Secure Element OS Switching with External Inactive OS Storage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure elements with limited memory capacity struggle to accommodate multiple operating systems due to memory constraints, limiting their functionality and flexibility.

Innovation Solution

An update agent manages multiple operating systems by identifying active and inactive systems, securely backing up inactive systems to external storage, and switching between them as needed, ensuring only one active system is stored within the secure element.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple operating systems are loaded into the secure element, then the versatility and functionality are improved, but the memory capacity is exceeded

Engineering Contradiction:
Improvemulti-OS functionalityVSAvoidmemory capacity
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent extracts inactive operating systems from the secure element's internal memory and stores them externally in a storage provider. The update agent identifies inactive OS instances and migrates them to external storage, freeing up internal memory while preserving the capability to reload them when needed. This resolves the contradiction by separating the storage of multiple OS images from the secure element's limited internal memory.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent transitions from a single-dimension storage model (all OS instances must reside in secure element memory simultaneously) to a multi-dimensional model where active OS instances reside in secure element memory while inactive instances are stored externally. This dimensional shift allows the system to support multiple operating systems without being constrained by the secure element's internal memory capacity.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Quantity of substance

If only one operating system is stored in the secure element, then memory usage is optimized, but the adaptability to switch between systems is reduced

Engineering Contradiction:
Improvememory usage efficiencyVSAvoidOS switching capability
Core Design Contradiction:
Quantity of substanceVSAdaptability or versatility

Solution Approach 1:

The patent implements preliminary action by pre-storing multiple operating system instances externally in a storage provider before they are needed. When an OS switch is required, the update agent can quickly retrieve the pre-stored inactive OS from external storage and load it into the secure element. This eliminates the need to maintain all OS instances in internal memory simultaneously while ensuring rapid switching capability is preserved.

Inventive Principle:
Principle #10Preliminary action

3Speed

If inactive operating systems are kept in internal memory, then quick switching is enabled, but memory resources are wasted

Engineering Contradiction:
ImproveOS switching speedVSAvoidmemory resource waste
Core Design Contradiction:
SpeedVSLoss of energy

Solution Approach 1:

The patent applies dynamics by creating a dynamic memory management system where the allocation of operating system instances between internal secure element memory and external storage is not static but adapts based on current operational needs. The update agent continuously monitors which OS instances are active and which are inactive, dynamically migrating OS instances between internal and external storage to optimize the balance between switching speed and memory resource utilization.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS20260017374A1Update agent for multiple operating systems in a secure element
Publication Date: 2026.01.15 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • US20260017374A1 patent drawing
  • US20260017374A1 patent drawing
  • US20260017374A1 patent drawing

AI summary

A method and an apparatus are for managing multiple operating systems on a secure element. A secure element includes an update agent configured to identify a first operating system, being actively used by the secure element, to identify inactive operating systems within the secure element, which are not actively used by the secure element, and to allocate the inactive operating systems to a storage provider.