Secure Element Credential Management via Online Resource

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Secure provisioning of commerce credentials on portable electronic devices using an online resource for contactless proximity-based communications, such as NFC, has been infeasible due to challenges in managing and updating credentials seamlessly.

Innovation Solution

The system enables electronic devices to receive account data from an online resource, access commerce credential status from a secure element, provide management options based on this data, and change the status of credentials upon user selection, facilitating secure and seamless credential management through interactions with a bank server subsystem.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If secure provisioning of commerce credentials is implemented using an online resource, then credential management security is improved, but system complexity increases

Engineering Contradiction:
Improvecredential management securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an online resource as an intermediary between the electronic device and the credential management system. The online resource receives requests from the device, retrieves credential status information from the secure element, and provides management options to the user. This intermediary approach enhances security by centralizing credential management while maintaining system complexity at acceptable levels through standardized communication protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If credential status information is accessed from secure element, then credential management accuracy is improved, but access time increases

Engineering Contradiction:
Improvecredential status accuracyVSAvoidaccess time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-fetching and caching credential status information from the secure element when the device is idle or during low-traffic periods. This allows the online resource to quickly retrieve previously accessed status data without requiring real-time queries to the secure element, thereby maintaining high accuracy while reducing access time for subsequent credential management operations.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If multiple credential management options are provided, then user control is improved, but interface complexity increases

Engineering Contradiction:
Improveuser controlVSAvoidinterface complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The online resource dynamically adjusts the presentation of credential management options based on the specific credential status, device capabilities, and user context. Instead of displaying all possible management options simultaneously, the system selectively presents relevant options in a simplified manner, adapting the interface complexity to match the actual management needs while maintaining comprehensive user control over credential operations.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11488136B2Management of credentials on an electronic device using an online resource
Publication Date: 2022.11.01 APPLE INC
  • US11488136B2 patent drawing
  • US11488136B2 patent drawing
  • US11488136B2 patent drawing

AI summary

Systems, methods, and computer-readable media for using an online resource to manage credentials on an electronic device are provided. In one example embodiment, a method, at an electronic device, includes, inter alia, receiving account data via an online resource, accessing commerce credential status data from a secure element of the electronic device, providing initial credential management option data via the online resource based on the received account data and based on the accessed commerce credential status data, in response to the providing, receiving a selection of an initial credential management option via the online resource, and changing the status of a credential on the secure element based on the received selection. Additional embodiments are also provided.