Methods and systems for partial personalization during application update

Patent metadata

Field	Value
Publication number	US-10853050-B2
Application number	US-201916262766-A
Country	US
Kind code	B2
Filing date	Jan 30, 2019
Priority date	Oct 10, 2014
Publication date	Dec 1, 2020
Grant date	Dec 1, 2020

Abstract

Embodiments of the present invention are directed at methods and systems for providing a partial personalization process that allows for more efficient and effective personalization of a application on a communication device. For example, personalization profiles associated with multiple versions of the application may be stored at a provisioning system and the provisioning system may determine the appropriate partial provisioning information to update the application for each migration notification. Partial personalization information that is to be updated for the updated version of the application may be generated and installed to enable new functionality and/or update the information contained within an updated application without requiring re-personalization of all personalized information.

First claim

What is claimed is:

1. A method for updating personalization information on a communication device, the method comprising:
after installing an update of an application on the communication device:
sending, by the communication device to a server computer, a migration notification including device identification information, applet identification information identifying an applet of the application, application version information associated with a prior version of the application, and updated application version information associated with the update of the application;
receiving, by the communication device, partial personalization information for an account associated with the applet of the application for installation on the communication device to update the applet identified by the applet identification information, wherein the partial personalization information is received in response to the server computer identifying the account associated with the migration notification using the device identification information and the applet identification information, validating the migration notification by comparing the received application version information with stored application version information associated with the identified account, and determining the partial personalization information as a difference between a personalization profile for the account associated with the applet of the application corresponding to the application version information and an updated personalization profile for the account associated with the applet of the application corresponding to the updated application version information; and
installing, by the communication device, the partial personalization information onto the applet using a script.

2. The method of claim 1 , wherein the partial personalization information includes at least one of an encryption key, a credential, a shared secret, and user information.

3. The method of claim 1 , wherein the application is in an inactive state until the partial personalization information are installed on the communication device.

4. The method of claim 1 , wherein updated functionality associated with the update of the application is disabled until the partial personalization information are installed on the communication device.

5. The method of claim 1 , further comprising:
establishing, by the communication device, a secure channel with the server computer;
receiving, by the communication device, a status update request to prepare the application for the update of the personalization information; and
sending, by the communication device, validation information from the application through the secure channel, wherein the validation information is used by the server computer to authenticate the application.

6. The method of claim 5 , wherein the secure channel is established using a session key derived from information in the migration notification.

7. The method of claim 1 , wherein the migration notification is generated by the application in response to an event associated with the application.

8. The method of claim 1 , wherein generation of the partial personalization information is performed by an issuer computer.

9. The method of claim 1 , wherein the application communicates with the server computer communicates via a master application installed on the communication device.

10. A communication device comprising:
a processor; and
a computer-readable medium coupled to the processor, the computer-readable medium comprising code, executable by the processor, to perform operations for updating personalization information on the communication device, the operations including:
after installing an update of an application on the communication device:
sending, to a server computer, a migration notification including device identification information, applet identification information identifying an applet of the application, application version information associated with a prior version of the application, and updated application version information associated with the update of the application;
receiving partial personalization information for an account associated with the applet of the application for installation on the communication device to update the applet identified by the applet identification information, wherein the partial personalization information is received in response to the server computer identifying the account associated with the migration notification using the device identification information and the applet identification information, validating the migration notification by comparing the received application version information with stored application version information associated with the identified account, and
determining the partial personalization information as a difference between a personalization profile for the account associated with the applet of the application corresponding to the application version information and an updated personalization profile for the account associated with the applet of the application corresponding to the updated application version information; and
installing the partial personalization information onto the applet using a script.

11. The communication device of claim 10 , wherein the partial personalization information includes at least one of an encryption key, a credential, a shared secret, or user information.

12. The communication device of claim 10 , wherein the application is in an inactive state until the partial personalization information are installed on the communication device.

13. The communication device of claim 10 , wherein updated functionality associated with the update of the application is disabled until the partial personalization information are installed on the communication device.

14. The communication device of claim 10 , wherein the operations further include:
establishing a secure channel with the server computer;
receiving a status update request to prepare the application for the update of the personalization information; and
sending validation information from the application through the secure channel, wherein the validation information is used by the server computer to authenticate the communication device.

15. The communication device of claim 14 , wherein the secure channel is established using a session key derived from information in the migration notification.

16. The communication device of claim 10 , wherein the migration notification is generated by the application in response to an event associated with the application.

17. The communication device of claim 10 , wherein generation of the partial personalization information is performed by an issuer computer.

18. The communication device of claim 10 , wherein the application communicates with the server computer via a master application installed on the communication device.

Assignees

• Visa Int Service Ass

Inventors

• Aabye Christian
• Pirzadeh Kiushan
• Powell Glenn
• Karpenko Igor

Classifications

• H04W4/50

  Service provisioning or reconfiguring · CPC title

• H04W12/71

  Hardware identity · CPC title

• H04W12/35

  Protecting application or service provisioning, e.g. securing SIM application provisioning · CPC title

• G06F8/71

  Version control (security arrangements therefor G06F21/57); Configuration management · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title