Electronic device

Abstract

The utility model relates to an electronic device. Specifically, an electronic device, such as a smart card, comprises: a first secure element configured to implement a transaction in response to received data; and a second secure element configured to receive the same data as the first secure element and perform an operation that can control another electronic circuit.

Description

[0001] Priority requirements

[0002] This application claims priority to French patent application No. 2315227, filed on December 12, 2023, the contents of which are incorporated herein by reference in their entirety to the fullest extent permitted by law. Technical Field

[0003] This disclosure generally relates to electronic devices and circuits, and in particular to electronic devices and circuits configured to perform transactions. Background Technology

[0004] There are numerous electronic devices and circuits configured to implement transactions. Some transactions require circuits that manage sensitive or confidential data.

[0005] It is hoped that certain aspects of electronic devices configured to perform transactions containing sensitive data can be improved, at least partially.

[0006] Electronic devices need to be configured to enable transactions containing sensitive data and to securely use that sensitive data to enable additional functionality.

[0007] There is a need in the art to overcome all or part of the drawbacks of known electronic devices configured to implement transactions containing sensitive data. Utility Model Content

[0008] An embodiment provides an electronic device that includes two security elements configured to receive the same sensitive data.

[0009] An embodiment provides an electronic device comprising: a first security element configured to perform a transaction; and a second security element configured to receive the same data as the first security element and control a first electronic circuit.

[0010] According to an embodiment, the first and second safety elements are configured to receive data in a wired manner.

[0011] According to an embodiment, the first safety element and the second safety element are coupled to the same connection terminal.

[0012] According to an embodiment, the first safety element and the second safety element are configured to receive data via wireless communication.

[0013] According to an embodiment, the first safety element and the second safety element are connected to the same antenna.

[0014] According to the embodiment, the wireless communication is near-field communication.

[0015] According to an embodiment, the first safety element includes a first reference terminal coupled to a second reference terminal of an electronic device via a first diode.

[0016] According to the embodiment, the first diode is a Schottky diode.

[0017] According to an embodiment, the second safety element includes a third reference terminal coupled to a second reference terminal of an electronic device via a second diode.

[0018] According to the embodiment, the second diode is a Schottky diode.

[0019] According to an embodiment, the first circuit includes a fourth terminal coupled to the third reference terminal via a capacitor.

[0020] According to an embodiment, the first electronic circuit includes a second circuit and a third circuit for driving the second circuit.

[0021] According to an embodiment, the second electronic circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light-emitting diode, a sensor control device, and a memory.

[0022] According to an embodiment, the electronic device is selected from the group consisting of: bank cards, smart transportation cards, car keys, and access control cards.

[0023] According to one aspect of this disclosure, an electronic device is provided, comprising: an antenna having a first terminal and a second terminal; a first safety element including: a first diode having its anode connected to the first terminal; a second diode having its anode connected to the second terminal; and a load of the first safety element connected between a first ground node and the common cathode of the first and second diodes; a second safety element including: a third diode having its anode connected to the first terminal; a fourth diode having its anode connected to the second terminal; a load of the second safety element connected between a second ground node and the common cathode of the third and fourth diodes; and a third resistor connected between a power output node and the common cathode of the third and fourth diodes; and electronic circuitry configured to perform a function and having a power input terminal connected to the power output node.

[0024] According to an embodiment, the electronic device further includes: a fifth diode connected between a common ground node and a first ground node; and a sixth diode connected between a common ground node and a second ground node.

[0025] According to an embodiment, the electronic device further includes a capacitor connected between the input node and the second ground node.

[0026] According to an embodiment, the electronic circuit includes a functional circuit and a driver circuit configured to drive the functional circuit.

[0027] According to an embodiment, the functional circuit is selected from the group consisting of: display screen, fingerprint sensor, light-emitting diode, sensor control device, and memory.

[0028] According to an embodiment, the electronic device includes one of the following: a bank card, a smart transportation card, a car key, or an access control card. Attached Figure Description

[0029] The above-described features and advantages, as well as other features and advantages, will be described in detail with reference to the accompanying drawings in the remaining disclosure of specific embodiments given by way of illustration and not limitation, wherein:

[0030] Figure 1 An embodiment of the electronic device is shown very schematically in the form of a block diagram;

[0031] Figure 2 The illustration is shown. Figure 1 A timing diagram of the operation of an embodiment;

[0032] Figure 3 It shows Figure 1 More detailed examples of embodiments; and

[0033] Figure 4A and Figure 4B The illustration is shown. Figure 3 The diagram illustrates the advantages of the embodiments. Detailed Implementation

[0034] The same features in the various figures are indicated by the same reference numerals. In particular, common structural and / or functional features in the various embodiments may have the same reference numerals, and may have the same structure, dimensions, and material properties.

