Device and system for secure transactions

Abstract

The present application relates to an apparatus and system for secure transactions. If a security element (106) accesses a resource that is separate from the security element (106), conducting a secure transaction (112) may be inefficient in terms of power or time. If resources are never allowed to sleep, power usage is inefficient, and if resources are allowed to sleep, transaction time is inefficient and the user experiences a delay. In order to achieve double efficiency, the resource entity (204) is allowed to be powered off. The resource entity (204) is then speculatively powered on by an activation controller (108). The activation controller (108) predicts an upcoming secure transaction (112-U) based on a sensor output, wherein the sensor output is, for example, a located or detected electromagnetic field. Based on the monitored sensor output, the activation controller (108) sends an activation signal (110) to power on the security element (106) or resource entity (204) before initiating the upcoming secure transaction (112-U). Therefore, power can be saved without introducing transaction processing delays.

Description

Background Art

[0001] Electronic devices play an integral role in manufacturing, communications, transportation, healthcare, commerce, social interaction, and entertainment. For example, electronic devices power server farms that provide cloud-based distributed computing capabilities to commerce and communications. Electronic devices are also embedded in many different types of modern devices, from medical devices to appliances, and from vehicles to industrial tools. In addition, one electronic device—the smartphone—has become a virtual necessity at our fingertips. As electronic devices have become ubiquitous and essential to many aspects of modern life, device security has become extremely important.

[0002] Many people are familiar with malware, which is sometimes commonly referred to as "computer viruses." Having a well-behaved and robust operating system, secure computing practices, and anti-malware programs can help protect users' information from threats by combating many types of malware. However, the security of information stored by electronic devices can also be compromised by physical attacks on hardware and radio frequency (RF) attacks on wireless communications. In other words, certain attacks by bad actors can circumvent or subvert the practices listed above to allow the bad actor to access information that is intended to remain secure. Furthermore, these practices are not invulnerable.

[0003] The hardware of an electronic device includes at least one integrated circuit (IC) that provides intelligence to enable some desired functionality, including functionality that can utilize information to be protected. To support the protection of such information, some electronic devices include security circuitry to facilitate encryption and decryption of the information to be protected (e.g., financial data, passwords, and keys). Unfortunately, bad actors may attempt to subvert the cryptographic services of such security circuitry. Bad actors may also attempt to hijack information that is wirelessly transmitted to or from an electronic device. Therefore, it would be beneficial to incorporate in electronic device hardware that can support the secure use of information in a cryptographic or wireless communication environment.

[0004] This Background section is provided to generally present the context of the present disclosure. Unless otherwise indicated herein, the materials described in this section are neither explicitly nor implicitly admitted to be prior art to the present disclosure or the appended claims. Summary of the invention

[0005] The present invention content section is provided to introduce simplified concepts for speculative activation used for security elements. These simplified concepts are further described in the detailed description below. Therefore, this section is not intended to identify essential features of the claimed subject matter, nor is it intended to be used to determine the scope of the claimed subject matter.

[0006] An example of hardware that is expected to enable safe use of information in a password or wireless communication environment is called a security element (SE). A security element may include a security circuit designed to enable transactions to be performed while maintaining information security. A secure transaction may include, for example, financial exchanges (e.g., purchases), user authentication, and authorizations that enable access to data or exercise of rights. A security element may be incorporated into an electronic device such as a smartphone. In some environments, a security element is paired with a wireless interface unit such as a near field communication (NFC) unit. In an example commercial retail scenario, a user of a smartphone may pay for a product at a cash register using a security element and an associated NFC unit.

[0007] Existing safety elements include each resource to be used for performing security transactions. However, using a new paradigm, a safety element can use at least one of the following resource entities, which is arranged in an electronic device but is separated from the safety element outside or otherwise outside the safety element. Using such a resource entity can enable a smaller and cheaper safety element to be realized, or a safety element of a given size or complexity can be enabled to perform more complex security transactions. Examples of resource entities include memory (e.g., random access memory (RAM) or flash memory), interface (e.g., bus or buffer) and processor core. Regardless of the desired advantage (realizing a smaller safety element or performing a more complex security transaction), the safety element utilizes the resource entity in the electronic device according to this new paradigm.

[0008] Unfortunately, utilizing resource entities can adversely affect the operating efficiency of electronic devices. In some cases, the relevant resource entities remain powered on for fast access and use by security elements. In these scenarios, power consumption is inefficient because these resource entities are not allowed to enter sleep mode or otherwise be powered off. In other scenarios, the relevant resource entities are allowed to be powered off. In these latter scenarios, the speed of secure transactions is inefficient because powering on dormant resource entities can cause delays.

[0009] In contrast, some described implementations enable the security element to perform secure transactions in a power-saving and time-saving manner. According to some power management protocols, the relevant resource entity can be powered off when not in use to save power. In addition, the activation controller does not wait until the security transaction is initiated to power on the relevant resource entity, but instead speculatively issues an activation signal to power on the resource entity.

[0010] The activation controller may issue an activation signal prior to initiating a secure transaction by monitoring at least one sensor output. For example, the activation controller may monitor the geospatial location of the electronic device. Based on the geospatial location matching the secure transaction location, the activation controller may issue an activation signal. As another example, the activation controller may monitor the presence of an electromagnetic (EM) field. Based on a detected EM field matching the EM field indicating wireless communication of a secure transaction, the activation controller may issue an activation signal before the EM field is strong enough to enable or begin a secure transaction.

[0011] In an example implementation, a device includes a safety element and a wireless interface unit coupled to each other. The device also includes at least one resource entity that can be used by the safety element to perform a safety transaction. The activation controller of the device monitors the sensor output of the condition predicting the upcoming safety transaction. Here, the sensor can include a positioning unit and a radio, etc. Detecting this condition can trigger the activation controller to send an activation signal. In response to the activation signal, at least one of the safety element or the resource entity starts to power on at least before initiating the upcoming safety transaction. Therefore, the circuit for performing the upcoming safety transaction can be ready when initiating the safety transaction. Utilizing these technologies, the safety element can utilize one or more resource entities of the device to perform safety transactions, and these safety transactions are also performed in a power-saving and time-saving manner.

[0012] The aspects described below include a device for speculative activation of security element use. The device includes a security element, a wireless interface unit, a resource entity, and an activation controller. The security element is configured to process multiple security transactions. The wireless interface unit is coupled to the security element and is configured to implement the multiple security transactions through at least one wireless communication. The resource entity is coupled to the security element and is configured to support the multiple security transactions. The activation controller is coupled to at least one of the security element or the resource entity. The activation controller is configured to predict an upcoming security transaction of the multiple security transactions. The activation controller is also configured to send an activation signal before initiating the upcoming security transaction in response to the prediction of the upcoming security transaction.

