Secure Element Patch Execution Using Context-Aware Timing Rules

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for executing patches on secure elements cause delays in service provision, leading to negative impacts on users and other users in waiting queues.

Innovation Solution

A method for executing patches on secure elements that considers dynamic contextual information and patch execution information, using predefined rules to decide when and how to execute patches, minimizing delays by optimizing patch execution based on environment and patch information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If patch execution is performed on secure elements, then security issues are resolved, but service provision is delayed

Engineering Contradiction:
ImprovesecurityVSAvoidservice provision delay
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by evaluating patch execution information and environment information before actually executing the patch. The terminal decides whether to execute the patch based on predefined rules that consider factors like queue length, time schedule, and patch duration, thereby preparing the decision logic in advance to avoid unnecessary delays

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patch execution decision is made dynamic based on real-time environment information such as queue length, time schedule, and availability of other terminals. The system adapts its behavior according to current conditions, executing patches only when appropriate, thus resolving the contradiction between security updates and service continuity

Inventive Principle:
Principle #15Dynamics

2Reliability

If patch execution is performed on secure elements, then security issues are resolved, but user waiting time increases

Engineering Contradiction:
ImprovesecurityVSAvoiduser waiting time
Core Design Contradiction:
ReliabilityVSDuration of action of moving object

Solution Approach 1:

The terminal evaluates and decides on patch execution before the user completes their transaction. By pre-assessing whether patch execution is necessary and safe to perform, the system avoids unnecessary waiting time while maintaining security

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system changes the parameter of patch execution timing based on environment information. When queue length is high or time schedule constraints exist, the system modifies the execution timing to occur after the user's transaction is complete, thereby reducing user waiting time while still maintaining security through subsequent patch application

Inventive Principle:
Principle #35Parameter changes

3Productivity

If patch execution decision is made based on environment information, then patch execution impact is optimized, but decision process complexity increases

Engineering Contradiction:
Improvepatch execution efficiencyVSAvoiddecision process complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The decision process is segmented into multiple independent components: evaluation of patch execution information, evaluation of environment information, application of predefined rules, and final decision. This segmentation makes the complex decision process more manageable and efficient

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system uses feedback from environment information (queue length, time schedule, terminal availability) to adjust patch execution decisions. This feedback mechanism optimizes productivity by making data-driven decisions while the predefined rules keep the complexity manageable through structured logic

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP4693085A1Conditional patch execution on a secure element
Publication Date: 2026.02.11 THALES DIS FRANCE SA
  • EP4693085A1 patent drawingFigure 1
  • EP4693085A1 patent drawingFigure 2
  • EP4693085A1 patent drawingFigure 3

AI summary

The invention provides a method of executing a patch on a secure element, the method being implemented by at least one terminal on a site and comprising the following operations: - obtaining (202) a patch package comprising a patch and patch execution information; - obtaining (201) environment information related to the site; - after establishing (205) a communication channel with the secure element, taking a decision (206) to execute or not the patch comprised in the patch package, on the secure element, the decision depending on the environment information and the patch execution information; - executing (207) the patch on the secure element if the decision indicates to execute the patch.