JavaCard Buffer for Secure Data Transfer Between Applications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Updating a JavaCard application on an integrated circuit card often results in the loss of existing data, as existing solutions require reinstallation, which is costly and inconvenient, especially when dealing with sensitive or confidential information.
Innovation Solution
Implementing a buffer as a common interface between JavaCard applications to transfer data securely, allowing for the loading, extraction, and storage of data between different application contexts, while enabling mutual authentication and key management to ensure data integrity and security during updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a JavaCard application is updated by reinstallation, then the new application can be deployed, but all existing data is lost
Solution Approach 1:
The patent introduces a buffer as an intermediary storage area between the first and second JavaCard applications. This buffer temporarily holds data during the transition, allowing the second application to access data from the first application without direct context sharing. The buffer acts as a mediator that enables data preservation during application updates while maintaining security boundaries between different application contexts.
2Ease of operation
If direct data sharing between JavaCard applications is implemented, then data access is simplified, but security is compromised
Solution Approach 1:
The patent segments the data access architecture into distinct contexts (first JavaCard application context, second JavaCard application context) with a buffer in between. This segmentation maintains security boundaries while enabling controlled data transfer. Each application operates in its own secure context, and data sharing occurs through the buffered interface rather than direct access, thus preserving security while achieving data accessibility.
Solution Approach 2:
The buffer serves as a secure intermediary that mediates data access between applications. Instead of allowing direct sharing which would compromise security, the buffer provides a controlled interface where data can be loaded from the first application, stored securely, and then extracted by the second application under controlled conditions, maintaining both security and ease of operation.
3Adaptability or versatility
If application contexts are made shareable, then data transfer between applications is enabled, but context isolation is reduced
Solution Approach 1:
Rather than making application contexts directly shareable which would increase complexity and reduce isolation, the patent introduces a buffer as an intermediary structure. This buffer handles the complexity of context management internally while presenting a simple interface for data transfer. The buffer manages the complexity of loading, storing, and extracting data between contexts, thereby enabling adaptability without exposing the underlying complexity to the applications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to an integrated circuit card (ICC) comprising a rewritable non-volatile memory (MEM1) and a buffer (G_BUFF), said rewritable non-volatile memory (MEM1) comprising a first context (CTX1) where a first Java Card TM application (App1) comprising first data (Dat1) is stored, wherein said integrated circuit card (ICC) is adapted to: store (STOR1) in a second context (CTX2) of said rewritable non-volatile memory (MEM1) a second Java Card TM application (App2) sent by a terminal (T); load (PUT_DAT1) the first Java Card TM application (App1) first data (Dat1) into said buffer (G_BUFF); extract (GET_DAT1) said first Java Card TM application (App1) first data (Dat1) from said buffer (G_BUFF) and store (STOR2) said first data (Dat1) into said second context (CTX2).