[0013] Aspects described below include a method for speculative activation of security element use performed by an apparatus. The method includes obtaining at least one sensor output and using the at least one sensor output to predict an upcoming security transaction. The method also includes issuing at least one activation signal to one or more components based on the prediction. The method also includes, in response to the issuing, starting to power on the one or more components before initiating the upcoming security transaction. The method also includes initiating the upcoming security transaction using the security element. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Devices and techniques for speculative activation of secure element use are described with reference to the following figures. The same numbers are used throughout the figures to reference similar features and components:

[0015] Figure 1 An example apparatus having a printed circuit board (PCB) including a secure element and an activation controller to implement speculative activation for use with the secure element is illustrated.

[0016] Figure 2 is a block diagram illustrating an example PCB including a secure element, a resource entity, and an activation controller for speculative activation used by a secure element.

[0017] Figure 3 is a sequence diagram illustrating an example process involving an activation controller and at least one of a secure element or a resource entity for speculative activation for secure element usage.

[0018] Figure 4 is a schematic diagram illustrating an example architecture that may include a system on a chip (SoC) or memory as part of a scheme to implement speculative activation for secure element use.

[0019] Figure 5 is a schematic diagram illustrating an exemplary EM field-based technique for implementing speculative activation for use with a secure element, wherein an activation controller is part of a wireless interface unit implemented as an NFC unit.

[0020] Figure 6 is a schematic diagram illustrating an exemplary location-based technique for implementing speculative activation for secure element use, where an activation controller is part of an ambient computing unit (ACU).

[0021] Figure 7 An example method for implementing an apparatus for speculative activation of secure element usage is illustrated.

[0022] Figure 8 Various components of an example electronic device that can implement speculative activation for secure element use according to one or more described aspects are illustrated. DETAILED DESCRIPTION

[0023] Overview

[0024] Electronic devices participate in activities that may be vulnerable to attacks by bad actors, including storing valuable information and communicating wirelessly. In order to prevent such attacks, electronic devices contain hardware designed to prevent unauthorized access to information. An example of such hardware is called a security element (SE). A security element may include a security circuit that is expected to enable secure transactions to be performed and keep information protected at the same time. Secure transactions may include, for example, financial exchanges (e.g., purchase of goods or services), user authentication, and authorization to perform tasks. Typically, a security element may store secret data, perform or support cryptographic operations, host security applications, and facilitate encrypted communications. A security element may be implemented in a tamper-resistant form that attempts to destroy these secret data before allowing a physical attack to leak the secret data.

[0025] In some environments, the security element is paired with a wireless interface unit (such as a near field communication (NFC) unit). The security element can be incorporated into an electronic device, such as a smart phone (e.g., a wireless communication device with a memory and processing power for executing an application). In an example commercial retail scenario, a user of a smart phone can use a security element and an associated NFC unit to pay for a product in a store. To this end, the user places the smart phone near an NFC reader, which is part of a store cash register, and indicates approval for the purchase. If the security element has the resources required to perform a commercial transaction contained in the security element (as an existing security element has), this can occur relatively quickly, and therefore occurs seamlessly. For example, an existing security element can be implemented as an independent discrete component that can be connected / paired with an NFC front end to support contactless transactions with low latency. The security element is independent and ready to perform transactions once the security element is awakened by the NFC front end.

[0026] However, for the new paradigm, the safety element may not include all resources for performing security transactions. For example, the size occupied by the safety element can be reduced to reduce the size or cost of the corresponding electronic device. To this end, the safety element can utilize the resource entity within the electronic device to enable the safety element to perform the same type of security transactions that can be performed before its size is reduced. As another example, it is possible to authorize the safety element to perform more difficult or complex security transactions by utilizing those hardware resource entities that are additionally present in the electronic device without incorporating additional hardware resources. For example, the safety element may rely on a central processing unit (CPU) to perform complex calculations, or rely on main memory to store large data sets. In the former example, the cost or size can be reduced, while the safety element is still able to perform a specific security transaction. In the latter example, the size or cost increase can be avoided, while still enabling a given safety element to perform more complex security transactions.

[0027] In the above two examples, the safety element realizes advantage by using one or more resource entities separated from the safety element outside or otherwise to carry out safety transactions. Using the resource entity separated from the safety element can also improve power efficiency, because the resource entity can be powered off while the safety element continues to operate during the time period of low equipment utilization. However, even if the safety element continues to be powered on, the power off will also consume time when powered on to save energy. Unfortunately, this time of powering on the resource entity introduces a time delay before the safety transaction can be performed, and the user experiences this time delay as a delay before the safety transaction is completed. This delay can bring inconvenience and potential frustration to the user of electronic equipment.

[0028] Eliminating or at least reducing the delay caused by the power off of the resource entity used by the safety element to perform a safety transaction will be advantageous.For this reason, in an example implementation, before initiating an upcoming safety transaction, the activation controller predicts that the upcoming safety transaction will be performed.Based on the prediction, the activation controller generates an activation signal speculatively.The activation controller sends an activation signal to the resource entity or the safety element (or both) before initiating a safety transaction.In response to the activation signal, the resource entity or the safety element (or both) is powered on and begins to be initialized or configured for serving the upcoming safety transaction.In these ways, the resource entity and the safety element can be ready for a safety transaction earlier than each resource entity and the safety element in the case where the activation signal is not speculatively issued.Therefore, when receiving an inquiry about a safety transaction, the safety element can start to perform a safety transaction with a shorter delay (if any), because it or the resource entity is started from a power-off state to operate.

[0029] In some implementations, the activation controller may be implemented as part of an ambient computing unit (ACU) that may use sensor data to initiate operations within the electronic device. For example, if the ambient computing unit determines that the electronic device is located at a location corresponding to use for a secure transaction, the ambient computing unit generates and issues an activation signal. In other implementations, the activation controller may be implemented as part of a wireless interface unit (e.g., a near field communication (NFC) unit) that may interact with an external wireless interface unit of a remote electronic device. For example, if the wireless interface unit detects the presence of an electromagnetic field corresponding to a secure transaction, the wireless interface unit may issue an activation signal before the wireless interface units are within a range sufficient to be able to communicate using the electromagnetic field.

[0030] In some environments, resource entities may include memory, application processor complex (APC), and interface (e.g., bus or buffer), etc. For example, the activation signal may be implemented as one or more voltages on at least one line, as an interrupt, as a command or instruction on a message bus, or as some combination thereof. In an example implementation, a system on chip (SoC) may include an APC, which is coupled to a memory via a first interface and to a security element via a second interface. Therefore, based on a predicted upcoming security transaction, an activation controller may send an activation signal that wakes up the APC, memory, and / or at least one interface. If the security element is powered off, the same or different activation signal may also wake up the security element.

[0031] For example, the security element may request the APC via the second interface to access data stored in the memory via the first interface before actually initiating an upcoming security transaction with another device. Thus, the security element and any associated resource entities may be ready to perform a security transaction at the time of initiation, even if the circuit is powered off when not in use. These means effectively eliminate or at least reduce the delays that a user would otherwise experience without speculative activation of a security element or resource entity based on a predicted upcoming security transaction. Furthermore, these means enable the utilization of resource entities separate from the security element in an energy-efficient manner.

