Mobile Station Security Level Determination Module

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mobile stations cannot guarantee a defined security level for applications, as the security resources can change, and existing systems assume known terminal configurations, which may not match the actual security resources.

Innovation Solution

A mobile station with a determination module that dynamically assesses and outputs the actual security resources and levels, ensuring a guaranteed security level for applications by deriving and outputting the current security status, and controlling application execution based on these levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If the security resources of a mobile station are assumed to be known (e.g., according to terminal model), then the system can simplify configuration management, but the actual security resources may change (e.g., SIM card removal, TEE addition) causing a mismatch between assumed and actual security levels

Engineering Contradiction:
Improveconfiguration managementVSAvoidsecurity level guarantee
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The determination module performs preliminary detection of security resources before application execution. It proactively identifies available security resources (SIM card, TEE, SE) and determines the current security level in advance, ensuring the application can be configured appropriately based on actual rather than assumed resources

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback by continuously monitoring and detecting actual security resources, comparing them against assumed configurations, and adjusting the security level determination accordingly. This feedback loop ensures the mobile station always operates with accurate security resource awareness

Inventive Principle:
Principle #23Feedback

2Ease of operation

If the mobile station uses a single security level assumption, then configuration is simplified, but it cannot adapt when security resources change (e.g., adding TEE or removing SIM card)

Engineering Contradiction:
Improveconfiguration simplicityVSAvoidsecurity resource adaptability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The determination module dynamically detects security resources and adjusts the determined security level based on current conditions. When security resources change (addition or removal), the module automatically re-evaluates and updates the security level, enabling the system to adapt to different security configurations without manual intervention

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the security level parameter based on detected security resources. Different combinations of security resources (SIM card, TEE, SE) result in different determined security levels, allowing the application to adapt its behavior and functionality according to the available security resources

Inventive Principle:
Principle #35Parameter changes

3Productivity

If applications are executed without verifying security resources, then execution speed is maximized, but the security level cannot be guaranteed and insecure applications may run

Engineering Contradiction:
Improveapplication execution speedVSAvoidapplication security guarantee
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The determination module performs security resource detection and security level determination before application execution. This preliminary action ensures that only applications appropriate for the current security level are executed, preventing insecure applications from running while maintaining efficient execution of validated applications

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2987350B1Mobile station comprising security resources with different security levels
Publication Date: 2020.03.04 GIESECKE & DEVRIENT EPAYMENTS GMBH
  • EP2987350B1 patent drawingFigure 1~3
  • EP2987350B1 patent drawingFigure 4~6

AI summary

The invention relates to a mobile station comprising a mobile terminal, security resources and a detection module implemented in the mobile station, by way of which module the security resources of the mobile station can be detected, at least one security level of the mobile station obtainable using the security resources can be derived, and derived security levels of the mobile station can be issued. The invention further specifies an application charging system having a mobile station of this kind, and a risk-assessment system for mobile stations.