Method for modifying rights to security domain for smartcard, and server, smartcard, and terminal for same

Patent metadata

Field	Value
Publication number	US-2016295407-A1
Application number	US-201615184480-A
Country	US
Kind code	A1
Filing date	Jun 16, 2016
Priority date	Nov 3, 2011
Publication date	Oct 6, 2016
Grant date	—

Abstract

The present invention relates to modifying rights to a security domain for a smartcard, and more specifically, to a server for managing modification of rights to a security domain, a smartcard for modifying the rights to the security domain, a terminal which is loaded with the smartcard, and to a method for modifying the rights.

First claim

1 . An Embedded Universal Integrated Circuit Card (e-UICC) communicating with a Subscription Manager (SM) and a plurality of Mobile Network Operators, the e-UICC comprising:
a first security domain sharing a key with a management server managing the e-UICC; and a plurality of second security domains, each sharing a key with an SM-Data Preparation (SM-DP), wherein the e-UICC controls one of the second security domains according to a signal received through the first security domain, wherein the first security domain and the second security domains are representatives for off-card authorities.

2 . The e-UICC of claim 1 , wherein a status of the e-UICC is managed by a SM-Secure Routing (SM-SR) in connection with the first security domain and managed by SM-DPs in connection with the second security domains.

3 . The e-UICC of claim 1 , wherein a status of one of the second security domain is controlled to one of installed, active, inactive, and deleted states based on the signal received through the first security domain.

4 . The e-UICC of claim 1 , wherein the first security domain is a representative of an off-card entity that administers or issues e-UICC cards.

5 . The e-UICC of claim 4 , wherein the off-card entity is the Subscription Manager (SM).

6 . The e-UICC of claim 1 , wherein the second security domains are representatives of application providers.

7 . The e-UICC of claim 6 , wherein the application providers are SM-DPs.

8 . A method for managing security domains for an embedded Universal Integrated Circuit Card (e-UICC) communicating with a Subscription Manager (SM) and a plurality of Mobile Network Operators, the method comprising:
configuring a first security domain sharing a key with a management server managing the e-UICC; configuring a plurality of second security domains, each sharing a key with an SM-Data Preparation (SM-DP); and controlling one of the second security domains according to a signal received through the first security domain; wherein the first security domain and the second security domains are representatives for off-card authorities.

9 . The method of claim 8 , wherein a status of the E-UICC is managed by a SM-Secure Routing (SM-SR) in connection with the first security domain and managed by SM-DPs in connection with the second security domains.

10 . The method of claim 8 , wherein a status of one of the second security domain is controlled to one of installed, active, inactive, and deleted states based on the signal received through the first security domain.

11 . The method of claim 8 , wherein the first security domain is a representative of an off-card entity that administers or issues e-UICC cards.

12 . The method of claim 11 , wherein the off-card entity is the Subscription Manager (SM).

13 . The method of claim 8 , wherein the second security domains are representatives of application providers.

14 . The method of claim 13 , wherein the application providers are SM-DPs.

Assignees

• Kt Corp

Inventors

• Hur Guk
• Lee Jin Hyoung
• Yoon Yeu Min Min

Classifications

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04W12/06

  Authentication · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• G06Q20/327

  Short range or proximity payments by means of M-devices · CPC title