Electronic device

Abstract

The invention relates to an electronic device. Specifically, an electronic device, such as a smart card, comprises: a first secure element configured to implement a transaction in response to received data; and a second secure element configured to receive the same data as the first secure element and perform an operation that can control another electronic circuit.

Description

[0001] Priority Claim

[0002] This application claims the priority benefit of French Patent Application No. 2315227, filed on December 12, 2023, the content of which is incorporated herein by reference in its entirety to the maximum extent permitted by law. Technical Field

[0003] The present disclosure generally relates to electronic devices and circuits, and in particular, to electronic devices and circuits configured to implement transactions. Background Art

[0004] There are a large number of electronic devices and circuits configured to implement transactions. Certain transactions require the implementation of circuits for performing sensitive or confidential data management.

[0005] It is desirable to be able to at least partially improve certain aspects of electronic devices configured to implement transactions involving sensitive data.

[0006] There is a need for electronic devices configured to implement transactions involving sensitive data and to securely use such sensitive data to implement additional functions.

[0007] There is a need in the art to overcome all or part of the disadvantages of known electronic devices configured to implement transactions involving sensitive data. Summary of the Invention

[0008] Embodiments provide an electronic device including two secure elements configured to receive the same sensitive data.

[0009] Embodiments provide an electronic device including: a first secure element configured to implement a transaction; and a second secure element configured to receive the same data as the first secure element and control a first electronic circuit.

[0010] According to an embodiment, the first secure element and the second secure element are configured to receive data in a wired manner.

[0011] According to an embodiment, the first secure element and the second secure element are coupled to the same connection terminal.

[0012] According to an embodiment, the first secure element and the second secure element are configured to receive data through wireless communication.

[0013] According to an embodiment, the first secure element and the second secure element are connected to the same antenna.

[0014] According to an embodiment, the wireless communication is near field communication.

[0015] According to an embodiment, the first security element includes a first reference terminal coupled to a second reference terminal of the electronic device via a first diode.

[0016] According to an embodiment, the first diode is a Schottky diode.

[0017] According to an embodiment, the second security element includes a third reference terminal coupled to a second reference terminal of the electronic device via a second diode.

[0018] According to an embodiment, the second diode is a Schottky diode.

[0019] According to an embodiment, the first circuit includes a fourth terminal coupled to the third reference terminal via a capacitor.

[0020] According to an embodiment, the first electronic circuit includes a second circuit and a third circuit for driving the second circuit.

[0021] According to an embodiment, the second electronic circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light-emitting diode, a sensor control device, and a memory.

[0022] According to an embodiment, the device is selected from the group consisting of: a bank card, a smart transportation card, a vehicle key, and an access control card. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The above and other features and advantages will be described in detail with reference to the accompanying drawings in the disclosure of specific embodiments given by way of illustration and not limitation, in which:

[0024] Figure 1 An embodiment of the electronic device is shown very schematically in the form of a block diagram;

[0025] Figure 2 A timing diagram showing the operation of the illustrated Figure 1 embodiment is shown;

[0026] Figure 3 An illustration showing Figure 1 a more detailed example of the illustrated embodiment; and

[0027] Figure 4A and Figure 4B An illustration showing Figure 3 the advantages of the illustrated embodiment. DETAILED DESCRIPTION

[0028] The same features in the various figures are denoted by the same reference numerals. In particular, the common structural and / or functional features in the various embodiments may have the same reference numerals and may have the same structure, dimensions, and material properties.

[0029] For clarity, only those steps and elements that contribute to an understanding of the described embodiments are shown and described in detail.

[0030] Unless otherwise indicated, when referring to two elements connected together, this means a direct connection without any intermediate element other than a conductor, and when referring to two elements coupled together, this means that the two elements can be connected or they can be coupled via one or more other elements.

[0031] In the following description, when referring to absolute position determiners such as "front", "rear", "upper", "lower", "left", "right", etc., or relative position determiners such as "top", "bottom", "upper part", "lower part", etc., or orientation determiners such as "horizontal", "vertical", etc., unless otherwise specified, they all refer to the orientation of the drawings.

