Secure Element Applet Verification for Authorized Function Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack a method to securely manage and verify the use of applets within secure elements (SEs), leading to potential unauthorized access and misuse of critical functions or services.
Innovation Solution
The electronic device includes a secure element (SE) with processing circuitry that verifies authentication data for target applets, determining whether to provide functions based on authentication, using an allowlist to restrict access to specific applets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication verification is implemented for target applets, then security against unauthorized access is improved, but system complexity increases due to additional verification steps
Solution Approach 1:
The patent implements preliminary authentication verification before allowing applet execution. The SE processor verifies authentication data of the target applet before providing it to the applet, preventing unauthorized access in advance. This resolves the contradiction by establishing security checks beforehand rather than during operation, maintaining reliability while managing complexity through structured pre-verification.
Solution Approach 2:
The patent introduces an authentication data verification mechanism as an intermediary layer between the applet and the target applet. The SE processor acts as a mediator that receives the target applet, verifies its authentication data against stored credentials, and only provides the target applet if verification succeeds. This intermediary verification process enhances security while containing system complexity within a defined architectural framework.
2Reliability
If authentication data verification is performed, then data integrity is improved, but processing time increases due to additional verification steps
Solution Approach 1:
The authentication data is verified in advance during the applet loading phase rather than during critical execution operations. The SE processor performs verification when the target applet is first provided to the applet, ensuring data integrity before use. This preliminary verification approach maintains data integrity while minimizing time loss during actual applet operations.
3Reliability
If access to target applet is restricted through verification, then security against misuse is improved, but ease of operation deteriorates due to restricted access
Solution Approach 1:
The system implements self-service authentication where the SE processor automatically verifies the authentication data of the target applet without requiring manual intervention. The verification process is transparent to the user, with the system handling security checks autonomously. This maintains security while preserving ease of operation by eliminating the need for users to manually manage authentication restrictions.
Data Source
AI summary
Disclosed are an electronic device for providing a target applet by verifying an applet and an operating method thereof. An electronic device includes: at least one host processor and a secure element (SE) electrically connected to the at least one host processor, wherein the SE includes at least one processor including processing circuitry and memory storing instructions that, when executed by the at least one processor individually or collectively, cause the electronic device to transmit, to an operating system (OS) of the SE, a request for a target applet to be used by an applet, provide an instance to the applet in response to the request for the target applet, generate authentication data for the target applet in the applet and transmit the authentication data to the target applet, and determine whether to provide a function of the target applet to the applet by verifying the authentication data in the target applet.