NFC Controller Filter List for Adaptive Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current NFC systems in mobile devices require the screen to be on and the device unlocked for payment transactions, limiting their use in scenarios where security measures are necessary but the device is locked or in low-power states.
Innovation Solution
Implementing a filter list and routing table within the NFC controller to determine whether a security function is required for each NFC communication, routing transactions through the secure element only when necessary, and blocking or limiting access based on operational states and application identifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the screen is turned on and the device is unlocked to enable payment transactions, then payment functionality is improved, but security is worsened
Solution Approach 1:
The patent segments NFC transactions into two categories: secure transactions requiring SE processing and non-secure transactions routed to the host processor. This segmentation allows the system to maintain security for sensitive operations while enabling convenient access for non-sensitive operations, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent applies different security requirements to different types of NFC transactions based on their sensitivity. Secure element processing is applied locally to payment transactions, while host processor handling is applied to non-sensitive transactions. This local quality differentiation allows the system to provide appropriate security levels for each transaction type without requiring the device to be unlocked for all operations.
2Reliability
If the screen is kept off or device locked for security purposes, then security is improved, but payment functionality is worsened
Solution Approach 1:
The patent segments NFC functionality into secure and non-secure pathways. Non-sensitive transactions can proceed through the host processor without requiring the device to be unlocked, while sensitive transactions are routed to the secure element. This segmentation maintains security posture while restoring payment functionality in locked states.
Solution Approach 2:
The NFC controller acts as an intermediary that evaluates transaction sensitivity and routes appropriate transactions to the secure element even when the device is locked. This intermediary function allows secure transactions to bypass the screen-on/unlocked requirement while maintaining overall security through selective routing.
3Reliability
If all NFC transactions are routed to the secure element, then security is improved, but device complexity and processing overhead are worsened
Solution Approach 1:
The patent extracts non-secure transactions from the secure element processing pathway and routes them directly to the host processor. This extraction reduces the processing overhead on the secure element and eliminates unnecessary security checks for non-sensitive transactions, while maintaining security for transactions that require it.
Solution Approach 2:
Instead of applying full secure element processing to all NFC transactions, the patent applies partial action by routing only sensitive transactions to the secure element. This selective approach reduces processing overhead and device complexity while maintaining adequate security for transactions that actually require it.
4Reliability
If the secure element is used for all transactions, then security is improved, but transaction speed and efficiency are worsened
Solution Approach 1:
The patent extracts non-sensitive transactions from the secure element pathway and processes them through the host processor, which can handle these transactions more quickly. This extraction improves transaction speed for non-sensitive operations while maintaining security for sensitive transactions that still use the secure element.
Solution Approach 2:
The patent applies secure element processing only partially, to the extent necessary for sensitive transactions. By avoiding excessive secure element processing for non-sensitive transactions, the system achieves faster transaction speeds overall while maintaining adequate security where required.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances NFC security by ensuring sensitive transactions are processed securely without requiring the device to be unlocked, while allowing non-sensitive communications to proceed without involving the secure element, thus improving user convenience and security.
Implementation Method 1
Near field communication (NFC) has been deployed in many types of mobile devices; and NFC has been adopted for a variety of applications
Data Source
AI summary
A mobile device includes a transceiver for performing wireless communication; one or more secure elements which execute applications in a secure environment; a near field communication system for performing wireless communication independent of the transceiver and at a lower amount of power than said transceiver; and a contactless front end included in the near field communications system for receiving a data message from a near field communication device. The contactless front end includes a filter list for evaluating the data message and for controlling whether each data message is transmitted further into the mobile device.