[0032] Unless otherwise specified, the expressions "about", "approximately", "substantially", and "about" mean plus or minus 10%, preferably plus or minus 5%.

[0033] The embodiments described below relate to an electronic device configured to implement a transaction involving sensitive data. The sensitive data referred to here means one or more data items to which access is restricted to one or more persons and / or one or more electronic devices. For example, such a transaction is a banking transaction.

[0034] The embodiments described below include a first security element (SE) configured to implement the transaction, and a second security element configured to securely implement one or more additional functions of the electronic device by using the data of the transaction. These two security elements are different and are configured to receive the same sensitive data. The advantages and details of these embodiments will be described in conjunction with Figure 1 FIG. 4.

[0035] Figure 1 An electronic device 100 (device, DEVICE) according to an embodiment is shown very schematically in the form of a block diagram.

[0036] The electronic device 100 is configured to implement a transaction, in particular to implement a transaction with another electronic device using sensitive data. The other electronic device is typically located outside the device 100. To this end, the electronic device 100 includes a first security element 101 (SE1) configured to implement the transaction. For example, this first security element is configured to implement a software application that securely executes the transaction.

[0037] To implement the transaction, the device 100 further includes connection terminals 102 (pins, PIN) and / or an antenna 103 (ANT), which enable communication to be established with other electronic devices.

[0038] According to an example, the connection terminal 102 enables the electronic device to perform wired communication with other devices. The connection terminal 102 is coupled to the first security element 101 and enables data (such as sensitive data) to be supplied thereto to effect a transaction.

[0039] According to an example, the antenna 103 enables the electronic device to perform wireless communication with other devices. According to an example, the antenna 103 may enable near field communication (NFC) to be performed. Like the connection terminal 102, the antenna 103 is coupled to the first security element 101 and enables data (such as, sensitive data) to be supplied thereto to effect a transaction.

[0040] Thus, when the electronic device includes the terminal 102 and the antenna 103, the first security element 101 can effect a transaction regardless of whether the terminal 102 or the antenna 103 is used.

[0041] The device 100 further includes a second security element 104 (SE2) which is configured to receive the same information as the first security element 101, i.e., the same data (such as the same sensitive data), and also implements additional functions of the electronic device 100. More particularly, the security element 104 is coupled to the terminal 102 and / or the antenna 103 in the same manner as the first security element 101.

[0042] To implement the additional functions, the electronic device 100 further includes a circuit 105 (FCT) for implementing the functions, which is controlled by the security element 104. The circuit 105 may be, for example, a display such as a display screen or a light emitting diode, a biometric control circuit (such as a fingerprint sensor), and so on. According to another embodiment, the circuit 105 may be a sensor control device or a memory.

[0043] According to Figure 1 the specific example shown in

[0044] According to a preferred embodiment, the electronic device 100 is a card (such as a bank card or a transportation card) configured to effect a transaction, which includes a screen capable of displaying one or more pieces of information related to the transaction. According to a first example, the card is a bank card, and the screen enables a card verification code, also known as a CVC code or a CVV code, to be displayed. According to a second example, the card is a transportation card, and the screen enables the remaining balance of the transportation card to be displayed. According to a third example, the card may be a car key, and the circuit 105 may allow functions specific to car use to be displayed or used. According to a fourth example, the card may be a smart ticket card or an access control card, where the circuit 105 may allow the remaining number of tickets on the card to be displayed.

[0045] It should be noted that a secure element (such as SE1 or SE2) refers to and is defined as an integrated circuit in the form of a chip, for example, in the context described and claimed herein, which is protected by design against unauthorized access and is used to run a limited set of applications and store confidential and encrypted data. The secure element serves as a vault, providing protection for the contents inside the secure element (such as applications and data) against unauthorized access or attacks. The secure element protects assets (root of trust, sensitive data, keys, certificates, applications) against advanced software and hardware attacks. The applications that process these sensitive data on the secure element are isolated and thus operate within a controlled environment, unaffected by software (including possible malware) elsewhere on the system.

