Method for managing content on a secure element connected to an equipment

Patent metadata

Field	Value
Publication number	US-10242210-B2
Application number	US-201113991823-A
Country	US
Kind code	B2
Filing date	Dec 5, 2011
Priority date	Dec 6, 2010
Publication date	Mar 26, 2019
Grant date	Mar 26, 2019

Abstract

The invention concerns a method for managing content on a secure element connected to an equipment, this content being managed on the secure element from a distant administrative platform. According to the invention, the method consists in: establishing, at the level of the administrative platform a secure channel between the equipment and the administrative platform, thanks to session keys generated by the secure element and transmitted to the equipment; transmitting to the administrative platform a request to manage content of the secure element; and verifying at the level of the administrative platform that this request originates from the same secure element that has generated the session keys and, if positive, authorizing the management and, if negative, forbid this management.

First claim

The invention claimed is:

1. A method for managing content on a secure element connected to an equipment, said content being managed on said secure element from a remote administrative platform, wherein said method comprises:
establishing, at the level of said administrative platform a secure channel between said equipment and said administrative platform, using session keys generated by said secure element and transmitted to said equipment, wherein establishing said secure channel includes transmitting a first identifier corresponding to said session keys to said administrative platform from said equipment;
transmitting from said secure element to said administrative platform a request to manage content of said secure element using said secure channel, wherein the request includes a second identifier; and
verifying at the level of said administrative platform that said request originates from the same secure element that has generated said session keys, said verification including verifying that said first identifier, received from said equipment corresponds to said second identifier, received from said secure element, and verifying that said session keys correspond to said first identifier and, if positive, authorizing said management and, if negative, forbid said management.

2. A method according to claim 1 , wherein said management comprises in at least one of the following tasks:
downloading content on said secure element;
deleting content on said secure element;
exporting content stored on said secure element;
activating content stored on said secure element; and
deactivating content stored on said secure element.

3. A method according to claim 1 , wherein said verification comprises in verifying that a private key used for establishing said secure channel corresponds to a certificate delivered to the secure element on which the management is requested.

4. A method according to claim 1 , wherein said equipment is a mobile equipment.

5. A method according to claim 1 , wherein said equipment is a fixed equipment.

6. A method according to claim 1 , wherein said secure element is a removable Universal Integrated Circuit Card.

Assignees

• Girard Pierre
• Proust Philippe
• Gemalto Sa

Inventors

• Girard Pierre
• Proust Philippe

Classifications

• G06F8/61

  Installation · CPC title

• H04W4/60

  Subscription-based services using application servers or record carriers, e.g. SIM application toolkits · CPC title

• H04W8/22

  Processing or transfer of terminal data, e.g. status or physical capabilities · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04W4/50

  Service provisioning or reconfiguring · CPC title