Secure Element Virtual Profile Multiplexing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for managing communication with secure elements can only activate one virtual profile at a time, limiting the ability to simultaneously access and manage multiple virtual profiles in a secure element.
Innovation Solution
A communication component within the secure element allows for simultaneous management and execution of multiple virtual profiles by demultiplexing incoming commands, forwarding them to the relevant profiles, and multiplexing response messages, enabling multiple virtual profiles to be active during a single device session without requiring a hardware reset.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a hardware reset is performed to switch between virtual profiles, then profile switching is achieved, but communication continuity is interrupted and time is lost
Solution Approach 1:
The patent segments the secure element into multiple virtual profiles (first virtual profile and second virtual profile) that can be independently activated. The communication component is able to selectively activate either the first or second virtual profile based on incoming communication requests, allowing profile switching without hardware reset and eliminating communication interruptions.
2Device complexity
If only one virtual profile is active at a time, then secure element management is simplified, but the ability to simultaneously access multiple profiles is limited
Solution Approach 1:
The communication component is designed with multi-functionality to handle communications with multiple virtual profiles simultaneously. It can receive communication requests, determine which virtual profile should handle each request, forward requests to the appropriate profile, and aggregate responses - all within a single device session without requiring profile switching.
3Reliability
If multiple virtual profiles are accessed sequentially through device sessions, then profile isolation is maintained, but communication efficiency is reduced
Solution Approach 1:
The communication component acts as an intermediary between the host device and multiple virtual profiles. It receives communication requests from the host device, determines the appropriate target virtual profile, forwards the request to that profile, and aggregates responses from multiple profiles into a single response. This mediator approach maintains profile isolation while enabling efficient simultaneous access to multiple profiles within a single device session.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The invention is a method of managing communication between a host device and a secure comprising two virtual profiles. The method comprises the steps of: - running simultaneously both virtual profiles into the secure element, - generating an incoming data from the host device by multiplexing a first command targeting one virtual profile and another command targeting the other virtual profile and sending the incoming data to the secure element, - demultiplexing both commands at secure element side and sending each command to the targeted virtual profile, - getting response messages generated by both virtual profiles by executing said commands, generating an outgoing data by multiplexing the response messages and sending this outgoing data to the host device, and - demultiplexing the response messages at host device side.