESA) for executing a service according to a user input.

[0078] According to an embodiment, in operation 511, the external environment 150 of the electronic device may receive a user input (or a third user input) for running a dedicated service applet (ESA) (or a second dedicated service applet). For example, through a user interface, the processor of the electronic device may receive a user input for selecting a service (provided by using a second dedicated service applet) from one or more services provided by an application run by the processor. However, operation 511 may be used to describe an embodiment, and operation 511 may be replaced by another operation that requires driving a dedicated service applet to allow an application running in the external environment 150 to provide services even without user input.

[0079] According to an embodiment, in operation 513, the external environment 150 of the electronic device may transmit a request for running a dedicated service applet to the runtime environment 169 of the secure element in response to a user input. The running request may include, for example, target information specifying a dedicated service applet. The target information may include information about the AID and category of the dedicated service applet of the running request.

[0080] The runtime environment 169 may determine a category in which the applet executing the request is included, and may select a dedicated service framework corresponding to the determined category.

[0081] According to an embodiment, in operation 520, the runtime environment 169 of the security device may determine whether the category in which the applet requesting execution is included is in an activated state through the dedicated service manager 167. For example, the runtime environment 169 of the security device may transmit an activation check request for the category in which the applet is included to the dedicated service manager 167.

[0082] According to an embodiment, in operation 530, the dedicated service manager 167 may register a dedicated service registry (eg, Figure 2 The dedicated service manager 167 may identify the category in which the AID of the dedicated service applet for the run request is included by using the dedicated service registry 165 of the dedicated service manager 167. For example, the dedicated service manager 167 may identify the category in which the AID of the dedicated service applet for the run request is registered. The AID may be, for example, information included in the run request of the dedicated service applet. According to an embodiment, the dedicated service manager 167 may determine whether the category in which the AID is included is in an activated state. For example, the dedicated service manager 167 may determine whether the dedicated service framework corresponding to the category in which the AID is included is in an activated (or running) state. According to an embodiment, the dedicated service manager 167 may transmit the activation information of the category in which the AID is included to the runtime environment 169.

[0083] According to an embodiment, the runtime environment 169 may request activation of the identified class in operation 540. For example, when the identified class is not in an activated state, the runtime environment 169 may transmit an activation request for a dedicated service framework corresponding to the identified class to the dedicated service manager 167.

[0084] According to an embodiment, in operation 551, the dedicated service manager 167 may activate the identified category. For example, the dedicated service manager 167 may activate a dedicated service framework corresponding to the identified category. According to an embodiment, the dedicated service manager 167 may deactivate (or terminate the operation of) the remaining categories (or multiple categories) except the activated category. According to an embodiment, in operation 553, the dedicated service manager 167 may transmit the activation information of the identified category to the runtime environment 169. According to an embodiment, the runtime environment 169 may drive an applet requested to run from the external environment 150 that runs the application. The driven applet can be run by using the activated dedicated service framework.

[0085] According to an embodiment, in operation 560, the runtime environment 169 may transmit the transmitted activation information to the external environment 150. According to an embodiment, when providing services through applications is completed, the external environment 150 of the electronic device may transmit the complete information to the secure element 160 and may deactivate the activated dedicated service framework.

[0086] Figure 6 is a diagram illustrating a screen in which an electronic device installs a dedicated service framework and an applet according to an embodiment.

[0087] Reference Figure 6 , the electronic device 100 can install a framework and applet for providing electronic identification services.

[0088] According to an embodiment, in the screen 610, the electronic device 100 may display Figure 1 The display 140 of the embodiment of the present invention displays a list 611, which includes the list 611 that can be used by the security element (for example, Figure 1 The services included in the list 611 may include, for example, credit card services and car key services. In addition, the services included in the list 611 may be services in which applets for providing services have been installed. According to an embodiment, the electronic device 100 may display an object 613 in the display in which a program for providing a dedicated service is installed through a security element. The dedicated service may be, for example, an electronic identification service. According to an embodiment, the electronic device 100 may receive user input 610a for installing a dedicated service framework and a dedicated service applet through the object 613.

