Facilitating use of a universal integrated circuit card (UICC) for secure device updates

Patent metadata

Field	Value
Publication number	US-10346152-B2
Application number	US-201615271135-A
Country	US
Kind code	B2
Filing date	Sep 20, 2016
Priority date	Sep 20, 2016
Publication date	Jul 9, 2019
Grant date	Jul 9, 2019

Abstract

Apparatus, methods and systems facilitating communications via a mobile internet-enabled connection interface are provided. One apparatus is configured to perform various operations, including performing a first type of security function associated with determining whether an information package is authorized to be received and downloaded to a device other than the apparatus, wherein the information package is associated with updating a functionality of the device; and performing a second type of security function associated with identifying an authorized user of the apparatus.

First claim

What is claimed is:

1. An apparatus, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
performing, by the apparatus, a first type of security function associated with determining whether an information package is authorized to be downloaded to a device other than the apparatus, wherein the information package is associated with updating a functionality of the device, wherein the apparatus comprises a universal integrated circuit card partitioned into domains, and wherein a first domain of the domains is associated with a telecommunications carrier entity and a second domain of the domains is associated with an entity that provides software to update the device; and
performing, by the apparatus, a second type of security function associated with identifying an authorized user of the apparatus.

2. The apparatus of claim 1 , wherein the updating the functionality of the device comprises updating a software functionality of the device other than the apparatus.

3. The apparatus of claim 2 , wherein the operations further comprise:
performing, by the apparatus, a key negotiation with a server configured to transmit the information package to the device other than the apparatus and that facilitates the updating of the functionality of the device; and
validating, by the apparatus, a digital signature of the information package for the device prior to installation of the information package to cause the updating the software functionality on the device.

4. The apparatus of claim 3 , wherein the validating the digital signature comprises comparing the digital signature to a value stored in a firmware over the air partition of the apparatus, and wherein the firmware over the air partition is associated with the performing the first type of security function.

5. The apparatus of claim 1 , wherein the performing the second type of security function comprises performing the second type of security function associated with the identifying the authorized user of the apparatus via a carrier domain partition of the apparatus.

6. The apparatus of claim 1 , wherein the device comprises a component of a connected car.

7. The apparatus of claim 1 , wherein the device comprises a sensor of a digital home environment.

8. The apparatus of claim 1 , wherein the device comprises an Internet of Things device.

9. A method, comprising:
receiving, by a first device comprising a processor, an information package for updating a functionality of a component of first device, wherein the information package is received from a distribution authority device comprising a key negotiated with a second device associated with providing security for the first device, wherein the second device comprises a universal integrated circuit card partitioned into domains, and wherein a first domain of the domains is associated with a telecommunications carrier entity and a second domain of the domains is associated with an entity that provides software to update the first device; and
validating, by the first device, the information package with the second device based on whether a first value of the information package corresponds to a second value stored at the second device, wherein the second value is stored at an apparatus in response to a negotiation of the key with the distribution authority device prior to the receiving by the first device.

10. The method of claim 9 , further comprising:
updating, by the first device, a software functionality of the component of the first device based on determining that the information package was successfully validated.

11. A non-transitory machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:
performing a first type of security function associated with determining whether an information package is authorized to be employed to facilitate a software update to a device communicatively coupled to an apparatus comprising the processor and machine-readable storage medium, wherein the processor is associated with a universal integrated circuit card partitioned into two domains, and wherein a first domain of the two domains is associated with a telecommunications carrier entity and a second domain of the two domains is associated with an entity that provides software to update the device; and
performing a second type of security function associated confirming a privilege associated with use of the apparatus.

12. The non-transitory machine-readable storage medium of claim 11 , wherein the operations further comprise:
performing a key negotiation with a server configured to transmit the information package to the device communicatively coupled to the apparatus and that facilitates the software update to the device; and
validating a digital signature of the information package for the device prior to installation of the information package on the device.

13. The non-transitory machine-readable storage medium of claim 12 , wherein the information package comprises a firmware over the air package.

14. The non-transitory machine-readable storage medium of claim 12 , wherein the first type of security function is associated with a first executable instruction of the executable instructions, wherein the first executable instruction is comprised in a first partition of the executable instructions and is associated with a first entity.

15. The non-transitory machine-readable storage medium of claim 14 , wherein the first entity is an original equipment manufacturer of the device.

16. The non-transitory machine-readable storage medium of claim 12 , wherein the second type of security function is associated with a second executable instruction in a second partition of the executable instructions and is associated with a second entity.

17. The non-transitory machine-readable storage medium of claim 16 , wherein the second entity is a telecommunications entity of the apparatus.

18. The non-transitory machine-readable storage medium of claim 11 , wherein the device comprises a component of a connected car.

19. The non-transitory machine-readable storage medium of claim 11 , wherein the device comprises an Internet of Things device.

Assignees

• At & T Mobility Ii Llc
• At & T Ip I Lp

Inventors

• Becker Thomas
• Nichols Sr Paul W
• Calamusa Michael
• Horton Mike
• Osterwise Robert

Classifications

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L2209/76

  Proxy, i.e. using intermediary entity to perform cryptographic operations · CPC title

• H04L9/0838

  Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/083

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title