[0032] The following discussion of example implementations at various levels of detail with reference to the relevant figures. The following discussion first sets forth an example operating environment, then describes example hardware, schemes, and techniques. Example methods are then described with reference to flowcharts or diagrams.

[0033] Example operating environment

[0034] Figure 1An example device 102 having a printed circuit board 104 (PCB 104) is generally shown at 100, and the printed circuit board 104 includes a security element 106 and an activation controller 108 (AC 108) to implement speculative activation for use with the security element. In this example, the device 102 is depicted as a smart phone. However, the device 102 can be implemented as any suitable computing or electronic device. Examples of the device 102 include mobile communication devices, modems, cellular or mobile phones, mobile stations, gaming devices, navigation devices, media or entertainment devices (e.g., media streaming devices or game controllers), laptop computers, desktop computers, tablet computers, smart appliances, in-vehicle electronic systems, wearable computing devices (e.g., clothing or watches), Internet of Things (IoT) devices, sensors, inventory management devices, electronic parts of machines or certain devices, and server computers or parts thereof (e.g., server blades), etc. Illustrated examples of apparatus 102 include a tablet device 102-1, a smart TV 102-2, a desktop computer 102-3, a server computer 102-4, a smart watch 102-5, a smart phone (or document reader) 102-6, and smart glasses 102-7.

[0035] In an example implementation, the device 102 includes at least one PCB 104. The PCB 104 can be implemented as a flexible PCB, a rigid PCB, a single-layer or multi-layer PCB, a surface mount or through-hole PCB, a combination thereof, and the like. The PCB 104 can include at least one integrated circuit (IC), such as a general-purpose processor, a system on a chip (SoC), a security-oriented IC, a memory chip, a communication IC (e.g., performing encryption or decryption for information being sent or received), a security element component, a combination thereof, and the like. As shown, the PCB 104 includes at least one security element 106 and at least one activation controller 108, which can be part of separate ICs or integrated together on a single IC.

[0036] In an example operation, the security element 106 may perform at least one security transaction. The activation controller 108 monitors data output by at least one sensor. Using the monitored data, the activation controller 108 may predict an upcoming security transaction 112-U. Based on the predicted upcoming security transaction 112-U, the activation controller 108 speculatively generates an activation signal 110. The activation controller 108 may issue the activation signal 110 to wake up related components before initiating the upcoming security transaction 112-U. The activation controller 108 may issue the activation signal 110 to, for example, the security element 106 and / or one or more resource entities. Reference Figure 2 These components and associated signaling are described.

[0037] Example Schemes, Techniques, and Hardware for Speculative Activation of Secure Element Use

[0038] Figure 2 2 is a block diagram 200 illustrating an example PCB 104 for speculative activation of secure element use, the example PCB 104 including a secure element 106, a resource entity 204, and an activation controller 108. Figure 1 The electronic device or other device 102 may include at least one security element 106, at least one activation controller 108, at least one wireless interface unit 202 (WIU 202), at least one resource entity 204, and at least one sensor 208. Although only one of each component is explicitly depicted, the device may include two or more of each component. In addition, the components may be distributed on two or more different PCBs 104.

[0039] In an example implementation, the security element 106 can process multiple secure transactions 112-1...112-N, where "N" represents a positive integer. For example, the security element 106 can process the multiple secure transactions 112-1...112-N over time, or the security element 106 can process multiple different types of secure transactions 112. The wireless interface unit 202 is coupled to the security element 106. The wireless interface unit 202 enables the security element 106 to process the multiple secure transactions 112-1...112-N via at least one wireless communication 206. Processing can include, for example, executing, implementing, or conducting the secure transaction 112, which can include interaction with a separate device. The wireless communication 206 can be implemented as, for example, a short-range wireless signal, such as based on NFC or Bluetooth. TM The signal propagated by the protocol.

[0040] The resource entity 204 is coupled to the security element 106. The resource entity 204 supports the security element 106 in the processing of multiple security transactions 112-1...112-N. Examples of support for the resource entity 204 are provided below. The activation controller 108 is coupled to one or more components - for example, at least one of the security element 106 or the resource entity 204. As described below, the appearance of the conjunction "or" herein can indicate that any one of the items or any one or more items connected by "or" are implied or all items are implied. Therefore, the activation controller 108 can be coupled to the security element 106 and at least one resource entity 204. The activation controller 108 can also be coupled to at least one sensor 208. The sensor 208 generates a sensor output 210 based on one or more sensed parameters or physical characteristics. Examples of sensors 208 are described below.

[0041] In an example operation, the activation controller 108 predicts an upcoming security transaction 112-U among a plurality of security transactions 112-1 to 112-N. Therefore, the upcoming security transaction 112-U is or can become one of the plurality of security transactions 112-1 ... 112-N. Based on the prediction of the upcoming security transaction 112-U, the activation controller 108 generates an activation signal 110 before initiating the upcoming security transaction 112-U. The activation controller 108 may also send an activation signal 110 to at least one of the security element 106 or the resource entity 204. In response to the activation signal 110, the security element 106 or the resource entity 204 may at least start to power on and start to be configured for operation before initiating the upcoming security transaction 112-U. In addition, the security element 106 and the resource entity 204 may be fully prepared to operate before initiating the upcoming security transaction 112-U.

[0042] Some examples of these components and signaling are provided below. Secure transactions 112 may include financial exchanges (e.g., purchases of goods or services), data transfers, authentication, authorization to perform tasks, encryption or decryption operations, and combinations thereof, among others. The secure element 106 may be implemented as a separate discrete component or integrated with one or more other components. In some cases, the secure element 106 may collaborate with a wireless interface unit (WIU) 202 to perform or otherwise process secure transactions 112. The wireless interface unit 202 may be implemented, for example, as a near field communication (NFC) unit or a Bluetooth® wireless communication unit. TM Radio. The secure element 106 and the wireless interface unit 202 may be paired together in some environments.

[0043] Resource entity 204 includes circuits that provide at least one resource to security element 106 to support the processing of secure transaction 112. The resources provided may include data, storage, processing power, and communication bandwidth, etc. Examples of resource entity 204 include at least one interface, one or more processors, at least one memory, at least one memory controller, and at least one biometric reader. The interface may be implemented as a shared or dedicated bus, an interconnect, a switch fabric, and a buffer, etc. The one or more processors may be implemented as a core and application processor complex (APC), etc. The memory may be implemented as a random access memory (e.g., double data rate (DDR) RAM), a cache memory, and a flash memory, etc. Examples of biometric readers include fingerprint scanners, iris scanners, and cameras or radar units for facial recognition.