[0089] According to an embodiment, in screen 620, the electronic device 100 may install a specified dedicated service framework. For example, when the specified dedicated service framework is not installed, the electronic device 100 may install the specified dedicated service framework in the security element. According to an embodiment, the electronic device 100 may display the installation stage of the specified dedicated service framework in the display. For example, the electronic device 100 may display installation stage information (e.g., 1 / 2) and guidance information (e.g., "Initiating identification") in the display.

[0090] According to an embodiment, in screen 630, the electronic device 100 may install a specified dedicated service applet. For example, after determining through a security element whether a dedicated service framework for running the specified dedicated service applet is in an installed state, the electronic device 100 may install the specified dedicated service applet. According to an embodiment, the electronic device 100 may display the installation stage of the specified dedicated service framework in the display. For example, the electronic device 100 may display installation stage information (e.g., 2 / 2) and boot information in the display.

[0091] According to an embodiment, the electronic device 100 may display information indicating that the installation of the program for providing the dedicated service is completed in the display in screen 640. For example, the electronic device 100 may display information indicating that the electronic identification service is ready to be provided (eg, "Identification initiated") in the display.

[0092] According to an embodiment, in the screen 650 , the electronic device 100 may display a list 651 including items 651 a corresponding to services that can be newly provided in the display.

[0093] Figure 7 is a diagram illustrating a screen on which an electronic device sets a basic activation service according to an embodiment.

[0094] Reference Figure 7 , the electronic device 100 can set the electronic identification service as the basic activation service. Even in the absence of user input, the basic activation service can be activated by default.

[0095] According to an embodiment, in the screen 710, the electronic device 100 may display Figure 1 The display 140 of FIG. 1 shows a list 711, which includes the list of items that can be accessed through the security element (eg, Figure 1The services included in the list 711 may include, for example, public services (e.g., credit card services or car key services) and dedicated services (e.g., electronic identification services). According to an embodiment, the electronic device 100 may receive a user input 710a for setting a basic activation service. For example, the electronic device 100 may receive a user input 710a for selecting an item 711a corresponding to an electronic identification service.

[0096] According to an embodiment, the electronic device 100 may perform user authentication to set a basic activation service in screen 720. For example, the electronic device 100 may perform fingerprint recognition to set an electronic identification service as a basic activation service.

[0097] According to an embodiment, the electronic device 100 may set the service selected by the user as a basic activation service in screen 730. For example, the electronic device 100 may set a dedicated service framework for providing an electronic identification service selected by the user as a basic activation framework.

[0098] Figure 8 is a diagram illustrating a screen in which an electronic device changes a designated service into an activated service according to an embodiment.

[0099] Reference Figure 8 , the electronic device 100 may temporarily activate the electronic identification service. The temporarily activated service may be deactivated after executing the designated function, and the temporarily deactivated basic activation service may be activated.

[0100] According to an embodiment, in the screen 810, the electronic device 100 may display Figure 1 The display 140 of the embodiment of the present invention displays a list 811, which includes the list 811 that can be accessed through the security element (for example, Figure 1 The electronic device 100 may include a dedicated service provided by the security element 160 of the electronic device 100. The services included in the list 811 may include, for example, public services (e.g., credit card services or car key services) and dedicated services (e.g., electronic identification services). According to an embodiment, the electronic device 100 may receive a user input 810a for temporarily activating a specified service. For example, the electronic device 100 may receive a user input 810a for selecting an item 811a corresponding to an electronic identification service.

[0101] According to an embodiment, the electronic device 100 may perform user authentication for temporarily activating a designated service in screen 820. For example, the electronic device 100 may perform fingerprint recognition for temporarily activating an electronic identification service.

