eUICC OS Update Supervision for Secure OTA Installation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating secure elements in user devices, such as eUICC, do not ensure consistent origin and version compatibility between the operating system and secure elements, compromising functional safety, security, and deployability.
Innovation Solution
A method involving an operating system dataset and installation program dataset that allows secure elements to be updated over-the-air, with supervision and control mechanisms to ensure compatibility and integrity, preventing unauthorized data changes during the update process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If secure elements are updated over-the-air without supervision mechanisms, then update speed and convenience are improved, but functional safety and security are compromised
Solution Approach 1:
The patent implements a supervision mechanism where the operating system monitors and controls the update installation process. The OS receives notifications about update installation status and can intervene to ensure integrity, creating a feedback loop that maintains security while enabling remote updates.
Solution Approach 2:
The operating system acts as an intermediary between the update mechanism and the secure element data. It supervises the installation process and prevents unauthorized modifications, serving as a mediator that enables updates while protecting functional safety.
2Reliability
If the operating system supervises the update installation process, then functional safety and security are improved, but system complexity increases
Solution Approach 1:
The supervision functionality is merged into the existing operating system rather than being implemented as a separate external system. This integration approach maintains security while minimizing additional system complexity by reusing existing OS infrastructure.
Solution Approach 2:
The operating system performs multiple functions: it manages the secure element, supervises updates, and ensures data integrity. By making the OS multi-functional, the patent avoids adding dedicated separate systems for each function, thereby reducing overall complexity.
3Productivity
If update data subsets are installed without notification to the operating instance, then installation efficiency is improved, but data integrity and compatibility are compromised
Solution Approach 1:
The system implements notification mechanisms where the update process communicates installation status to the operating instance. This feedback enables the OS to verify data integrity and compatibility without significantly impacting installation efficiency.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method, as well as a corresponding configuration program (10), an operating system dataset (O), a computer-readable data carrier (11, 12, 13), a user device (3), and a server device (4) are provided, wherein for configuring the user device (5), the steps of providing a secure element (6) of the user device (5), such as an eUICC, with an operating system dataset (O) enabling an operating instance (V) for operating the secure element (6); sending at least one update data subset (F) to the secure element (6) for updating the operating system dataset (O); and installing the at least one update data subset (F) on the secure element (6), are performed; wherein the operating instance (V) is notified of the ongoing installation process of the at least one update data subset (F) when updating the operating system dataset (O).