Secure Element Data Synchronization Through an Untrusted Host
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Synchronizing application-related data across multiple secure elements in a secure and simple manner is challenging, particularly in vehicle access systems where timing requirements are stringent.
Innovation Solution
A data processing system and method that utilize a client-server relationship between secure elements, where synchronization data is encrypted with a cryptographic key shared only between them, allowing secure and efficient data transfer through a host processor, with mechanisms for secure binding, synchronization, and acknowledgment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If synchronization data is transmitted through the host processor between secure elements, then data transfer is enabled, but security is compromised due to potential interception
Solution Approach 1:
The system segments the cryptographic key into multiple parts, with each secure element holding a portion. The host processor cannot reconstruct the full key, ensuring that even if the host is compromised, the cryptographic key remains secure. This allows data transmission through the host while maintaining security.
Solution Approach 2:
The host processor acts as an intermediary that facilitates data transmission between secure elements without having access to the cryptographic key. The key management is separated from the data transmission path, allowing the host to enable communication while the secure elements maintain cryptographic security independently.
2Reliability
If a cryptographic key is shared between secure elements for encryption, then security is enhanced, but key distribution becomes complex
Solution Approach 1:
The cryptographic key is segmented into multiple parts distributed to different secure elements. Each element receives only its designated portion, eliminating the need for complex key distribution protocols while maintaining security. The segmentation approach simplifies key management by avoiding the need to securely transport complete keys.
Solution Approach 2:
Each secure element independently manages its portion of the cryptographic key and performs encryption/decryption operations autonomously. The elements self-configure their key relationships without requiring external key distribution infrastructure, reducing system complexity.
3Manufacturing precision
If synchronization occurs frequently to maintain data consistency, then data accuracy is improved, but timing requirements become harder to meet
Solution Approach 1:
The system implements periodic synchronization cycles with predetermined intervals, allowing secure elements to update data at regular intervals rather than continuously. This periodic approach maintains data accuracy while respecting timing constraints by batching synchronization operations.
Solution Approach 2:
The system uses feedback mechanisms where secure elements notify each other of data changes and trigger synchronization only when necessary. This event-driven approach reduces unnecessary synchronization operations while maintaining data consistency, thereby reducing time loss.
Data Source
AI summary
A data processing system is provided that includes a first host processor, a first secure element operatively coupled to the first host processor, and a second secure element operatively coupled to the first host processor. The first secure element is configured to function as a server and the second secure element is configured to function as a client in a client-server relationship between the first secure element and the second secure element. The first secure element is configured to transmit synchronization data to the second secure element through the first host processor, where the synchronization data have been encrypted using a cryptographic key shared only between the first secure element and the second secure element.