NFC Secure Element Application Segmentation for Battery Off Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
NFC device applications face challenges in operating securely in both battery on and battery off modes, particularly in financial transactions where host power is required for PIN entry, and existing systems lack secure support for contactless operations without host power.
Innovation Solution
Implementing a system where two versions of an NFC application are loaded onto a secure element: one that interacts with the host device for PIN entry when powered on, and another that emulates a contactless smart card when powered off, using separate nonvolatile memory to enable secure application support in battery off mode.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If NFC applications require host device power for execution, then security and functionality are improved, but the device cannot operate when battery is off
Solution Approach 1:
The patent segments NFC applications into two distinct versions: a first version that requires host device power and provides enhanced security features, and a second version that operates independently without host power. This segmentation allows the system to maintain security when powered while enabling basic functionality when battery is off, resolving the contradiction between security requirements and adaptability to power-off states.
Solution Approach 2:
The system dynamically selects which application version to execute based on the power state of the host device. When the host is powered on, the first (secure) version is used; when the host is powered off, the second (independent) version is activated. This dynamic adaptation resolves the contradiction by adjusting the operational mode according to available power resources.
2Reliability
If financial applications require PIN entry on host device, then transaction security is improved, but contactless operations cannot be supported when host is powered off
Solution Approach 1:
The patent segments financial applications into two versions with different security models. The first version implements host-based PIN entry for high-security transactions when the host is powered. The second version implements contactless PIN-less transactions when the host is powered off. This segmentation allows the system to maintain transaction security through appropriate authentication methods while enabling contactless operation capability in power-off scenarios.
Solution Approach 2:
Different security qualities are applied locally based on power availability. When host power is available, strong security (PIN entry on host) is applied. When host power is unavailable, a different security approach (contactless operation with alternative authentication) is applied locally. This local quality adjustment resolves the contradiction between maintaining security and enabling contactless operations.
3Device complexity
If single application version is used for all power modes, then device complexity is reduced, but secure operation in both battery on and battery off modes cannot be provided
Solution Approach 1:
The patent implements a universal NFC application framework that can execute multiple application versions. The system is designed to handle both power-dependent and power-independent applications through a common architecture that automatically selects the appropriate version. This multi-functionality approach provides secure operation in both power modes while managing complexity through a unified system design.
Data Source
AI summary
Systems and methods for providing secure application support for NFC devices in both battery on and battery off modes are provided. A first application that requires available host battery supply and a second application that does not require available host battery supply are loaded onto a mobile device. When the second application is enabled, the reader requests user input on a POS device. The first application is enabled when host battery supply is available, and the second application is enabled when no host battery supply is available.