Secure Element Personalization via Intermediary Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for personalizing secure elements are inadequate in ensuring secure data transmission and compatibility with different communication standards, particularly between ID tokens and secure elements with incompatible data transmission standards, which can lead to security vulnerabilities and compatibility issues.
Innovation Solution
A method that involves reading personalization information from an ID token, generating a nonce, and writing it into a secure element using end-to-end encryption, with verification checks to ensure the secure element is authorized and activated for use, allowing secure data exchange between devices with different communication standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If personalization information is transmitted between ID token and secure element using different data transmission standards, then compatibility with different communication interfaces is improved, but security vulnerabilities arise due to inadequate encryption and authentication mechanisms
Solution Approach 1:
The patent introduces a reader as an intermediary device that contains processing circuitry to perform end-to-end encryption and decryption operations. The reader mediates between the ID token (with first communication interface) and secure element (with second communication interface), translating and securing data transmissions between incompatible standards while maintaining security through cryptographic operations performed by the reader's processor
Solution Approach 2:
The patent applies parameter changes by transforming the data transmission parameters through end-to-end encryption. The encryption algorithm changes the data format and security parameters, allowing secure transmission across incompatible communication standards. The system dynamically adjusts encryption keys and authentication parameters based on the communication interface being used
2Device complexity
If existing personalization methods are used without end-to-end encryption, then device complexity is reduced, but security vulnerabilities and susceptibility to relay attacks increase
Solution Approach 1:
The patent implements preliminary action by performing end-to-end encryption and authentication operations before the actual data transmission occurs. The reader's processing circuitry预先 establishes secure communication channels, verifies device authorization, and prepares encrypted data structures before transmitting personalization information, thereby preventing relay attacks without significantly increasing operational complexity
Solution Approach 2:
The system incorporates feedback mechanisms where the reader verifies authentication responses and encryption integrity during the personalization process. The processing circuitry continuously monitors transmission security and provides feedback on authorization status, allowing the system to detect and prevent relay attacks while maintaining a relatively simple overall process
3Ease of operation
If authorization verification is not performed before activation, then ease of operation is improved, but reliability of secure element activation deteriorates
Solution Approach 1:
The patent applies preliminary anti-action by implementing authorization verification and device authentication before allowing secure element activation. The reader's processing circuitry performs preliminary checks to prevent unauthorized activation, countering potential security threats before they can compromise the system. This preliminary verification ensures that only authorized secure elements can be activated while maintaining operational simplicity through automated authentication
Data Source
Figure 1~1a
Figure 1b
Figure 2~2a
AI summary
The method involves storing personalization information in a secure element (158) by reading personalization information from ID token (106), generating a nonce by ID provider computer system (136) for personalization information, storing nonce in a database, writing data read from ID token personalization information and/or derived value and nonce over network to secure element through legitimate ID provider computer system. The data stored in personalization information is verified and personalized secure elements are activated for use by a terminal program. An independent claim is included for a computer system.