Secure Element Response Aggregation for Remote Management Scripts

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication methods between secure elements and remote entities over HTTPS with chunked transfer encoding and indefinite length coding result in excessive packet transmission, leading to inefficient performance, increased network bandwidth usage, and power consumption, particularly in IoT devices.

Innovation Solution

A method involving a secure element that sequentially generates and stores responses to remote management commands in a transmission buffer, allowing collective transmission of the entire response script in a single packet, reducing packet count and transmission time, and optimizing network bandwidth and power consumption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If chunked transfer encoding with indefinite length coding is used for RAM/RFM over HTTPS, then the size of random-access memory required is reduced, but the number of packets transmitted increases excessively

Engineering Contradiction:
Improvesize of random-access memoryVSAvoidnumber of packets transmitted
Core Design Contradiction:
Quantity of substanceVSLoss of substance

Solution Approach 1:

The patent applies preliminary action by pre-assembling multiple response packets into a single aggregated response packet before transmission. The secure element collects individual responses to multiple commands in a buffer, then transmits them collectively in one packet, thereby reducing the total number of packets transmitted while maintaining the memory-efficient indefinite length coding approach.

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If a separate packet is sent for each command received, then the processing simplicity is maintained, but the transmission time and network bandwidth usage increase

Engineering Contradiction:
Improveprocessing simplicityVSAvoidtransmission time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The patent applies merging by combining multiple individual response packets into a single aggregated response packet. The secure element processes multiple commands and merges their responses into one collective transmission, reducing transmission time and network bandwidth usage while maintaining processing simplicity through systematic buffer management.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If multiple packets are transmitted between secure element and server, then the data transmission completeness is ensured, but the power consumption increases

Engineering Contradiction:
Improvedata transmission completenessVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent reduces power consumption by merging multiple response packets into a single aggregated transmission. The secure element accumulates responses in a buffer and transmits them collectively, thereby reducing the number of radio interface activations and associated power consumption while ensuring complete data transmission through systematic buffer management and transmission protocols.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP4694266A1Method for communication between secure element and remote entity, secure element, and system
Publication Date: 2026.02.11 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • EP4694266A1 patent drawingFigure 1
  • EP4694266A1 patent drawingFigure 2
  • EP4694266A1 patent drawingFigure 3

AI summary

A method (200) for communication between a secure element (140) and a remote entity (110) comprises receiving (202), by the secure element (140), a request (104) to establish a secure channel session (106) between the secure element (140) and the remote entity (110); establishing (204) the secure channel session (106) between the secure element (140) and the remote entity (110); receiving (206), by the secure element (140), a command script (112) comprising a series of remote management commands (120); sequentially generating (208), by the secure element (140), a series of responses (130) corresponding to the series of remote management commands (120); sequentially storing (210), by the secure element (140), the series of responses (130) in a transmission buffer (150) of the secure element (140); collectively transmitting (212), by the secure element (140), the stored series of responses (130) to the remote entity (110) via the secure channel session (106).