Method and device for setting state of bundle after transfer of bundle between apparatuses

Patent metadata

Field	Value
Publication number	US-12464348-B2
Application number	US-202017762047-A
Country	US
Kind code	B2
Filing date	Sep 21, 2020
Priority date	Sep 20, 2019
Publication date	Nov 4, 2025
Grant date	Nov 4, 2025

Abstract

The present disclosure relates to a communication method and system for converging a 5 th -Generation (5G) communication system for supporting higher data rates beyond a 4 th -Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. The present disclosure describes a method and device for setting the state of a bundle after the bundle has been transmitted between smart security media.

First claim

The invention claimed is:

1 . A method performed by a first terminal, the method comprising: transmitting, to a second terminal, a bundle to be installed at the second terminal, wherein the bundle is a secondary platform bundle (SPB) included in a smart secure platform (SSP) of the first terminal; receiving, from the second terminal, a first attestation generated by the second terminal, wherein the first attestation includes information on a bundle state of the second terminal, an SSP identifier of the second terminal, and a signature of the second terminal; verifying the first attestation by checking a validity of the SSP identifier and the signature; deleting the bundle in response to the first attestation being verified; generating a second attestation including information on a bundle state of the first terminal, an SSP identifier of the first terminal, and a signature of the first terminal; and transmitting, to the second terminal, the second attestation, wherein the bundle state of the second terminal is changed on the second terminal after verifying the second attestation.

2 . The method of claim 1 , wherein the bundle state of the first terminal is configured to at least one of DELETE, IN TRANSITION, or SUSPENSION, and wherein the method further comprises: receiving, from the second terminal, a third attestation including information on a bundle state change of the second terminal in response to the bundle state of the first terminal being configured to IN TRANSITION; verifying the received third attestation; and deleting the bundle of the first terminal after verifying the third attestation.

3 . The method of claim 1 , wherein a fourth attestation including information on a verification result of the first attestation and the second attestation is generated by the second terminal,
the fourth attestation is transmitted to a server, and the fourth attestation is verified by the server.

4 . The method of claim 1 , wherein a fifth attestation including an authentication result with a server is generated by the server,
the fifth attestation is transmitted to the second terminal, and the fifth attestation is verified by the second terminal.

5 . A method performed by a second terminal, the method comprising: receiving, from a first terminal, a bundle to be installed at the second terminal, wherein the bundle is a secondary platform bundle (SPB) included in a smart secure platform (SSP) of the first terminal; installing the bundle; generating a first attestation including information on a bundle state of the second terminal, an SSP identifier of the second terminal, and a signature of the second terminal; transmitting, to the first terminal, the first attestation; receiving, from the first terminal, a second attestation generated by the first terminal, wherein the second attestation includes information on a bundle state of the first terminal, an SSP identifier of the first terminal, and a signature of the first terminal; verifying the received second attestation by checking a validity of the SSP identifier and the signature; and changing the bundle state of the second terminal on the second terminal in response to the second attestation being verified, wherein the bundle is deleted on the first terminal.

6 . The method of claim 5 , wherein changing the bundle state on the second terminal comprises changing the bundle state of the second terminal to at least one of enable, active, or disabled, and wherein the bundle state of the first terminal is configured to at least one of DELETE, IN TRANSITION, or SUSPENSION, and wherein the method further comprises: generating a third attestation including information on a bundle state change of the second terminal in response to the bundle state of the first terminal being configured to IN TRANSITION; and transmitting the third attestation to the first terminal.

7 . The method of claim 5 , further comprising:
generating a fourth attestation including information on a verification result of the first attestation and the second attestation; and transmitting the fourth attestation to a server.

8 . The method of claim 5 , further comprising:
receiving, from a server, a fifth attestation generated including an authentication result with the server; verifying the received fifth attestation; and changing the bundle state on the second terminal after verifying the fifth attestation.

9 . A first terminal, comprising:
a transceiver configured to transmit and receive at least one signal; and a controller coupled to the transceiver, wherein the controller is configured to: transmit, to a second terminal, a bundle to be installed at the second terminal, wherein the bundle is a secondary platform bundle (SPB) included in a smart secure platform (SSP) of the first terminal, receive, from the second terminal, a first attestation generated by the second terminal, wherein the first attestation includes information on a bundle state of the second terminal, an SSP identifier of the second terminal, and a signature of the second terminal, verify the received first attestation by checking a validity of the SSP identifier and the signature, delete the bundle in response to the first attestation being verified, generate a second attestation including information on a bundle state of the first terminal, an SSP identifier of the first terminal, and a signature of the first terminal, and transmit, to the second terminal, the second attestation, wherein the bundle state of the second terminal is changed on the second terminal after verifying the second attestation.

10 . The first terminal of claim 9 , wherein the controller is further configured to: receive a third attestation generated including information on a bundle state change of the second terminal from the second terminal in response to a bundle state of the first terminal being configured to IN TRANSITION, verify the received third attestation, and delete a bundle of the first terminal after verifying the third attestation, wherein the bundle state of the first terminal is configured to at least one of DELETE, IN TRANSITION, or SUSPENSION.

11 . The first terminal of claim 9 , wherein a fourth attestation including information on a verification result of the first attestation and the second attestation is generated by the second terminal,
the fourth attestation is transmitted to a server, and the fourth attestation is verified by the server.

12 . The first terminal of claim 9 , wherein a fifth attestation including an authentication result with a server is generated by the server,
the fifth attestation is transmitted to the second terminal, and the fifth attestation is verified by the second terminal.

13 . A second terminal, comprising: a transceiver configured to transmit and receive at least one signal; and a controller coupled to the transceiver, wherein the controller is configured to: receive, from a first terminal, a bundle to be installed at the second terminal, wherein the bundle is a secondary platform bundle (SPB) included in a smart secure platform (SSP) of the first terminal, install the bundle, generate a first attestation including information on a bundle state of the second terminal, an SSP identifier of the second terminal, and a signature of the second terminal, transmit, to the first terminal, the first attestation, receive, from the first terminal, a second attestation generated by the first terminal, wherein the second attestation includes information on a bundle state of the first terminal, an SSP identifier of the first terminal, and a signature of the first terminal, verify the received second attestation by checking a va

Assignees

• Samsung Electronics Co Ltd

Inventors

• Lim Taehyung
• Koo Jonghoe
• Yoon Kangjin
• Lee Duckey
• Lee Hyewon

Classifications

• H04W8/20

  Transfer of user or subscriber data · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L63/104

  Grouping of entities · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title