Virtual Machine Architecture Secure Element Logical Secure Elements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual machine architectures with multiple instances of Linux or Linux-Android systems face inefficiencies due to the waste of resources from loading the same binary (Executable Load File, ELF) multiple times across Logical Secure Elements (LSEs), leading to a memory footprint problem and lack of clear division of roles between entities providing and receiving shared content.
Innovation Solution
A virtual machine architecture with an administrative Logical Secure Element configured to perform administrative commands, including extradition, upgrade, and deletion of application instances across other LSEs, using a shared Java Card package and unique Security Domain Roots to manage LSEs efficiently, reducing memory footprint.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the same binary (ELF) is loaded multiple times across Logical Secure Elements, then each LSE can independently execute applications, but memory footprint increases and resources are wasted
Solution Approach 1:
The patent merges the application binary (ELF) into a shared Java Card package that is loaded once into the administrative LSE. Multiple operational LSEs then access and execute the same application instances from this shared package, eliminating redundant memory consumption while maintaining independent execution capabilities through virtualization.
Solution Approach 2:
Instead of copying the entire ELF binary to each LSE, the patent creates lightweight application instances that reference the shared package. The administrative LSE manages these instances and can extradite them to operational LSEs, which execute them without requiring duplicate binary storage.
2Adaptability or versatility
If multiple instances of Linux are executed in parallel, then system functionality is enhanced, but resource management complexity increases
Solution Approach 1:
The patent segments the secure element into distinct Logical Secure Elements with clearly defined roles: one administrative LSE responsible for package management and instance creation, and multiple operational LSEs responsible for application execution. This segmentation simplifies resource management by separating concerns between package handling and application running.
Solution Approach 2:
The administrative LSE acts as an intermediary between the host system and operational LSEs. It receives application packages, manages their lifecycle, and extradites instances to operational LSEs for execution. This intermediary role centralizes resource management complexity in a single entity rather than distributing it across all LSEs.
3Quantity of substance
If a shared package is used across LSEs, then memory usage is reduced, but clear division of roles between providing and receiving entities is needed
Solution Approach 1:
The Java Card package serves multiple functions: it stores application binaries, manages application instances, and enables extradition between LSEs. The administrative LSE performs both package management and instance creation functions, while operational LSEs focus on execution, creating a universal package format that supports multiple roles.
Solution Approach 2:
The shared package structure includes self-describing metadata that identifies application instances, their origins, and execution parameters. This self-service capability reduces the need for complex external management protocols, as the package itself carries the information needed for proper handling and extradition.
Data Source
AI summary
A virtual machine architecture includes a set of guest virtual machines supervised by a hypervisor running on a host computer, on which respective instances of a guest operating system are executed, at least a secure element accessible by the set of virtual machines, generating a set of Logical Secure Elements (LSEs) in the secure element using a logical channel to select multiple application instances at the same time, creating multiple instances of an Applet with different AIDs, which can be selected on multiple logical channels at the same time, and an administrative LSE configured to perform administrative commands and in which is uploaded a shared Java Card package having instances extradited in other LSEs. The administrative commands comprise installing to extradite application instances from the administrative LSE to other LSEs, and managing an upgrade on the package in the administrative Logical Secure Element having instances in other LSEs.