[0046] In the above description, the secure element is considered a completely reliable secure electronic device. In other words, it is considered impossible to extract the data stored and / or used by the secure element. More specifically, the secure element (SE) is a separate chip that includes a secure processor, tamper-resistant storage, and execution memory, allowing the secure element to perform its tasks without using external memory. This processor is different from the host processor or computer processor. Its purpose is to allow the implementation of secure operations, such as secure transactions. For example, the secure element can implement application programs that rely on cryptographic algorithms and secure keys operating within the secure processor. Therefore, the secure element is an inviolable hardware platform capable of securely hosting application programs and storing encrypted confidential data.

[0047] The operation of device 100 is as follows. When the electronic device 100 implements a transaction with another electronic device, for example, data such as sensitive data is received at terminals 102 and / or antenna 103. These data are transmitted to two secure elements 101 and 104. The first secure element 101 securely uses the data to effectively implement the transaction. The second secure element 104 securely uses the data to implement the function of circuit 105 (if required). Figure 2 A more detailed example of the operation of device 100 is shown.

[0048] The advantage of device 100 is that it enables an electronic device to securely perform a transaction using a first security element and to implement additional functions controlled by a second security element, where this can be supported without modifying the first security element that implements the transaction. The second security element operates in a kind of "spy mode" in receiving and using data to control the execution of the additional functions, while the first security element receives and uses (the same) data to perform the secure transaction. The advantage of this configuration is that the first security element does not need to bear the burden of controlling the execution of the additional functions or include circuitry to support the control of the execution of the additional functions. Instead, this is effectively offloaded to the second security element that operates on the same data in parallel with the first security element.

[0049] A second advantage of device 100 is that the security element 104 and circuitry 105 can be added to an existing electronic device having a security element 101 without significant modification to its architecture.

[0050] Figure 2 A timing diagram is shown to more particularly describe the operating mode of device 100 with respect to Figure 1 as described.

[0051] Figure 2 The following timing diagrams are shown: Timing diagram SE1, which shows the state changes of the first security element 101; Timing diagram SE2, which shows the state changes of the second security element 104; Timing diagram VCCOUT, which shows the change in the supply voltage of the driver circuitry 1051; and Timing diagram DRIVER, which shows the state changes of the driver circuitry 1051.

[0052] At an initial time t0, the security elements 101 and 104 receive data related to the transaction. More particularly, the security elements 101 and 104 receive a command to initiate the transaction. Then, the security elements 101 and 104 are in a state of receiving the command CMD. The driver circuitry 1051 is not powered on and is thus not in operation.

[0053] At a time t1 after time t0, the security elements 101 and 104 have received the command and enter a command processing state (processing). This state takes more or less time depending on the security element, as each security element 101 and 104 processes the received data differently.

[0054] According to an example, at a time t2 after time t1, the second security element 104 finishes processing the command before the first security element 101. According to the example, the second security element 104 concludes from the received data that it must initiate the circuitry 105. To this end, the security element 104 initiates the supply voltage VCCOUT, which thus transitions to a high state. Then, the driver circuitry 1051 enters a communication receive state COMM.

[0055] According to the example, at time t3 after time t2, the security element 101 finishes processing the command. According to a variant, times t2 and t3 can be reversed. According to the example, the security element 101 implements the transaction by sending a response, thereby entering the response sending state RSP.

[0056] At time t4 after time t2, the driver circuit 1051 is capable of driving the circuit 1052, and then it enters the control state Update Disp (update display), in which state it can do so. According to the example, if the circuit 1052 is a display screen, then the driver circuit 1051 sends the data required to update the display of the circuit 1052.

[0057] Figure 3 An electronic device 300 (device, DEVICE) according to an embodiment is shown schematically and partly in the form of a block diagram, which belongs to the type of device 100 as Figure 1 described.

[0058] Similar to the device 100, the electronic device 300 includes: a first security element 301 (SE1), which is of the type of the security element 101 and is configured to implement transactions; a second security element 302 (SE2), which is of the type of the security element 104; a circuit 303, which is of the type of the circuit 105 and is configured to implement additional functions of the device 300 and is controlled by the second security element 302; connection terminals 304 (pins, PIN), which are of the type of the connection terminals 102 and are configured to implement wired communication; and an antenna 305, which is of the type of the antenna 103, shown in the form of a coil and enabling wireless communication.

