Smart Card Data Management via External Terminal Linking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional smart cards face limitations in storing large amounts of data due to physical constraints, which restrict their capacity to manage and process data efficiently.
Innovation Solution
The smart card system incorporates a communication unit, recording unit, first reception processor, and first transmission processor to determine if required data is stored internally, and if not, initiates a proactive session to acquire necessary data from an external terminal, allowing it to manage and process data by linking with the terminal's storage for encrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is stored in the smart card's internal memory, then data processing can be executed, but the data storage capacity is limited due to physical constraints
Solution Approach 1:
The storage system is segmented into two parts: internal memory in the smart card for storing decryption keys and small amounts of data, and external memory in the terminal for storing large amounts of encrypted data. This segmentation allows the smart card to overcome its physical storage limitations while maintaining data processing capability.
Solution Approach 2:
Encrypted data acts as an intermediary between the terminal's storage and the smart card's processing capability. The data is encrypted in the terminal, transmitted to the smart card, decrypted using keys stored in the smart card's internal memory, and then processed. This intermediary mechanism enables extended storage capacity without requiring large internal memory in the smart card.
2Quantity of substance
If large-capacity memory is mounted in the smart card, then data storage capacity increases, but physical limitations prevent this
Solution Approach 1:
The large-capacity memory function is extracted from the smart card and placed in the terminal device. The smart card retains only essential components (processor, internal memory for keys, communication interface), while the terminal handles bulk data storage. This extraction resolves the physical constraint issue by relocating the large storage requirement to a device without the same size limitations.
Solution Approach 2:
The storage architecture transitions from a single-dimension (internal card memory only) to a multi-dimension system combining card-based secure storage with terminal-based bulk storage. This dimensional expansion allows the system to achieve large effective storage capacity while maintaining the smart card's physical compactness.
3Reliability
If encrypted data is stored in the terminal and decryption keys are separated, then security is enhanced, but data access complexity increases
Solution Approach 1:
The smart card autonomously manages the decryption process by storing its own private keys and cryptographic algorithms. When receiving encrypted data from the terminal, the card independently decrypts it using its internal keys without requiring external cryptographic processing. This self-service capability simplifies the overall access process despite the distributed architecture.
Solution Approach 2:
Decryption keys and cryptographic credentials are pre-loaded into the smart card's internal memory during manufacturing or initialization. This preliminary action ensures that when encrypted data is received, the card is immediately capable of decryption without requiring additional setup or key exchange protocols, thereby simplifying the access process while maintaining security.
Data Source
AI summary
According to one embodiment, a smart card includes a communication unit, recording unit, first reception processor, determination unit, and first transmission processor. The recording unit records data defined by definition information. The first reception processor receives a command from an external terminal. If the first reception processor receives the command, the determination unit determines whether or not data required for execution of the command is stored in the recording unit. If the determination unit determines that the required data is not stored in the recording unit, the first transmission processor transmits a response indicating the start of a session required to acquire data related to that data from the external terminal to the external terminal.