Secure Element Isolation in NFC Transactions for Data Confidentiality
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices face challenges in securely exchanging secret and critical data during near-field communication (NFC) transactions, lacking protection and confidentiality for such data.
Innovation Solution
Implementing a mobile terminal with a processor, a near-field communication module, and a secure element distinct from the processor, where the secure element encrypts and decrypts data using specific keys, and an interface software manages authorization for data access, ensuring only authorized applications can decipher critical data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If secret data and critical data are exchanged between modules during NFC transactions, then the functionality and versatility of the electronic device is improved, but the security and confidentiality of the data is compromised
Solution Approach 1:
The electronic device is segmented into distinct functional modules: a near-field communication module for data exchange and a secure element for protected data storage and processing. This segmentation allows NFC transactions to proceed while critical data remains isolated in the secure element, preventing unauthorized access while maintaining transaction functionality.
Solution Approach 2:
The secure element acts as an intermediary between the NFC module and the processor. It receives critical data from the NFC module, processes it in a protected environment, and returns results without exposing the raw critical data to the processor or application layer. This intermediary mechanism enables secure data handling while maintaining system functionality.
2Adaptability or versatility
If secret data are stored in the electronic device to enable digital services, then the adaptability of the device is improved, but the security protection of the stored data deteriorates
Solution Approach 1:
The device architecture separates storage functionality into a dedicated secure element distinct from the main processor and memory. This secure element provides hardware-based protection for credentials and critical data, enabling digital services while maintaining security through physical and logical isolation from less secure storage areas.
Solution Approach 2:
The secure element implements comprehensive security measures (hardware security modules, encrypted storage, access control) that exceed the security requirements of normal device storage. This excessive security approach ensures that even if other parts of the device are compromised, the critical data remains protected.
Data Source
AI summary
In an embodiment a method for implementing a NFC transaction between a mobile terminal and a distant module is disclosed. The terminal includes a processor hosting an application configured to establish the NFC transaction, a near-field communication module, and a secure element distinct from the processor. The method includes storing, by the near-field communication module in the secure element, first data from the distant module, sending, by the near-field communication module, second data to the application notifying it that the first data have been stored in the secure element and requesting, by the application, the first data from the secure element.