Enabling secure application distribution on a (e)uicc using short distance communication techniques

Patent metadata

Field	Value
Publication number	US-2016014601-A1
Application number	US-201414531399-A
Country	US
Kind code	A1
Filing date	Nov 3, 2014
Priority date	Jul 14, 2014
Publication date	Jan 14, 2016
Grant date	—

Abstract

The present disclosure provides for methods and devices for enabling distribution of a first security application comprised in the first wireless device to the second wireless device. One method comprises the steps of receiving, in the first wireless device, using a short distance communication technology, a hardware identifier of the second wireless device, sending, from the first wireless device, the hardware identifier and information identifying the first security application to the network node, receiving, in the network node, from the first wireless device, the hardware identifier of the second wireless device and the information identifying the security application and authorising, in the network node, the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

First claim

1 . A method performed in a system comprising a first wireless device, a second wireless device and a network node, for enabling distribution of a first security application comprised in the first wireless device to the second wireless device, the method comprising:
receiving, in the first wireless device, using a short distance communication technology, a hardware identifier of the second wireless device; sending, from the first wireless device, the hardware identifier and information identifying the first security application to the network node; receiving, in the network node, from the first wireless device, the hardware identifier of the second wireless device and the information identifying the security application; and authorising, in the network node, the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

2 . The method according to claim 1 , comprising:
displaying, in the first wireless device, security applications available for distribution in the first wireless device; and receiving, in the first wireless device, user input on which security application to distribute to the second wireless device, the selected security application is the first security application.

3 . The method according to claim 1 , wherein authorizing, in the network node, comprises requesting authorizing information from a Service provider.

4 . The method according to claim 3 , wherein authorizing, in the network node, comprises that the network node communicates with an external server wherein the external server is a service provider server such as a Mobile Network Operator, MNO, server, a server provided by a bank, a server provided by a car manufacturer or a server from an application software company.

5 . The method according to claim 1 , comprising:
sending, from the network node to the first wireless device, a first confirmation that the hardware identifier is received in the network node and/or that it is a correct hardware identifier; receiving, in the first wireless device, a first confirmation from the network node that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

6 . The method according to claim 1 , comprising:
sending, from the network node, the second security application associated with the first security application of the first wireless device, to the second wireless device.

7 . The method according to claim 1 , comprising:
sending, from the network node, a second confirmation to the first wireless device that the second security application associated with the first security application is authorized in the second wireless device; receiving, in the first wireless device, a second confirmation that the second security application associated with the first security application is authorized in the second wireless device.

8 . The method according to claim 1 , comprising:
receiving, in the first wireless device, user input to cancel the authorization to access the second security application, associated with the first security application, in the second wireless device; sending, from the first wireless device, instructions to the network node to cancel the authorization to the second wireless device; receiving, in the network node, instructions from the first wireless device to cancel the authorization to the second wireless device to access the second security application associated with the first security application; canceling, in the network node, the authorization to the second wireless device.

9 . A method, performed in a first wireless device, of enabling distribution of a first security application comprised in the first wireless device to a second wireless device, the method comprising:
receiving, using a short distance communication technology, a hardware identifier of the second wireless device; and sending the hardware identifier and information identifying the first security application to a network node, thereby enabling the network node to authorise the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

10 . The method according to claim 9 , comprising:
displaying security applications available for distribution in the first wireless device; receiving user input on which security application to distribute to the second wireless device, the selected security application is the first security application.

11 . The method according to claim 9 , comprising:
receiving a first confirmation from the network node that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

12 . The method according to claim 9 , comprising:
receiving a second confirmation that the second security application associated with the first security application is authorized in the second wireless device.

13 . The method according to claim 9 , comprising:
receiving user input to cancel the authorization to access the second security application, associated with the first security application, in the second wireless device; sending instructions to the network node to cancel the authorization to the second wireless device;

14 . The method according to claim 9 , wherein the first and second security applications comprises an application for enabling access to external services.

15 . The method according to claim 9 , wherein the first and second security application comprises a Subscriber Identity Module, SIM.

16 . The method according to claim 9 , wherein the short distance communication technology is short distance radio technology.

17 . The method according to claim 9 , wherein the short distance communication technology is Body Coupled Communication, BCC, technology.

18 . A method performed in a network node of enabling distribution of a first security application comprised in a first wireless device to a second wireless device, the method comprising:
receiving, from the first wireless device, a hardware identifier of the second wireless device and information identifying the security application; authorising the second wireless device to receive and/or activate a second security application associated with a security application of the first wireless device.

19 . The method according to claim 18 , wherein authorizing comprises requesting authorizing information from a subscription distributing center.

20 . The method according to claim 19 , wherein authorizing comprises that the network node communicates with an external server.

21 . The method according to claim 20 , wherein the external server is a service provider server such as a Mobile Network Operator, MNO, server, a server provided by a bank, a server provided by a car manufacturer or a server from an application software company.

22 . The method according to, claim 18 comprising:
sending the second security application associated with the first security application of the first wireless device, to the second wireless device.

23 . The method according to claim 18 , comprising:
sending, to the first wireless device, a first confirmation that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

24 . The method according to claim 18 , comprising:
sending a second

Assignees

• Sony Corp

Inventors

• Mellqvist Anders
• Berthet David

Classifications

• H04W4/008

  Electricity · mapped topic

• H04W12/06 Primary

  Authentication · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04W12/71

  Hardware identity · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title