[0044] The activation controller 108 may be implemented as part of various components, implemented as a separate component, distributed among multiple components, etc. For example, the activation controller 108 (AC 108) may be implemented as part of the wireless interface unit 202 (eg, as part of an NFC unit). Figure 5 An example of this approach is described below. Additionally or alternatively, the activation controller 108 (AC 108) may be implemented as part of an ambient computing unit (ACU). Figure 6 An example of this approach is described. The activation controller 108 may also be implemented in other ways.

[0045] In an example implementation, the activation controller 108 sends an activation signal 110 before the upcoming secure transaction 112-U is initiated. The upcoming secure transaction 112-U can be initiated by, for example, the secure element 106 sending a query about the upcoming secure transaction 112-U to a separate device. Alternatively, the upcoming secure transaction 112-U can be initiated by, for example, the secure element 106 receiving a query about the upcoming secure transaction 112-U from a separate device. For example, the query can include a first command transmitted by a separate device such as an NFC reader. The separate device can be close to or away from the electronic device having the PCB 104.

[0046] The activation controller 108 may provide an activation signal 110 to the security element 106 or the resource entity 204. The activation signal 110 may be implemented as an interrupt, command, instruction, etc. Additionally or alternatively, the activation signal 110 may be implemented as at least one voltage driven on one or more wires, as a message placed on a bus, or some combination thereof. For example, the activation signal 110 may include a differential signal propagated on two metal traces. In response to the activation signal 110, the powered-off component begins to power on and may also begin to be initialized or configured to process a secure transaction 112.

[0047] In some cases, the powered-off circuit is in a low-power state or sleep mode, or has undergone some measure of power collapse. Thus, the power outage can be complete or partial. However, the circuit is sufficiently powered off so that the component cannot process or support the secure transaction 112 before being powered on. In other words, the powered-off component does not have enough power to perform functions related to the upcoming secure transaction 112-U. In contrast, the powered-on component is awakened and repowered to the extent that the component has enough power to perform related functions for the upcoming secure transaction 112-U.

[0048] Figure 3is a sequence diagram illustrating an example process 300 for speculative activation of secure element usage involving activation controller 108 and at least one of secure element 106 or resource entity 204. Process 300 may also involve multiple resource entities 204 or wireless interface units 202. At 302, activation controller 108 receives a signal from (e.g., Figure 2 The activation controller 108 obtains sensor input 210 using a sensor 208 (e.g., a sensor 208 of a wireless communication network). The sensor input 210 may include, for example, geospatial location, EM field detection, strength of a detected EM field or signal, and identity of a wireless local area network (WLAN), etc. Using the sensor input 210, the activation controller 108 predicts that a secure transaction 112 is imminent at 304—for example, predicts an upcoming secure transaction 112-U. Based on the prediction, the activation controller 108 generates at least one activation signal 110 at 306.

[0049] At 308, the activation controller 108 issues the at least one activation signal 110. The generation or issuance may depend on the type of the upcoming security transaction 112 predicted or the predicted upcoming security transaction 112-U may involve what separate companion device. For example, the transaction type or companion device may indicate what one or more resources will be used to process the upcoming security transaction 112-U. As part of the issuance at 308, the activation controller 108 may issue a first activation signal 110-1 to the security element 106 and a second activation signal 110-2 to the resource entity 204. The first and second activation signals 110-1 and 110-2 may be implemented as separate signals or as one signal that reaches multiple components. Alternatively, the activation controller 108 may issue an activation signal 110 to a single component--e.g., only the security element 106 or only the resource entity 204.

[0050] In response to the first activation signal 110-1, the security element 106 is powered on at 310-1. For example, the security element 106 can perform initialization or configuration activities to prepare for the execution of the security transaction 112. At 310-2, the resource entity 204 is powered on in response to the second activation signal 110-2. For example, the active link between the security element 106 and the SoC can be restored. Additionally or alternatively, the application processor complex (APC) can reconnect the power supply after the power collapse, or the secure simple pairing (SSP) bundle can be loaded into the platform that complies with the SSP. The power-up at 310-1 or 310-2 can be started at least before initiating the upcoming security transaction 112-U. In addition, the power-up at 310-1 or 310-2 can be completed before initiating the upcoming security transaction 112-U.

[0051] At 312, the secure transaction 112 is initiated. The initiation may be triggered by the wireless interface unit 202 in conjunction with the secure element 106, as indicated by arrow 314. Alternatively, the initiation may be initiated by a different wireless interface unit ( Figure 3 The initiation of the secure transaction 112 may include the exchange (e.g., sending or issuing and receiving) of at least one wireless communication 206. As shown by the dashed line 316, for some implementations, the activation controller 108 may be incorporated into the wireless interface unit 202, as described below. Figure 5 An example thereof is described.

[0052] Figure 4 4 is a schematic diagram illustrating an example architecture 400 that may include a system on chip 402 (SoC 402) or memory 204-3 as part of a scheme for implementing speculative activation for secure element use. The architecture 400 also includes a secure element 106, a wireless interface unit 202, and a resource entity 204. Also refer to Figure 2 and Figure 3 , the resource entity 204 can be implemented as at least one interface 204-1, as at least one application processor complex 204-2 (APC 204-2), as at least one memory 204-3, as at least one memory controller 204-4, and some combination thereof, etc. As shown in the figure, the SoC 402 includes the application processor complex 204-2 and the environment computing unit 404 (ACU 404). The memory 204-3 can be implemented as a random access memory 408 (RAM 408), a flash memory 410, and a hierarchical memory including the RAM 408 and the flash memory 410, etc. Although Figure 4 Only a single security element 106 is depicted in FIG, but the electronic device may include multiple security elements.

[0053] In some implementations, the activation controller 108 may be incorporated into the wireless interface unit 202. Figure 5 An example of such an approach is described below. In other implementations, the activation controller 108 may be incorporated into the environment computing unit 404. Figure 6 An example of this approach is described. The activation controller 108 may also be implemented in both the wireless interface unit 202 and the environment computing unit 404. Thus, separate instances of the activation controller 108 may be implemented in each component, or a distributed activation controller 108 may be implemented across both components. Furthermore, the activation controller 108 may be implemented as part of another component or as an independent component.

[0054] Memory 204-3 may include a security element partition 406 that stores data for security element 106 for use during execution of at least some security transactions 112. Memory controller 204-4 may be implemented to facilitate access to memory 204-3. Examples include DDR controllers and universal flash storage (UFS) controllers. Application processor complex 204-2 includes one or more cores or application processors and support circuits to implement various functions of electronic devices. Therefore, application processor complex 204-2 may include a general core, a cryptographic core, a graphics-oriented core, a tensor core, and a modem circuit, etc. Interface 204-1 (I / F 204-1) may include one or more interface structures. An illustrated example of interface 204-1 includes a first bus linking SoC 402 to security element 106 and a second bus coupling SoC 402 to memory 204-3. Other illustrated examples of interface 204-1 include a buffer for a first bus at security element 106 and another buffer for a first bus at SoC 402. The buffer may also couple the SoC 402 and the memory 204-3 to the second bus.The bus or buffer may be implemented according to any bus protocol, such as Peripheral Component Interconnect Express (PCIe) or Universal Flash Storage (UFS).