[0035] For clarity, only those steps and elements that help to understand the embodiments are shown and described in detail.

[0036] Unless otherwise indicated, when referring to two elements connected together, it means a direct connection without any intermediate elements other than a conductor, and when referring to two elements coupled together, it means that the two elements can be connected or they can be coupled via one or more other elements.

[0037] In the following description, when absolute positional qualifiers such as “front,” “back,” “up,” “down,” “left,” “right,” etc., or relative positional qualifiers such as “top,” “bottom,” “upper,” “lower,” etc., or orientation qualifiers such as “horizontal,” “vertical,” etc. are used, the orientation of the accompanying drawings shall be indicated unless otherwise stated.

[0038] Unless otherwise stated, the expressions “about,” “approximately,” “basically,” and “approximately” indicate plus or minus 10%, preferably plus or minus 5%.

[0039] The embodiments described below relate to an electronic device configured to perform transactions that manipulate sensitive data. Sensitive data, as referred to herein, means one or more data items to which access is limited to one or more persons and / or one or more electronic devices. For example, such a transaction is a banking transaction.

[0040] The embodiments described below include a first security element (SE) configured to implement the transaction, and a second security element configured to securely implement one or more additional functions of an electronic device using the data from the transaction. These two security elements are distinct and configured to receive the same sensitive data. The advantages and details of these embodiments will be discussed in conjunction with... Figure 1 The following description is provided in Figure 4.

[0041] Figure 1 An electronic device 100 (device) according to an embodiment is shown in a very schematic block diagram.

[0042] Electronic device 100 is configured to perform transactions, particularly transactions involving sensitive data with another electronic device. This other electronic device is typically located externally to device 100. For this purpose, electronic device 100 includes a first security element 101 (SE1) configured to perform the transaction. For example, this first security element is configured to enable software applications that securely execute the transaction.

[0043] To enable transactions, device 100 also includes connection terminals 102 (pins) and / or antenna 103 (ANT), which enable communication with other electronic devices.

[0044] According to the example, connection terminal 102 enables the electronic device to communicate with other devices via wired connections. Connection terminal 102 is coupled to a first security element 101 and enables the supply of data (e.g., sensitive data) to it to facilitate transactions.

[0045] According to the example, antenna 103 enables the electronic device to achieve wireless communication with other devices. According to the example, antenna 103 can enable near-field communication (NFC). Similar to connection terminal 102, antenna 103 is coupled to a first secure element 101 and enables the supply of data (e.g., sensitive data) to it to facilitate transactions.

[0046] Therefore, when the electronic device includes terminal 102 and antenna 103, the first security element 101 can perform transactions regardless of whether terminal 102 or antenna 103 is used.

[0047] The device 100 also includes a second security element 104 (SE2) configured to receive the same information as the first security element 101, i.e., the same data (e.g., the same sensitive data), and also implements additional functions of the electronic device 100. More specifically, the security element 104 is coupled to the terminal 102 and / or the antenna 103 in the same manner as the first security element 101.

[0048] To enable additional functionality, the electronic device 100 also includes a circuit 105 (FCT) that implements this functionality, which is controlled by the security element 104. The circuit 105 may be, for example, a display, such as a screen or light-emitting diode, a biometric control circuit (such as a fingerprint sensor), etc. According to another embodiment, the circuit 105 may be a sensor control device or a memory.

[0049] according to Figure 1 In the specific example shown, circuit 105 includes driver circuit 1051 (driver) and screen 1052 (screen), which is configured to display one or more pieces of information related to a transaction.

[0050] According to a preferred embodiment, electronic device 100 is a card (such as a bank card or transportation card) configured to perform transactions, including a screen that enables the display of one or more pieces of information related to the transaction. According to a first example, the card is a bank card, and the screen enables the display of a card verification code, also known as a CVC code or CVV code. According to a second example, the card is a transportation card, and the screen enables the display of the remaining transportation card balance. According to a third example, the card may be a car key, and circuitry 105 may allow the display or use of car-specific functions. According to a fourth example, the card may be a smart ticket or access control card, wherein circuitry 105 may allow the display of the remaining number of tickets on the card.

