Secure Element Protocol Routing for Multi-Protocol Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure elements in electronic devices face challenges in effectively communicating with other devices due to protocol incompatibilities and lack of efficient message routing, leading to potential conflicts and inefficiencies in handling sensitive data.
Innovation Solution
The integration of a secure element with a virtual primary platform and low-level operating systems, along with a communication management process, enables seamless communication by using a VPN protocol for message routing and translation between incompatible protocols, ensuring isolation and efficient data handling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure element uses a fixed communication protocol, then security and data integrity are maintained, but compatibility with diverse external devices is reduced
Solution Approach 1:
The patent introduces a protocol translation layer that acts as an intermediary between the secure element's internal fixed protocol and external devices' varied protocols. This translation layer converts incoming external protocols into the secure element's native protocol format, enabling communication without compromising the integrity of the core security protocol.
Solution Approach 2:
The communication architecture is segmented into distinct layers: a fixed internal protocol layer for security-critical operations and a flexible external protocol layer for device compatibility. This segmentation allows each layer to operate independently with its own protocol requirements, maintaining security while enabling versatility.
2Adaptability or versatility
If a secure element supports multiple communication protocols, then compatibility with external devices is improved, but system complexity increases
Solution Approach 1:
Rather than implementing multiple protocol stacks within the secure element, the patent uses an external protocol translation layer that mediates between external devices and the secure element's single native protocol. This approach provides multi-protocol support while keeping the secure element's internal architecture simple and secure.
Solution Approach 2:
The patent extracts protocol translation functionality from the secure element itself and places it in an external host system. This extraction removes the complexity of supporting multiple protocols from the secure element, leaving only the essential security functions within the protected environment.
3Adaptability or versatility
If protocol translation is performed within the secure element, then compatibility is improved, but security risks increase due to additional attack surfaces
Solution Approach 1:
The patent positions the protocol translation layer as an external intermediary that sits between external devices and the secure element. This external positioning ensures that the translation functionality, which introduces potential security risks, is isolated from the secure element's protected environment, preventing attack surface expansion within the secure boundary.
Solution Approach 2:
By extracting the protocol translation function from the secure element and implementing it in an external host system, the patent removes the security vulnerabilities associated with protocol translation from the secure element's attack surface, while still enabling compatible communication through the external translation layer.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This description relates to a secure element (500) and a communication method comprising: at least one operating system including at least one application to which is associated a register; a buffer; and a router having a software layer adapted to: direct first messages using a first protocol and intended for said application to said buffer, and direct second messages using a second protocol different from the first protocol and intended for said application to said register.