Secure Channel Setup for Ranging Service Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a method that allows electronic devices providing ranging-based services to securely communicate with other devices and efficiently exchange data through a secure channel.
Innovation Solution
The method involves transmitting service data-related information from a service application to a framework, receiving data from a reader device, setting up a secure channel using a common applet in a secure component, and transmitting service data through this secure channel based on further data received from the reader device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure channel is established using traditional methods for ranging-based services, then security is improved, but data exchange efficiency and speed deteriorate
Solution Approach 1:
The patent applies preliminary action by pre-establishing a secure channel between the electronic device and reader device before actual data exchange occurs. The secure channel setup includes pre-shared secret generation and encryption key establishment in advance, so that when service data needs to be transmitted, the secure pathway is already ready, eliminating the need for time-consuming security negotiations during data exchange.
Solution Approach 2:
The patent implements universality by creating a multi-functional secure channel that can handle various types of service data transmission. The secure channel is designed to be versatile, supporting different ranging-based services and data formats through a unified encryption framework, which improves efficiency by avoiding repeated security setup for different data types.
2Reliability
If traditional secure communication protocols are used for ranging-based services, then security is improved, but communication speed deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-establishing a secure channel between the electronic device and reader device before actual data exchange occurs. The secure channel setup includes pre-shared secret generation and encryption key establishment in advance, so that when service data needs to be transmitted, the secure pathway is already ready, eliminating the need for time-consuming security negotiations during data exchange.
Solution Approach 2:
The patent implements parameter changes by optimizing encryption parameters and data packet structures for faster processing. The system adjusts security protocol parameters to balance security and speed, using efficient encryption algorithms and optimized data formatting that reduce processing time while maintaining security standards.
3Productivity
If service data is transmitted without a pre-established secure channel, then data exchange efficiency is improved, but security deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-establishing a secure channel between the electronic device and reader device before actual data exchange occurs. The secure channel setup includes pre-shared secret generation and encryption key establishment in advance, so that when service data needs to be transmitted, the secure pathway is already ready, eliminating the need for time-consuming security negotiations during data exchange.
Solution Approach 2:
The patent implements the intermediary principle by introducing a framework that mediates between the service application and the secure channel. This framework acts as an intermediary layer that manages the secure channel establishment and data transmission, allowing the service application to focus on efficient data exchange while the framework handles security protocols, thus achieving both security and efficiency.
4Reliability
If complex security protocols are implemented for ranging-based services, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements the intermediary principle by introducing a framework that mediates between the service application and the secure channel. This framework acts as an intermediary layer that manages the secure channel establishment and data transmission, allowing the service application to focus on efficient data exchange while the framework handles security protocols, thus achieving both security and efficiency.
Solution Approach 2:
The patent applies segmentation by dividing the system into distinct functional modules: the service application layer, the framework layer, and the secure channel layer. Each layer has specific responsibilities, with the framework layer handling security protocol management separately from the service application. This modular segmentation reduces overall system complexity by isolating complex security operations to a dedicated layer.
Data Source
AI summary
According to an embodiment, a method, performed by an electronic device, of providing a ranging-based service may include: transmitting, from a service application installed in the electronic device to a framework, information related to service data, the information related to the service data including a service deployment case and information about a storage location of the service data; when the electronic device approaches a reader device, receiving first data from the reader device; setting up a secure channel with the reader device by using information stored in a common applet identified based on the first data, the common applet being installed in a secure component of the electronic device; and transmitting the service data to the reader device, based on second data received from the reader device.