[0055] In an example operation, if conducting a secure transaction involves utilizing resources of the application processor complex 204-2, the activation controller 108 may speculatively power up the first bus (e.g., the interface 204-1 extending between the secure element 106 and the SoC 402) and the application processor complex 204-2. If conducting a secure transaction involves utilizing the memory 2043, for example, to access the secure element partition 406, the activation controller 108 may additionally send at least one activation signal 110 to the memory 204-3 or the second bus (e.g., the interface 204-1 providing access to the memory 204-3).

[0056] Figure 4 (as well as Figure 2 , Figure 5 , Figure 6 and Figure 8) may be illustrated with separate blocks to indicate that each component can be implemented as a discrete part. However, these illustrations are only examples. The components depicted may be combined, integrated, or separated in different ways. For example, memory 204-3 or security element 106 may be integrated with application processor complex 204-2 as part of SoC 402. Additionally or alternatively, environmental computing unit 404 may not be integrated with application processor complex 204-2; therefore, environmental computing unit 404 may alternatively be implemented as a standalone component or integrated with security element 106 or another component not illustrated. In addition, although described below and in Figure 5 and Figure 6 The two techniques depicted in FIG. 5 are presented separately, but both can be implemented within a single electronic device.

[0057] Figure 5 is a schematic diagram illustrating an exemplary EM field-based technique 500 for implementing speculative activation for use with a secure element, wherein the activation controller 108 is (eg, Figures 2 to 4 A portion of the wireless interface unit 202. Figure 5 In the EM field-based technology 500, the wireless interface unit 202 is implemented as an NFC unit 202-1. As shown in the figure, the first device 102-1 includes the NFC unit 202-1 and the security element 106 as well as the interface 204-1, the SoC 402 and the memory 204-3. The second device 102-2 includes an NFC reader 502. Here, the first device 102-1 ( Figure 2 The sensor 208 is implemented as the wireless interface unit 202, which is implemented as the NFC unit 202-1. The NFC unit 202-1 can be used as an NFC card emulator, an NFC reader or writer, an NFC peer communicator, a combination thereof, and the like.

[0058] In an example implementation, NFC unit 202-1 can detect EM field 504. Figure 2) sensor output 210 may thus include detection of an EM field for the EM field based technique 500. In operation, a user (not shown) is moving the first device 102-1 closer to the second device 102-2, such as by extending a smartphone toward an NFC reader at a store cash register. Thus, the extension 506 of the space extending between the first and second devices 102-1 and 102-2 is decreasing. At a first distance 508-1, the NFC unit 202-1 may detect the presence of an EM field 504 being emitted by the NFC reader 502. However, the first distance 508-1 from the NFC reader 502 is too great to enable two-way wireless communication between the NFC unit 202-1 and the NFC reader 502 via the EM field 504. Thus, at this first distance 508-1, the NFC unit 202-1 is not yet able to communicate data with the NFC reader 502, and therefore, the secure transaction 112 is not initiated.

[0059] Nevertheless, due to the detection of the EM field 504, the activation controller 108 at the NFC unit 202-1 predicts an upcoming secure transaction 112-U. Based on the predicted upcoming secure transaction 112-U, the activation controller 108 generates and issues at least one activation signal 110. In this example, the activation controller 108 issues the activation signal 110 to at least the application processor complex 204-2 and the first bus instance of the interface 204-1. However, the activation controller 108 may issue more, fewer, or different activation signals 110 to more, fewer, or different components, wherein these components serve as the resource entity 204 of the secure element 106 to perform the upcoming secure transaction 112-U. Although Figure 5 Not shown, the activation controller 108 may also send an activation signal 110 to the secure element 106 .

[0060] When the first device 102-1 reaches the shorter second distance 508-2 along the extension 506, the EM field 504 is strong enough to enable the NFC unit 2021 and the NFC reader 502 to communicate (e.g., the strength of the EM field 504 is sufficient to establish a connection capable of transmitting data). Therefore, after the size of the extension 506 has been reduced to the second distance 508-2, the upcoming secure transaction 112-U can be initiated. In an example NFC environment, the second distance 508-2 can correspond to approximately 20 centimeters (cm) or less, and the first distance 508-1 can correspond to approximately 40 cm. In such an environment, the principles of implementing speculative activation for secure element use can provide at least 100 milliseconds (ms) of lead time to power up and initialize the circuit between detecting the EM field 504 and the ability 112 to initiate a secure transaction. In another example NFC environment, the second distance 508-2 can correspond to approximately 10 cm or less, and the first distance 508-1 can correspond to approximately 25 cm. However, these distances are presented as examples only.

[0061] Figure 6 is a schematic diagram illustrating an exemplary location-based technique 600 for implementing speculative activation for secure element use, wherein the activation controller 108 is part of the ambient computing unit 404 (ACU 404). As shown, the device 102 includes the secure element 106, the interface 204-1, the application processor complex 204-2, the memory 204-3, and the SoC 402. The SoC 402 is depicted as including the ambient computing unit 404 in addition to the application processor complex 204-2; however, the ambient computing unit 404 can be implemented separately. Figure 6 In the location-based technology 600, ( Figure 2 The sensor 208 is implemented as a positioning unit 602. The positioning unit 602 can be a part of the environment computing unit 404 or separate from the environment computing unit 404.

[0062] In an example implementation, the positioning unit 602 is communicatively coupled to the activation controller 108. The positioning unit 602 determines a geospatial location 604. The sensor output 210 may thus include the geospatial location 604 for the location-based technique 600. The positioning unit 602 may include a satellite-based positioning system chip (e.g., a global positioning system (GPS) chip), an inertial measurement unit (IMU), a location tracking module, or a location tracking module that may utilize a sensor output 210. A location determination system that uses a network name (e.g., a service set identifier (SSID)) or cell information, a location determination system that can use trilateration with multiple base stations, combinations thereof, etc. Thus, geospatial location 604 can include geospatial coordinates, a waypoint or location plus distance, a name of a wireless network, a name and geographic area of ​​a place, etc.

[0063] In an example operation, the activation controller 108 obtains a geospatial location 604 from the positioning unit 602. The activation controller 108 determines whether the geospatial location 604 matches a location associated with a secure transaction (ST location 606). The match determination is based on at least one comparison. In order to compare, the activation controller 108 may have a list of secure transaction locations established over time by inserting entries each time a secure transaction is performed, by downloading a database of secure transaction locations, and combinations thereof, etc. As shown, the activation controller 108 may use multiple secure transaction locations 606-1, 606-2, ..., 606-L, where "L" represents a positive integer. The activation controller 108 compares the geospatial location 604 with one or more secure transaction locations in the multiple secure transaction locations 606-1 ... 606-L to determine whether there is a match 608.

