Facilitating use of a universal integrated circuit card (UICC) for secure device updates

Patent metadata

Field	Value
Publication number	US-11216267-B2
Application number	US-201916424478-A
Country	US
Kind code	B2
Filing date	May 28, 2019
Priority date	Sep 20, 2016
Publication date	Jan 4, 2022
Grant date	Jan 4, 2022

Abstract

Apparatus, methods and systems facilitating communications via a mobile internet-enabled connection interface are provided. One apparatus is configured to perform various operations, including performing a first type of security function associated with determining whether an information package is authorized to be received and downloaded to a device other than the apparatus, wherein the information package is associated with updating a functionality of the device; and performing a second type of security function associated with identifying an authorized user of the apparatus.

First claim

What is claimed is:

1. An apparatus, comprising:
a processor; and
a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
performing a first type of security function associated with determining whether an information package, which facilitates a software update to a device other than the apparatus, is authorized to be downloaded to the device, wherein the apparatus comprises a universal integrated circuit card partitioned into different domains applicable to different functionalities associated with different entities, and wherein a functionality of the different functionalities, associated with a domain of the different domains, is to enable the software update to the device; and
performing a second type of security function associated with identifying an authorized user of the apparatus.

2. The apparatus of claim 1 , wherein the first domain of the different domains is associated with a telecommunications carrier identity.

3. The apparatus of claim 2 , wherein the operations further comprise:
performing a key negotiation with a server configured to transmit the information package to the device other than the apparatus and that facilitates the software update to the device; and
validating a digital signature of the information package for the device prior to installation of the information package to cause the software update to the device.

4. The apparatus of claim 3 , wherein validating the digital signature comprises comparing the digital signature to a value stored in a firmware over the air partition of the apparatus, and wherein the firmware over the air partition is associated with the performing of the first type of security function.

5. The apparatus of claim 1 , wherein performing the second type of security function comprises performing the second type of security function associated with identifying the authorized user of the apparatus via a carrier domain partition of the apparatus.

6. The apparatus of claim 1 , wherein the device comprises a component of a connected car.

7. The apparatus of claim 1 , wherein the device comprises a sensor of a digital home environment.

8. The apparatus of claim 1 , wherein the device comprises an Internet of Things device.

9. A method, comprising:
receiving, by a first device comprising a processor, an information package that facilitates a software update to the first device for updating a functionality of a component of the first device, wherein the information package is received from a distribution authority device comprising a key negotiated with a second device associated with providing security for the first device, wherein the second device comprises a universal integrated circuit card partitioned into different domains applicable to different functionalities associated with different entities, and wherein a functionality of the different functionalities, associated with a domain of the different domains, is to enable the software update to the first device; and
validating, by the first device, the information package with the second device based on whether a first value of the information package corresponds to a second value stored at the second device.

10. The method of claim 9 , wherein the first domain of the domains is associated with a telecommunications carrier identity.

11. The method of claim 9 , further comprising:
based on the software update, updating, by the first device, a software functionality of the component of the first device based on determining that the information package was successfully validated.

12. A non-transitory machine-readable storage medium, comprising executable instructions that, when executed by a processor of an apparatus, facilitate performance of operations, comprising:
performing a first type of security function associated with determining whether an information package, which facilitates a software update to a device, is authorized to be employed to facilitate the software update to the device communicatively coupled to the apparatus, wherein the processor is associated with a universal integrated circuit card partitioned into different domains applicable to different functionalities associated with different entities, and wherein a functionality of the different functionalities associated with a domain of the different domains is to enable the software update to the device; and
performing a second type of security function associated confirming a privilege associated with use of the apparatus.

13. The non-transitory machine-readable storage medium of claim 12 , wherein the operations further comprise:
performing a key negotiation with a server configured to transmit the information package to the device communicatively coupled to the apparatus and that facilitates the software update to the device; and
validating a digital signature of the information package for the device prior to installation of the information package on the device.

14. The non-transitory machine-readable storage medium of claim 13 , wherein the information package comprises a firmware over the air package.

15. The non-transitory machine-readable storage medium of claim 13 , wherein the first type of security function is associated with an executable instruction, and wherein the executable instruction is comprised in a partition of executable instructions.

16. The non-transitory machine-readable storage medium of claim 13 , wherein the first type of security function is associated with an identity of an original equipment manufacturer of the device.

17. The non-transitory machine-readable storage medium of claim 13 , wherein the second type of security function is associated with an executable instruction in a partition of executable instructions.

18. The non-transitory machine-readable storage medium of claim 13 , wherein the first domain of the different domains associated with a telecommunications carrier identity.

19. The non-transitory machine-readable storage medium of claim 12 , wherein the device comprises a component of a connected car.

20. The non-transitory machine-readable storage medium of claim 12 , wherein the device comprises an Internet of Things device.

Assignees

• At & T Mobility Ii Llc
• At & T Ip I Lp
• At&T Iniellectual Property I L P

Inventors

• Becker Thomas
• Nichols Sr Paul W
• Calamusa Michael
• Horton Mike
• Osterwise Robert

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0838

  Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061) · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L63/105

  Multiple levels of security · CPC title