Smart Card Security Method for Sensitive Parameter Modification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart cards, particularly those following the EMV protocol, are vulnerable to insider attacks where fraudulent script commands can modify sensitive operating parameters without authorization, leading to security risks as these commands are authentic and thus executed by the card without verification.
Innovation Solution
Implementing a security method in electronic devices that detects sensitive operating parameters and determines if modifications requested by script commands would degrade security, triggering securing operations if necessary, such as logging and restoring initial states, even if the commands are authentic and have verified integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If script commands are executed based on authentic MAC verification, then command authenticity is ensured, but security degradation from fraudulent insider commands cannot be detected
Solution Approach 1:
The patent applies preliminary anti-action by implementing security rules that prevent fraudulent script commands before they can execute harmful modifications. The system pre-defines security rules for sensitive parameters and proactively blocks commands that would degrade security, rather than merely detecting fraud after execution. This resolves the contradiction by maintaining MAC verification for authenticity while adding a preventive layer that stops harmful commands before they cause security degradation.
Solution Approach 2:
The patent introduces an intermediary security rule verification step between MAC authentication and command execution. This intermediary layer checks whether the authenticated script command complies with predefined security rules for sensitive parameters. The intermediary acts as a mediator that allows authentic commands to proceed while blocking fraudulent ones, thus resolving the contradiction between trusting authentic MACs and preventing security degradation.
2Productivity
If all script commands are executed without additional verification, then processing speed is maintained, but fraudulent commands can modify sensitive parameters undetected
Solution Approach 1:
The patent applies preliminary action by pre-defining security rules for sensitive parameters before any script commands are executed. These rules establish baseline security requirements for parameters like transaction counters and limits. When a script command arrives, the system quickly checks it against the pre-defined rules without requiring complex real-time analysis, thus maintaining processing speed while ensuring security integrity through advance preparation of security criteria.
3Reliability
If security verification steps are added to script command processing, then security against fraudulent commands is improved, but processing complexity increases
Solution Approach 1:
The patent applies local quality by selectively applying security rule verification only to script commands that modify sensitive parameters, rather than uniformly verifying all commands. The system identifies sensitive parameters (such as transaction counters, limits, and configuration settings) and applies enhanced verification specifically to commands affecting these local areas. This resolves the contradiction by providing strong security protection where needed while avoiding unnecessary complexity in processing routine, non-sensitive commands.
Data Source
AI summary
A method and corresponding electronic device for securing the device. The device and method may include operations for: receiving a command requesting a modification of an operating parameter of the electronic device (C2); detecting whether the operating parameter is a parameter that is predefined as a sensitive parameter; and if so, determining whether the modification requested by the command, if applied, would lead to a degradation of the security of the electronic device. The determining may be done by comparing the initial state of the parameter on receiving the command with a new state for giving to the operating parameter in response to the command. And, in the event of the security of the electronic device being degraded, triggering an operation of securing the electronic device in response to the first command.