Secure Element Credential Provisioning Across Multiple TSMs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing credentials for multiple third-party and non-native digital wallet applications on a single mobile device is challenging due to lack of vertical integration, leading to potential performance issues and limited access to hardware features.
Innovation Solution
A system that allows third-party and non-native applications to interface with a secure element of the user device, utilizing multiple Trusted Service Managers (TSMs) for credential provisioning, including onboarding, domain and applet management, and secure transmission of payment credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple third-party digital wallet applications are installed on a single mobile device, then service diversity and user choice are improved, but credential management complexity and security risks increase
Solution Approach 1:
The patent segments credential management by introducing separate Trusted Service Managers (TSMs) for different digital wallet applications. Each TSM operates independently to provision and manage credentials for its associated wallet, preventing credential conflicts and simplifying overall management despite multiple wallets being present on the device.
Solution Approach 2:
The patent introduces TSMs as intermediary components between the secure element and multiple digital wallet applications. These TSMs act as mediators that handle credential provisioning, storage, and retrieval operations, thereby reducing the complexity burden on the host system and enabling seamless multi-wallet operation.
2Adaptability or versatility
If third-party applications interface directly with the secure element, then credential provisioning flexibility is improved, but system security and compatibility control deteriorate
Solution Approach 1:
The patent introduces TSMs as trusted intermediary components that sit between third-party applications and the secure element. These TSMs verify application credentials, enforce security policies, and manage the provisioning process, thereby maintaining system security while enabling flexible third-party integration.
Solution Approach 2:
The patent enables third-party applications to self-provision credentials through their respective TSMs without requiring direct access to the secure element or intervention from the host system. Each TSM autonomously manages its associated application's credential lifecycle, improving flexibility while maintaining security through decentralized trust management.
Data Source
AI summary
Aspects of the subject technology include receiving a first script from a first server associated with the first entity, wherein the first script is provided by the first server responsive to a first request from a non-native application process, providing the first script for provisioning a domain for a digital credential on the secure element, receiving a second script from the non-native application process, wherein the second script is provided to the non-native application process by a second server responsive to a second request from the non-native application process and the second server is associated with a second entity that is separate and independent from the first entity, providing the second script for provisioning the digital credential in the domain on the secure element, and providing an indication that the digital credential has been provisioned on the secure element.