Method and devices for managing subscription profiles on a security element

Patent metadata

Field	Value
Publication number	US-11943837-B2
Application number	US-202017427260-A
Country	US
Kind code	B2
Filing date	Jan 29, 2020
Priority date	Feb 1, 2019
Publication date	Mar 26, 2024
Grant date	Mar 26, 2024

Abstract

A method for managing subscription profiles of a security element, which is provided for use in a mobile end device and on which a profile manager and at least one first subscription profile is loaded, includes: loading a second subscription profile from a subscription management server; checking whether the at least one first loaded subscription profile satisfies a predetermined condition; and putting the at least one first subscription profile out of operation when the at least one first subscription profile satisfies the predetermined condition.

First claim

The invention claimed is:

1. A method for managing subscription profiles of a security element which is provided for use in a mobile end device and on which a profile manager and at least one first subscription profile is loaded, comprising the steps of:
loading a second subscription profile from a subscription management server;
checking whether the at least one first loaded subscription profile satisfies a predetermined condition;
putting the at least one first subscription profile out of operation when the at least one first subscription profile satisfies the predetermined condition;
wherein the predetermined condition comprises one or several of the following criteria;
leaving a spatially delimited region when crossing a national border;
ascertaining that an identification code of the security element has been entered incorrectly a predetermined number of times;
ascertaining that a call has been initiated or performed from the mobile end device to a predetermined number;
ascertaining that a permissible number of authentications of the security element has been performed;
ascertaining that the at least one first subscription profile has been deleted or deactivated in a Home Location Register.

2. The method according to claim 1 , wherein the step of checking whether the at least one first loaded subscription profile satisfies a predetermined condition and the step of putting out of operation are performed by the profile manager.

3. The method according to claim 1 , wherein the step of putting out of operation comprises deleting the at least one first subscription profile.

4. The method according to claim 1 , wherein the step of putting out of operation comprises deactivating the at least one first subscription profile.

5. The method according to claim 1 , wherein user information is generated and output on a user interface of the mobile end device, which signals a user of the mobile end device that the at least one first subscription profile is put out of operation.

6. The method according to claim 5 , wherein the user information comprises interaction information the activation of which is monitored, and upon ascertained activation putting the at least one first subscription profile out of operation is prevented or performed.

7. The method according to claim 1 , further comprising the step of loading a computer program product directly into the internal memory of a digital computer, wherein the computer program product comprises software code portions with which the steps according to the method are executed when the product runs on a computer.

8. A security element which is provided for use in a mobile end device, the security element comprising:
a profile manager and at least one first subscription profile, and
wherein the security element is adapted to
load a second subscription profile from a subscription management server;
check whether the at least one first loaded subscription profile satisfies a predetermined condition; and
put the at least one first subscription profile out of operation when the at least one first subscription profile satisfies the predetermined condition;
wherein the predetermined condition comprises one or several of the following criteria;
leaving a spatially delimited region when crossing a national border;
ascertaining that an identification code of the security element has been entered incorrectly a predetermined number of times;
ascertaining that a call has been initiated or performed from the mobile end device to a predetermined number;
ascertaining that a permissible number of authentications of the security element has been performed;
ascertaining that the at least one first subscription profile has been deleted or deactivated in a Home Location Register.

9. A mobile end device, wherein this comprises a security element according to claim 8 .

Assignees

• Giesecke & Devrient Mobile Security Gmbh

Inventors

• Morawietz Andreas
• Nitsch Nils
• Huber Ulrich
• Wimbock Ulrich

Classifications

• H04W8/183 Primary

  Processing at user equipment or user record carrier · CPC title

• H04W8/04

  Registration at HLR or HSS [Home Subscriber Server] · CPC title

• H04W8/08

  Mobility data transfer · CPC title

• H04W8/205 Primary

  Transfer to or from user equipment or user record carrier · CPC title

• H04W12/06

  Authentication · CPC title