Method and apparatus for multisim devices with embedded SIM functionality

Patent metadata

Field	Value
Publication number	US-9603189-B2
Application number	US-201314765749-A
Country	US
Kind code	B2
Filing date	Mar 8, 2013
Priority date	Mar 8, 2013
Publication date	Mar 21, 2017
Grant date	Mar 21, 2017

Abstract

A method, corresponding apparatuses, and a computer program product for multiSIM devices with embedded SIM functionality are provided. The method comprises downloading at least one subscription from a secure application manager to a secure element with remote provisioning functionality within a user equipment. The method also comprises determining whether or not to assign an identity related to the at least one subscription. The method further comprises informing the user equipment of the at least one subscription being present upon assignment of the identity. With the claimed inventions, subscriptions and a pool of identities can be efficiently and flexibly managed and maintained remotely.

First claim

What is claimed is:

1. A method, comprising:
downloading, to a secure element at a user equipment, at least one subscription, wherein the at least one subscription is downloaded from a secure application manager, and wherein the secure element provides remote provisioning functionality;
determining whether or not to assign a device identity to the at least one subscription; and
in response to an assignment of the device identity to the at least one subscription, providing, by the secure element, an indication that the at least one subscription is present on the user equipment.

2. The method according to claim 1 , further comprising:
providing an initial device identity to the user equipment for connection to the secure application manager.

3. The method according to claim 2 , further comprising:
accepting the initial device identity from a manufacturer of the user equipment during a manufacturing process or from a third party which provides the initial device identity to the manufacturer.

4. The method according to claim 1 , wherein determining whether or not to assign a device identity to the at least one subscription comprises:
determining whether a device identity has been assigned to the at least one subscription; and
when a device identity has not been assigned to the at least one subscription:
requesting, from a pool of device identities, a free device identity; and
assigning the free device identity to the at least one subscription.

5. The method according to claim 4 , wherein the pool of device identities are maintained within the user equipment or by a remote entity from which the pool of device identities are downloadable to the user equipment.

6. The method according to claim 4 , wherein the pool of device identities are linked to a same secure element identity.

7. The method according to claim 4 , further comprising requesting, from the secure application manager, a new device identity, when a free device identity is not available from the pool of device identities.

8. The method according to claim 1 , further comprising:
transmitting, to the secure application manager, a message indicating a successful installation of the at least one subscription, wherein the message includes the device identity related to the at least one subscription and an identity of the secure element.

9. The method according claim 1 , wherein the secure element is implemented on a physically embedded chip.

10. The method according to claim 9 , wherein the secure element is implemented on a removable chip, wherein the secure element is configured to establish a security association with the secure application manager, and wherein establishing the security association prevents the device identities from being compromised.

11. The method according to claim 1 , wherein the device identities are certificates or international mobile equipment identities which are contained in the certificates and bound to a plurality of applications.

12. An apparatus, comprising:
at least one processor; and
at least one memory including compute program instructions,
wherein the at least one memory and computer program instructions are configured to, with the at least one processor, cause the apparatus at least to perform at least one of the following:
download, to a secure element at the apparatus, at least one subscription, wherein the at least one subscription is downloaded from a secure application manager, and wherein the secure element provides remote provisioning functionality;
determine whether or not to assign a device identity to the at least one subscription; and
in response to an assignment of the device identity to the at least one subscription, providing, by the secure element, an indication that the at least one subscription is present on the apparatus.

13. The apparatus according to claim 12 , wherein the apparatus is further configured to at least:
provide an initial device identity to the user equipment for connection to the apparatus.

14. The apparatus according to claim 13 , wherein the apparatus is further configured to at least:
accept the initial device identity from a manufacturer of the user equipment during a manufacturing process or from a third party which provides the initial device identity to the manufacturer.

15. The apparatus according to claim 12 , wherein the apparatus is further configured to at least:
determine whether a device identity has been assigned to the at least one subscription; and
when a device identity has not been assigned to the at least one subscription:
request, from a pool of device identities, a free device identity; and
assign the free device identity to the at least one subscription.

16. The apparatus according to claim 15 , wherein the pool of device identities are maintained within the apparatus or by a remote entity from which the pool of device identities are downloadable to the apparatus.

17. The apparatus according to claim 15 , wherein the pool of device identities are linked to a same secure element identity.

18. The apparatus according to claim 12 , wherein the apparatus is further configured to at least:
transmit, to a secure application manager, a message indicating a successful installation of the at least one subscription, wherein the message includes the device identity related to the at least one subscription and an identity of the secure element.

19. The apparatus according to claim 12 , wherein the secure element is implemented on a physically embedded chip.

20. The apparatus according to claim 19 , wherein the secure element is implemented on a removable chip, wherein the secure element is configured to establish a security association with the secure application manager, and wherein establishing the security association prevents the device identities from being compromised.

21. The apparatus according to claim 12 , wherein the device identities are certificates or international mobile equipment identities which are contained in the certificates and bound to a plurality of applications.

22. The apparatus according to claim 15 , wherein the apparatus is further configured to request, from the secure application manager, a new device identity, when a free device identity is not available from the pool of device identities.

Assignees

• Nokia Technologies Oy

Inventors

• Holtmanns Silke
• Sohi Alireza

Classifications

• H04W8/205 Primary

  Transfer to or from user equipment or user record carrier · CPC title

• H04W88/06 Primary

  adapted for operation in multiple networks {or having at least two operational modes}, e.g. multi-mode terminals · CPC title

• H04B1/3816

  Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices · CPC title