Secure Element Data Filtering via Reference Value Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The complexity of managing data deployment to secure elements with diverse configurations poses a challenge, as existing methods struggle to ensure compatibility and prevent incorrect data execution, which can lead to unintended modifications or damage to secure elements.

Innovation Solution

A method where a server sends a set of data with associated identifiers to secure elements, using a reference value to filter out incompatible data, allowing each element to discard incompatible data and execute only compatible components, thus ensuring safe and correct data deployment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the server sends a set of data including multiple identifiers to secure elements, then the secure elements can filter compatible data using reference values, but the quantity of data transmitted over the network increases

Engineering Contradiction:
Improvedata compatibilityVSAvoiddata volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The server performs preliminary actions by organizing and sending multiple identifiers with associated data in advance. Each secure element then uses its reference value to filter compatible data locally, avoiding the need for server-side compatibility checking for each individual secure element.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

Each secure element autonomously performs compatibility verification by comparing received identifiers with its own reference value. This self-service mechanism eliminates the need for centralized compatibility management and reduces server processing overhead.

Inventive Principle:
Principle #25Self-service

2Productivity

If the server manages data deployment for diverse secure element configurations, then data can be deployed to multiple elements, but the device complexity of the server increases

Engineering Contradiction:
Improvedata deployment efficiencyVSAvoidserver processing complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The invention extracts the compatibility verification function from the server and relocates it to each secure element. The server only needs to send identifiers and data, while secure elements independently determine compatibility using their reference values, significantly reducing server complexity.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The invention changes the parameter of compatibility verification from server-side centralized checking to client-side distributed checking. Each secure element uses its reference value (a specific parameter) to determine compatibility, transforming a complex server management problem into simple local comparisons.

Inventive Principle:
Principle #35Parameter changes

3Productivity

If the secure element executes incompatible data, then data deployment can proceed quickly, but the secure element may suffer unintended modifications or damage

Engineering Contradiction:
Improvedata deployment speedVSAvoidsecure element damage
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The invention applies preliminary anti-action by having secure elements perform compatibility verification before executing any data. Each secure element compares received identifiers with its reference value and only executes compatible data, preventing harmful effects before they can occur.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The reference value acts as an intermediary between the received data and the execution process. Each secure element uses its reference value to mediate the compatibility check, ensuring that only appropriate data is executed while incompatible data is safely discarded.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3047660B1Method of communicating between a server and a secure element
Publication Date: 2020.08.19 THALES DIS FRANCE SA
  • EP3047660B1 patent drawingFigure 1~2
  • EP3047660B1 patent drawingFigure 3~5

AI summary

The invention is a method of communicating between a server and a distant secure element through a point- to-point link. The server is provided with a set comprising a plurality of data and a plurality of identifiers, each of the data is associated with one of the identifiers. The plurality of data comprises a first data compatible with the distant secure element and a second data incompatible with the distant secure element. The whole set is sent from the server to the distant secure element through the point-to-point link. A control operation is run with respect to a reference value stored in the distant secure element for each identifier. The data associated with the identifiers for which the control operation failed is discarded.