[0064] If the activation controller 108 determines that there is a match 608 between the current geospatial location 604 and the known secure transaction location 606, the activation controller 108 predicts an upcoming secure transaction 112-U. Based on the predicted upcoming secure transaction 112-U, the activation controller 108 issues at least one activation signal 110. In this example, the activation controller 108 issues the activation signal 110 to three destinations: the secure element 106, the application processor complex 204-2 of the SoC 402, and the first bus instance of the interface 204-1 (which links the secure element 106 to the SoC 402). However, the activation controller 108 may issue the activation signal 110 to more, fewer, or different components that may support the upcoming secure transaction 112-U. For example, if the activation controller 108 of the ambient computing unit 404 determines that the device 102 is at a public transportation location, the activation controller 108 may issue the activation signal 110 to the memory 204-3 if the secure element partition 406 stores data related to a public transportation payment account or an available passenger balance of the public transportation system.

[0065] In other implementations, the activation controller 108 may issue an activation signal 110 based on the following geospatial location 604, wherein the geospatial location 604 is based on ultra-wideband (UWB) signaling (which can be used for fine ranging and localization) relative to another electronic device. In some cases, ultra-wideband signaling can be implemented according to, for example, the IEEE 802.15.4a standard. The wireless interface unit 202 or another wireless interface unit coupled to the environmental computing unit 404 can be implemented as an ultra-wideband radio. In operation, the ultra-wideband wireless interface unit can act as an initiator or responder in the ranging process to determine the range (e.g., distance) to another electronic device. The range to other electronic devices that are or have been participants in a secure transaction can correspond to the secure transaction location 606. In an example environment, based on the ultra-wideband signaling of the wireless interface unit, the environmental computing unit 404 can determine that the user is approaching their car. In response to this determination, the environmental computing unit 404 can issue an activation signal 110 to turn on the wireless interface unit 202 (e.g., NFC unit) to use the security element 106 as a car key.

[0066] Having generally described schemes, techniques, and hardware for speculative activation of secure element use, we now turn to a discussion of example methods.

[0067] Example Method for Speculative Activation of Secure Element Usage

[0068] Reference below Figure 7 The flowcharts of the examples are described in the following. Aspects of these methods may be implemented in, for example, hardware (e.g., fixed logic circuitry or a processor in conjunction with a memory), firmware, software, or some combination thereof. Figures 1 to 6 and Figure 8 The processes are implemented by one or more of the devices or components shown in the figure, which can be further divided and combined, etc. The devices and components in these figures generally represent firmware; hardware, such as electronic devices, packaged modules, IC chips or circuits; software; or a combination thereof. Therefore, these figures illustrate some of the many possible systems or devices that can implement the described methods.

[0069] For these flow charts, the order in which the operations are shown and / or described is not intended to be construed as limiting. Any number or combination of the described method operations can be combined in any order to implement a given method or an alternative method. Operations can also be omitted or added to the described methods. In addition, the described operations can be implemented in a completely or partially overlapping manner.

[0070] Figure 7An example method for implementing an apparatus for speculative activation for use with a security element is illustrated with a flowchart 700. The flowchart 700 includes five blocks 702-710. At 702, at least one sensor output is obtained. For example, the apparatus can obtain at least one sensor output 210 using at least one sensor 208. In some cases, the sensor 208 obtains the sensor output 210. For example, the positioning unit 602 can obtain the geospatial location 604, or the wireless interface unit 202 can sense the EM field 504. In other cases, the activation controller 108 can obtain the sensor output 210 from the sensor 208.

[0071] At 704, the at least one sensor output is used to predict an upcoming secure transaction. For example, the activation controller 108 may use the at least one sensor output 210 to predict an upcoming secure transaction 112-U. To do this using the activation controller 108 as part of the ambient computing unit 404, the activation controller 108 may predict an upcoming secure transaction 112-U if the geospatial location 604 matches a known secure transaction location 606. To do this using the activation controller 108 as part of the NFC unit 202-1 implementation of the wireless interface unit 202, the activation controller 108 may predict an upcoming secure transaction 112-U if the detected EM field 504 matches an EM field known to be used for secure transactions.

[0072] At 706, based on the prediction, at least one activation signal is issued to the one or more components. For example, based on the prediction, the activation controller 108 may issue at least one activation signal 110 to the one or more components. The one or more components may include a secure element 106 or at least one resource entity 204. Examples of resource entities 204 include at least a portion of the SoC 402, resources of the SoC 402 (e.g., memory 204-3), and an interface 204-1 between the SoC 402 and the secure element 106 or between the SoC 402 and the memory 204-3.

[0073] At 708, in response to the issuing, powering up one or more components before initiating the upcoming security transaction. For example, in response to the issuing of the at least one activation signal 110, the one or more components or their power managers may begin powering up one or more components before initiating the upcoming security transaction 112-U. Here, the power supply may be connected to the security element 106 and the at least one interface 204-1. In addition, the security element 106 may be initialized for processing, and the interface 204-1 may be configured for operation.

[0074] At 710, the upcoming secure transaction is initiated by the secure element. For example, the secure element 106 may interact with another device to initiate the upcoming secure transaction 112-U. In some cases, a query or proposal to start the secure transaction 112 may be exchanged between the wireless interface unit 202 of the device 102 and another wireless interface unit of the other device. The query may be formulated by the secure element 106 and transmitted by the wireless interface unit 202 of the device 102, or the query may be sent by the other device. The query may be implemented as at least one external wireless communication requesting the upcoming secure transaction 112-U.

[0075] Example Electronic Devices

[0076] Figure 8 Various components of an example electronic device 800 are illustrated, which can implement speculative activation for use with a secure element according to one or more described aspects. The electronic device 800 can be implemented as any one or a combination of a fixed device, a mobile device, a standalone device, or an embedded device; implemented in any form of a consumer, computer, portable, user, server, communication, telephone, navigation, gaming, audio, camera, messaging, media playback, and / or other type of electronic device 800, such as an in-apparatus 102 of the apparatus; Figure 1 Smartphone depicted.

[0077] The electronic device 800 may include one or more communication transceivers 802 that enable wired and / or wireless communication of device data 804 (e.g., received data, transmitted data, or other information as described above). Example communication transceivers 802 include NFC transceivers, various IEEE 802.15 (Bluetooth) transceivers, and the like. TM ) standard wireless personal area network (PAN) (WPAN) radio, compliant with various IEEE 802.11 (Wi-Fi TM ) standard wireless local area network (LAN) (WLAN) radios, wireless wide area network (WAN) (WWAN) radios for cellular phones (e.g., 3GPP-compliant radios), various IEEE 802.16 (WiMAX)-compliant TM ) standard wireless metropolitan area network (MAN) (WMAN) radio, infrared (IR) transceiver compliant with the Infrared Data Association (IrDA) protocol, and wired local area network (LAN) (WLAN) Ethernet transceiver.