[0051] It is important to note that a secure element (such as SE1 or SE2) refers to and is defined, in the context described herein and the claimed protection, as an integrated circuit, for example, in chip form, which is designed to prevent unauthorized access and is used to run a limited set of applications and store confidential and encrypted data. The secure element acts as a vault, providing protection for the contents within the secure element (such as applications and data) against unauthorized access or attacks. The secure element protects assets (root of trust, sensitive data, keys, certificates, applications) from advanced software and hardware attacks. Applications that process this sensitive data on the secure element are isolated and therefore operate within a controlled environment, unaffected by software (including potential malware) elsewhere on the system.

[0052] In the above description, the secure element is considered a completely reliable secure electronic device. In other words, it is considered impossible to extract data stored and / or used by the secure element. More specifically, the secure element (SE) is a single chip that includes a secure processor, tamper-proof storage, and execution memory, allowing the secure element to perform its tasks without the use of external memory. This processor is different from the host processor or computer processor. Its purpose is to allow the implementation of secure operations, such as secure transactions. For example, the secure element can implement applications that rely on cryptographic algorithms and secure keys operating within this secure processor. Therefore, the secure element is an inviolable hardware platform capable of securely hosting applications and storing encrypted confidential data.

[0053] The device 100 operates as follows. When the electronic device 100 transacts with another electronic device, for example, by receiving data, such as sensitive data, at terminal 102 and / or antenna 103, this data is transmitted to two secure elements 101 and 104. The first secure element 101 securely uses the data to efficiently transact. The second secure element 104 securely uses the data to implement the function of circuit 105 (if necessary). Figure 2 A more detailed example of the operation of device 100 is shown.

[0054] The advantage of device 100 is that it enables electronic devices to securely perform transactions using a first secure element and to implement additional functions controlled by a second secure element, which can be supported without modifying the first secure element implementing the transaction. The second secure element operates in a kind of "spy mode" in receiving and using data to control the execution of the additional functions, while the first secure element receives and uses (the same) data to perform secure transactions. The advantage of this configuration is that the first secure element does not need to bear the burden of controlling the execution of the additional functions or include circuitry to support the execution of those functions. Instead, this is effectively offloaded to the second secure element, which operates on the same data in parallel with the first secure element.

[0055] A second advantage of device 100 is that safety element 104 and circuit 105 can be added to existing electronic devices with safety element 101 without major modifications to their architecture.

[0056] Figure 2 A timing diagram is shown to describe the details regarding... Figure 1 The operating mode of the device 100 is described.

[0057] Figure 2The following timing diagrams are shown: timing diagram SE1, which shows the state changes of the first safety element 101; timing diagram SE2, which shows the state changes of the second safety element 104; timing diagram VCCOUT, which shows the changes in the power supply voltage of the driver circuit 1051; and timing diagram DRIVER, which shows the state changes of the driver circuit 1051.

[0058] At an initial time t0, security elements 101 and 104 receive transaction-related data. More specifically, security elements 101 and 104 receive a command to initiate a transaction. Then, security elements 101 and 104 are in the state of receiving command CMD. Driver circuit 1051 is not energized and is therefore not in operation.

[0059] At time t1, after time t0, safety elements 101 and 104 have received the command and entered the command processing state (processing). This state may take longer or shorter depending on the safety element, as each safety element 101 and 104 processes the received data differently.

[0060] According to the example, at time t2 after time t1, the second safety element 104 completes the processing of the command before the first safety element 101. According to the example, the second safety element 104 concludes from the received data that it must activate circuit 105. To this end, safety element 104 activates the power supply voltage VCCOUT, which then transitions to a high state. The driver circuit 1051 then enters the communication receive state COMM.

[0061] According to the example, at time t3 after time t2, secure element 101 completes processing the command. According to a variation, times t2 and t3 can be reversed. According to the example, secure element 101 completes the transaction by sending a response, thereby entering the Response Sending State (RSP).

[0062] At time t4 after time t2, driver circuit 1051 is able to drive circuit 1052, and then it enters the control state Update Disp, in which it can do so. According to the example, if circuit 1052 is a display screen, then driver circuit 1051 sends the data required to update the display of circuit 1052.

[0063] Figure 3 An electronic device 300 (device) according to an embodiment is shown schematically and in part as a block diagram, which pertains to... Figure 1 The type of device 100 described.

