NFC Tag With On-Chip Command Interpreter for Secure Firmware Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT systems face challenges in flexibility and security due to the need for external micro-controller units and lack of firmware update capabilities for NFC-based IoT applications, which also expose confidential information to potential hacking.
Innovation Solution
A tag with a split non-volatile memory architecture, comprising a first area for updateable application code and a second area for pre-compiled commands, enabling secure and flexible implementation of various IoT applications without exposing confidential data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a general purpose NFC tag is used without application code storage, then the tag can be manufactured simply, but the system lacks flexibility to adapt to different IoT applications
Solution Approach 1:
The non-volatile memory is segmented into two distinct areas: a first area for storing updateable application code and a second area for storing pre-compiled library commands. This segmentation allows the tag to be configured for different applications while maintaining a standardized command interface, resolving the contradiction between adaptability and complexity.
Solution Approach 2:
The tag is designed with universal capabilities to support multiple IoT applications through configurable application code in the first memory area, while the second memory area provides a standardized library of commands that works across all applications. This multi-functionality approach enables one tag design to serve many purposes.
2Adaptability or versatility
If application code is stored in non-volatile memory during manufacturing, then the tag is ready for immediate use, but the code cannot be updated which limits flexibility
Solution Approach 1:
The memory is divided such that the first area can be selectively updated after manufacturing while the second area remains fixed. This allows firmware updates for application-specific code without requiring complex re-manufacturing processes, balancing update flexibility with manufacturing simplicity.
Solution Approach 2:
The second memory area is pre-filled with standardized library commands during manufacturing that do not require updates. This preliminary action eliminates the need to update fundamental command structures, simplifying both manufacturing and future updates.
3Reliability
If all application code is stored in a single memory area, then the memory structure is simple, but security against hacking is compromised
Solution Approach 1:
The memory is segmented into two areas with different security characteristics. The second area containing pre-compiled library commands can be protected from unauthorized access or modification, while the first area allows controlled updates. This segmentation provides security for critical code while maintaining flexibility for application code.
Solution Approach 2:
Different security properties are applied to different parts of the memory system. The second memory area can implement stricter access controls and protection mechanisms for the foundational command library, while the first area allows more flexible update procedures for application-specific code.
4Adaptability or versatility
If an external micro-controller unit is used to implement IoT applications, then the system can handle complex applications, but the overall system complexity increases
Solution Approach 1:
The micro-controller functionality is merged directly into the NFC tag by integrating the processing unit and non-volatile memory for application code storage within the tag itself. This eliminates the need for separate external micro-controller units, reducing system component count while maintaining full application implementation flexibility.
Solution Approach 2:
The tag is designed as a universal platform that can implement multiple different IoT applications through configurable application code, eliminating the need for application-specific external micro-controllers. The integrated processing unit handles various application requirements within the tag itself.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances flexibility and security by allowing system integrators to update application code while protecting hardware-related commands, reducing the need for external compilers and safeguarding against hacking.
Implementation Method 1
a receiver module which is built to receive energy and reader data from a magnetic field in the RF frequency area of 1 MHz to 100 MHz generated by the reader
Implementation Method 2
a transmitter module which is built to modulate the magnetic field to transmit device data stored in the tag memory to the reader
Data Source
Figure 1~2
Figure 3
AI summary
A System (13) that comprises a reader (2) and a tag (14) and an IoT device (4) to enable exchange of data and/or energy between the reader (2) and the IoT device (4) using a wireless interface (5) between the reader (2) and the tag (14) and a wired interface (6) between the tag (14) and the IoT device (4), which tag (14) comprises: a wireless interface module with a receiver module (15) and a transmitter module (16), which receiver module (15) is built to receive energy and reader data from a magnetic field (17) in the RF frequency area of 1 MHz to 100 MHz generated by the reader (2) and which is built to store received reader data in a tag memory (18) of the tag (14) and which transmitter module (16) is built to modulate the magnetic field (17) to transmit device data stored in the tag memory (18) to the reader (2) and which tag (14) furthermore comprises a wired interface module (21) with a cable connector (19) to connect a cable (20) between the tag (14) and the IoT device (4) to communicate energy and/or reader data and/or device data between the tag (14) and the IoT device (4), and which tag (14) furthermore comprises a processing unit (22) with a first non-volatile memory area (23) to store application code (24) in binary form, wherein the processing unit (22) is built to process the application code (24) to enable exchange of energy and/or reader data and/or device data between the reader (2) and the IoT device (4), wherein that the processing unit (22) of tag (14) processes an update function to update the application code (24) in the first non-volatile memory area (23) with a computer (25) of the system (13) connected to the cable connector (19) and that the tag (14) comprises a second non-volatile memory area (26) which stores a pre-compiled library of commands (27) used in the application code (24) for an on-chip command interpreter.