Java Card Platform Applet Security Coordination

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Java Card platform-based embedded devices are vulnerable to hardware attacks, which can cause erroneous program execution flows and data integrity errors, and existing security features operate independently, lacking coordination between platform and applet security measures.

Innovation Solution

A communication channel is established between the Java Card platform and applets to exchange threat information and adjust security features in response to detected threats, using a threat detection mechanism and interface, such as an API or exception mechanism, to optimize the use of security features.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If platform security features and applet security features operate independently, then each security feature can be implemented simply, but the overall security coordination and optimization is insufficient

Engineering Contradiction:
Improvesecurity feature implementation complexityVSAvoidoverall security coordination
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the platform security manager notifies applets about detected hardware attacks through a standardized interface. This allows applets to respond appropriately to platform-detected threats, creating a coordinated security response. The feedback loop enables information exchange between platform and applet security systems, resolving the independence issue while maintaining implementation simplicity.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent introduces a platform security manager as an intermediary component that coordinates between platform security features and applet security features. This manager handles the communication and coordination tasks, allowing independent implementation of security features while achieving overall security optimization through the intermediary's coordination function.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If platform detects hardware attacks and notifies applets, then coordinated security response is improved, but communication overhead and system complexity increase

Engineering Contradiction:
Improvecoordinated security responseVSAvoidcommunication channel complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent employs a universal interface mechanism that serves multiple purposes: it notifies applets about hardware attacks, enables security coordination, and maintains system compatibility. This multi-functional interface reduces the need for separate dedicated communication channels for each security function, thereby reducing overall system complexity while achieving coordinated response.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent segments the security notification function into discrete, manageable components through standardized interfaces. Instead of implementing a monolithic communication system, the security notifications are divided into specific interface calls and response mechanisms, making the complex coordination task more manageable and reducing implementation complexity.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3321838B1JAVA card platform and applet security
Publication Date: 2019.07.17 GIESECKE & DEVRIENT EPAYMENTS GMBH
  • EP3321838B1 patent drawingFigure 1A~1B

AI summary

An embedded device incorporating Java Card technology including a Java Card platform and at least one applet, and including both platform security features and applet security features. The device has a) a threat detection means to detect events of threat (ET) occurring at the embedded device (D); and b) an interface means (IM) constructed to receive a threat notification (NOT) on a detected event of threat (ET); and establish or use a communication channel (CH) between the platform and the applet and exchange threat (TI) information on the detected event of threat (ET) between the platform and the applet.