Secure Element Resource Allocation for NFC Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile communication devices require multiple smart cards for different functions, leading to complexity and privacy concerns when using near field communication (NFC) for transactions, as they lack efficient resource allocation and application selection mechanisms.
Innovation Solution
A method for allocating resources to program modules in a mobile communication device with NFC technology, allowing a control unit to define and activate secure data domains based on issuer information and pattern recognition, enabling the emulation of multiple card applications and ensuring privacy by limiting access to specific functionalities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple smart cards are used for different functions, then functional versatility is improved, but device complexity and privacy security deteriorate
Solution Approach 1:
The patent combines multiple card applications (banking card, access card, etc.) into a single mobile communication device with a secure element. The control unit manages multiple program modules within one device, allowing different card functions to coexist and be activated based on NFC communication patterns, thereby reducing the number of physical cards needed while maintaining functional versatility
Solution Approach 2:
The mobile communication device is designed as a universal platform that can emulate multiple card types through a single secure element. The control unit dynamically activates appropriate program modules based on NFC reader interactions, enabling one device to perform functions previously requiring multiple specialized cards
2Adaptability or versatility
If multiple smart cards are used for different functions, then functional versatility is improved, but privacy security deteriorates
Solution Approach 1:
The secure element is divided into multiple isolated program modules, each representing a different card application. The control unit activates only the specific module required for the current NFC transaction based on pattern recognition, ensuring that other modules and their data remain inactive and protected. This segmentation prevents unauthorized access to information from applications that are not currently in use
Solution Approach 2:
Different program modules within the secure element have different security characteristics and access controls tailored to their specific functions. Each module can be independently activated and deactivated, allowing the system to provide appropriate security levels for each specific card function while maintaining overall system security
3Ease of operation
If manual card selection is required for NFC transactions, then application control is improved, but ease of operation deteriorates
Solution Approach 1:
The control unit automatically determines which program module to activate by analyzing NFC communication patterns and reader interactions without requiring user input. The system self-manages the selection process by monitoring the NFC transaction context and autonomously activating the appropriate card application, thereby simplifying the user experience while incorporating sophisticated selection logic
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This solution integrates multiple card functions into a single secure element, enhances privacy by restricting access to necessary information, and simplifies NFC transactions by automating application selection, thus improving user experience and security.
Implementation Method 1
a magnetic loop antenna operating at a frequency of 13.56 MHz
Data Source
Figure 1
Figure 2~4
Figure 5
AI summary
The invention relates to a method for allocating resources to program modules (201, 202, 203, 301, 302, 303, 401, 402, 403), which are related to a mobile communication device. According to invention the method is carried out in a way, - that a control unit (25, 26) obtains information for a definition and/or activation of at least one secure data domain (20, 30, 40) from an issuer - that the control unit (25, 26) checks if a registry (15) contains information about resources for the definition and/or the activation of the secure data domain (20, 30, 40) - that in the case that resources for the definition and/or the activation of the secure data domain (20, 30, 40) are available and an allowance information of a card issuer has been received, the secure data domain (20, 30, 40) is defined and/or activated. The invention furthermore relates to a mobile communication device and a secure processor (10).