Security Module Package Binding With Preassigned ID Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for installing bound packages on security modules, such as UICCs, in a factory setting are time-consuming and inefficient due to the need for individual requests and delays in providing IDs and credentials, making it difficult to maintain the link between packages and specific module identifiers.
Innovation Solution
A method where a batch of bound packages is pre-created and linked to corresponding identifiers, allowing for simultaneous preparation and installation on multiple security modules, ensuring each package is cryptographically tied to a specific ID, thus accelerating the process while maintaining compliance with standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual bound packages are prepared and installed on each security module separately, then the link between package and module identifier is maintained, but the installation process becomes time-consuming and inefficient
Solution Approach 1:
The patent applies preliminary action by pre-generating multiple bound packages with placeholder identifiers before the security modules are manufactured. This allows the packages to be prepared in advance and stored ready for installation, eliminating the need for individual package creation during the installation process. The placeholder identifiers are later replaced with actual module identifiers through a mapping process, maintaining the package-module link while enabling batch processing and significantly improving installation efficiency.
2Productivity
If batch processing is used to prepare multiple bound packages at once, then installation efficiency is improved, but it becomes difficult to maintain the link between packages and specific module identifiers
Solution Approach 1:
The patent uses an intermediary mapping mechanism that connects placeholder identifiers in pre-generated bound packages to actual security module identifiers. This mapping table or data structure acts as a mediator, allowing batch processing of packages while maintaining precise tracking of which package corresponds to which module. The intermediary enables the system to handle bulk operations without losing the one-to-one correspondence between packages and modules, thus resolving the contradiction between efficiency and precision.
3Productivity
If security modules are manufactured without associated IDs first, then batch package preparation can occur in parallel, but the modules lack unique identifiers during the manufacturing process
Solution Approach 1:
The patent applies preliminary action by creating bound packages with placeholder identifiers before the security modules receive their final unique identifiers. This allows the package preparation to proceed in parallel with module manufacturing without waiting for the modules to be fully identified. Later, the placeholder identifiers are replaced with the actual module identifiers through the mapping mechanism, ensuring that no information is lost and that the correct package is associated with the correct module after manufacturing is complete.
Data Source
AI summary
A method, computer program, and apparatus install a given bound package on a given security module. A plurality of bound packages (BPs) corresponding to a plurality of security-module identifiers (IDs) are received. Each BP corresponds to a corresponding ID. The given BP and a given ID corresponding to the given BP are selected for a given security module manufactured without an associated ID. The given ID, a given set of credentials corresponding to the given ID, and the given BP are provided for installation on the given security module.