iSIM Modem Integration via Hardware Arbiter
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing separate Universal Integrated Circuit Card (UICC) embodiment as a secure hardware element in Narrowband Internet of Things devices increases system costs due to the need for a SIM card, necessitating the integration of the UICC with the modem to reduce costs and energy consumption.
Innovation Solution
An improved Narrowband Internet of Things device integrates a modem and Subscriber Identity Module (iSIM) on a single chip, with shared components managed by a secure hardware arbiter to prevent information leakage and ensure real-time operation, using cryptographic accelerators and a timer to enforce access control and secure data removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If the UICC is embodied as a separate secure hardware element (SIM card), then security is maintained, but system cost and device complexity increase
Solution Approach 1:
The patent combines the UICC secure hardware element with the modem into a single integrated chip. The modem chip now contains both the communication functionality and the secure identity module, eliminating the need for a separate SIM card while reducing system cost and device complexity. This merging allows the UE to have all necessary components on one chip, simplifying the overall device structure.
Solution Approach 2:
The modem chip is designed to serve multiple functions: it acts as both the communication modem and the secure UICC identity module. This multi-functional design allows a single component to replace what previously required two separate elements (modem + SIM card), reducing system cost while maintaining security functionality.
2Ease of manufacture
If the UICC is integrated with the modem on a single chip, then cost is reduced, but security against information leakage may be compromised
Solution Approach 1:
Within the integrated modem chip, the patent segments the design into distinct functional areas: a secure element region containing the UICC with its secret keys, and a non-secure region containing the modem processing units. This segmentation ensures that even though they are on the same chip, the secure and non-secure functions are spatially and logically separated, preventing information leakage while maintaining cost benefits of integration.
Solution Approach 2:
The patent introduces a secure interface or intermediary mechanism between the secure UICC region and the non-secure modem region. This intermediary controls and monitors all data exchanges, ensuring that secret keys and sensitive information remain protected while allowing necessary communication for authentication and network operations.
3Area of stationary object
If cryptographic functions are shared between modem and iSIM, then chip area is reduced, but access control and information security become more complex
Solution Approach 1:
The patent implements shared cryptographic acceleration hardware that can be used by both the modem and the iSIM functions. This shared resource reduces the total chip area compared to having separate cryptographic units for each function. The shared accelerators handle cryptographic operations for network authentication, secure boot, firmware encryption, and end-to-end data protection across both modem and iSIM operations.
Solution Approach 2:
A hardware arbiter acts as an intermediary to manage access to the shared cryptographic components. This arbiter implements access control logic that determines which module (modem or iSIM) can use the cryptographic accelerators at any given time, ensuring secure operation and preventing unauthorized access or information leakage while enabling efficient resource sharing.
4Reliability
If a hardware arbiter is introduced to manage shared components, then information security is improved, but device complexity increases
Solution Approach 1:
The hardware arbiter is designed to autonomously manage access to shared cryptographic components without requiring complex external control logic. It self-regulates the allocation and monitoring of cryptographic resources between the modem and iSIM, making security management built-in and automatic rather than requiring additional complex control systems.
Data Source
AI summary
An improved Narrowband Internet of Things device (UE) supporting resource sharing for integrated Subscriber Identity Modules (iSIM) is provided. The cost per UE is reduced by reducing the chip area and energy consumption of an integrated UICC chip therein since identical components of the modem and the iSIM are designed as shared components, whereas a hardware arbiter manages an access to THE shared components by the modem or the iSIM and prevents information leaking.