Smart Card Key Provisioning for Secure Server Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack effective methods for secure communication between newly installed smart cards and application servers, particularly in diverse and evolving ecosystems, with a need for unique and secure communication keys to prevent security breaches.
Innovation Solution
A system and method that utilizes a SIM over-the-air (OTA) platform to push an applet and unique secure communication keys, based on ICCID numbers, to smart cards for secure communication with application servers, employing symmetric keys for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single shared communication key is used for all smart cards, then system simplicity is maintained, but security is compromised as a key breach affects the entire system
Solution Approach 1:
The patent segments the single shared communication key into multiple individual communication keys, each uniquely assigned to a specific smart card. This segmentation isolates security breaches to individual cards rather than affecting the entire system, directly resolving the contradiction between security and key management complexity.
2Reliability
If unique communication keys are assigned to each smart card, then security is enhanced by isolating key compromises, but key management complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-generating and storing communication keys in the HSS database before smart cards are activated or deployed. When a smart card is provisioned, the corresponding pre-generated key is quickly retrieved and assigned, eliminating the need for complex real-time key generation and distribution mechanisms.
3Reliability
If secure communication keys are pushed to smart cards individually, then security breaches are contained to individual applets, but the key provisioning process becomes more complex
Solution Approach 1:
The patent introduces the HSS (Home Subscriber Server) as an intermediary that manages the generation, storage, and distribution of communication keys. This centralized intermediary simplifies the provisioning process by automating key assignment through standardized interfaces, reducing manual configuration complexity despite the individualized key approach.
4Reliability
If symmetric keys based on ICCID numbers are used, then communication security is strengthened, but key generation and management complexity increases
Solution Approach 1:
The patent implements self-service by having the HSS automatically generate symmetric communication keys using the smart card's ICCID number as the basis. The system autonomously performs key generation, storage, and assignment without requiring manual intervention, thereby strengthening security while minimizing the perceived complexity for operators.
Data Source
AI summary
The present disclosure provides a system and a method for enabling secure communication between smart card and corresponding application server. The method includes pushing an applet to one or more smart cards, receiving, from the application server, one or more secure communication keys associated with the one or more smart cards, wherein each of the one or more secure communication keys is based on a unique identifier associated with each of the one or more smart cards, and pushing the received one or more secure communication keys to the corresponding one or more smart cards based on the unique identifier of each of the one or more smart cards.