Java Applet Channel Management for Secure Inter-Applet Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Java card and Java SIM structures do not allow for direct communication and calling between Java applets without modifying existing regulations, posing security concerns and incompatibility with international security standards.
Innovation Solution
A program calling method utilizing a control module that manages channels with flags to enable communication between Java applets, allowing execution and data exchange without altering the current regulations, through channel creation, management, and virtual channel commands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If direct calling between Java applets is implemented, then communication capability between applets is improved, but security compliance with international standards deteriorates
Solution Approach 1:
The patent introduces a channel management mechanism as an intermediary layer between Java applets. Instead of allowing direct applet-to-applet calling, communication is routed through managed channels that enforce security protocols. The channel manager acts as a mediator that validates and controls all inter-applet communications, ensuring compliance with EMV and PBOC standards while enabling the desired communication functionality.
Solution Approach 2:
The patent segments the calling mechanism into distinct components: channel creation, channel management, and channel-based execution. By dividing the monolithic applet calling process into segmented channel operations, the system can enforce security checks at each segment boundary while maintaining overall communication capability. This segmentation allows security protocols to be applied systematically without blocking legitimate applet interactions.
2Adaptability or versatility
If SIO interface is used for applet calling, then applet execution flexibility is improved, but security concerns increase
Solution Approach 1:
The channel management mechanism serves as a secure intermediary that replaces the problematic SIO interface. Rather than allowing applets to directly invoke each other through SIO (which creates security vulnerabilities), the system routes all interactions through managed channels. This intermediary layer maintains execution flexibility while filtering out security risks through standardized channel protocols.
Solution Approach 2:
The patent changes the fundamental parameters of inter-applet communication by transitioning from direct SIO calls to channel-based invocation. This parameter change involves modifying how applets are instantiated, how parameters are passed, and how execution context is managed. By changing these communication parameters through the channel mechanism, the system achieves both flexibility and security.
3Adaptability or versatility
If Java applet regulations are modified to allow applet-to-applet calling, then communication functionality is improved, but compatibility with existing infrastructure deteriorates
Solution Approach 1:
The patent implements preliminary channel creation and registration before applet execution. By pre-configuring channels and registering them with the channel manager before actual applet interactions occur, the system establishes a stable framework that works within existing Java card infrastructure. This preliminary setup ensures compatibility with current regulations while enabling the desired communication functionality through pre-approved channel pathways.
Solution Approach 2:
The channel management mechanism is designed as a universal interface that can handle multiple types of applet communications through a single standardized protocol. Rather than creating specialized calling mechanisms for different scenarios, the patent implements a multi-functional channel system that can manage various applet interactions uniformly. This universality maintains compatibility with existing infrastructure while providing the flexibility needed for diverse communication scenarios.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A program calling method is to be implemented by a control module (20), which uses a first channel during execution of a first Java applet, and includes creating a virtual channel that corresponds to a second channel when the first Java applet intends to call a second Java applet which is to be executed using the second channel, in response to a channel management instruction associated with the virtual channel, opening the second channel for allowing execution of the second Java applet, determining whether the virtual channel is still open, and receiving an output from the second Java applet for use by the first Java applet when it is determined that the virtual channel is still open.