Master Chip Security Module Multi-Channel Activation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current smart secure platforms (SSPs) do not support simultaneous activation of multiple profiles or applications, limiting the use of different telecom operators' services and applications on a single terminal, which is essential for dual SIM dual standby or multi SIM multi standby scenarios, and existing solutions fail to address this issue effectively.

Innovation Solution

A method and system that utilize a master chip and security module connected through multiple data channels to enable simultaneous activation of multiple applications by allocating dedicated data channels to each application, allowing for independent communication and priority-based allocation to manage hardware resources efficiently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If a single SSP is integrated into a chip for cost consideration, then hardware cost is reduced, but the ability to support dual SIM dual standby or multi SIM multi standby is lost

Engineering Contradiction:
Improvehardware costVSAvoidmulti SIM multi standby capability
Core Design Contradiction:
Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The single SSP's data channel is segmented into multiple independent logical data channels through virtualization. Each logical data channel can independently serve a different profile or application, enabling multi SIM multi standby functionality within a single integrated SSP chip, thus resolving the contradiction between hardware cost reduction and multi-SIM capability.

Inventive Principle:
Principle #1Segmentation

2Ease of manufacture

If only one SSP is integrated in the terminal, then hardware cost is reduced, but simultaneous activation of multiple profiles or applications is not supported

Engineering Contradiction:
Improvehardware costVSAvoidsimultaneous profile activation
Core Design Contradiction:
Ease of manufactureVSEase of operation

Solution Approach 1:

The single integrated SSP is designed to perform multiple functions by virtualizing its data channel into multiple logical channels. This allows one SSP to simultaneously support multiple profiles and applications, achieving multi-functionality without requiring multiple separate SSP components, thus reducing hardware cost while enabling simultaneous profile activation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If multiple data channels are allocated to multiple applications, then application isolation and security are improved, but hardware resource complexity increases

Engineering Contradiction:
Improveapplication isolationVSAvoiddata channel allocation
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent transitions from physical data channel multiplication to logical data channel virtualization. By introducing the dimension of logical abstraction, multiple logical data channels are created from a single physical data channel through the SSP's virtualization capability. This provides application isolation and security equivalent to multiple physical channels without the hardware complexity of implementing multiple physical data channels.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentEP3780900B1Terminal application activation method, apparatus and system
Publication Date: 2025.06.25 HUAWEI TECH CO LTD
  • EP3780900B1 patent drawingFigure 1~2b
  • EP3780900B1 patent drawingFigure 3a~3b
  • EP3780900B1 patent drawingFigure 4

AI summary

This application provides a terminal application activation method, apparatus, and system. A terminal includes a master chip and a security module. The security module is connected to the master chip through at least two data channels. The method includes: obtaining, by the master chip, application information of the security module, where the application information includes information about at least two applications to-be-activated; activating, by the master chip, the at least two applications, and allocating a corresponding data channel for each of the at least two applications; and performing, by the master chip, data communication with the at least two applications separately through data channels corresponding to the at least two applications. Correspondingly, a security module, a master chip, and a system are further provided. In an embodiment of this application, different applications on the security module may be simultaneously activated.