On-Board Applet Migration

Patent metadata

Field	Value
Publication number	US-2017003954-A1
Application number	US-201615269490-A
Country	US
Kind code	A1
Filing date	Sep 19, 2016
Priority date	Jan 6, 2014
Publication date	Jan 5, 2017
Grant date	—

Abstract

An electronic device (such as a cellular telephone) automatically installs and personalizes updates to an applet on a secure element in the electronic device. In particular, when a digitally signed update package containing the update is received from an updating device (such as a server), the secure element identifies any previous versions of the applet installed on the secure element. If there are any previously installed versions, the secure element verifies the digital signature of the update package using an encryption key associated with a vendor of the secure element. Then, the secure element uninstalls the previous versions of the applet and exports the associated user data. Next, the secure element installs the update to the applet, and personalizes the new version of the applet using the user data.

First claim

1 . An electronic device, comprising:
an antenna; an interface circuit, coupled to the antenna, configured to communicate with an updating device; and a secure element comprising a previous version of an applet, a supplemental security domain, and an operating system, the secure element configured to:
receive an update package from the updating device, wherein the update package includes an update to the previous version of the applet;
export user data associated with the previous version of the applet to a data store associated with the supplemental security domain after being provided access to the supplemental security domain by the operating system;
install, by the operating system, the update to the previous version of the applet on the secure element based at least in part on the exporting; and
in response to the update to the previous version of the applet being installed, personalize, by the operating system, the updated applet on the secure element by importing the user data from the data store into the updated applet.

2 . The electronic device of claim 1 , wherein the secure element is further configured to:
identify, by the operating system, the previous version of the applet installed on the secure element by searching a registry associated with the operating system.

3 . The electronic device of claim 1 , wherein the secure element is further configured to:
verify, by the operating system, the update package using an encryption key associated with the secure element.

4 . The electronic device of claim 1 , wherein the secure element is further configured to:
decrypt the update package using an encryption key associated with the secure element.

5 . The electronic device of claim 1 , wherein the secure element is further configured to:
personalize, by the operating system, the updated applet on the secure element by importing the user data from the data store into the updated applet after being provided access to the supplemental security domain by the operating system.

6 . The electronic device of claim 1 , wherein the secure element is further configured to:
receive the update package via the data store associated with the supplemental security domain after being provided access to the supplemental security domain by the operating system.

7 . The electronic device of claim 1 , wherein the secure element is further configured to:
uninstall the previous version of the applet after the export of the user data to the data store is complete.

8 . The electronic device of claim 1 , wherein the electronic device further comprises:
a secure enclave processor configured to:
receive the update package from the updating device; and
upload the update package to the data store associated with the supplemental security domain after being provided access to the supplemental security domain by the operating system.

9 . A computer-program product for use in conjunction with a secure element in an electronic device, the computer-program product comprising a non-transitory computer-readable storage medium and a computer-program mechanism embedded therein, to update an applet installed on the secure element in the electronic device, the computer-program mechanism including:
instructions for receiving an update package from an updating device, wherein the update package includes an update to a previous version of the applet installed on the secure element; instructions for verifying the update package using an encryption key associated with the secure element; instructions for exporting user data associated with the previous version of the applet to a data store associated with a supplemental security domain after being provided access to the supplemental security domain by an operating system; instructions for installing the update to the previous version of the applet on the secure element based at least in part on the exporting; and instructions for personalizing the updated applet on the secure element by importing the user data from the data store into the updated applet.

10 . The computer-program product of claim 9 , wherein the computer-program mechanism includes instructions for identifying the previous version of the applet installed on the secure element by searching a registry associated with the operation system.

11 . (canceled)

12 . The computer-program product of claim 9 , wherein the computer-program mechanism includes instructions for:
decrypting the update package using a second encryption key associated with the secure element.

13 . The computer-program product of claim 9 , wherein the instructions for personalizing comprise further instructions for:
personalizing the updated applet on the secure element by importing the user data from the data store into the updated applet after being provided access to the supplemental security domain by the operating system.

14 . The computer-program product of claim 9 , wherein the instructions for receiving comprise instructions for:
receiving the update package from the data store associated with the supplemental security domain after being provided access to the supplemental security domain by the operating system.

15 . A processor-implemented method for updating a payment applet installed on a secure element in an electronic device, wherein the method comprises:
receiving an update package from an updating device, wherein the update package includes the update to a previous version of the payment applet; exporting user data associated with the previous version of the payment applet to a data store associated with a supplemental security domain after being provided access to the supplemental security domain by an operating system, wherein the user data comprises at least one of a financial credential, a personal identifier number associated with the payment applet, and an encryption key associated with the payment applet; installing the update to the payment applet on the secure element based at least in part on the exporting; in response to the update to the payment applet being installed, personalizing the updated payment applet on the secure element by importing the user data from the data store into the updated payment applet; and conducting a financial transaction using the updated payment applet, wherein the financial transaction is conducted using the user data imported from the data store into the updated payment applet.

16 . The method of claim 15 , further comprising:
identifying the previous version of the payment applet installed on the secure element by searching a registry associated with the operating system.

17 . The method of claim 15 , further comprising:
verifying the update package using an encryption key associated with of the secure element.

18 . The method of claim 15 , further comprising:
decrypting the update package using an encryption key associated with the secure element.

19 . The method of claim 15 , wherein the personalizing further comprises
personalizing the updated payment applet on the secure element by importing the user data from the data store into the updated payment applet after being provided access to the supplemental security domain by the operating system.

20 . The method of claim 15 , wherein the receiving further comprises receiving the update package from the data store associated with the supplemental security domain after being provided access to the supplemental security domain by the operating system.

21 . The method of

Assignees

• Apple Inc

Inventors

• Khan Ahmer A
• Linde Joakim
• Ziat Mehdi

Classifications

• H04W12/06

  Authentication · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• G06F21/71

  to assure secure computing or processing of information · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F8/62

  Uninstallation · CPC title