Secure Element Connection via Trusted Service Manager
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional SMS messaging is inconsistent and unreliable for initializing secure connections between a Trusted Service Manager (TSM) and a Secure Element (SE) in mobile transactions, leading to significant latencies and potential security vulnerabilities.
Innovation Solution
Establishing a secure connection using existing protocols with low latency and high reliability, such as Bearer Independent Protocol (BIP) sessions, for authentication requests, with SMS serving as a secondary backup when primary connections are unavailable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If SMS messaging is used as the primary push mechanism to establish communication sessions between TSM and SE, then the system can maintain simplicity in the communication protocol, but the system experiences significant latency and unreliability in message delivery
Solution Approach 1:
The patent introduces a device intermediary (mobile device with application framework) that mediates between the TSM and SE. The device receives authentication requests from TSM via reliable channels (email, instant messaging, push notifications) and forwards them to the appropriate SE, thereby decoupling the TSM-SE communication from direct SMS dependency while maintaining protocol simplicity.
2Ease of operation
If SMS messaging is used as the primary push mechanism, then the system can maintain ease of operation, but the system introduces significant latency in message delivery
Solution Approach 1:
The patent implements dynamic communication channel selection where the system adapts the message delivery mechanism based on available channels. Instead of statically relying on SMS, the system dynamically chooses from multiple channels (email, instant messaging, push notifications) to forward authentication requests, thereby reducing latency while maintaining ease of operation.
3Device complexity
If SMS messaging is used for authentication requests, then the system can maintain a single primary communication channel, but the system becomes vulnerable to Denial of Service attacks and SMS bottlenecks
Solution Approach 1:
The patent segments the authentication request delivery function across multiple independent communication channels (email, instant messaging, push notifications) instead of relying on a single SMS channel. This segmentation distributes the communication load and eliminates the single point of failure, thereby reducing DoS attack vulnerability while maintaining simple channel structure through the use of an intermediary.
Data Source
AI summary
A server is configured to establish connections for secure element communication sessions. The server receives a request from a device to establish a first secure connection, and establishes the first secure connection with the device in response to the received request. The server sends a request to a Trusted Service Manager (TSM). The sent request instructs the TSM to establish a second secure connection between the TSM and a secure memory. The server receives an authentication request from the TSM to establish the second secure connection, and forwards the authentication request to the device over the first secure connection.