Virtual Terminal Authorization for Secure Element Cryptographic Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data transfer systems require dedicated hardware devices separate from multipurpose devices, compromising data security and privacy, and lack effective authorization controls for secure element operations.
Innovation Solution
A virtual terminal hosted by a secure element on a multipurpose device, integrated into mobile devices, uses an authorizer application to authorize cryptographic operations, ensuring data security through token-based validation and encryption, eliminating the need for separate hardware and enhancing authorization controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dedicated hardware devices are used for data transfer, then data security is improved, but device complexity and portability are worsened
Solution Approach 1:
The patent merges the secure element that hosts the virtual terminal directly into the multipurpose user device, combining previously separate hardware components into a unified integrated system. This integration maintains security functionality while eliminating the need for separate dedicated hardware devices.
Solution Approach 2:
The secure element within the multipurpose device is designed to host multiple virtual terminals for different data transfer purposes, making a single device component serve multiple security functions. This multi-functionality replaces the need for separate dedicated hardware for each data transfer operation.
2Reliability
If authorization controls are added to secure element operations, then data security is improved, but operational complexity is worsened
Solution Approach 1:
The authorizer application serves as an intermediary component that manages authorization controls between the virtual terminal and cryptographic applet. It receives authorization requests, validates them against stored criteria, and returns authorization decisions, thereby simplifying the overall authorization process while maintaining security.
Solution Approach 2:
The authorization system implements feedback mechanisms where the authorizer application continuously monitors operation status and adjusts authorization decisions based on compliance with authorization criteria. This feedback loop ensures security while automating the control process to reduce operational complexity.
3Reliability
If token-based authorization is implemented, then unauthorized access is reduced, but processing time is worsened
Solution Approach 1:
The system performs preliminary actions by pre-establishing authorization criteria and storing them in the authorizer application before actual data transfer operations occur. This advance preparation enables faster real-time authorization decisions without compromising security, as the framework is already in place.
Data Source
AI summary
Techniques for using an authorizer in a virtual terminal on a multipurpose device to authorize operations of a cryptographic applet in a secure element associated with the multipurpose device are described herein. These techniques include receiving an authorization token and setting authorization criteria for the operation of the cryptographic applet based on the authorization token.