[0078] The electronic device 800 may also include one or more data input ports 806 through which any type of data, media content, and / or other input may be received, such as user-selectable input, messages, applications, music, television content, recorded video content, and any other type of audio, video, and / or image data received from any content and / or data source. The data input ports 806 may include USB ports, coaxial cable ports, fiber optic ports for fiber optic interconnection or wiring, and other serial or parallel connectors (including internal connectors) for flash memory, DVDs and CDs, etc. These data input ports 806 may be used to couple the electronic device to components, peripherals, or accessories, such as a keyboard, microphone, camera, or other sensor.

[0079] The electronic device 800 of this example includes at least one processor 808 (e.g., any one or more of an application processor, a microprocessor, a digital signal processor (DSP), a controller, etc.), which may include a combined processor and memory system (e.g., implemented as part of a SoC), which processes (e.g., executes) computer executable instructions to control the operation of the device. The processor 808 may be implemented as an application processor, an embedded controller, a microcontroller, a security processor, etc. In general, the processor or processing system may be implemented at least partially in hardware, which may include an integrated circuit or system on chip, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a complex programmable logic device (CPLD), and other components implemented in silicon and / or other materials.

[0080] Alternatively or additionally, the electronic device 800 may be implemented with any one or a combination of electronic circuits, which may include software, hardware, firmware, or fixed logic circuits implemented in conjunction with processing and control circuits, which are generally represented at 810 (as electronic circuit 810). The electronic circuit 810 may be implemented, for example, by processing / computer executable instructions stored on a computer-readable medium and by implementing executable or hardware-based modules (such as logic circuits and / or hardware (e.g., such as FPGAs) or the like. Figure 8 not shown).

[0081] Although not shown, the electronic device 800 may include a system bus, interconnect, crossbar switch, switch fabric, or data transfer system that couples various components within the device. The system bus or interconnect may include any one or combination of different bus structures, such as a memory bus or memory controller, a peripheral bus, a universal serial bus, and / or a processor or local bus utilizing any one of a variety of bus architectures.

[0082] The electronic device 800 also includes one or more memory devices 812 for implementing data storage, examples of which include random access memory (RAM), non-volatile memory (e.g., read-only memory (ROM), flash memory, EPROM, and EEPROM), and disk storage devices. Therefore, the memory devices 812 can be distributed at different logical storage levels and different physical components of the system. The memory devices 812 provide data storage mechanisms to store device data 804, other types of code and / or data, and various device applications 820 (e.g., software applications or programs). For example, an operating system 814 can be stored in the memory device 812 as software instructions and executed by the processor 808.

[0083] In some implementations, the electronic device 800 also includes an audio and / or video processing system 816 that processes audio data and / or passes audio and video data to an audio system 818 and / or a display system 822 (e.g., a video buffer or screen of a smartphone or camera). The audio system 818 and / or the display system 822 may include any device that processes, displays, and / or otherwise presents audio, video, display, and / or image data. The display data and audio signals may be transmitted to the audio component and / or display component via an RF (radio frequency) link, an S-video link, an HDMI (high-definition multimedia interface), a composite video link, a component video link, a DVI (digital video interface), an analog audio connection, or other similar communication link (e.g., a media data port 824). In some implementations, the audio system 818 and / or the display system 822 are external or separate components of the electronic device 800. Alternatively, the display system 822 may be, for example, an integrated component of the example electronic device 800, such as part of an integrated touch interface.

[0084] Figure 8 The electronic equipment 800 is Figure 1 Thus, the processor 808 is an application processor complex 204-2 or SoC 402 (e.g., Figure 4 ). The electronic device 800 is shown to also include an instance of a security element 106, a sensor 208, a resource entity 204, a wireless interface unit 202, and an activation controller 108. As described above, one or more of these components may be part of an IC chip such as a processor 808, or may alternatively be located on a separate die. The sensor 208 may be implemented as one of the communication transceivers 802. The wireless interface unit 202 may also be implemented as one of the communication transceivers 802. The resource entity 204 may correspond to the processor 808, the memory device 812, and interconnects not shown, etc. (For example, Figure 4The environment computing unit 404 may be implemented as part of the electronic circuit 810 or the processor 808. Thus, the activation controller 108 may be instantiated at one of the processor 808, the electronic circuit 810, and the communication transceiver 802, etc. Although not explicitly shown, the memory device 812 may store (e.g., Figure 4 The secure element partition 406 is stored as part of the device data 804. Therefore, the principles of speculative activation for secure element use as described herein can be combined with or by Figure 8 The electronic device 800 is implemented.

[0085] Other Examples

[0086] In the following, some examples are described.

[0087] Example 1: An apparatus comprising: a security element configured to process multiple security transactions; a wireless interface unit coupled to the security element and configured to implement the multiple security transactions through at least one wireless communication; a resource entity coupled to the security element and configured to support the multiple security transactions; and an activation controller coupled to at least one of the security element or the resource entity, the activation controller configured to: predict an upcoming security transaction of the multiple security transactions; and in response to the prediction of the upcoming security transaction, issue an activation signal before initiating the upcoming security transaction.

[0088] Example 2: The apparatus of Example 1, wherein: the activation controller is configured to issue the activation signal to the resource entity; and the resource entity is configured to power on in response to the activation signal.

[0089] Example 3: The apparatus of Example 2, wherein the resource entity is configured to power on by waking up from a sleep mode.

[0090] Example 4: The apparatus of any one of Examples 1 to 3, wherein: the activation controller is configured to issue the activation signal to the security element; and the security element is configured to power on in response to the activation signal.

[0091] Example 5: The apparatus of any one of Examples 1 to 4, wherein the wireless interface unit comprises a near field communication (NFC) unit.

[0092] Example 6: The apparatus of any one of Examples 1 to 5, wherein the resource entity comprises at least one of an application processor complex (APC), a memory, or at least one interface.

[0093] Example 7: The apparatus of Example 6, further comprising: a system on a chip (SoC), the SoC comprising at least an application processor complex, wherein the at least one interface is coupled between at least one of: the SoC and the security element; or the SoC and the memory.

[0094] Example 8: The apparatus of any one of Examples 1 to 7, wherein the upcoming secure transaction is initiated based on at least one external wireless communication exchanged between the wireless interface unit and an external wireless interface unit of a separate device, the at least one external wireless communication requesting the upcoming secure transaction.

[0095] Example 9: The apparatus of Example 8, wherein: the wireless interface unit comprises a near field communication (NFC) unit; the external wireless interface unit comprises an NFC reader; and the at least one external wireless communication comprises a first command transmitted by the NFC reader.

[0096] Example 10: The apparatus of any of Examples 1 to 9, wherein the activation controller is configured to predict the upcoming secure transaction based on detection of an electromagnetic field.

