Secure Router Architecture for Authenticated Internal Data Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic devices face challenges in protecting internal data exchange and minimizing device size while integrating secure communications between different functionalities, particularly in complex systems like mobile phones and tablets.

Innovation Solution

Implementing a secure element and a router within the electronic device that can be put into a secure mode, requiring authentication for access to data, and managing internal and external communications, with the router adapting protocols and applying security policies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If new electronic components are integrated to improve security and add features, then security functionality is enhanced, but the surface area occupied by chips increases

Engineering Contradiction:
Improvesecurity functionalityVSAvoidchip surface area
Core Design Contradiction:
ReliabilityVSArea of stationary object

Solution Approach 1:

The patent merges the router and secure element into a single integrated chip structure. The router includes a first core for managing communications and a second core for implementing authentication methods, along with a secure element for storing authentication data. This integration consolidates multiple security-related components into one chip, enhancing security functionality while minimizing the total surface area occupied compared to separate discrete components.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If a router implements authentication methods for secure data access, then data protection is improved, but device complexity increases

Engineering Contradiction:
Improvedata protectionVSAvoidrouter structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The router is segmented into two distinct cores: a first core responsible for managing communications between modules, and a second core dedicated to implementing authentication methods. This segmentation allows each core to specialize in its function, improving data protection through dedicated authentication processing while managing complexity by clearly separating responsibilities between cores rather than having a monolithic complex structure.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The secure element acts as an intermediary component within the router, specifically designed to store authentication data and provide it to the second core during authentication processes. This intermediary structure simplifies the overall router architecture by creating a dedicated data storage layer that mediates between the authentication logic and the communication management, reducing the complexity burden on the main router structure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4276668B1Router
Publication Date: 2026.04.15 STMICROELECTRONICS SRL
  • EP4276668B1 patent drawingFigure 1~2
  • EP4276668B1 patent drawingFigure 3~4
  • EP4276668B1 patent drawingFigure 5

AI summary

This description relates to a method of communicating, to a third module of a first electronic device, first data (DATA4) exchanged between a first module of the first electronic device and a second module, the third module being different from the first and second modules, the first device comprising at least one secure element (402) and a router (401) transmitting the first data (DATA4) from the first module to the second module, the router (401) being adapted to be put into a secure mode in which, when the third module requests access to the first data (DATA4), an authentication method is implemented to verify whether the third module is authorized or not to have access to the first data (DATA4).