Secure Element OS Update With a Provisional File System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure element operating system updates result in the secure element being deactivated or disconnected by external terminals due to the inability to process commands during the update process, as the regular file system and data are not available.
Innovation Solution
A provisional file system is administered by the update agent during the update process, simulating the regular file system to provide meaningful responses to external terminals, minimizing memory usage and ensuring seamless interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the update agent assumes control of the secure element during the operating system update process, then the operating system can be updated, but the secure element cannot process commands from external terminals resulting in deactivation or disconnection
Solution Approach 1:
A provisional file system acts as an intermediary between the update agent and external terminals during the OS update process. This mediator allows terminals to continue interacting with the secure element through familiar file system operations while the update agent performs the actual update, preventing deactivation or disconnection.
Solution Approach 2:
The provisional file system creates a simplified copy or simulation of the regular file system structure. This copy contains essential files and directories that allow terminal commands to be processed meaningfully, even though the actual operating system is being updated and the regular file system is unavailable.
2Reliability
If the regular file system is made unavailable during the update process, then the operating system update can proceed, but external terminals cannot interact with the secure element
Solution Approach 1:
The file system functionality is segmented into two parts: the regular file system (made unavailable during update to ensure integrity) and the provisional file system (made available to maintain communication). This segmentation allows the update process to proceed safely while preserving terminal interaction capabilities.
3Ease of operation
If a provisional file system is provided during the update process, then terminal interaction is maintained, but additional memory resources are consumed
Solution Approach 1:
The provisional file system implements only the essential or partial functionality needed to maintain terminal interaction during updates. It provides a simplified version of the file system with minimal necessary files and directories, rather than a complete replica, thus reducing memory consumption while maintaining compatibility.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for updating an operating system, OS, 30 administering a file system 32 in a secure element, SE, 100. The method comprises the steps of providing S1 an update agent 10 in the SE 100; assuming control S3 of the SE 100 by the update agent 10 from the operating system 30; loading S4 an OS image 31 into the SE 100, the OS image 31 representing an update of the operating system 30; providing S5a an updated operating system 30 by installing the OS image 31; and handing over control S6 of the SE 100 by the update agent 10 to the updated operating system 30. Within this update process, the update agent 10 provides S1a a provisional file system 12 in the SE 100 and administers S5a the provisional file system 12 as long as the update agent 10 is in control of the SE 100. The present invention also relates to a respective secure element 100, a respective update agent 10, and to a respective computer-program product.