Secure Element OS Update via Boot Loader Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure elements, such as those in mobile devices, cannot be updated once deployed, making it difficult to address software vulnerabilities or changes in market needs, as the only solution is to replace the entire element, which is impractical, especially in certified environments.
Innovation Solution
A method and data structure for downloading an operating system onto a secure element using an update agent that receives an installation package, verifies signatures, and transfers control to the new operating system, ensuring secure and efficient software updates post-production.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the secure element is deployed with a fixed operating system during production, then the device can be manufactured and certified, but the software cannot be updated afterward, making it impossible to address vulnerabilities or meet changing market needs
Solution Approach 1:
The patent segments the secure element software into a boot loader (remaining in the secure element) and an operating system image (stored externally). This allows the OS to be updated by downloading new images while the trusted boot loader remains intact, enabling software updates without compromising the secure element's core security functions.
Solution Approach 2:
The patent implements preliminary verification mechanisms where the boot loader verifies the authenticity and integrity of OS images before loading them. Digital signatures and cryptographic verification are performed in advance to ensure that only trusted software is executed, maintaining security while enabling updates.
2Reliability
If the entire secure element is replaced to update software, then security can be maintained, but the complexity and cost of deployment increases significantly
Solution Approach 1:
The patent extracts the operating system from the secure element hardware and stores it externally in a protected area of the device's memory. Only the essential boot loader remains in the secure element, while the OS image is taken out and stored separately, allowing updates without replacing the entire secure element.
Solution Approach 2:
The patent creates and verifies cryptographic copies (digital signatures) of the OS image to ensure authenticity. The boot loader verifies these cryptographic copies before loading the OS, providing security equivalent to physical replacement without the complexity of actual hardware replacement procedures.
3Reliability
If multiple exchanges are required between the secure element and server for profile loading, then security can be ensured, but the time and complexity of software deployment increases
Solution Approach 1:
The patent performs preliminary verification of the OS image signature by the boot loader before initiating full deployment. This preliminary check ensures that subsequent deployment steps can proceed efficiently without requiring multiple back-and-forth communication cycles with the server, reducing deployment time while maintaining security.
Data Source
AI summary
A method, a data structure, and an update agent for implementing a scheme for downloading an operating system image onto a secure element. The update agent receives from an external device an installation package for installing an operating system onto the secure element. The update agent requests control of the secure element and loads the operating system received with the installation package into the secure element, after which control of the secure element is transferred to the operating system.