Java Card Applet Trust Evaluation via JCRE Interaction Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for invoking shared interface services between Applets in a JAVA card rely on fixed, preset rules that are not adaptable to dynamic changes in the runtime environment, leading to decreased security due to continuous interactions and changes in the number of Applets.
Innovation Solution
A method and device that utilize the Java Card Runtime Environment (JCRE) to assess the trust degree between Applets based on interaction information, determining whether to invoke a shared interface service only when the trust degree reaches a predetermined threshold, thereby enhancing security by adapting to dynamic changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fixed preset rules are used for invoking shared interface services between Applets, then the invocation process is simple and straightforward, but the security decreases due to inability to adapt to dynamic changes in runtime environment
Solution Approach 1:
The patent implements dynamic trust degree evaluation that adapts to runtime changes. The JCRE continuously monitors interaction information between Applets and updates trust degrees in real-time, allowing the security mechanism to respond dynamically to changing runtime environments rather than relying on static preset rules.
Solution Approach 2:
The patent establishes a feedback loop where interaction information between Applets is collected, processed to determine trust degrees, and used to control future invocation permissions. This closed-loop feedback mechanism enables the system to learn from past interactions and adjust security decisions based on accumulated trust information.
2Reliability
If trust degree evaluation based on interaction information is implemented, then security is enhanced by adapting to dynamic changes, but the complexity of the invocation mechanism increases
Solution Approach 1:
The JCRE serves as an intermediary between Applets, centralizing the trust evaluation logic and interaction information management. By positioning the JCRE as the mediator that collects interaction data, calculates trust degrees, and makes authorization decisions, the patent manages complexity through a single coordinating component rather than distributed complex logic across multiple Applets.
Solution Approach 2:
The patent changes the parameter used for access control from static preset rules to dynamic trust degree values. By introducing trust degree as a variable parameter that changes based on interaction history and service class information, the system achieves adaptive security without requiring complex structural changes to the invocation mechanism.
3Adaptability or versatility
If continuous interactions between Applets are allowed, then the runtime environment becomes more flexible and adaptive, but security decreases due to increased attack surface
Solution Approach 1:
The patent applies different trust degree thresholds and evaluation criteria based on service class information. Different Applet interactions are assessed with locally appropriate security requirements, allowing high-trust interactions to proceed freely while imposing stricter controls on low-trust interactions, thus maintaining flexibility where safe and security where needed.
Solution Approach 2:
The patent converts the potential harm of continuous interactions into beneficial trust accumulation. By monitoring and recording interaction information over time, the system transforms the increased attack surface into a source of trust data, where successful interactions strengthen trust degrees and enable more flexible future invocations.
Data Source
AI summary
The present disclosure discloses a method and device for invoking a JAVA card object. The method comprises: receiving, by a JCRE, a service request message transmitted by an application Applet1; acquiring, by the JCRE, interaction information between the Applet1 and the Applet2 according to an ID of the Applet1 and an ID of the Applet2; acquiring, by the JCRE, a trust degree between the Applet1 and the Applet2 according to the interaction information between the Applet1 and the Applet2, information about one interaction comprising service class information for this interaction and information about whether a service request task of the Applet1 succeeds after this interaction; and determining, by the JCRE, that the Applet1 invokes a shared interface service of the Applet2, when the trust degree reaches a trust degree threshold.