IoT SIM Data Field Duplication for Secure Key Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices, particularly NB-IoT and LPWA devices, lack the mechanism to communicate with SIM cards via APDU or STK, necessitating additional components and physical redesign, leading to increased costs and complexity.
Innovation Solution
A method that allows IoT devices to access security information from a Subscriber Identity Module by duplicating a data item from a predefined data field, storing security information in that field, and restoring the original data item, using AT commands to bypass the need for APDU or STK protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IoT devices use additional secure elements to communicate with SIM cards, then security functionality is improved, but device complexity and cost increase
Solution Approach 1:
The SIM card's existing data fields are made multi-functional by storing both original data (IMSI) and security information (encryption keys) in the same field at different time periods. This eliminates the need for separate secure element hardware in IoT devices, reducing complexity while maintaining security functionality.
Solution Approach 2:
The invention creates a temporary copy of the original data field content, stores security information in its place, then restores the original content. This copying mechanism enables security information transfer without requiring additional secure storage hardware in the IoT device.
2Reliability
If IoT devices use additional secure elements to communicate with SIM cards, then security functionality is improved, but manufacturing cost increases
Solution Approach 1:
The SIM card's data fields serve multiple purposes: storing subscriber identity information and temporarily holding encryption keys. This multi-functionality eliminates the need for additional secure element components in IoT devices, reducing bill of materials cost and simplifying manufacturing assembly.
Solution Approach 2:
By copying and temporarily replacing data field content with security information, the invention enables security functionality to be achieved through software-based data manipulation rather than additional hardware components, reducing manufacturing complexity and cost.
3Ease of operation
If SIM card data fields are overwritten with security information, then security information transfer is enabled, but data loss occurs
Solution Approach 1:
Before overwriting the data field with security information, the system performs a preliminary backup by storing the original content in a temporary variable. This preliminary action prevents permanent data loss and enables safe recovery if needed.
Solution Approach 2:
The invention temporarily discards the original data field content by overwriting it with security information, then recovers the original content by writing the backed-up data back into the field. This discarding and recovering process enables secure information transfer while preserving original data.
4Ease of repair
If a temporary variable is used to store backup data, then data recovery is enabled, but memory usage increases
Solution Approach 1:
The invention extracts only the essential backup information needed for data recovery into a temporary variable, rather than storing complete copies of all data. This extraction approach enables data recovery functionality while minimizing additional memory consumption.
Solution Approach 2:
The temporary variable used for backup storage is designed as a short-living, disposable memory structure that exists only during the data transfer operation. After the overwrite and restore process completes, the temporary variable is discarded, minimizing long-term memory usage while enabling data recovery during the operation.
Data Source
Figure 1
AI summary
The present invention is directed towards a method for enabling an electronic device to access secure information of a Subscriber Identity Module, SIM for short. According to the present invention it is possible to communicate with the Subscriber Identity Module even although an electronic device may not support specific interfaces. This especially applies in the domain of the so-called Internet of Things, IoT for short. The present invention is furthermore directed towards a respective communication protocol along with a system for enabling an electronic device to access security information. Moreover, a computer program product is suggested, implementing the method steps, the communication instructions and furthermore being arranged to be operated by the system.