Secure Element Virtual Profile Logical Channel Allocation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for secure elements, such as UICC, can only manage one active virtual profile at a time, limiting the simultaneous access and management of multiple logical channels for multiple virtual profiles.

Innovation Solution

A system comprising a host device and a secure element with an execution component that runs multiple virtual profiles simultaneously, utilizing a discovery agent to provide configuration data and an allocating agent to allocate logical channels, ensuring a main channel remains available for each virtual profile, allowing for parallel operation of multiple enabled profiles.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If only one active virtual profile is managed at a time, then the system complexity is reduced and ease of operation is improved, but the productivity and adaptability are worsened due to inability to handle multiple profiles simultaneously

Engineering Contradiction:
Improveease of operationVSAvoidproductivity
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The patent segments the logical channel management by allocating dedicated ranges of logical channels to each virtual profile. The discovering agent divides the available logical channels into separate ranges, with each range assigned to a specific virtual profile, enabling independent management and simultaneous operation of multiple profiles without system-wide conflicts.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a new dimension of management by implementing hierarchical control structures (discovering agent, allocating agent, main logical channel designation) that operate above the individual profile level. This dimensional addition enables coordinated management of multiple profiles simultaneously, transforming the system from single-profile sequential operation to multi-profile parallel operation.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If multiple virtual profiles are run simultaneously, then the adaptability and productivity are improved, but the device complexity increases due to need for managing multiple logical channels

Engineering Contradiction:
ImproveadaptabilityVSAvoiddevice complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates universal managing agents (discovering agent and allocating agent) that perform multiple functions across all virtual profiles. These agents handle profile discovery, logical channel allocation, and main channel designation uniformly for all profiles, reducing the need for profile-specific management code and minimizing overall device complexity despite supporting multiple profiles.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces intermediary managing agents that mediate between the host device and multiple virtual profiles. These agents serve as intermediaries that handle the complexity of multi-profile management, translating high-level profile requirements into specific logical channel allocations, thereby shielding the rest of the system from complexity while enabling multi-profile operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If logical channels are allocated dynamically to virtual profiles, then the adaptability is improved, but the loss of time increases due to allocation and deallocation operations during profile switching

Engineering Contradiction:
ImproveadaptabilityVSAvoidloss of time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by pre-allocating ranges of logical channels to each virtual profile in advance, rather than allocating individual channels dynamically during profile switching. The discovering agent pre-establishes the logical channel ranges for all profiles, and the allocating agent reserves these ranges, so that when a profile becomes active, its logical channels are already prepared and immediately available, minimizing switching time.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3286934B1System and method for managing logical channels for accessing several virtual profiles in a secure element
Publication Date: 2019.11.06 THALES DIS FRANCE SA
  • EP3286934B1 patent drawingFigure 1
  • EP3286934B1 patent drawingFigure 2~4

AI summary

The invention is a system comprising a host device and a secure element including a plurality of virtual profiles and an execution component configured to run simultaneously several of said virtual profiles. The system comprises a discovery agent configured to provide a subset of the plurality of virtual profiles, configuration data for each virtual profile of said subset and capability data reflecting the maximum of logical channels handled by the host device. The system comprises an allocating agent configured to cooperate with the discovery agent to allocate a range of logical channels to each virtual profile of the subset based on the capability data and to determine in each of the ranges a main logical channel which remains permanently available when the virtual profile to which the range is allocated has been booted.