Method for exporting on a secure server data comprised on a UICC comprised in a terminal

Patent metadata

Field	Value
Publication number	US-9294919-B2
Application number	US-201113991689-A
Country	US
Kind code	B2
Filing date	Dec 5, 2011
Priority date	Dec 6, 2010
Publication date	Mar 22, 2016
Grant date	Mar 22, 2016

Abstract

A method for exporting on a UICC in a terminal. An export request signed by the UICC, is transmitted by the terminal to a secure server. The server verifies the signed export request by comparing the signature and the identity of the UICC. The server sends a signed export certificate to the UICC via the terminal. An export package containing the data is prepared, signed and encrypted by the UICC, and sent to the terminal. The terminal transmits the export package to the server. The server signs an acknowledgment message and transmits it to the UICC via the terminal. In the UICC, the data that have been exported is destroyed, and a signed acknowledge message is sent to the server via the terminal. The server makes the data available for a further transfer to a new terminal or UICC.

First claim

The invention claimed is:

1. A method for exporting on a secure server data comprised on a UICC in a terminal, said method comprising:
on export request, signing an export request by said UICC, said signed export request being transmitted by said terminal to said server;
verifying, at the level of said server, said signed export request by comparing the signature and the identity of said UICC;
if said verification is positive, sending by said server a signed export certificate to said UICC via said terminal;
verifying said export certificate in said UICC and, if said verification is positive, preparing an export package containing said data, said export package being signed and encrypted by said UICC;
sending said export package to said terminal and setting the exported data as “unusable” in the UICC;
transmitting from said terminal to said server said export package;
receiving said package and verifying said signature at the level of said server;
signing an acknowledgment message and transmitting it to said UICC via said terminal;
in said UICC, verifying said acknowledgment message and, if the signature of said server is recognized, destroying the data that have been exported and sending a signed acknowledge message to said server via said terminal; and
verifying the signature of said acknowledge message in said server and, if said signature is recognized, making said data available for a transfer.

2. A method according to claim 1 , wherein said UICC is embedded in said terminal.

3. A method according to claim 1 , wherein said export request is preceded by a selection of the data to be exported.

Assignees

• Merrien Lionel
• Berard Xavier
• Gemalto Sa

Inventors

• Merrien Lionel
• Berard Xavier

Classifications

• H04L9/0825

  using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W4/60

  Subscription-based services using application servers or record carriers, e.g. SIM application toolkits · CPC title

• H04W4/50

  Service provisioning or reconfiguring · CPC title