Operator Root Certificate Verification for Secure Application Installation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing devices fail to ensure that only applications signed by the same operator as the SIM card issuer are installed in the secure execution environment, violating the MIDP 2.0 specification and compromising security.
Innovation Solution
A method is implemented where the device verifies the origin of an application, identifies the trusted operator, and compares it with the SIM card issuer's identity, allowing installation only if they match, ensuring that only trusted operator-signed applications are installed in the secure execution environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If operator root certificates are stored in the device outside the SIM during manufacturing, then applications signed by any operator can be authenticated and installed in the secure execution environment, but this violates the MIDP 2.0 specification and compromises security by allowing unauthorized operator applications to be installed
Solution Approach 1:
The patent extracts the operator identification verification from the application installation process. Instead of simply checking if an operator root certificate exists in the device, the system extracts and compares the specific operator identity from the SIM card with the operator identity from the application signature, ensuring that only applications from the SIM's issuing operator can be installed.
Solution Approach 2:
The patent implements a feedback mechanism where the system verifies the operator identity match between the SIM card and the application signature, and based on this verification result, either allows or blocks the application installation. This feedback loop ensures compliance with MIDP 2.0 by preventing installation when the operator identities do not match.
2Reliability
If the operator domain is disabled due to missing operator root certificates on SIM cards, then security is maintained according to specification, but the device cannot install operator-signed applications even when available
Solution Approach 1:
The patent makes the operator domain functionality dynamic rather than static. Instead of disabling the operator domain when no operator root certificate is found, the system dynamically checks during application installation whether the application's operator matches the SIM card's issuing operator, enabling conditional activation of the operator domain based on real-time verification.
Solution Approach 2:
The patent performs preliminary verification of operator identity match between the SIM card and application signature before allowing application installation. This preliminary action prevents unauthorized installations while enabling legitimate operator-signed applications to be installed, avoiding the need to disable the operator domain entirely.
Data Source
AI summary
When an application is loaded into a device (100, 200), the device verifies that the application originates from a trusted operator. The verification implies that the application must, in a secure manner, present itself to the device in such a way that the device can ensure that it originates from the trusted operator. The device identifies the trusted operator as well as the issuer of a SIM (211) located in the device. Thereafter, the device compares the identity of the trusted operator with the identity of the issuer of the SIM, and if the identity of the trusted operator corresponds to the identity of the issuer of the SIM, the previously verified application is installed in a secure execution environment (104, 204, 211) of the device.