Method and device for remote management and verification of remote management authority

Patent metadata

Field	Value
Publication number	US-12309586-B2
Application number	US-202318471952-A
Country	US
Kind code	B2
Filing date	Sep 21, 2023
Priority date	Feb 28, 2020
Publication date	May 20, 2025
Grant date	May 20, 2025

Abstract

A communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method for remote management and remote management authority verification by a terminal includes: receiving a remote management instruction package; obtaining certificate information configured for a security module, which may be used when remotely managing a security service module corresponding to at least one identifier among a plurality of identifiers; and verifying a remote security service module management certificate of a bundle management server and the remote management instruction package by using the obtained certificate information.

First claim

What is claimed is:

1. A method performed by a local bundle assistant (LBA) in a wireless communication system, wherein a terminal includes the LBA and a secondary platform bundle (SPB), the method comprising:
receiving, from a secondary platform bundle manager (SPBM), a remote bundle management command, wherein the remote bundle management command includes an SPBM verification indicator, an end user consent indicator, and a subscriber consent verification indicator;
verifying an end user consent based on the end user consent indicator included in the remote bundle management command;
transmitting, to the SPB, the remote bundle management command; and
receiving, from the SPB, an execution result of the remote bundle management command,
wherein the remote bundle management command is executed by the SPB after the end user consent is verified.

2. The method of claim 1 ,
wherein a bundle policy is verified by the SPB, based on the remote bundle management command, and
wherein the verification of the bundle policy comprises at least one of verifying an authorization of the SPBM, or verifying a subscriber consent.

3. The method of claim 2 ,
wherein the remote bundle management command is executed by the SPB after the end user consent and the bundle policy are verified.

4. A method performed by a secondary platform bundle (SPB) in a wireless communication system, wherein a terminal includes a local bundle assistant (LBA) and the SPB, the method comprising:
receiving, from the LBA, a remote bundle management command, wherein the remote bundle management command includes SPB management (SPBM) verification indicator, an end user consent indicator, and a subscriber consent verification indicator;
verifying a bundle policy based on the remote bundle management command, wherein the bundle policy comprises at least one of verifying an authorization of an SPBM based on the SPBM verification indicator included in remote bundle management command, or verifying a subscriber consent based on the subscriber consent indicator included in remote bundle management command;
executing the remote bundle management command after the bundle policy is verified; and
transmitting, to the LBA, an execution result of the remote bundle management command,
wherein the remote bundle management command is transmitted from the SPBM to the LBA.

5. The method of claim 4 ,
wherein an end user consent is verified by the LBA, based on the remote bundle management command.

6. The method of claim 5 , wherein the executing comprises:
executing the remote bundle management command after the end user consent and the bundle policy are verified.

7. A local bundle assistant (LBA), wherein a terminal includes the LBA and a secondary platform bundle (SPB), the LBA comprising:
a transceiver capable of transmitting or receiving at least one signal, and
a controller coupled with the transceiver, wherein the controller is configured to:
receive, from a secondary platform bundle manager (SPBM), a remote bundle management command, wherein the remote bundle management command includes an SPBM verification indicator, an end user consent indicator, and a subscriber consent verification indicator,
verify an end user consent based on the end user consent indicator included in the remote bundle management command,
transmit, to the SPB, the remote bundle management command, and
receive, from the SPB, an execution result of the remote bundle management command,

wherein the remote bundle management command is executed by the SPB after the end user consent is verified.

8. The LBA of claim 7 ,
wherein a bundle policy is verified by the SPB, based on the remote bundle management command, and
wherein the verification of the bundle policy comprises at least one of verifying an authorization of the SPBM, or verifying a subscriber consent.

9. The LBA of claim 8 ,
wherein the remote bundle management command is executed by the SPB after the end user consent and the bundle policy are verified.

10. A secondary platform bundle (SPB), wherein a terminal includes a local bundle assistant (LBA) and the SPB, the SPB comprising:
a transceiver capable of transmitting or receiving at least one signal, and
a controller coupled with the transceiver, wherein the controller is configured to:
receive, from the LBA, a remote bundle management command, wherein the remote bundle management command includes SPB management (SPBM) verification indicator, an end user consent indicator, and a subscriber consent verification indicator,
verify a bundle policy based on the remote bundle management command, wherein the bundle policy comprises at least one of verifying an authorization of an SPBM based on the SPBM verification indicator is included in remote bundle management command, or verifying a subscriber consent based on the subscriber consent indicator included in remote bundle management command,
execute the remote bundle management command after the bundle policy is verified, and
transmit, to the LBA, an execution result of the remote bundle management command,

wherein the remote bundle management command is transmitted to the LBA from the SPBM.

11. The SPB of claim 10 ,
wherein an end user consent is verified by the LBA, based on the remote bundle management command.

12. The SPB of claim 11 , wherein the controller is further configured to execute the remote bundle management command after the end user consent and the bundle policy are verified.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Yoon Kangjin
• Koo Jonghoe
• Lee Duckey
• Lee Hyewon
• Lim Taehyung

Classifications

• H04W12/76

  Group identity · CPC title

• H04W12/069 Primary

  using certificates or pre-shared keys · CPC title

• H04W12/06

  Authentication · CPC title

• H04W12/041 Primary

  Key generation or derivation · CPC title

• H04W12/068

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title