Command-Level IC Card Control via Tamper-Resistant Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for controlling IC cards lack the ability to send requests at a command level, leading to inefficiencies in communication and server processing for services utilizing IC cards.
Innovation Solution
The implementation of a server and client apparatus with tamper-resistant devices that include encryption and decryption units, allowing for secure communication and processing of commands, enabling the server to request encryption and the client to decrypt and encrypt information accordingly, thus allowing command-level control of IC cards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied to all communications between server and client, then security is improved, but communication efficiency deteriorates due to processing overhead
Solution Approach 1:
The patent segments encryption operations into specific command-level operations rather than encrypting all communications. The tamper-resistant device segments the system into secure command generation/decryption components and standard communication components, applying encryption only where necessary for security while maintaining efficiency in other areas.
2Productivity
If command-level control of IC cards is implemented, then processing efficiency is improved, but system complexity worsens due to additional encryption/decryption units
Solution Approach 1:
The patent introduces a tamper-resistant device as an intermediary component that handles the complex encryption and decryption operations. This mediator absorbs the system complexity, allowing the main server and client systems to achieve command-level control efficiency without directly managing the cryptographic complexity themselves.
3Reliability
If tamper-resistant devices are added to both server and client, then security is improved, but device complexity worsens
Solution Approach 1:
The patent applies tamper-resistant devices with specific local qualities - the server-side device focuses on command generation and encryption, while the client-side device focuses on decryption and execution. Each device is optimized for its specific security function, providing targeted security improvements without unnecessary complexity in other areas.
Data Source
AI summary
An IC card chip performs payment processing in response to item purchase in accordance with a command generated and encrypted by a secure application module. The IC card chip decrypts the encrypted command, and reads information corresponding to the command. The IC card chip appropriately encrypts the read information in accordance with key information managed together with the secure application module, and sends the encrypted information to the secure application module via a cellular telephone or the like. The secure application module generates a command for controlling the IC card chip of the cellular telephone in accordance with a request from a content server. The secure application module appropriately encrypts the generated command in accordance with the key information managed together with the IC card chip, and supplies the encrypted command to the IC card chip. The IC card chip operates in accordance with the supplied command.