Smartcard Dual Microcircuit Segmentation for Certification Cost Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current smartcards require lengthy and costly certification processes for applications with high security demands, even when only moderate security is needed, leading to unnecessary costs and delays, as they are evaluated under the same criteria as high-security applications.

Innovation Solution

A smartcard design featuring two microcircuits, where one microcircuit with high security handles sensitive operations and another with moderate security processes external commands and responses, allowing independent certification and operation, thus enhancing security and reducing certification burdens.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If smartcards use a single microcircuit for all applications, then device complexity is reduced, but security requirements cannot be differentiated between high-security and moderate-security applications

Engineering Contradiction:
Improvemicrocircuit configurationVSAvoidsecurity level
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent divides the smartcard into two separate microcircuits: a first microcircuit for high-security applications (banking, payment) and a second microcircuit for moderate-security applications (telephony, transport). This segmentation allows each microcircuit to be optimized and certified independently according to its specific security requirements, resolving the contradiction between device simplicity and security differentiation.

Inventive Principle:
Principle #1Segmentation

2Reliability

If smartcards undergo comprehensive certification for high-security standards, then security reliability is improved, but certification time and cost increase significantly

Engineering Contradiction:
Improvesecurity certificationVSAvoidcertification duration
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

By segmenting the smartcard into separate microcircuits for different security levels, the patent enables independent certification of each component. The high-security microcircuit undergoes comprehensive certification only where needed, while the moderate-security microcircuit can be certified more quickly and cheaply, dramatically reducing overall certification time and cost.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different security certification standards to different parts of the system according to their actual needs. High-security applications receive full certification while moderate-security applications use streamlined certification, optimizing the balance between security reliability and certification efficiency.

Inventive Principle:
Principle #3Local quality

3Ease of manufacture

If smartcards use a single microcircuit for all applications, then manufacturing cost is reduced, but certification cost increases due to comprehensive security evaluation

Engineering Contradiction:
Improvemanufacturing costVSAvoidcertification cost
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent segments the smartcard system into separate microcircuits, allowing moderate-security applications to be manufactured and certified independently from high-security applications. This reduces certification costs significantly while maintaining manufacturing efficiency, as each segment can be produced according to its specific requirements.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8066193B2Smartcard, telephone comprising such a card and method for executing a command in such a card
Publication Date: 2011.11.29 IDEMIA FRANCE SAS
  • US8066193B2 patent drawing
  • US8066193B2 patent drawing
  • US8066193B2 patent drawing

AI summary

A smartcard (1) includes:first and second microcircuits (100, 200) respectively storing first and second applications (120, 220),elements for communicating (14) with the outside of the card (1), connected to the first microcircuit (100),the first application (120) being capable of transmitting (708) a command received by the communication elements (14) to the second application (220)the first application (120) being capable of receiving a response to the command transmitted to the second application (220) and of aggregating (718) the response with at least one data value stored in a memory of the first microcircuit (200) in such a manner as to form an overall response to the command received from the outside.