SIM Card Data Storage Security via OS-Based Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SIM cards lack security classification for data storage, making key information such as contacts and short messages visible to all users, posing a security risk.
Innovation Solution
A data processing method and apparatus that determine the storage location of data in a SIM card based on the operating system used, generating keys from terminal identification information and encrypting data to ensure secure storage and access, allowing only authorized operating systems to read sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored directly in the SIM card internal memory without security classification, then storage simplicity is maintained, but data security is compromised as all contacts and messages become visible to all users
Solution Approach 1:
The SIM card storage is segmented into multiple storage areas (first storage area for security-sensitive data, second storage area for general data). Each storage area has different access control policies, allowing the system to maintain both security and simplicity by directing different types of data to appropriate storage locations based on the operating system being used.
2Reliability
If security classification is implemented in the SIM card, then data security is improved, but storage structure complexity increases
Solution Approach 1:
The terminal device acts as an intermediary that manages the complexity of security classification. It determines which operating system is currently used and automatically directs data to the appropriate storage area in the SIM card. This intermediary approach allows security classification to be implemented without requiring complex user intervention or complicating the SIM card's internal structure.
3Ease of operation
If multiple storage areas are created in the SIM card with different access permissions, then access control is improved, but operational complexity increases
Solution Approach 1:
The system implements self-service access control by automatically determining which operating system is currently used and directing data operations to the appropriate storage area without requiring user intervention. The terminal device itself manages the complexity of accessing different storage areas with different permissions, making the process transparent to the user while maintaining strong access control.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
The present invention provides a data processing method, which is used for a terminal comprising a plurality of operating systems, and the method comprises: determining a first operating system currently used by the terminal when a command to store data in a Subscriber Identity Module (SIM) card in the terminal is received; storing the data in a first storage area of the SIM card when the first operating system currently in use is a designated operating system amongst the plurality of operating systems of the terminal, and storing the data in a second storage area of the SIM card when the first operating system currently in use is a non-designated operating system amongst the plurality of operating systems of the terminal. Correspondingly, the present invention also provides a data processing apparatus. By means of the technical solution of the present invention, a user can set up a security storage area of the SIM card according to personal requirements, such that other operating systems and other terminals cannot access the security data in the security storage area; thus, privacy information of the user is protected and the user experience is improved.