Secure Element Isolating Sensitive Data in Credential Encoding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure encoding systems for credential cards are vulnerable to data breaches due to sensitive information being stored on general-purpose operating systems, which can be compromised by malware and hardware probes, and this sensitive data is not adequately protected during data transfer and storage processes.
Innovation Solution
The use of an intermediate secure element, such as an integrated circuit card, to store and manage cryptographic keys, encoding rules, and other sensitive data, providing a secure environment for provisioning and communication with credential cards, thereby isolating sensitive information from insecure host systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive data is stored on general-purpose operating systems for credential card encoding, then ease of operation and device complexity are improved, but security and reliability deteriorate due to vulnerability to malware and hardware probes
Solution Approach 1:
The system is divided into two separate components: a host system for ease of operation and a secure element for security. The secure element contains a restricted operating system that isolates sensitive cryptographic keys and encoding rules from the host system, preventing compromise while maintaining operational convenience on the host.
Solution Approach 2:
A secure element acts as an intermediary between the host system and credential cards. It receives provisioning commands from the host, executes them using sensitive data stored securely within the secure element, and returns results without exposing the sensitive data to the host system.
2Reliability
If sensitive data is isolated in a secure element, then security is improved, but device complexity increases due to additional hardware components
Solution Approach 1:
The secure element is merged with the host system to form an integrated credential encoding system. The secure element contains a restricted operating system that works in conjunction with the host system, combining security functionality with operational convenience in a unified system.
Solution Approach 2:
The secure element is nested within the host system architecture. The host system provides the outer layer for ease of operation, while the secure element is nested inside as a contained environment for storing and processing sensitive data, creating a layered security structure.
3Ease of operation
If cryptographic keys and encoding rules are stored in the initiator, then ease of operation is improved, but security deteriorates as these data are easily compromised
Solution Approach 1:
Sensitive cryptographic keys and encoding rules are extracted from the host system and stored exclusively in the secure element. The secure element maintains these sensitive data in isolation, preventing exposure to malware and hardware probes on the host system while allowing the host to operate conveniently.
Solution Approach 2:
The secure element creates an inert or secure environment for storing and processing sensitive cryptographic keys and encoding rules. This isolated environment protects the sensitive data from harmful external factors such as malware, hardware probes, and other security threats present in the host system.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for conducting secure communications with credential cards using existing reader/writer hardware that enhances the security of the provisioning process is provided. The method moves the sensitive data contained in these communications together with the program that uses this sensitive data for the purpose of interacting with a credential card inside a secure computational element such as an integrated circuit card. The provisioning program inside the secure element issues commands to readers/writers of existing art in order to establish secure communication with the credential card and then uses the secure channel so created for the purpose of direction communication between the secure computation element and the credential card.