[0064] Similar to device 100, electronic device 300 includes: a first security element 301 (SE1), which is of the type of security element 101 and is configured to enable transactions; a second security element 302 (SE2), which is of the type of security element 104; a circuit 303, which is of the type of circuit 105, configured to enable additional functions of device 300 and controlled by the second security element 302; a connection terminal 304 (pin), which is of the type of connection terminal 102 and is configured to enable wired communication; and an antenna 305, which is of the type of antenna 103, shown in the form of a coil, and enables wireless communication.

[0065] Similar to device 100, in device 300, safety elements 301 and 302 are configured to receive the same data. For this purpose, data input nodes IN3001 and IN3002 are coupled to connection terminal 304 and antenna 305. First safety element 301 is coupled to input nodes IN3001 and IN3002. Similarly, second safety element 302 is coupled to input nodes IN3001 and IN3002. Furthermore, connection terminal 304 is further coupled (preferably connected) to the general-purpose reference terminal GND_300 of device 300. Reference terminal GND_300 is configured to receive a reference potential, such as ground.

[0066] According to the example, the first safety element 301 includes four diodes D3011, D3012, D3013, and D3014, and a load R3011 represented by a resistor. According to the example, the anode of diode D3011 is coupled (preferably connected) to node IN3001, and the cathode of diode D3011 is coupled (preferably connected) to a first terminal of the load R3011. The anode of diode D30112 is coupled (preferably connected) to node IN3002, and the cathode of diode D3012 is coupled (preferably connected) to the first terminal of the load R3011. The cathode of diode D3013 is coupled (preferably connected) to node IN3002, and the anode of diode D3013 is coupled (preferably connected) to a second terminal of the load R3011. The cathode of diode D3014 is coupled (preferably connected) to node IN3001, and the anode of diode D3014 is coupled (preferably connected) to the second terminal of the load R3011.

[0067] According to an embodiment, the first safety element includes a reference terminal GND_301, which is coupled (preferably connected) to a second terminal of the load R3011. This first reference terminal GND_301 is coupled (preferably connected) to a general-purpose reference terminal GND_300 of the device 300 via a diode D301. The diode D301 enables the first safety element 301 to have a reference terminal isolated from the general-purpose reference terminal GND_300. According to an example, the diode D301 is a conventional diode. According to a preferred embodiment, the diode D301 is a Schottky diode with a threshold voltage lower than that of a conventional diode.

[0068] Furthermore, according to the example, the second safety element 302 includes four diodes D3021, D3022, D3023, and D3024, and a load R3021 represented by a resistor. According to the example, the anode of diode D3021 is coupled (preferably connected) to node IN3001, and the cathode of diode D3021 is coupled (preferably connected) to the first terminal of the load R3021. The anode of diode D3021 is coupled (preferably connected) to node IN3002, and the cathode of diode D3022 is coupled (preferably connected) to the first terminal of the load R3021. The cathode of diode D3023 is coupled (preferably connected) to node IN3002, and the anode of diode D3023 is coupled (preferably connected) to the second terminal of the load R3021. The cathode of diode D3024 is coupled (preferably connected) to node IN3001, and the anode of diode D3024 is coupled (preferably connected) to the second terminal of the load R3021.

[0069] According to an embodiment, the second safety element includes a reference terminal GND_302, which is coupled (preferably connected) to a second terminal of the load R3021. This second reference terminal GND_302 is coupled (preferably connected) to a general-purpose reference terminal GND_300 of the device 300 via a diode D302. The diode D302 enables the second safety element 302 to have a reference terminal isolated from both the general-purpose reference terminal GND_300 and the reference terminal GND_301 of the first safety element. According to an example, the diode D302 is a conventional diode. According to a preferred embodiment, the diode D302 is a Schottky diode.

[0070] According to the example, the second safety element also includes a resistor R3022, which couples the first terminal of the load R3021 to the terminal EXT302. Terminal EXT302 is a terminal of the second safety element 302, which is coupled (preferably connected) to the circuit 303 to supply it with a power supply voltage VCCOUT or a control voltage. According to the example, the power supply voltage VCCOUT is taken between the terminal EXT302 of the safety element 302 and the reference terminal GND_302.

[0071] According to the example, the input of circuit 303 is coupled to terminal EXT302 of the second safety element 302, but is also coupled to the reference terminal GND_302 via filter capacitor C303.

