Secure Access Module Isolating Sensitive Data From Unsecure Environments

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In secure access systems, sensitive data used for authentication and data protection on portable cards is exposed to risks when processed in general-purpose computing environments, either due to malware or hardware vulnerabilities in card-access devices.

Innovation Solution

A card-access device equipped with a Secure Access Module (SAM) that operates independently of the general-purpose operating system to handle sensitive data transactions, ensuring secure read and write operations by bypassing unsecure environments and using a secure element with tamper-resistant capabilities to protect sensitive data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If sensitive data is processed in a general-purpose computing environment, then ease of operation is improved, but security is worsened due to exposure to malware and software probes

Engineering Contradiction:

Improveease of operationVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system is divided into two distinct environments: a general-purpose computing environment for ease of operation and a secure computing environment for security. The secure access module creates an isolated secure environment that handles sensitive data operations separately from the unsecure general-purpose environment, allowing both ease of operation and security to coexist without compromising either.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The secure access module acts as an intermediary between the general-purpose computing environment and the portable card. It receives requests from the unsecure environment, processes them in the secure environment, and returns results, thereby mediating the interaction and protecting sensitive data while maintaining operational convenience.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If sensitive data is stored in the card-access device, then ease of operation is improved, but security is worsened due to hardware probes and environmental attacks

Engineering Contradiction:

Improveease of operationVSAvoidhardware probes

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The secure access module extracts sensitive data handling from the card-access device. Instead of storing sensitive data in the potentially vulnerable card-access device, the system extracts this function to a dedicated secure computing environment that is isolated from hardware probes and environmental attacks, while the card-access device maintains ease of operation.

Inventive Principle:

Principle #2Taking out (Extraction)

3Reliability

If a secure environment is created for sensitive data operations, then security is improved, but device complexity is worsened

Engineering Contradiction:

ImprovesecurityVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The secure access module merges the secure computing environment functionality into the existing card-access device architecture. By integrating the secure environment within the device rather than requiring completely separate systems, the solution improves security while minimizing the increase in device complexity through unified design.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS8322610B2Secure access module for integrated circuit card applications

Publication Date: 2012.12.04 ASSA ABLOY AB

AI summary

Mechanisms are provided for executing security-sensitive applications with a general-purpose computing device. In particular, the general-purpose computing device includes an unsecure computing environment and a secure computing environment. The secure computing environment is established with a secure access module that includes data and functions for executing the security-sensitive application on behalf of the unsecure computing environment.