[0059] Similar to in the device 100, in the device 300, the security elements 301 and 302 are configured to receive the same data. To this end, the data input nodes IN3001 and IN3002 are coupled to the connection terminals 304 and the antenna 305. The first security element 301 is coupled to the input nodes IN3001 and IN3002. Similarly, the second security element 302 is coupled to the input nodes IN3001 and IN3002. In addition, the connection terminals 304 are further coupled (preferably connected) to the common reference terminal GND_300 of the device 300. The reference terminal GND_300 is configured to receive a reference potential, such as ground.

[0060] According to the example, the first safety element 301 includes four diodes D3011, D3012, D3013, and D3014 and a load R3011 represented by a resistor. According to the example, the anode of diode D3011 is coupled (preferably connected) to node IN3001, and the cathode of diode D3011 is coupled (preferably connected) to the first terminal of load R3011. The anode of diode D30112 is coupled (preferably connected) to node IN3002, and the cathode of diode D3012 is coupled (preferably connected) to the first terminal of load R3011. The cathode of diode D3013 is coupled (preferably connected) to node IN3002, and the anode of diode D3013 is coupled (preferably connected) to the second terminal of load R3011. The cathode of diode D3014 is coupled (preferably connected) to node IN3001, and the anode of diode D3014 is coupled (preferably connected) to the second terminal of load R3011.

[0061] According to an embodiment, the first safety element includes a reference terminal GND_301, which is coupled (preferably connected) to the second terminal of load R3011. This first reference terminal GND_301 is coupled (preferably connected) to the common reference terminal GND_300 of device 300 via diode D301. Diode D301 enables the first safety element 301 to have a reference terminal isolated from the common reference terminal GND_300. According to the example, diode D301 is a conventional diode. According to a preferred embodiment, diode D301 is a Schottky diode, whose threshold voltage is lower than that of a conventional diode.

[0062] In addition, according to the example, the second safety element 302 includes four diodes D3021, D3022, D3023, and D3024 and a load R3021 represented by a resistor. According to the example, the anode of diode D3021 is coupled (preferably connected) to node IN3001, and the cathode of diode D3021 is coupled (preferably connected) to the first terminal of load R3021. The anode of diode D3021 is coupled (preferably connected) to node IN3002, and the cathode of diode D3022 is coupled (preferably connected) to the first terminal of load R3021. The cathode of diode D3023 is coupled (preferably connected) to node IN3002, and the anode of diode D3023 is coupled (preferably connected) to the second terminal of load R3021. The cathode of diode D3024 is coupled (preferably connected) to node IN3001, and the anode of diode D3024 is coupled (preferably connected) to the second terminal of load R3021.

[0063] According to an embodiment, the second security element includes a reference terminal GND_302, which is coupled (preferably connected) to the second terminal of the load R3021. This second reference terminal GND_302 is coupled (preferably connected) to the common reference terminal GND_300 of the device 300 via a diode D302. The diode D302 enables the second security element 302 to have a reference terminal isolated from the common reference terminal GND_300 and from the reference terminal GND_301 of the first security element. According to an example, the diode D302 is a conventional diode. According to a preferred embodiment, the diode D302 is a Schottky diode.

[0064] According to an example, the second security element further includes a resistor R3022, which couples the first terminal of the load R3021 to the terminal EXT302. The terminal EXT302 is a terminal of the second security element 302, which is coupled (preferably connected) to the circuit 303 to supply it with a supply voltage VCCOUT or a control voltage. According to an example, the supply voltage VCCOUT is taken between the terminal EXT302 and the reference terminal GND_302 of the security element 302.

[0065] According to an example, the input of the circuit 303 is coupled to the terminal EXT302 of the second security element 302, but also to the reference terminal GND_302 via a filter capacitor C303.

[0066] Figures 4A - 4B A diagram is shown regarding Figure 3 a diagram showing the advantages of the circuit 300 described.

