Integrated Module for Secure Device Software Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing device management systems face challenges in efficiently updating subscriber devices, particularly in determining the need for software updates and ensuring compatibility between device capabilities and integrated modules, which can lead to inefficiencies and security vulnerabilities.

Innovation Solution

The implementation of an integrated module with remote management functionality that determines the need for updates by comparing its capabilities with those of the device, requests a connection to a subscription management server, and downloads compatible software updates, ensuring secure and efficient updating processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If device management systems perform software updates on subscriber devices, then device functionality and security are improved, but system complexity and update compatibility challenges increase

Engineering Contradiction:
Improvedevice securityVSAvoidupdate management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The integrated module acts as an intermediary between the device and the update management system. It autonomously determines update needs by comparing its own capabilities with device capabilities, and directly communicates with the subscription management server to download and install updates. This intermediary role simplifies the overall update management complexity while maintaining security and reliability improvements.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If integrated modules autonomously determine update needs by comparing capabilities, then update efficiency is improved, but processing overhead and energy consumption increase

Engineering Contradiction:
Improveupdate efficiencyVSAvoidenergy consumption
Core Design Contradiction:
ProductivityVSUse of energy by moving object

Solution Approach 1:

The integrated module performs partial capability comparison - it compares only the necessary capability parameters (security protocols, supported formats, version requirements) rather than all possible device attributes. This selective comparison approach maintains update efficiency while minimizing unnecessary processing overhead and energy consumption.

Inventive Principle:
Principle #16Partial or excessive action

3Adaptability or versatility

If device and integrated module software versions are aligned, then interoperability is improved, but update coordination complexity increases

Engineering Contradiction:
ImproveinteroperabilityVSAvoidversion coordination complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The integrated module autonomously performs version alignment by comparing its capabilities with the device, determining update requirements, and executing the update process without external intervention. This self-service capability ensures interoperability through version alignment while actually reducing coordination complexity, as the module independently manages the synchronization process.

Inventive Principle:
Principle #25Self-service

4Reliability

If comprehensive capability comparison is performed before updates, then update compatibility is improved, but processing time and complexity increase

Engineering Contradiction:
Improveupdate compatibilityVSAvoidupdate preparation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The integrated module performs capability comparison and update determination in advance, before the actual update installation. By pre-assessing compatibility requirements and identifying suitable updates, the system ensures update compatibility while minimizing the time required during the actual update execution phase.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2965466B1Method and apparatus for managing devices
Publication Date: 2021.12.15 NOKIA TECHNOLOGIES OY
  • EP2965466B1 patent drawingFigure 1A~1B
  • EP2965466B1 patent drawingFigure 2
  • EP2965466B1 patent drawingFigure 3

AI summary

In accordance with an example embodiment of the present invention, there is provided an apparatus, comprising a transceiver arranged to insertably interface with an integrated module, at least one processing core configured to enable the integrated module to be connected, via the apparatus, to a network, the transceiver being configured to receive from the integrated module information enabling the apparatus to become an endpoint of a connection to a network node, and the at least one processing core being configured to receive, using the connection, a computer program for operating the apparatus. In some embodiments, the integrated module comprises a universal integrated circuit card and a secure execution environment.