Hybrid TSM Model Segments Secure Element Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations, such as financial institutions, face increased costs and complexity when implementing Trusted Services Management (TSM) using third-party vendors, which can decrease revenue and information security.
Innovation Solution
A hybrid TSM service model that allows organizations to self-manage certain services while contracting third-party vendors for others, optimizing secure element provisioning and authentication, and enabling direct relationships with mobile network operators and customers, thereby reducing intermediaries and enhancing security and revenue streams.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If third-party vendors are used to manage TSM services, then service scalability and support are improved, but costs and complexity increase while revenue and information security decrease
Solution Approach 1:
The patent segments TSM services into two distinct categories: self-managed services (core authentication, secure element provisioning) and third-party managed services (non-critical support functions). This segmentation allows the organization to maintain direct control over critical security functions while leveraging third-party vendors for scalability in non-critical areas, thereby resolving the contradiction between service scalability and implementation complexity.
Solution Approach 2:
The patent introduces a hybrid service model that acts as an intermediary between the organization and third-party vendors. This hybrid model enables the organization to selectively engage third-party vendors for specific services while maintaining overall control through self-management of critical functions, thus reducing the complexity of third-party integration while preserving scalability benefits.
2Adaptability or versatility
If third-party vendors are used to manage TSM services, then service scalability is improved, but information security decreases
Solution Approach 1:
The patent segments TSM services by criticality, placing information security and authentication functions within the self-managed category while allowing third-party vendors to manage non-critical services. This segmentation ensures that sensitive data and security-critical operations remain under direct organizational control, preventing security degradation while preserving scalability through third-party partnerships in non-sensitive areas.
Solution Approach 2:
The patent applies local quality by differentiating the management approach based on the specific service characteristics. Critical security services receive direct organizational management with high security standards, while non-critical services can utilize third-party vendors. This localized differentiation of management quality ensures information security is maintained where it matters most while allowing scalability where appropriate.
3Adaptability or versatility
If third-party vendors are used to manage TSM services, then service scalability is improved, but revenue decreases
Solution Approach 1:
The patent segments services to enable the organization to self-manage core authentication and secure element provisioning functions, which are revenue-generating activities. By retaining control over these high-value services, the organization can capture more revenue directly while using third-party vendors only for non-revenue-critical support functions, thus preserving scalability benefits without significant revenue loss.
Data Source
AI summary
Methods, computer readable media, and apparatuses for providing trusted services management using a hybrid service model are presented. According to one or more aspects, a first transaction log of a first secure element included in a mobile computing device may be received. The first secure element may be provisioned with first secure information provided to a user of the computing device by a first entity, such as a first financial institution. Subsequently, a second transaction log of a second secure element included in the mobile computing device may be received. The second secure element may be provisioned with second secure information provided to the user of the computing device by a second entity different from the first entity, such as a second financial institution, for instance. In some arrangements, incentive offers may thereafter be provided to the user based on the first transaction log and the second transaction log.