Smart Card Command Routing via Segmented Microprocessors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart cards with multiple applications face challenges in managing commands independently, leading to complex and costly modifications when adding or replacing applications, and require costly security certifications for applications with varying security levels, limiting upgrade and development capabilities.
Innovation Solution
A smart card design with separate microprocessors for each application, allowing independent certification and command management, where the first application determines and routes commands to the appropriate application without knowledge of the other, using a table or conditional instructions for efficient processing and secure operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple applications share the same smart card with a single microprocessor, then the card can execute multiple applications, but the applications become interdependent and complex modifications are required when adding or replacing applications
Solution Approach 1:
The patent divides the smart card into multiple independent microprocessors, each dedicated to executing a specific application. This segmentation allows each application to run on its own isolated processor, eliminating interdependence between applications while maintaining multi-application capability on a single card
2Adaptability or versatility
If applications with different security levels are stored on the same card, then the card can provide diverse functions, but costly security certifications are required for all applications
Solution Approach 1:
The patent segments the card into multiple microprocessors with different security certification levels. High-security applications (e.g., banking) use a microprocessor certified to EAL4+, while lower-security applications (e.g., telephony) use a microprocessor without such stringent certification requirements. This allows diverse functions without requiring all applications to meet the highest security standards
Solution Approach 2:
Each microprocessor is assigned a specific security quality level appropriate to its application. The first microprocessor has high security certification for sensitive applications, while the second microprocessor has lower security certification for less sensitive applications, optimizing overall system security costs
3Device complexity
If a single microprocessor executes multiple applications, then the card structure remains simple, but additional contacts or reader modifications are needed to support multiple applications independently
Solution Approach 1:
The patent combines multiple microprocessors on a single card module, allowing each application to communicate independently through the card's existing contact interface. This merging approach enables independent application communication without requiring additional physical contacts or reader modifications, as the card's standard interface handles multiple processors
Data Source
AI summary
A smart card (1) storing a first and a second application (120, 220) and elements for receiving commands originating from outside the card (1), the first application (120) being capable of executing first commands, the smart card includes elements (130) for determining (706) whether a received command is implemented by the first application so as to transmit (708) the received command to the second application (220) in the case of a negative determination. Notably, the determination can implement either a table (130) listing the first commands, or conditional instructions provided within the execution code for the first application. Application of the invention to a second highly-securitized application, of the banking transaction type, and to a first less-securitized application, of the mobile telephone application type.