Secure Element API for Trusted Command Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Complex electronic devices face challenges in protecting secret and critical data exchanged between different modules and software layers without adequate security measures.
Innovation Solution
Incorporating a secure element and an application programming interface that verifies the reliability of commands directed to applications, ensuring secure data exchange by authenticating the sender and validating the communication channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If secret data and critical data are exchanged between modules and software layers, then device functionality is enhanced, but security is compromised due to lack of protection
Solution Approach 1:
The patent divides the software architecture into distinct layers: a secure element layer that handles sensitive operations and a higher-level application layer. The secure element is segmented as a separate trusted computing environment that isolates critical data processing from the rest of the system, preventing unauthorized access while maintaining functionality.
Solution Approach 2:
The patent introduces an intermediary secure element that acts as a mediator between the application layer and the hardware layer. This secure element receives commands from applications, verifies their authenticity, and executes sensitive operations only from trusted sources, thereby protecting secret data while enabling controlled data exchange.
2Reliability
If security verification is implemented for commands, then data protection is improved, but system complexity increases
Solution Approach 1:
The secure element is designed as a universal component that performs multiple functions: storing secret data, verifying command authenticity, executing sensitive operations, and managing security policies. This multi-functional approach consolidates security mechanisms into a single component, reducing overall system complexity while maintaining comprehensive data protection.
Solution Approach 2:
The secure element implements self-service mechanisms by automatically verifying the authenticity of commands received from applications and independently deciding whether to execute them based on embedded security rules. This self-verification capability eliminates the need for complex external verification systems, simplifying the overall architecture while ensuring robust data protection.
Data Source
AI summary
An electronic device includes a secure element and an application programming interface. The secure element, in operation, executes a first application. The application programming interface, in operation, verifies a reliability of a received command directed to the first application, and transmits the command and a result of the verification to the first application.