IC Card Folder Security Status Inheritance Mechanism

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional IC cards do not allow the inheritance of security status from a higher-level file to lower-level or same-level files, limiting the management and access control of files in a hierarchical structure.

Innovation Solution

An IC card with a communication unit, data memory, and an inheriting unit that sets the security status of a selected folder to be inherited by a newly selected folder, allowing the security status to be maintained even when folders are changed, using a select command to manage file selection and security status inheritance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If security status is established for a file in an upper layer, then the security status can be inherited to files in lower layers, but the security status cannot be inherited to files in higher layers or same layer files

Engineering Contradiction:
Improvesecurity status inheritance scopeVSAvoidsecurity management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent inverts the conventional unidirectional inheritance model by enabling security status to flow not only from upper to lower layers but also from lower to upper layers and between same-layer files. This is achieved through the inheriting unit that determines inheritance based on folder selection relationships rather than fixed hierarchical direction, allowing security status to be established in any folder and inherited by previously selected folders.

Inventive Principle:
Principle #13The other way round (Inversion)

Solution Approach 2:

The patent makes the security status inheritance mechanism universal by allowing any folder to serve as both a source and destination for security status inheritance. The inheriting unit applies the same inheritance logic regardless of the relative positions of source and destination folders in the hierarchy, enabling flexible security status sharing across different folder relationships (upper-to-lower, lower-to-upper, and same-layer).

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Ease of operation

If security status is maintained when folders are changed, then access control is simplified, but security flexibility for different folders is reduced

Engineering Contradiction:
Improvefolder switching operationVSAvoidsecurity status customization
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent implements a feedback mechanism where the inheriting unit continuously monitors folder selection changes and automatically determines whether security status inheritance should occur. When a folder is selected, the system checks inheritance information to determine if security status should be maintained or changed, providing dynamic feedback that balances operational simplicity with security customization based on the specific folder relationships.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP2642422B1IC card and IC card control method
Publication Date: 2018.04.25 KK TOSHIBA
  • EP2642422B1 patent drawingFigure 1~2
  • EP2642422B1 patent drawingFigure 3~4
  • EP2642422B1 patent drawingFigure 5

AI summary

According to one embodiment, an IC card (2) includes a communication unit (25), data memory (22), selector (21), and inheriting unit (21). The communication unit performs data communication with an external apparatus. The data memory stores files managed by a hierarchical structure, a folder as an upper layer of the files, and information concerning the inheritance of a security status between a plurality of folders. If the communication unit receives a command requesting the selection of a second folder while a first folder is selected, the selector sets the first folder in an unselected state, and sets the second folder designated by the command in a selected state. If information indicating the inheritance of a security status from the first folder to the second folder exists, the inheriting unit inherits, even while the second file is selected, the security status established while the first folder is selected.