UICC Personalization via Fixed-Variable Data Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The personalization of Universal Integrated Circuit Cards (UICC) and embedded UICC (eUICC) is inefficient in terms of throughput and data sharing, particularly due to the need to manage both fixed and variable personalization data, which requires secure encryption and precise storage, and existing methods are slow and application-dependent.
Innovation Solution
A method involving a simulation procedure to download a single encrypted image of the fixed part of personalization data, execute personalization commands, and encrypt the card image, using a Hardware Security Module (HSM) for secure transmission, allowing for parallel processing and efficient data transfer by identifying and separating fixed and variable parts for optimized encryption and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional personalization methods are used to manage both fixed and variable personalization data, then security is maintained through encryption, but personalization throughput is low and data transfer volume is high
Solution Approach 1:
The patent segments personalization data into fixed parts (common to all cards) and variable parts (specific to each card). The fixed part is downloaded once and reused across multiple personalizations, while only the variable part requires individual processing. This segmentation enables parallel processing and significantly reduces redundant data transfer, directly improving personalization throughput while maintaining security through selective encryption of only the variable portion.
2Reliability
If encryption is applied to all personalization data, then security is enhanced, but data transfer volume increases
Solution Approach 1:
The patent applies encryption selectively rather than uniformly - the fixed part of personalization data is transmitted in plaintext and reused across multiple cards, while only the variable part requiring individualization is encrypted. This local quality approach maintains security for sensitive unique data while minimizing overall data transfer volume, as the majority of fixed data does not require encryption overhead.
3Reliability
If sequential personalization processing is used, then data integrity is maintained, but processing speed is slow
Solution Approach 1:
The patent performs preliminary actions by downloading and storing the fixed personalization data in advance, before the actual personalization process begins. This fixed data is prepared once and made available for multiple subsequent personalizations, allowing variable parts to be processed in parallel without waiting for fixed data retrieval. This preliminary preparation maintains data integrity while dramatically improving processing speed through parallel execution.
4Adaptability or versatility
If application-dependent personalization methods are used, then specific application requirements are met, but manufacturing complexity increases
Solution Approach 1:
The patent creates a universal personalization framework where the fixed data structure and download mechanism serve all applications, while only the variable portion needs to be customized for different applications. This multi-functional approach allows the same infrastructure to handle diverse application requirements without increasing overall system complexity, as the complex application-specific logic is isolated to a small variable data segment rather than the entire personalization process.
Data Source
AI summary
A method for the personalization of an integrated circuit card, includes: simulating a downloading of a single image corresponding to a fixed part of personalization data of the integrated circuit card; simulating an execution of a sequence of personalization commands for the integrated circuit card to generate a set of personalization data; combining the set of personalization data with the single image to obtain a card image comprising the fixed part of personalization data and the set of personalization data; encrypting the card image to obtain an encrypted single image; and downloading the encrypted single image in a memory of the integrated circuit card.