Secure Element Data Backup via Internal Compression and Defragmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for saving and restoring data in secure elements expose confidential data to safety risks by requiring data to be transmitted outside the secure element, making it vulnerable to interception.

Innovation Solution

A method for saving and restoring data within the secure element by generating a backup image locally, compressing data using dictionary compression and run-length encoding, and storing metadata for integrity control, ensuring that no data leaves the secure element during the process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is transmitted outside the secure element for backup, then data can be saved and restored, but safety risks increase due to potential interception of confidential data

Engineering Contradiction:
Improvedata backup capabilityVSAvoidsafety risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent uses the secure element's internal non-volatile memory as an intermediary storage medium. Instead of transmitting data externally for backup, the system writes backup data directly to the secure element's own non-volatile memory, eliminating the need for external data transmission while maintaining backup functionality. This resolves the contradiction by keeping the data within a controlled environment throughout the backup process.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Quantity of substance

If compression is applied to reduce backup image size, then storage space is efficiently utilized, but processing time increases due to compression operations

Engineering Contradiction:
Improvestorage spaceVSAvoidprocessing time
Core Design Contradiction:
Quantity of substanceVSLoss of time

Solution Approach 1:

The patent applies compression selectively to portions of the backup image rather than uniformly compressing all data. By identifying and compressing only the portions that benefit from compression (such as repeated patterns or redundant data), the system achieves space savings while minimizing the time overhead associated with compression operations. This partial application of compression resolves the contradiction between storage efficiency and processing time.

Inventive Principle:
Principle #16Partial or excessive action

3Quantity of substance

If de-fragmentation is performed before compression, then compression efficiency improves, but additional processing steps are required

Engineering Contradiction:
Improvecompression efficiencyVSAvoidprocessing steps
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent performs de-fragmentation as a preliminary step before compression. By reorganizing the data to eliminate fragmentation beforehand, the compression algorithm can work on contiguous, well-structured data, which significantly improves compression ratios. The preliminary de-fragmentation step simplifies the subsequent compression process and enhances overall efficiency, justifying the additional step through the substantial gains in compression performance.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10387054B2Secure element including a non-volatile memory and methods for saving and restoring data including defragmenting and compressing data stored in occupied and free regions
Publication Date: 2019.08.20 IDEMIA FRANCE SAS
  • US10387054B2 patent drawing
  • US10387054B2 patent drawing
  • US10387054B2 patent drawing

AI summary

A secure element and method for backup of data stored in a non-volatile memory of the secure element. The method for backup of data includes de-fragmenting an area of the non-volatile memory so as to form, in the area, an occupied region and a free region. The method further includes compressing the portion of data contained in the occupied region, after de-fragmentation, and compressing the contents of the free region using a compression algorithm that is different from the one used for compressing the portion of data contained in the occupied region. In one embodiment, the occupied region is compressed using a dictionary, and the free region is compressed by applying run-length encoding (RLE). The method also includes generating a backup image containing the compressed portion of data and the compressed contents of the free region, and writing the backup image into the nonvolatile memory. The area may contain objects to be handled by a program coded in an object language. Metadata for each area may also be generated and stored in the nonvolatile memory. A method of restoring data, including configuring the secure element in a busy mode to avoid corruption of the contents, and a method for resetting the secure element, are also disclosed.