[0102] According to an embodiment, in screen 830, the electronic device 100 may temporarily activate a service selected by the user. For example, the electronic device 100 may temporarily activate a dedicated service framework for providing an electronic identification service selected by the user. According to an embodiment, the electronic device 100 may temporarily deactivate the remaining services except for the service selected by the user. For example, the electronic device 100 may temporarily deactivate a public service framework for providing public services.

[0103] When a dedicated service framework is activated to provide a service, the security element 160 may deactivate a framework for providing another service and may exclusively activate the dedicated service framework. When the dedicated service framework is exclusively activated, the security element 160 may be used as a security element dedicated to providing only the corresponding service.

[0104] Reference Figures 1 to 8 The electronic device 100 described in various embodiments of the present disclosure can install multiple dedicated service frameworks in one security element, and can selectively activate the multiple dedicated service frameworks installed thereby, so that multiple dedicated services provided by using a dedicated running framework can coexist in one security element.

[0105] Fig. 9 9 is a block diagram of an electronic device 901 in a network environment 900 according to various embodiments. Fig. 9 , the electronic device 901 in the network environment 900 may communicate with the electronic device 902 via a first network 998 (e.g., a short-range wireless communication network), or communicate with the electronic device 904 or the server 908 via a second network 999 (e.g., a long-range wireless communication network). According to an embodiment, the electronic device 901 may communicate with the electronic device 904 via the server 908. According to an embodiment, the electronic device 901 may include a processor 920, a memory 930, an input device 950, a sound output device 955, a display device 960, an audio module 970, a sensor module 976, an interface 977, a haptic module 979, a camera module 980, a power management module 988, a battery 989, a communication module 990, a user identification module (SIM) 996, or an antenna module 997. In some embodiments, at least one of the components (e.g., the display device 960 or the camera module 980) may be omitted from the electronic device 901, or one or more other components may be added to the electronic device 901. In some embodiments, some of the components may be implemented as a single integrated circuit. For example, the sensor module 976 (eg, a fingerprint sensor, an iris sensor, or an illumination sensor) may be implemented to be embedded in the display device 960 (eg, a display).

[0106] The processor 920 may run, for example, software (e.g., program 940) to control at least one other component (e.g., hardware component or software component) of the electronic device 901 connected to the processor 920, and may perform various data processing or calculations. According to one embodiment, as at least part of the data processing or calculation, the processor 920 may load a command or data received from another component (e.g., sensor module 976 or communication module 990) into the volatile memory 932, process the command or data stored in the volatile memory 932, and store the result data in the non-volatile memory 934. According to an embodiment, the processor 920 may include a main processor 929 (e.g., a central processing unit (CPU) or an application processor (AP)) and an auxiliary processor 923 (e.g., a graphics processing unit (GPU), an image signal processor (ISP), a sensor hub processor, or a communication processor (CP)) that is independent of or combined with the main processor 929 in operation. Additionally or alternatively, the auxiliary processor 923 may be adapted to consume less power than the main processor 929, or be adapted to be specifically used for a specified function. The auxiliary processor 923 may be implemented separately from the main processor 929 , or as part of the main processor 929 .

[0107] When the main processor 929 is in an inactive (e.g., sleep) state, the auxiliary processor 923 may control at least some of the functions or states related to at least one component (e.g., display device 960, sensor module 976, or communication module 990) among the components of the electronic device 901 (not the main processor 929), or when the main processor 929 is in an active state (e.g., running an application), the auxiliary processor 923 may control at least some of the functions or states related to at least one component (e.g., display device 960, sensor module 976, or communication module 990) among the components of the electronic device 901 together with the main processor 929. According to an embodiment, the auxiliary processor 923 (e.g., an image signal processor or a communication processor) may be implemented as part of another component (e.g., a camera module 980 or a communication module 990) that is functionally related to the auxiliary processor 923.

[0108] The memory 930 may store various data used by at least one component of the electronic device 901 (e.g., the processor 920 or the sensor module 976). The various data may include, for example, software (e.g., the program 940) and input data or output data for commands related thereto. The memory 930 may include a volatile memory 932 or a nonvolatile memory 934.

