Application Data Transfer via Secure Backup Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for upgrading the operating system of secure elements, such as smart cards and secure devices, often require complete reprovisioning of application data, which is inefficient and insecure, especially when transferring data between devices.
Innovation Solution
A method involving a storage module within the device to save and restore application data independently, using serialization and encryption, ensuring tamper resistance and compatibility with upgraded systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full memory reprogramming is performed to upgrade the operating system, then the operating system is updated, but all application data is deleted and complete reprovisioning is required
Solution Approach 1:
The patent segments the secure element memory into distinct regions: a first memory region for storing the operating system and a second memory region for storing application data. This segmentation allows independent management of OS and application data, enabling OS upgrades without affecting application data stored in the separate second region.
Solution Approach 2:
The patent implements preliminary actions by creating a backup of application data from the second memory region before the OS upgrade process begins. This backup is stored temporarily, and after the OS is upgraded and the secure element is reinitialized, the application data is restored from the backup, ensuring no data loss during the upgrade process.
2Adaptability or versatility
If application data is transferred between devices, then device switching is enabled, but security risks increase during data transfer
Solution Approach 1:
The patent introduces a backup memory region that acts as an intermediary for data transfer operations. When transferring application data between devices, the data is first copied to the backup region, then transferred through secure channels. This intermediary mechanism ensures that the original application data in the second memory region remains protected and unchanged during the transfer process.
Solution Approach 2:
The patent implements a copying mechanism where application data is duplicated into a backup memory region before transfer operations. The original data remains intact in the second memory region while the backup copy is used for transfer, ensuring that even if transfer security is compromised, the original application data remains secure and can be restored.
3Reliability
If Java Card technology is used for secure element applications, then interoperability and security certification are achieved, but data encapsulation requires complex data transfer mechanisms
Solution Approach 1:
The patent extracts the data transfer complexity from the Java Card application layer by implementing a dedicated backup memory region and management mechanism at the hardware/firmware level. This allows application data to be stored and transferred independently of the Java Card virtual machine's data encapsulation requirements, simplifying the transfer mechanism while maintaining security certification.
Data Source
Figure 1~2
AI summary
A method (100) for transferring application data (21) of at least one application (20) of a first device (10) is provided. The method (100) comprises determining (110), via the operating system (11) and by a corresponding one of the at least one application (20), application data (21) to be transferred, formatting (120), by the at least one application (20), the determined application data (21) and sending (130) the formatted application data (21) to a storage module (30), saving (140) the application data (21) within the storage module (30), retrieving (160) the saved application data (21) from the storage module (30), and restoring (170) the retrieved application data (21) within at least one application (20) by the at least one application (20).