Generic Event Notification Service for Smart Card Application Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Resource-constrained devices like smart cards face limitations in implementing event-driven systems due to limited storage capacity, hindering secure and flexible communication between multiple applications.
Innovation Solution
A generic event notification service is implemented on the device, using shareable interface objects to manage communications and enforce security rules, allowing authorized applications to receive events while preventing impersonation and enabling late binding of applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If each application includes event-driven system classes to enable communication, then application interaction capability is improved, but device storage capacity is exceeded
Solution Approach 1:
The patent implements a universal event notification service that provides event-driven communication functionality to all applications through a shared service infrastructure. Instead of each application containing its own event-driven classes, a single multi-functional service handles event generation, routing, and notification for all applications, thereby providing universal interaction capability without duplicating code across applications.
Solution Approach 2:
The event notification service acts as an intermediary between applications, receiving events from event-producing applications and distributing them to event-consuming applications. This mediator pattern eliminates the need for direct event-driven system implementation in each application, reducing storage requirements while maintaining full interaction capability through the central service.
2Reliability
If security mechanisms are implemented to control application communication, then security is improved, but system complexity increases
Solution Approach 1:
The event notification service implements self-service security mechanisms where the service automatically manages event routing, authorization, and notification delivery without requiring complex external security infrastructure. The service handles security checks and event distribution autonomously, providing robust security while maintaining relatively simple system architecture through centralized self-managing functionality.
Data Source
AI summary
A generic event notification service for a resource-constrained device is provided. One method includes receiving an event having a unique event identifier, and determining whether an event-producing application is authorized to fire the event. Upon a determination of authorization to fire the event, a determination is made whether any event-consuming applications are authorized by the event-producing application to receive the event. Upon a determination of authorization to receive the event, the event is forwarded to each authorized event-consuming application. In this manner, secure, flexible, generic, and uniform application interaction is facilitated.