Secure element arrays in internet-of-things systems

A method for providing secure execution of functions for a plurality of edge devices in an internet-of-things (IoT) system, the method comprising:

• receiving, by a controller of the IoT system, data from a respective edge device of the plurality of edge devices of the IoT system;
• authenticating, by the controller, an array of secure elements using at least one certificate returned by each of the secure elements of the array of secure elements in response to physical connection of the array of secure elements to the controller;
• associating an identified authenticated secure element of the array of secure elements connected to the controller with the respective edge device after the array of secure elements is authenticated;
• providing the received data to the identified secure element, wherein the secure element executes functions using the data;
• and
• communicating, via the controller, a result of the executed functions of the identified secure element to the respective edge device;
• wherein a total number of the plurality of edge devices is greater than a total number of the secure elements, wherein the controller is configured to associate at least two of the plurality of edge devices with a single secure element of the array of secure elements, wherein the single secure element is configured to communicate with the at least two of the plurality of edge devices using command-response pairs and interleave the command-response pairs of the at least two of the plurality of edge devices during communication.

A non-transitory computer readable medium comprising executable program code, that when executed by one or more processors of a controller of a physical access system, causes the one or more processors to:

• authenticate to a remote device to receive a signed cryptogram;
• authenticate to an array of secure elements by sending the signed cryptogram to the array of secure elements in response to physical connection of the controller and the secure elements;
• receive data from a respective edge device of a plurality of edge devices of an IoT system;
• associate an identified secure element of an array of secure elements with the respective edge device after the controller is authenticated by the array of secure elements;
• provide the received data to the identified secure element, wherein the secure element executes functions using the data;
• and
• communicate a result of the executed functions of the identified secure element to the respective edge device;
• wherein a total number of the plurality of edge devices is greater than a total number of the secure elements, wherein the executable program code further causes the one or more processors to associate at least two of the plurality of edge devices with a single secure element of the array of secure elements, wherein the single secure element is configured to communicate with the at least two of the plurality of edge devices using command-response pairs and interleave the command-response pairs of the at least two of the plurality of edge devices during communication.

A physical access control system comprising:

• a controller configured to connect to each of a plurality of readers to receive credential information therefrom, each of the plurality of readers positioned to communicate with a credential device to receive respective credential information therefrom for controlling access to a respective secured area using the respective credential information;
• and
• an array of secure elements configured to execute user authentication using the credential information received from the plurality of readers;
• wherein the controller is further configured to:
• authenticate the array of secure elements using at least one certificate returned by each of the secure elements of the array of secure elements in response to physical connection of the array of secure elements to the controller;
• associate an identified authenticated secure element of the array of secure elements with a respective reader of the plurality of readers after the array of secure elements is authenticated to perform user authentication using the credential information received from the respective reader;
• and
• communicate a result of the user authentication to the respective reader;
• wherein a total number of the plurality of readers is greater than a total number of the secure elements, wherein the controller is configured to associate at least two of the plurality of readers with a single secure element of the array of secure elements, wherein the single secure element is configured to communicate with the at least two of the plurality of readers using command-response pairs and interleave the command-response pairs of the at least two of the plurality of readers during communication.