Secure Element Initialization and Wireless Activation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The conventional process for installing, initializing, and activating secure element chips in terminal devices is inefficient and costly, requiring coordination among multiple entities and involving a lengthy distribution process, especially when dealing with thousands of merchants.
Innovation Solution
Secure elements are initialized independently and packaged for retail sale, with encryption keys injected wirelessly using Wi-Fi or cellular data, allowing for activation at a later time, reducing costs and delivery time, and enabling rapid deployment of replacement devices without the need for on-site technicians.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure element chips are initialized and activated at a centralized secure injection facility, then security of encryption keys is maintained, but distribution time and cost increase significantly
Solution Approach 1:
The patent segments the secure element distribution process into independent initialization and activation phases. Secure elements are initialized in advance at manufacturing facilities and stored in secure repositories, then activated remotely at the point of use through wireless communication. This segmentation allows parallel processing of multiple secure elements without requiring sequential handling at a single centralized facility, thereby reducing distribution time while maintaining security through controlled activation.
Solution Approach 2:
The patent introduces a secure repository as an intermediary between the initialization facility and the final activation point. The repository stores pre-initialized secure elements in a secure manner, allowing them to be prepared in advance without compromising security. The remote activation server acts as another intermediary, providing secure wireless activation only when and where needed. This intermediary structure decouples the time-consuming centralized initialization process from the time-critical activation process.
2Reliability
If multiple entities coordinate for installing and initializing secure elements, then security is maintained, but process complexity and cost increase
Solution Approach 1:
The patent merges the roles of multiple entities into a coordinated workflow where the secure element vendor initializes elements, stores them in a secure repository, and the service provider activates them remotely. This consolidation of responsibilities into standardized processes reduces the coordination overhead compared to having each entity perform separate initialization procedures. The unified activation protocol allows any authorized entity to activate secure elements without requiring complex inter-entity coordination.
Solution Approach 2:
The patent changes the state parameters of secure elements through standardized transitions: from uninitialized to initialized (with encryption keys embedded), from initialized to activated (through wireless authentication). These parameter changes follow defined protocols that can be executed by different entities without requiring complex coordination. The standardized state transitions simplify the multi-entity process by providing clear, unambiguous procedures for each phase.
3Productivity
If secure elements are activated remotely via wireless communication, then delivery time and cost are reduced, but security requirements increase
Solution Approach 1:
The patent replaces the mechanical system of physical key injection (requiring wired connections and physical presence at secure facilities) with a wireless communication system. The activation server communicates with secure elements through wireless protocols, eliminating the need for physical transport and manual key injection. This substitution dramatically increases activation speed and enables remote operation while maintaining security through cryptographic authentication and encrypted communication channels.
Data Source
AI summary
Disclosed herein are secure transaction systems having secure elements that are initialized and activated independent from each other. The secure element is first initialized to make the secure element turn to a state in which the secure element can be packaged, sold within retail stores, and then injected with encryption keys. The initialization process of the secure element formulates the secure element to ensure trust between the secure elements and secure element activation servers. The process of independently initializing and activating the secure elements while still addressing the security protocols allows the secure element to be packaged and sold within retail stores after initialization, and then activating the secure element at a later date and time when the secure element is ready to be used by a merchant.