SIM Card Partitioned Memory for Secure Mobile Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack secure and efficient methods for performing banking, financial, and postal transactions remotely using mobile devices, particularly in ensuring privacy, integrity, authentication, authorization, and non-repudiation while managing varying security levels for different services.
Innovation Solution
A SIM card with a partitioned memory for secure storage of security algorithms and dynamic SIM toolkit, enabling secure communication through asymmetric key generation, digital signatures, and encryption, allowing users to perform Value Added Services (VAS) securely by managing two distinct areas for telephony and proprietary services, with flexible security levels based on service requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure cryptographic operations are performed on the SIM card, then security level is improved, but processing time and computational complexity increase
Solution Approach 1:
The SIM card pre-generates and stores multiple cryptographic key pairs during manufacturing. When a transaction requires cryptographic operations, the SIM card can immediately use pre-generated keys without performing time-consuming key generation during the transaction, thus maintaining high security while reducing processing time.
Solution Approach 2:
The SIM card implements different security levels for different services by selecting appropriate cryptographic algorithms and key lengths based on the specific service requirements. High-value transactions use stronger cryptography while lower-value transactions use lighter algorithms, optimizing the balance between security and processing speed for each specific case.
2Adaptability or versatility
If multiple security algorithms and services are integrated into the SIM card, then functionality and security are improved, but device complexity increases
Solution Approach 1:
The SIM card is designed as a universal security platform that integrates multiple cryptographic algorithms (symmetric and asymmetric), multiple security services (authentication, encryption, digital signatures), and supports multiple applications (financial transactions, mobile signature, e-health). This multi-functional design allows a single SIM card to provide diverse security services without requiring separate hardware devices for each function.
Solution Approach 2:
The SIM card memory is divided into separate logical domains: a secure element for storing cryptographic keys and algorithms, and an application layer for implementing specific services. This segmentation allows independent management and updating of security components and service applications, reducing overall system complexity while maintaining high functionality.
3Reliability
If high-level cryptographic operations are performed on the mobile terminal, then security is improved, but energy consumption and processing load increase
Solution Approach 1:
The SIM card acts as an intermediary security co-processor that performs all heavy cryptographic operations locally. The mobile terminal only needs to communicate with the SIM card and receive encrypted results, avoiding the need to perform energy-intensive cryptographic computations on the main processor, thus significantly reducing energy consumption while maintaining high security levels.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for the secure and rapid performance of banking, economic, financial and postal operations via a mobile telephone terminal and by sending SMS text messages. The invention also relates to a system and to a SIM card capable of implementing the method.