Virtual Secure Element for IoT Cost Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IoT devices often face challenges in configuring hardware secure elements due to cost sensitivity, necessitating a cost-effective solution for secure data processing.
Innovation Solution
A method utilizing software modules on terminals and servers to simulate a secure element, enabling encryption, decryption, and security calculations, thereby reducing the need for hardware secure elements and lowering device costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a hardware secure element is configured in an IoT device, then data security is improved, but device cost increases
Solution Approach 1:
The patent creates a virtual secure element that replicates the security functions of a hardware secure element through software implementation. The virtual secure element module simulates cryptographic operations, key management, and security processing that would normally require dedicated hardware, thereby providing equivalent security functionality without the hardware cost overhead
Solution Approach 2:
The patent replaces the mechanical/hardware-based secure element with a software-based virtual secure element. Instead of relying on physical hardware security modules, the system uses software modules running on general-purpose processors to perform all security-critical functions including encryption, decryption, and cryptographic calculations
2Ease of manufacture
If a virtual secure element is used instead of hardware, then device cost is reduced, but security reliability may be compromised
Solution Approach 1:
The patent introduces a communication interface module that acts as an intermediary between the virtual secure element and external systems. This module manages secure data transmission, implements authentication protocols, and ensures that cryptographic operations are performed securely even in the virtual environment, thereby maintaining security reliability
Solution Approach 2:
The patent divides the security system into distinct functional modules: a virtual secure element module for cryptographic operations, a communication interface module for secure data exchange, and integration interfaces for connecting with existing system components. This modular architecture allows each component to be optimized for its specific function while maintaining overall security
3Device complexity
If software modules are used to simulate secure element functions, then device complexity is reduced, but processing speed may decrease
Solution Approach 1:
The patent implements a universal virtual secure element that can perform multiple cryptographic functions including encryption, decryption, key generation, and authentication through software. This multi-functional approach eliminates the need for separate hardware modules for different security operations, reducing overall device complexity while providing comprehensive security capabilities
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
Provided in this application is a method for securely processing data, including: acquiring, by a first security unit, security data from a second security unit of a security server; and performing, by a secure element (SE) application of the first security unit, security processing on a trusted application (TA) of a trusted execution environment (TEE) using the security data. The method for securely processing data, and a terminal and a server thereof provided in this application are simple to implements and when combined with device network capabilities, may provide safety guaranteeing capabilities that conform to the SE while overcoming drawbacks of difficult integration and high costs of the hardware SE, thereby reducing costs of an IoT device.