[0109] The program 940 may be stored as software in the memory 930 , and may include, for example, an operating system (OS) 942 , middleware 944 , or an application 946 .

[0110] The input device 950 may receive commands or data to be used by other components of the electronic device 901 (eg, the processor 920) from outside the electronic device 901 (eg, a user). The input device 950 may include, for example, a microphone, a mouse, a keyboard, or a digital pen.

[0111] The sound output device 955 can output a sound signal to the outside of the electronic device 901. The sound output device 955 may include, for example, a speaker or a receiver. The speaker can be used for general purposes such as playing multimedia or playing records, and the receiver can be used for incoming calls. According to an embodiment, the receiver can be implemented as a part of the speaker or as a part of the speaker.

[0112] The display device 960 may visually provide information to the outside of the electronic device 901 (e.g., a user). The display device 960 may include, for example, a display, a holographic device, or a projector, and a control circuit for controlling a corresponding one of the display, the holographic device, and the projector. According to an embodiment, the display device 960 may include a touch circuit adapted to detect a touch or a sensor circuit (e.g., a pressure sensor) adapted to measure the strength of a force caused by a touch.

[0113] The audio module 970 can convert sound into an electrical signal, or vice versa. According to an embodiment, the audio module 970 can obtain sound via the input device 950, or output sound via the sound output device 955 or an external electronic device (e.g., the electronic device 902 (e.g., a speaker or earphone)) directly or wirelessly connected to the electronic device 901.

[0114] The sensor module 976 may detect an operating state (e.g., power or temperature) of the electronic device 901 or an environmental state (e.g., a state of a user) outside the electronic device 901, and then generate an electrical signal or data value corresponding to the detected state. According to an embodiment, the sensor module 976 may include, for example, a gesture sensor, a gyroscope sensor, an atmospheric pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an infrared (IR) sensor, a biometric sensor, a temperature sensor, a humidity sensor, or an illumination sensor.

[0115] The interface 977 may support one or more specific protocols to be used to directly (e.g., wired) or wirelessly connect the electronic device 901 to an external electronic device (e.g., the electronic device 902). According to an embodiment, the interface 977 may include, for example, a high-definition multimedia interface (HDMI), a universal serial bus (USB) interface, a secure digital (SD) card interface, or an audio interface.

[0116] The connection end 978 may include a connector, wherein the electronic device 901 can be physically connected to an external electronic device (e.g., the electronic device 902) via the connector. According to an embodiment, the connection end 978 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (e.g., a headphone connector).

[0117] The haptic module 979 may convert the electrical signal into mechanical stimulation (eg, vibration or motion) or electrical stimulation that can be recognized by the user via his sense of touch or kinesthetic sense. According to an embodiment, the haptic module 979 may include, for example, a motor, a piezoelectric element, or an electrical stimulator.

[0118] The camera module 980 may capture a still image or a moving image. According to an embodiment, the camera module 980 may include one or more lenses, an image sensor, an image signal processor, or a flash.

[0119] The power management module 988 may manage power supply to the electronic device 901. According to an embodiment, the power management module 988 may be implemented as, for example, at least a part of a power management integrated circuit (PMIC).

[0120] The battery 989 may power at least one component of the electronic device 901. According to an embodiment, the battery 989 may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

