NFC-TEE Security Channel Using a Dual-Application Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to enable direct communication between Near Field Communication (NFC) modules and Trusted Execution Environments (TEE) in smart terminals, limiting secure NFC-based applications like mobile phone POS systems.
Innovation Solution
A non-contact communication method utilizing a security element (SE) with two security applications, one for contact communication via SPI and another for non-contact communication via NFC, enabling a closed loop for secure data transmission between NFC and TEE.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If NFC is connected to Android system only, then existing NFC implementations work, but TEE applications cannot have NFC ability
Solution Approach 1:
The patent introduces a security element (SE) as an intermediary component between the NFC module and the TEE. The SE contains security applications that can communicate with both the NFC module (via NFC interface) and the TEE (via SPI interface), thereby enabling TEE applications to access NFC functionality while maintaining security isolation. This mediator resolves the contradiction by providing a secure bridge without compromising the security boundaries of the TEE.
2Adaptability or versatility
If direct connection between NFC and TEE is implemented, then TEE applications gain NFC ability, but security isolation may be compromised
Solution Approach 1:
The patent segments the NFC communication functionality into distinct security applications within the SE: one security application handles NFC communication with external devices, while another handles communication with the TEE via SPI interface. This segmentation allows each component to perform its specific function within security boundaries, enabling TEE NFC capability without creating a direct connection that would compromise security isolation or oversimplify the architecture.
3Reliability
If security element with two security applications is used, then secure communication loop is constructed, but device complexity increases
Solution Approach 1:
The security element is designed with multi-functional security applications that can handle different communication protocols and security requirements. The same SE infrastructure supports both NFC communication (via dedicated security application) and TEE communication (via another security application using SPI), providing universal security services across multiple interfaces. This multi-functionality reduces the need for separate dedicated security components, thereby managing complexity while maintaining high security transmission reliability.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Facilitates secure and broader protection for financial non-contact mobile payments by allowing NFC to communicate directly with TEE, ensuring consistent and secure data exchange.
Implementation Method 1
NFC, which is a short distance wireless communication technology, is based on a radio frequency identification (RFID) technology and may be utilized to implement short distance communication between smart terminals through magnetic field induction.
Data Source
Figure 1
Figure 2
AI summary
The present invention relates to a non-contact communication method and a communication device. The communication device comprises a trusted execution environment; a first security application and a second security application are provided in a security element of the communication device; the first security application and an application in the trusted execution environment are communicationally connected by means of a first communication channel; the second security application and an NFC module provided in the communication device are communicationally connected by means of a second communication channel; moreover, the first security application and the second security application are communicationally connected by means of a security channel. According to the non-contact communication method and the communication device of the present invention, a security channel can be established between NFC and a TEE, so as to implement NFC non-contact card reading for a TEE application.