Syndication Server for Secure Token Data Loading

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Portable secure tokens with multiple security domains face inefficiencies in polling mechanisms, leading to excessive unnecessary communications with remote servers, as each administration agent operates independently and lacks optimized data loading strategies, especially when multiple applications need regular updates.

Innovation Solution

Introducing a syndication server that receives polling requests from administration agents and provides lists of actions, allowing targeted data retrieval from remote application servers, reducing the number of polling messages and optimizing data loading across multiple security domains.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each administration agent polls remote servers independently, then each application can receive updates regularly, but the number of polling messages increases significantly

Engineering Contradiction:
Improveupdate reliabilityVSAvoidcommunication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

Multiple administration agents from different security domains are merged into a single polling entity. The first administration agent consolidates polling requests for multiple applications and security domains, communicating with the syndication server on behalf of all agents. This reduces the number of polling messages while ensuring all applications receive necessary updates.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

A syndication server is introduced as an intermediary between administration agents and remote application servers. The syndication server receives polling requests, manages the list of actions, and coordinates data retrieval. This intermediary layer optimizes polling by consolidating requests and reducing direct communications between administration agents and remote servers.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Speed

If polling frequency is increased to ensure regular updates, then applications receive timely data, but network consumption and server load increase

Engineering Contradiction:
Improveupdate speedVSAvoidnetwork consumption
Core Design Contradiction:
SpeedVSLoss of energy

Solution Approach 1:

The syndication server performs preliminary actions by maintaining a list of actions that indicate which data needs to be retrieved. Administration agents poll the syndication server to check this list, and only retrieve data when actually needed. This preliminary organization of update requirements prevents unnecessary polling and data retrieval, reducing network consumption while maintaining timely updates.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If multiple administration agents poll different remote servers, then each security domain can manage its own applications, but the overall polling behavior becomes complex to evaluate

Engineering Contradiction:
Improvesecurity domain independenceVSAvoidpolling mechanism complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The first administration agent is given universal functionality to poll the syndication server on behalf of multiple security domains and administration agents. This single agent performs the polling function for the entire portable secure token, simplifying the overall polling mechanism while maintaining the independence of individual security domains through the syndication server's coordination.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9621527B2Method of loading data into a portable secure token
Publication Date: 2017.04.11 THALES DIS FRANCE SA
  • US9621527B2 patent drawing
  • US9621527B2 patent drawing
  • US9621527B2 patent drawing

AI summary

The invention is a method for loading data into a portable secure token comprising a plurality of security domains. A first security domain comprises a first administration agent and a second security domain comprises a second administration agent. A remote application server comprises a first data to be provided to the second administration agent. A syndication server, which is distinct from the remote application server, contains a list which comprises a reference to the first data. The list is sent in response to a polling request that is sent by the first administration agent. This list is comprised in a polling response which is sent by the syndication server.