[0121] The communication module 990 may support establishing a direct (e.g., wired) communication channel or a wireless communication channel between the electronic device 901 and an external electronic device (e.g., electronic device 902, electronic device 904, or server 908), and perform communication via the established communication channel. The communication module 990 may include one or more communication processors capable of operating independently from the processor 920 (e.g., an application processor (AP)) and supporting direct (e.g., wired) communication or wireless communication. According to an embodiment, the communication module 990 may include a wireless communication module 992 (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 994 (e.g., a local area network (LAN) communication module or a power line communication (PLC) module). A corresponding one of these communication modules can communicate with an external electronic device via a first network 998 (e.g., a short-range communication network such as Bluetooth, Wireless Fidelity (Wi-Fi) Direct, or Infrared Data Association (IrDA)) or a second network 999 (e.g., a long-range communication network such as a cellular network, the Internet, or a computer network (e.g., a LAN or a wide area network (WAN))). These various types of communication modules can be implemented as a single component (e.g., a single chip), or these various types of communication modules can be implemented as multiple components separated from each other (e.g., multiple chips). The wireless communication module 992 can identify and authenticate the electronic device 901 in a communication network (such as the first network 998 or the second network 999) using user information (e.g., an International Mobile Subscriber Identity (IMSI)) stored in the user identification module 996.

[0122] The antenna module 997 may transmit or receive a signal or power to or from the outside of the electronic device 901 (e.g., an external electronic device). According to an embodiment, the antenna module 997 may include one or more antennas, and at least one antenna suitable for a communication scheme used in a communication network (such as the first network 998 or the second network 999) may be selected from the plurality of antennas by, for example, the communication module 990 (e.g., the wireless communication module 992). Then, a signal or power may be transmitted or received between the communication module 990 and the external electronic device via the selected at least one antenna.

[0123] At least some of the above components can be interconnected via an inter-peripheral communication scheme (e.g., a bus, a general purpose input output (GPIO), a serial peripheral interface (SPI), or a mobile industry processor interface (MIPI)) and communicatively transmit signals (e.g., commands or data) therebetween.

[0124] According to an embodiment, a command or data may be sent or received between the electronic device 901 and the external electronic device 904 via the server 908 connected to the second network 999. Each of the electronic device 902 and the electronic device 904 may be a device of the same type as the electronic device 901, or a device of a different type from the electronic device 901. According to an embodiment, all or some operations to be executed in the electronic device 901 may be executed in one or more of the external electronic device 902, the external electronic device 904, or the server 908. For example, if the electronic device 901 should automatically execute a function or service or should execute a function or service in response to a request from a user or another device, the electronic device 901 may request the one or more external electronic devices to execute at least part of the function or service instead of executing the function or service, or the electronic device 901 may request the one or more external electronic devices to execute at least part of the function or service in addition to executing the function or service. The one or more external electronic devices that receive the request may execute the requested at least part of the function or service, or execute another function or another service related to the request, and transmit the result of the execution to the electronic device 901. The electronic device 901 may provide the result as at least a partial reply to the request with or without further processing the result. To this end, for example, cloud computing technology, distributed computing technology, or client-server computing technology may be used.

[0125] Fig.10 1000 is a flowchart simply illustrating a process in which an electronic device running an application provides a service by using a secure element according to an embodiment.

[0126] Reference Fig.10 In operation 1010, when there is a need to drive an applet stored in a memory of a secure element to allow a first application stored in a first memory to provide a service, the electronic device including the secure element may transmit target information to the secure element. For example, when a user input for requesting to run a service is received in a state where the first application is running, the electronic device may transmit target information specifying an applet for executing the requested service to the secure element.

[0127] Thereafter, in operation 1020, the electronic device may select a framework based on at least part of the target information. For example, in the case where the target information includes an AID, the electronic device may select a category including the AID, and may select a framework corresponding to the category. For another example, in the case where the target information includes information about a category, the electronic device may select a framework corresponding to the category. However, the present disclosure is not limited to the above examples.

[0128] Afterwards, in operation 1030, the electronic device may run the selected framework by using a security element. According to an embodiment, the security element may be associated with a service that should exclusively provide the selected framework relative to another service. In this case, in operation 1030, when the selected framework is run by using the security element, the security element may deactivate another framework that was previously run. When the selected framework is run in operation 1030, the security element may become a state capable of driving the applet specified by the target information.

[0129] Thereafter, in operation 1040, the electronic device may drive the applet specified by the target information based on the executed framework.

