Secure Element

Security

A tamper-resistant hardware component that provides secure storage and execution environment for sensitive data and cryptographic operations.

又称为: SE

Secure Element

A Secure ElementSecure ElementSecurityTamper-resistant hardware for secure operations.Click to view → (SE) is a tamper-resistant hardware platform capable of securely hosting applications and storing confidential data such as cryptographic keys, certificates, and biometric templates. It provides an isolated execution environment that protects sensitive operations even when the host device is compromised. Secure Elements are the core trust anchor in smart cards, eSIMs, payment tokens, and hardware security keys.

Architecture

A typical Secure Element integrates several protective layers on a single silicon die:

Component Function
CPU (8/16/32-bit) Executes OS and application code
Crypto coprocessor Hardware-accelerated RSA, ECC, AES
EEPROM / Flash Non-volatile storage for keys and data
ROM Immutable operating system code
Tamper sensors Voltage, frequency, temperature, and light monitors
Active shield Metal mesh detecting physical probing attempts
Memory encryption Runtime encryption of bus and memory contents

These countermeasures defend against both side-channel attacks (power analysis, electromagnetic emanation) and physical attacks (fault injection, micro-probing). A certified SE typically holds a Common Criteria EAL 5+ or 6+ rating.

SE vs TEE vs HSM

Attribute Secure Element TEE HSM
Form factor Chip (card, embedded, SoC) Software partition in main CPU Rack-mount or PCIe device
Tamper resistance Hardware (active shield, sensors) Software isolation (ARM TrustZone) Hardware (FIPS 140FIPS 140ComplianceUS government cryptographic module security standard.Click to view →-3 Level 3+)
Key storage capacity 10s of keys 100s of keys 1000s of keys
Throughput Low-moderate (card-grade CPU) High (shares main CPU) Very high (dedicated accelerators)
Certification CC EAL5+/6+ CC EAL2-4 FIPS 140-3, CC EAL4+
Use case Per-device identity Mobile DRM, biometrics Data center key management

SE Form Factors

Secure Elements ship in multiple physical packages. The traditional smart card SE is the contact pad module in ID-1 cards. The eSIM (eUICCeUICCProvisioningReprogrammable SIMSIMApplicationSmart card for mobile network authentication.Click to view → chip supporting remote profile switching.Click to view →) is an SE in MFF2 or wafer-level packaging soldered onto IoT devices. The iSIM integrates SE functionality directly into the device SoC, reducing size and cost for massive IoT deployments. USB security keys (FIDO2FIDO2StandardPasswordless authentication standard.Click to view →) also contain an SE die.

常见问题

The smart card glossary is a comprehensive reference of technical terms, acronyms, and concepts used in smart card technology. It covers protocols (APDU, T=0, T=1), security (Common Criteria, EAL, HSM), hardware (SE, EEPROM, contact pad), and applications (EMV, ePassport, eSIM). It serves developers, product managers, and engineers.

Yes. SmartCardFYI provides glossary definitions in 15 languages including English, Korean, Japanese, Chinese, Spanish, Portuguese, Hindi, Arabic, French, Russian, German, Turkish, Vietnamese, Indonesian, and Thai.