Secure Element OS Update With a Provisional File System

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure element operating system updates result in the secure element being deactivated or disconnected by external terminals due to the inability to process commands during the update process, as the regular file system and data are not available.

Innovation Solution

A provisional file system is administered by the update agent during the update process, simulating the regular file system to provide meaningful responses to external terminals, minimizing memory usage and ensuring seamless interaction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the update agent assumes control of the secure element during the operating system update process, then the operating system can be updated, but the secure element cannot process commands from external terminals resulting in deactivation or disconnection

Engineering Contradiction:
Improveupdate process completionVSAvoidterminal interaction
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

A provisional file system acts as an intermediary between the update agent and external terminals during the OS update process. This mediator allows terminals to continue interacting with the secure element through familiar file system operations while the update agent performs the actual update, preventing deactivation or disconnection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The provisional file system creates a simplified copy or simulation of the regular file system structure. This copy contains essential files and directories that allow terminal commands to be processed meaningfully, even though the actual operating system is being updated and the regular file system is unavailable.

Inventive Principle:
Principle #26Copying

2Reliability

If the regular file system is made unavailable during the update process, then the operating system update can proceed, but external terminals cannot interact with the secure element

Engineering Contradiction:
Improveupdate integrityVSAvoidcommunication capability
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The file system functionality is segmented into two parts: the regular file system (made unavailable during update to ensure integrity) and the provisional file system (made available to maintain communication). This segmentation allows the update process to proceed safely while preserving terminal interaction capabilities.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If a provisional file system is provided during the update process, then terminal interaction is maintained, but additional memory resources are consumed

Engineering Contradiction:
Improveterminal compatibilityVSAvoidmemory usage
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The provisional file system implements only the essential or partial functionality needed to maintain terminal interaction during updates. It provides a simplified version of the file system with minimal necessary files and directories, rather than a complete replica, thus reducing memory consumption while maintaining compatibility.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentEP4124978B1Update of an operating system in a security element
Publication Date: 2025.11.26 GIESECKE & DEVRIENT EPAYMENTS GMBH
  • EP4124978B1 patent drawingFigure 1
  • EP4124978B1 patent drawingFigure 2
  • EP4124978B1 patent drawingFigure 3

AI summary

The present invention relates to a method for updating an operating system, OS, 30 administering a file system 32 in a secure element, SE, 100. The method comprises the steps of providing S1 an update agent 10 in the SE 100; assuming control S3 of the SE 100 by the update agent 10 from the operating system 30; loading S4 an OS image 31 into the SE 100, the OS image 31 representing an update of the operating system 30; providing S5a an updated operating system 30 by installing the OS image 31; and handing over control S6 of the SE 100 by the update agent 10 to the updated operating system 30. Within this update process, the update agent 10 provides S1a a provisional file system 12 in the SE 100 and administers S5a the provisional file system 12 as long as the update agent 10 is in control of the SE 100. The present invention also relates to a respective secure element 100, a respective update agent 10, and to a respective computer-program product.