[0130] The electronic device according to various embodiments may be one of various types of electronic devices. The electronic device may include, for example, a portable communication device (e.g., a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, or a household appliance. According to an embodiment of the present disclosure, the electronic device is not limited to the above-described embodiment.

[0131] It should be understood that the various embodiments of the present disclosure and the terms used therein are not intended to limit the technical features set forth herein to specific embodiments, but include various changes, equivalents or alternative forms for the corresponding embodiments. For the description of the accompanying drawings, similar reference numerals may be used to refer to similar or related elements. It will be understood that the nouns in the singular form corresponding to the term may include one or more things unless the relevant context clearly indicates otherwise. As used herein, each of the phrases such as "A or B", "at least one of A and B", "at least one of A or B", "A, B or C", "at least one of A, B and C" and "at least one of A, B or C" may include all possible combinations of items listed together with the corresponding one of the multiple phrases. As used herein, terms such as "9th" and "2nd" or "first" and "second" may be used to simply distinguish the corresponding component from another component, and do not limit the component in other aspects (e.g., importance or order). It will be understood that if an element (e.g., a first element) is referred to as being "coupled to" or "coupled to" or "connected to" another element (e.g., the second element), "connected to" or "connected to" another element (e.g., the second element), with or without the terms "operably" or "communicatively", it means that the element may be directly (e.g., wired) coupled to the other element, wirelessly coupled to the other element, or coupled to the other element via a third element.

[0132] As used herein, the term "module" may include units implemented in hardware, software, or firmware, and may be used interchangeably with other terms (e.g., "logic," "logic block," "portion," or "circuit"). A module may be a single integrated component adapted to perform one or more functions or a minimum unit or portion of the single integrated component. For example, according to an embodiment, a module may be implemented in the form of an application specific integrated circuit (ASIC).

[0133] The various embodiments described herein may be implemented as software (e.g., program 940) including one or more instructions stored in a storage medium (e.g., internal memory 936 or external memory 938) that can be read by a machine (e.g., electronic device 901). For example, under the control of a processor, a processor (e.g., processor 920) of the machine (e.g., electronic device 901) may call at least one of the one or more instructions stored in the storage medium and execute the at least one instruction with or without the use of one or more other components. This enables the machine to operate to perform at least one function according to the at least one instruction called. The one or more instructions may include code generated by a compiler or code that can be run by an interpreter. A machine-readable storage medium may be provided in the form of a non-transitory storage medium. Among them, the term "non-transitory" only means that the storage medium is a tangible device and does not include a signal (e.g., an electromagnetic wave), but the term does not distinguish between data being semi-permanently stored in a storage medium and data being temporarily stored in a storage medium.

[0134] According to an embodiment, the method according to various embodiments of the present disclosure may be included and provided in a computer program product. The computer program product may be traded between a seller and a buyer as a commodity. The computer program product may be released in the form of a machine-readable storage medium (e.g., a compact disk read-only memory (CD-ROM)), or may be downloaded via an application store (e.g., PlayStore). TM ) The computer program product may be published (e.g., downloaded or uploaded) online, or the computer program product may be distributed (e.g., downloaded or uploaded) directly between two user devices (e.g., smart phones). If published online, at least part of the computer program product may be temporarily generated, or at least part of the computer program product may be at least temporarily stored in a machine-readable storage medium (such as a memory of a manufacturer's server, an application store's server, or a forwarding server).

[0135] According to various embodiments, each component (e.g., module or program) in the above-mentioned components may include a single entity or multiple entities. According to various embodiments, one or more components in the above-mentioned components may be omitted, or one or more other components may be added. Alternatively or additionally, multiple components (e.g., module or program) may be integrated into a single component. In this case, according to various embodiments, the integrated component may still perform the one or more functions of each component in the multiple components in the same or similar manner as a corresponding component in the multiple components before integration. According to various embodiments, the operations performed by a module, program or another component may be performed sequentially, in parallel, repeatedly or in a heuristic manner, or one or more operations in the operations may be run or omitted in different orders, or one or more other operations may be added.

