Secure Element Update Agent for Independent Software Loading

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure elements lack a flexible and independent mechanism for efficiently loading software images, such as operating systems, outside a certified environment, relying on external connectivity and user intervention.

Innovation Solution

A secure element equipped with a standalone update agent having a communication interface, authentication and personalization memories, and wireless connectivity to directly download and authenticate software images from a storage module, enabling secure and flexible loading of software at any time during the element's lifecycle.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a secure element relies on external connectivity and user intervention for loading software images, then device complexity is reduced, but productivity and ease of operation deteriorate due to lack of independent software loading capability

Engineering Contradiction:
Improvesecure element structureVSAvoidsoftware loading efficiency
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The secure element is equipped with a communication interface that enables it to independently download software images from a storage module without requiring external aid or user intervention. The secure element autonomously performs the software loading process, initiating downloads, receiving images, and installing updates without external control, thereby resolving the contradiction between simplicity and productivity.

Inventive Principle:
Principle #25Self-service

2Device complexity

If a secure element lacks standalone connectivity capability, then device complexity is reduced, but adaptability deteriorates due to dependency on host device capabilities

Engineering Contradiction:
Improveconnectivity infrastructureVSAvoidindependence from host device
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The secure element integrates a communication interface that provides standalone connectivity capability, enabling it to directly communicate with storage modules and download software images independently of the host device's connectivity capabilities. This multi-functional design allows the secure element to operate autonomously while maintaining compatibility with various host devices, resolving the contradiction between simplicity and adaptability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If software loading requires certified environment and external intervention, then security is maintained, but ease of operation deteriorates due to restricted loading locations

Engineering Contradiction:
Improvesecurity of software loadingVSAvoidflexibility of loading location
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The secure element's communication interface acts as an intermediary that enables secure software downloads directly from storage modules without requiring a certified environment or external intervention. The interface implements security protocols to authenticate and verify software images during the download process, maintaining security while allowing flexible loading at any location where the secure element can establish communication, resolving the contradiction between reliability and ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12572661B2Update agent with provisioning connectivity and secure element comprising the same
Publication Date: 2026.03.10 GIESECKE DEVRIENT MOBILE SECURITY GERMANY GMBH
  • US12572661B2 patent drawing
  • US12572661B2 patent drawing
  • US12572661B2 patent drawing

AI summary

An update agent, a secure element containing the update agent, and a method for retrieving a software image to be stored onto the secure element includes a communication interface for providing connectivity to a storage module for downloading software images onto the SE. The update agent has a first memory storing authentication data for authenticating software images, and a second memory storing credentials for personalizing software images.