Smartcard Update Method Using Segmented Security Token and Data Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing over-the-air (OTA) technology for updating or changing data in smartcards places a significant load on the OTA gateway and mobile communication networks, especially when downloading large amounts of data, as it relies on SMS for data transmission and involves the server providing both data and security tokens.
Innovation Solution
The method involves dividing the download of data and security tokens into two independent steps, where the security token is transmitted separately from the data, allowing the server to reduce its load and using a smaller data volume for the token, which can be validated independently, and the data is retrieved by the smartcard from a database via a mobile terminal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is transmitted via SMS channel in OTA technology, then security and authentication are ensured, but data transfer rate is limited and network load increases
Solution Approach 1:
The patent segments the data transmission process into two independent parts: (1) transmission of security token and authentication data via SMS channel, and (2) transmission of actual application data via high-speed data channel. This segmentation allows each channel to be used for its optimal purpose while maintaining overall system security.
Solution Approach 2:
The patent introduces a security token as an intermediary element that carries authentication information. The token is transmitted securely via SMS and then used to authenticate and authorize the transfer of larger data volumes through high-speed channels, acting as a mediator between security requirements and data transfer efficiency.
2Productivity
If server provides both data and security tokens together, then complete update package is delivered, but server load and network bandwidth consumption increase
Solution Approach 1:
The patent extracts the security token from the main data package and transmits it separately via SMS. This extraction reduces the volume of data that needs to be transmitted through the server and network, while the actual application data can be delivered more efficiently through alternative high-speed channels.
Solution Approach 2:
The security token is transmitted in advance via SMS before the main data transfer. This preliminary action establishes authentication and authorization beforehand, allowing subsequent high-speed data transfer without requiring the server to manage both authentication and large data transmission simultaneously.
3Quantity of substance
If multiple SMS messages are used to distribute large data, then complete data is delivered to smartcard, but OTA gateway and mobile network experience huge load
Solution Approach 1:
The patent transitions from using a single communication dimension (SMS) for both authentication and data transfer to using multiple dimensions: SMS for security token delivery and high-speed data channels for actual data transfer. This dimensional change optimizes both security and efficiency.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method for updating a smartcard and a smartcard having update capability The invention relates to a method for transferring data to a smartcard (106) connected to a mobile terminal (100) having access to a mobile communication network (102), the method comprising the steps of: - receiving via a first communication channel a security token in the smartcard (106) from a server (108) connected to the mobile communication network (102), the security token comprising a security feature for validating the data and being at least partly encrypted. - decrypting the encrypted parts of the security token in the smartcard (106); - receiving via a second communication channel the data from a database (110) connected to the mobile terminal (100) in the smartcard (106) and - validating the data in the smartcard (106) using the security feature contained in the security token. The invention further relates to a smartcard for conducting the method.