Claims

1. An electronic device, comprising: Touch screen display; a first processor operably connected to the touch screen display; a first memory operatively connected to the first processor and configured to store a first application; as well as a secure element operably connected to the touch screen display, the first processor, and the first memory, and comprising: a second processor; and a second memory configured to store a first frame, a plurality of second frames, and a first applet associated with the first application, wherein the first frame is a public service frame, and each of the plurality of second frames is a dedicated service frame, The first memory includes instructions, which, when executed, cause the first processor to: receiving, via the touch screen display, a first user input requesting execution of the first application; and transmitting, based on the first user input received thereby, target information specifying the first applet to the secure element, Wherein, the second processor is configured as follows: selecting one of the plurality of second frames based on at least a portion of the information of the first applet corresponding to the target information; Run the selected framework; and The first applet is driven by using the running framework.

2. The electronic device according to claim 1, wherein: The instructions cause the first processor to: running the first application; and A screen of the first application thus executed is displayed in the touch screen display.

3. The electronic device according to claim 1, wherein: The first framework is used to drive applets associated with a plurality of different services, and The second framework is used to drive a small program associated with only one selected service.

4. The electronic device according to claim 1, wherein: The second memory is configured to store information about a plurality of categories respectively corresponding to the plurality of second frames and at least one applet included in each of the plurality of categories.

5. The electronic device according to claim 4, wherein: The target information includes: information about a category corresponding to the selected frame, and information about the first applet.

6. The electronic device according to claim 4, wherein: The second processor is configured as follows: determining a category including the first applet; and The one frame corresponding to the determined category is selected.

7. The electronic device according to claim 4, wherein: The instructions cause the first processor to: receiving a second user input for installing an additional second frame; and Based on the second user input thus received, transmitting an installation request for the additional second framework to the secure element Wherein, the second processor is configured as follows: In response to the installation request, determining whether a category corresponding to the additional second framework is stored in the second memory; When the category corresponding to the additional second frame is not stored, installing the additional second frame; and A category corresponding to the additional second frame is stored in the second memory.

8. The electronic device according to claim 7, wherein: The additional second frame is a new dedicated service frame not included in the plurality of second frames.

9. The electronic device according to claim 7, wherein: The installation request includes information about a category corresponding to the additional second frame, and Wherein, the second processor is configured as follows: Based on the information about the category corresponding to the additional second frame, it is determined whether the category corresponding to the additional second frame is stored in the second memory.

10. The electronic device according to claim 4, wherein: The instructions cause the first processor to: receiving a third user input for installing a second application; and transmitting, based on the third user input thus received, to the secure element an installation request for a second applet associated with the second application, and Wherein, the second processor is configured as follows: In response to the installation request, determining whether a category corresponding to a third frame associated with the second applet is stored in the second memory; When the category corresponding to the third frame is in a stored state, installing the second applet; and Information about the second applet thus installed is stored in the second memory.

11. The electronic device according to claim 10, wherein: The instructions cause the first processor to: When the category corresponding to the third framework is in a stored state, the second application is installed.

12. The electronic device according to claim 10, wherein: The installation request includes: information about a category corresponding to the third frame, and information about the second applet.

13. A method for controlling an electronic device including a security element, the method comprising: receiving a first user input requesting to execute a first application stored in a first memory; transmitting, based on the first user input thus received, target information specifying a first applet stored in a second memory included in the secure element to the secure element; Based on at least a portion of the information of the first applet corresponding to the target information, selecting one of a plurality of frames stored in the second memory; wherein each of the plurality of frames is a dedicated service framework; Run the selected framework; as well as The first applet is driven by using the running framework.

14. The method according to claim 13, further comprising: Running the first application; as well as A screen of the first application thus executed is displayed in the touch screen display.

15. The method according to claim 13, wherein: Each of the plurality of frames is used to drive an applet associated with only one selected service.

Images