[0067] As previously mentioned, the reference terminals GND_301 and GND_302 of the security elements 301 and 302 are isolated from each other and from the common reference terminal GND_300 of the device 300.

[0068] Figures 4A - 4B A diagram shows the state of wireless communication achieved according to the variation of the modulation index of the wireless communication with respect to the power of the electromagnetic field generated by the reader and used by this wireless communication. The dark boxes represent wireless communication that cannot be achieved, and the light boxes represent wireless communication that can be achieved.

[0069] Figure 4A A diagram shows a situation where the reference terminals GND_301 and GND_302 are not isolated from each other and from the common reference terminal GND_300 of the device 300. Figure 4B A diagram shows a situation where the reference terminals GND_301 and GND_302 are isolated from each other and from the common reference terminal GND_300 of the device 300.

[0070] Obviously, the two security elements 301 and 302 interfere with the received communication, and isolating their conductive terminals makes it possible to improve external communication.

[0071] Various embodiments and variations have been described. Those skilled in the art will understand that certain features of these various embodiments and variations can be combined, and other variations will occur to those skilled in the art.

[0072] Finally, based on the functional indications given above, the actual implementation of the described embodiments and variations is within the capabilities of those skilled in the art.

Claims

1. An electronic device, comprising: A first electronic circuit configured to implement a function; A first security element configured to receive data and implement a transaction; as well as The second security element is configured to receive the same data as the first security element and control the operation of the first electronic circuit to implement the function. 2 . The device of claim 1 , wherein the first secure element and the second secure element are configured to receive data through wired communication. 3 . The device of claim 2 , wherein the first security element and the second security element are coupled to the same connection terminal, the connection terminal being configured to receive data through the wired communication. The device of claim 1 , wherein the first secure element and the second secure element are configured to receive data via wireless communication. 5 . The device of claim 4 , wherein the first security element and the second security element are coupled to a same antenna, the antenna being configured to receive data via the wireless communication. The device of claim 4 , wherein the wireless communication is near field communication. 7 . The device of claim 1 , further comprising a reference terminal of the electronic device and a first diode configured to couple the first reference terminal of the first security element to the reference terminal of the electronic device. The apparatus of claim 7 , wherein the first diode is a Schottky-type diode. 9 . The device of claim 7 , further comprising a second diode configured to couple a second reference terminal of a second security element to the reference terminal of the electronic device.

10. The apparatus of claim 9, wherein the second diode is a Schottky type diode.

11. The apparatus of claim 9, wherein the first electronic circuit comprises a fourth terminal coupled to the second reference terminal via a capacitor. 12 . The device of claim 1 , wherein the first electronic circuit comprises a second circuit and a third circuit configured to drive the second circuit.

13. The device of claim 12, wherein the second circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light emitting diode, a sensor control device, and a memory.

14. The device of claim 1, wherein the device comprises one of the following: a bank card, a smart transportation card, a car key, an access control card.

15. An electronic device, comprising: an antenna having a first terminal and a second terminal; A first safety element including: a first diode having an anode connected to the first terminal; a second diode having an anode connected to the second terminal; and a load of the first safety element connected between a first ground node and a common cathode of the first diode and the second diode; a second safety element, comprising: a third diode having an anode connected to the first terminal; a fourth diode having an anode connected to the second terminal; a load of the second safety element connected between the second ground node and a common cathode of the third diode and the fourth diode; and a third resistor connected between a power supply output node and a common cathode of the third diode and the fourth diode; and An electronic circuit is configured to implement a function and has a power input terminal connected to a power output node.

16. The apparatus according to claim 15, further comprising: a fifth diode connected between the common ground node and the first ground node; as well as A sixth diode is connected between the common ground node and the second ground node.

17. The apparatus of claim 15, further comprising a capacitor connected between the input node and the second ground node.

18. The device of claim 15, wherein the electronic circuit comprises a functional circuit and a driver circuit configured to drive the functional circuit.

19. The device of claim 18, wherein the functional circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light emitting diode, a sensor control device, and a memory.

20. The device of claim 15, wherein the device comprises one of the following: a bank card, a smart transportation card, a car key, an access control card.

Images