Dual Version ROM Application Switching for Secure Smart Card Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure information processing devices, such as smart cards, face challenges in updating applications stored in read-only memory (ROM) due to the need for replacing all devices during system migration, which is time-consuming and compromises security when trying to manage both old and new generations of cards simultaneously.
Innovation Solution
Implementing an information processing device with two versions of an application in ROM, sharing the same identifier, and a switching mechanism that allows switching between these versions using an invocation identifier, enabling seamless migration without new device distribution and maintaining security by storing versions in ROM.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If applications are stored in ROM to ensure security, then security is improved, but the ability to update applications is worsened
Solution Approach 1:
The application storage is segmented into multiple versions (first version and second version) within the ROM, each with its own application identifier. This allows the system to maintain multiple application versions simultaneously in the secure ROM environment, enabling updates without compromising security or requiring device replacement.
Solution Approach 2:
The system dynamically switches between different application versions by modifying the application identifier in the operating system. The switching means changes the identifier from the first application identifier to the second application identifier, enabling the system to transition between application versions without physical changes to the ROM or device distribution.
2Adaptability or versatility
If all smart cards are updated to migrate to a new application version, then the new version is deployed, but the time required for migration increases
Solution Approach 1:
Multiple application versions are pre-loaded into the ROM during manufacturing, with each version having its own identifier. This preliminary preparation eliminates the need for time-consuming field updates or device replacements, as the system can switch between pre-existing versions by simply changing the identifier through the switching means.
Solution Approach 2:
The system uses identifier copying and modification to switch between application versions. Instead of copying entire applications or redistributing devices, the switching means modifies the application identifier reference, enabling rapid version transitions without physical media changes or lengthy update processes.
3Adaptability or versatility
If both old and new generation cards are managed simultaneously, then system transition is enabled, but system complexity increases
Solution Approach 1:
The ROM is designed to universally store multiple application versions with different identifiers, and the operating system is enhanced with switching means that can recognize and invoke any version. This universal design allows the same device to function with both old and new generation applications, simplifying system management during transition periods without requiring different device types.
Solution Approach 2:
The switching means acts as an intermediary layer between the operating system and the multiple application versions in ROM. It manages the complexity of version switching by providing a unified interface that handles identifier modification and application invocation, shielding the upper system from the complexity of multi-version management while enabling seamless transitions.
Data Source
Figure 1~2
Figure 3~5
Figure 6~7
AI summary
The invention pertains to the field of secured information processing devices, such as smart cards, and more particularly to the means for updating an application stored in a ROM (Read Only Memory) of such a device, and relates to an information processing device containing two versions of an application in the read-only memory thereof. The two versions have the same identifier. The device is provided with a means for controlling a swapping operation between said two versions so that the version of the application executed in response to a prompt of the application identifier can change.