Secure Element Protocol Routing for Incompatible Message Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure elements in electronic devices face challenges in effectively communicating with other devices due to protocol incompatibilities and lack of efficient message routing, leading to potential conflicts and inefficiencies in data handling.
Innovation Solution
The integration of a secure element within an electronic device, equipped with a virtual primary platform and low-level operating systems, manages communication protocols through a router that translates between incompatible protocols, ensuring isolated application execution and efficient message routing using the VPN protocol as a standard.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If protocol conversion is implemented to enable communication between incompatible devices, then adaptability is improved, but device complexity increases
Solution Approach 1:
The patent introduces a host device as an intermediary between the secure element and external electronic devices. The host device contains a protocol conversion module that translates between different communication protocols (ISO7816 and APDU), enabling the secure element to communicate with various external devices without modifying the secure element's internal architecture. This resolves the contradiction by externalizing the protocol conversion function to the host device.
2Reliability
If application isolation is implemented to prevent conflicts, then reliability is improved, but device complexity increases
Solution Approach 1:
The patent segments the software architecture into distinct components: a first application for ISO7816 protocol processing, a second application for APDU protocol processing, and a protocol conversion module. Each application operates independently with its own execution context, preventing conflicts between different protocol handlers. The segmentation is implemented at the application level within the secure element's operating system, maintaining reliability while managing complexity through modular design.
3Reliability
If secure data handling mechanisms are implemented, then data confidentiality is improved, but ease of operation worsens
Solution Approach 1:
The host device acts as a mediator that handles the complexity of secure communication protocols. The secure element maintains its secure data handling mechanisms (cryptographic operations, authenticated access) while the host device manages protocol conversion and communication coordination. This allows the secure element to maintain strong security without requiring the external devices to understand or implement complex security protocols directly.
Solution Approach 2:
The secure element autonomously manages its own security operations including cryptographic processing, data encryption/decryption, and access control. The secure element's processor executes security-critical operations independently without requiring external intervention for these functions. This self-service capability maintains data confidentiality while simplifying the overall system architecture by centralizing security management within the secure element.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This description relates to a secure element (300) and a communication method comprising: a router (304) handling first messages using a first communication protocol between applications of the secure element and outside the secure element; and a software layer (303) performing processing at the router level and adapted to: check the compatibility of a second communication protocol, different from the first, with which second messages are received; in the absence of compatibility, convert the second messages into the first communication protocol; and transmit the second messages to said router (304).