Personalized Profile Package Generation for IC Cards
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method for generating personalized profile package data for integrated circuit cards is inefficient due to the time-consuming conversion from ASN.1 to DER format and results in large output files, making it difficult to trace personalization data back to the correct master profile, leading to potential errors in association.
Innovation Solution
The method involves separating the personalization data and master profile into distinct files, encrypting them with different keys, and transmitting them separately to the Data Preparation entity for decryption and combination, allowing for efficient encryption and reduced output file size, while enabling traceability through the use of a hash-based data protection key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If personalization data and master profile are combined in a single output file, then the generation process is simplified, but the output file size becomes large and traceability is lost
Solution Approach 1:
The patent segments the output file into two separate files: a master profile file and a personalization data file. The master profile file contains the standardized profile structure, while the personalization data file contains card-specific data. This segmentation reduces the size of each individual file and enables independent processing and storage of profile and personalization components.
Solution Approach 2:
The patent introduces an intermediary mechanism using hash-based identifiers. A hash of the master profile is computed and stored alongside personalization data, serving as an intermediary link that enables traceability without requiring the full master profile to be embedded with each personalized output. This intermediary approach maintains traceability while reducing redundancy.
2Productivity
If conversion from ASN.1 to DER format is performed, then the profile package becomes usable by systems, but the conversion process is very time consuming
Solution Approach 1:
The patent performs the ASN.1 to DER format conversion in advance during the master profile creation phase, rather than converting each personalized profile individually. The converted master profile is stored in DER format, and personalization data is merged with this pre-converted profile. This preliminary action eliminates repeated conversions and significantly reduces processing time for subsequent personalization operations.
3Device complexity
If personalization data is encrypted with the same key as the master profile, then encryption is simplified, but traceability becomes difficult
Solution Approach 1:
The patent applies different encryption keys to different components: the master profile is encrypted with a master key, while personalization data is encrypted with a separate personalization key. This local differentiation of encryption keys allows each component to be secured independently while maintaining the ability to trace personalization data back to its corresponding master profile through hash-based identifiers stored in the output file.
Data Source
AI summary
A method can be used for generating personalized profile package data for integrated circuit cards. The method includes encrypting data records corresponding to profile data with a respective data protection key thereby obtaining encrypted data records. Each record includes a number of personalization fields to store different types of personalization values. The method also includes encrypting a file for a profile package with a master encryption key thereby obtaining an encrypted file for the profile package. The file includes fields to be personalized corresponding to one or more of the personalization fields to store different types of personalization values. The encrypted file for the profile package and encrypted data records are transmitted to a data preparation entity where the encrypted data records and the encrypted file can be decrypted and combined to obtain personalized profile packages.