[0072] Figures 4A-4B The illustration shows about Figure 3 A diagram illustrating the advantages of the described circuit 300.

[0073] As previously stated, the reference terminals GND_301 and GND_302 of safety elements 301 and 302 are isolated from each other and from the general reference terminal GND_300 of device 300.

[0074] Figures 4A-4B The diagram illustrates the states of wireless communication based on the variation of the modulation index of the wireless communication relative to the power of the electromagnetic field generated by the reader and used by the wireless communication. Dark boxes indicate wireless communication that cannot be achieved, while light boxes indicate wireless communication that can be achieved.

[0075] Figure 4A The diagram illustrates a situation where reference terminals GND_301 and GND_302 are not isolated from each other and are not isolated from the general reference terminal GND_300 of device 300. Figure 4B The diagram illustrates the case where reference terminals GND_301 and GND_302 are isolated from each other and from the general reference terminal GND_300 of device 300.

[0076] Clearly, the two safety elements 301 and 302 will interfere with the received communication, and isolating their conductive terminals makes it possible to improve external communication.

[0077] Various embodiments and variations have been described. Those skilled in the art will understand that certain features of these various embodiments and variations can be combined, and other variations will occur to those skilled in the art.

[0078] Finally, based on the functional indications given above, the actual implementation of the described embodiments and variations is within the capabilities of those skilled in the art.

Claims

1. An electronic device, characterized in that... Comprising: a first electronic circuit configured to implement a function; a first secure element configured to receive data and implement a transaction; and a second secure element configured to receive the same data as the first secure element and control operation of the first electronic circuit to implement the function.

2. The electronic device of claim 1, wherein The first secure element and the second secure element are configured to receive the data through wired communication.

3. The electronic device of claim 2, wherein The first secure element and the second secure element are coupled to the same connection terminal configured to receive the data through the wired communication.

4. The electronic device of claim 1, wherein The first secure element and the second secure element are configured to receive the data through wireless communication.

5. The electronic device of claim 4, wherein The first secure element and the second secure element are coupled to the same antenna configured to receive the data through the wireless communication.

6. The electronic device of claim 4, wherein The wireless communication is near field communication.

7. The electronic device of claim 1, wherein Further comprising a reference terminal of the electronic device and a first diode configured to couple a first reference terminal of the first secure element to the reference terminal of the electronic device.

8. The electronic device of claim 7, wherein The first diode is a Schottky diode.

9. The electronic device of claim 7, wherein Further comprising a second diode configured to couple a second reference terminal of the second secure element to the reference terminal of the electronic device.

10. The electronic device of claim 9, wherein The second diode is a Schottky diode.

11. The electronic device of claim 9, wherein The first electronic circuit comprises a fourth terminal coupled to the second reference terminal via a capacitor.

12. The electronic device of claim 1, wherein The first electronic circuit comprises a second circuit and a third circuit configured to drive the second circuit.

13. The electronic device of claim 12, wherein The second circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light emitting diode, a sensor control device, and a memory.

14. The electronic device of claim 1, wherein The electronic device comprises one of: a bank card, a smart transportation card, a car key, an access control card.

15. An electronic device, characterized in that... Comprising: an antenna having a first terminal and a second terminal; a first secure element comprising: a first diode having an anode connected to the first terminal; a second diode having an anode connected to the second terminal; and a load of the first secure element connected between a first ground node and a common cathode of the first diode and the second diode; a second secure element comprising: a third diode having an anode connected to the first terminal; a fourth diode having an anode connected to the second terminal; a load of the second secure element connected between a second ground node and a common cathode of the third diode and the fourth diode; and a third resistor connected between a power output node and the common cathode of the third diode and the fourth diode; and an electronic circuit configured to implement a function and having a power input connected to the power output node.

16. The electronic device of claim 15, wherein Further comprising: a fifth diode connected between a common ground node and the first ground node; and a sixth diode connected between the common ground node and the second ground node. Further comprising a capacitor connected between an input node and the second ground node.

17. The electronic device of claim 15, wherein The electronic circuit comprises a function circuit and a driver circuit configured to drive the function circuit.

18. The electronic device of claim 15, wherein The function circuit is selected from the group consisting of: a display screen, a fingerprint sensor, a light emitting diode, a sensor control device, and a memory.

19. The electronic device of claim 18, wherein The electronic device comprises one of: a bank card, a smart transportation card, a car key, an access control card.

20. The electronic device of claim 15, wherein ​

Images