[0097] Example 11: The apparatus of Example 10, wherein: the activation controller comprises a portion of the wireless interface unit; and the wireless interface unit is configured to: detect the electromagnetic field; and generate the activation signal before the electromagnetic field is strong enough to establish a connection capable of communicating data.

[0098] Example 12: The apparatus of any of Examples 1 to 11, wherein the activation controller is configured to predict the upcoming secure transaction based on a geospatial location of the apparatus.

[0099] Example 13: The device of Example 12, wherein: the activation controller includes a portion of an environmental computing unit; and the environmental computing unit is configured to: determine the geospatial location of the device; and issue the activation signal based on a comparison of the geospatial location of the device with one or more locations, wherein each of the one or more locations is associated with at least one secure transaction.

[0100] Example 14: The device of Example 12, wherein: the activation controller includes a portion of an environmental computing unit; and the environmental computing unit is configured to: determine the range to another device using ultra-wideband, UWB, signaling; and send the activation signal to the other device based on the range.

[0101] Example 15: The device of any one of Examples 1 to 14, further comprising one or more wires coupled between the activation controller and the system on chip SoC, wherein: the activation controller is configured to drive at least one voltage on the one or more wires to issue the activation signal.

[0102] Example 16: The device of any one of Examples 1 to 15, further comprising: a memory controller coupled to a system on chip (SoC), wherein: the activation signal comprises one or more activation signals; the SoC comprises at least one application processor; the activation controller is configured to issue the one or more activation signals to the memory controller; and in response to the one or more activation signals, the at least one application processor and the memory controller are configured to power on.

[0103] Example 17: A method for speculative activation for use with a security element, the method comprising: obtaining at least one sensor output; using the at least one sensor output to predict an upcoming security transaction; based on the prediction, issuing at least one activation signal to one or more components; in response to the issuing, beginning to power on one or more components before initiating the upcoming security transaction; and initiating the upcoming security transaction using the security element.

[0104] Example 18: The method of Example 17, wherein: the at least one sensor output includes at least one geospatial location; the obtaining includes determining the at least one geospatial location; and the predicting includes matching the at least one geospatial location with a location associated with at least one secure transaction via an environmental computing unit.

[0105] Example 19: The method of Example 17 or 18, wherein: the at least one sensor output includes at least one electromagnetic field detection; and the obtaining includes sensing the electromagnetic field through a wireless interface unit.

[0106] Example 20: The method of Example 19, wherein: the wireless interface unit includes a near field communication (NFC) unit; and the predicting includes detecting an electromagnetic field by the NFC unit at the following distance relative to an NFC reader, wherein the distance is too large to allow wireless communication by the electromagnetic field between the NFC unit and the NFC reader.

[0107] Example 21: The method of any of Examples 17 to 20, wherein the one or more components include at least one interface coupling the secure element to an application processor complex.

[0108] Unless the context dictates otherwise, use of the word "or" herein may be considered use of an "inclusive or" or a term permitting inclusion or application of one or more items linked by the word "or" (e.g., the phrase "A or B" may be interpreted as permitting only "A," only "B," or both "A" and "B"). In addition, as used herein, a phrase referring to "at least one" of a list of items refers to any combination of those items, including single members. For example, "at least one of a, b, or c" may encompass a, b, c, ab, ac, bc, and abc, as well as any combination with multiple identical elements (e.g., aa, aaa, aab, aac, abb, acc, bb, bbb, bbc, cc, and ccc or any other order of a, b, and c). In addition, the items represented in the figures and terms discussed herein may indicate one or more items or terms, and thus the singular or plural forms of the items and terms in this written description may be referenced interchangeably. Although implementations for speculative activation of security element use have been described in language specific to certain features and / or methods, the subject matter of the appended claims is not necessarily limited to the specific features or methods described. Rather, the specific features and methods are disclosed as example implementations for speculative activation of security element use.

Claims

1. A device for secure transactions, comprising: a secure element configured to process a plurality of secure transactions; a wireless interface unit coupled to the secure element and configured to implement the plurality of secure transactions via at least one wireless communication; a resource entity coupled to the secure element and configured to support the plurality of secure transactions, wherein the resource entity comprises at least one of: an application processor complex, a memory, a memory controller, and at least one interface; as well as an activation controller, the activation controller being coupled to at least the resource entity, the activation controller being configured to: determining a geospatial location of the device; predicting an upcoming secure transaction among the plurality of secure transactions based on a comparison of the geospatial location of the device to one or more locations, each location of the one or more locations being associated with at least one secure transaction; as well as In response to the prediction of the upcoming security transaction, an activation signal is issued to the resource entity prior to initiating the upcoming security transaction.

2. The device according to claim 1, wherein: The resource entity is configured to power up in response to the activation signal.

3. The device according to claim 2, wherein: The resource entity is configured to power up by waking up from a sleep mode.

4. The device according to claim 1, wherein: The activation controller is configured to issue the activation signal to the security element; and The security element is configured to power up in response to the activation signal.

5. The device according to claim 1, wherein: The wireless interface unit includes a near field communication (NFC) unit.

6. The apparatus according to claim 1, further comprising: A system on chip (SoC), the SoC comprising at least the application processor complex, wherein the at least one interface is coupled between at least one of: The SoC and the secure element; and The SoC and the memory.

7. The device according to claim 1, wherein: The upcoming secure transaction is initiated based on at least one external wireless communication exchanged between the wireless interface unit and an external wireless interface unit of a separate device, the at least one external wireless communication requesting the upcoming secure transaction.

8. The device according to claim 1, wherein: The activation controller is configured to predict the upcoming secure transaction based on detection of the electromagnetic field.

9. The device according to claim 8, wherein: The activation controller comprises a portion of the wireless interface unit; and The wireless interface unit is configured to: detecting the electromagnetic field; and The activation signal is generated before the electromagnetic field is strong enough for establishing a connection capable of communicating data.

10. The device according to claim 1, wherein: The activation controller comprises a portion of an ambient computing unit; and The environment computing unit is configured to: Using ultra-wideband signaling, determining the range to another device; and The activation signal is sent to the other device based on the range.

11. The device according to any one of claims 1 to 10, further comprising: A system on chip (SoC), wherein the SoC comprises at least one application processor; as well as The memory controller, the memory controller coupled to the SoC, wherein: The activation signal includes one or more activation signals; The activation controller is configured to issue the one or more activation signals to the at least one application processor and the memory controller; as well as In response to the one or more activation signals, the at least one application processor and the memory controller are configured to power up.

12. A system for secure transactions, comprising: An apparatus as claimed in claim 7 or claim 11 when dependent on claim 7; The separation device comprises the external wireless interface unit, wherein: The wireless interface unit includes a near field communication NFC unit; The external wireless interface unit includes an NFC reader; and The at least one external wireless communication includes a first command transmitted by the NFC reader.

Images