Local User Control of Secure Element Application Access Rules

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current mobile devices lack the ability for users to flexibly adjust access rules for secure elements, such as subscriber identity modules, especially when new applications are downloaded, necessitating remote server management which is inefficient for frequent app changes.

Innovation Solution

A secure element with an ARA application that allows users to manage access rules locally through a user interface, enabling immediate adaptation of access options to SE applications, including creating, saving, or deleting rules as needed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If remote server management is used to manage access rules for secure elements, then centralized control is achieved, but user convenience and response time for app changes deteriorate

Engineering Contradiction:
Improvecentralized controlVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements self-service by enabling users to directly manage access rules for secure elements through a user interface on the terminal device. Users can create, modify, and delete access rules without requiring remote server intervention, allowing them to independently control application access to secure element functions based on their immediate needs.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary action by pre-configuring the terminal device with the necessary interface and functionality to manage access rules locally. The user interface and access control mechanisms are prepared in advance, enabling users to immediately adjust access rules when new applications are installed or when access requirements change, without waiting for remote server commands.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If remote server management is used for access rules, then centralized security control is maintained, but response time for frequent app changes increases

Engineering Contradiction:
Improvecentralized security controlVSAvoidresponse time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

Users can independently and immediately adjust access rules when applications are installed or modified, eliminating the time delay associated with remote server communication. The self-service capability allows real-time response to changing application needs while maintaining security through local access control enforcement.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The terminal device is pre-equipped with local access control mechanisms and user interface capabilities, enabling immediate response to application changes without waiting for remote server instructions. This preliminary preparation of management functionality at the terminal level significantly reduces response time for frequent app changes.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If access rules are manually managed through remote servers, then structured control is achieved, but operational complexity for frequent adjustments increases

Engineering Contradiction:
Improvestructured controlVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The user interface provides simplified self-service functionality that allows users to easily manage access rules through intuitive operations. Common tasks such as granting or revoking access for specific applications can be performed through straightforward user interactions, reducing operational complexity while maintaining structured control through the access control framework.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system pre-establishes the user interface and access management capabilities at the terminal device, eliminating the need for complex remote server interactions for frequent adjustments. This preliminary configuration of local management functionality simplifies operational procedures for users while preserving structured control mechanisms.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4445285B1Secure element with access rules application
Publication Date: 2025.10.22 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • EP4445285B1 patent drawingFigure 1~2
  • EP4445285B1 patent drawingFigure 3~4
  • EP4445285B1 patent drawingFigure 5~6

AI summary

The invention provides a secure element comprising an SE application implemented therein or configured to implement an SE application therein. The secure element furthermore comprises: - an SE terminal interface to a terminal, in conjunction with which the secure element is able to be operated; - an ARA application (ARA-X) and ARA access rules, by way of which access operations from applications implemented in the terminal to SE applications implemented or able to be implemented in the secure element via the SE terminal interface are controlled. The secure element is characterized by: - an ARA user interface (ARA-UI), which is configured: ** to receive user commands that are input by a user on a user interface provided on the terminal or on the secure element; ** to forward received user commands to the ARA application; and ** to prompt the ARA application to apply forwarded user commands to the ARA application.