Method, system, trusted service manager, service provider and memory element for managing access rights for trusted applications

Patent metadata

Field	Value
Publication number	US-9608989-B2
Application number	US-67987408-A
Country	US
Kind code	B2
Filing date	Sep 22, 2008
Priority date	Sep 27, 2007
Publication date	Mar 28, 2017
Grant date	Mar 28, 2017

Abstract

A method for granting trusted applications (SP 1 _WL) of a Service Provider (SP 1 , SP 2 )access to applications (appSP 1.1 , appSP 1.2 ; appSP 2.1 ) of that Service Provider (SP 1 , SP 2 ) that have been stored in a secure element (SE) comprises: the Service Provider (SP 1 , SP 2 ) transmits a request (REQ 1 ) for granting access to its applications to a Trusted Service Manager (TSM); the Trusted Service Manager (TSM) generates an access right code (AC 1 ) and transmits it to both the Service Provider (SP 1 , SP 2 ) and a service manager (SM) in the secure element (SE); the Service Provider (SP 1 , SP 2 ) generates the trusted application (SP 1 _WL), provides it with the access right code (AC 1 ) and sends it to the secure element (SE); the trusted application (SP 1 _WL) connects to the service manager (SM) with the access right code (AC 1 ) whereupon the service manager (SM) grants the wallet (SP 1 _WL) access to the applications (appSP 1.1 , appSP 1.2 ; appSP 2.1 ).

First claim

The invention claimed is:

1. A method for granting a wallet of a Service Provider access to applications of the Service Provider which have been stored in a secure element, wherein the secure element comprises a service manager configured to restrict access of wallets to stored applications, comprising:
at the Service Provider, transmitting a request to a Trusted Service Manager which controls the service manager in the secure element for granting the Service Provider access to the applications of the Service Provider;
at the Trusted Service Manager, generating an access right code and transmitting the access right code to both the Service Provider and the service manager in the secure element;
at the Service Provider, generating the wallet, providing the wallet with the access right code and sending the wallet to the secure element, wherein the wallet, when intending to access the applications of the Service Provider in the secure element connects to the service manager with the access right code whereupon the service manager grants the wallet access to the applications of the Service Provider.

2. The method as claimed in claim 1 , wherein the Service Provider and the Trusted Service Manager communicate with each other via a computer network, using HTTPS.

3. The method as claimed in claim 1 , wherein at least one of the Trusted Service Manager and the Service Provider communicate with the secure element being arranged in a mobile communication device via an Over-The-Air service of a Mobile Network Operator.

4. A telecommunication system comprising:
at least one Service Provider;
at least one Trusted Service Manager; and
a plurality of mobile communication devices being equipped with secure elements to store applications of the Service Provider, the secure element granting a wallet of the Service Provider access to the applications of the Service Provider, wherein the secure element comprises a service manager, wherein the Trusted Service Manager sends an access right code to the Service Provider and one of the secure elements, wherein the Service Provider comprises a computing unit configured to: transmit a request to a Trusted Service Manager which controls the service manager in the secure element for granting the Service Provider access to the applications of the Service Provider, receive the access right code from the Trusted Service Manager, generate a wallet with the access right code, and send the wallet and the access right code to the secure element.

5. The system as claimed in claim 4 , wherein the Service Provider and the Trusted Service Manager communicate with each other via a computer network using HTTPS.

6. The system as claimed in claim 4 , wherein at least one of the Trusted Service Manager and the Service Provider communicate with the secure element (SE) arranged in a mobile communication device via an Over-The-Air service of a Mobile Network Operator using a Short Message Service.

7. The system as claimed in claim 4 , wherein the secure element is a SmartMX device.

8. A Trusted Service Manager comprising:
a computing unit being adapted to receive from a Service Provider a request for granting the Service Provider access to applications of the Service Provider stored in a secure element, wherein the secure element comprises a service manager that hinders access to stored applications, wherein the Trusted Service Manager is adapted to generate an access right code and to transmit the access right code to both the Service Provider and the service manager in the secure element.

9. The Trusted Service Manager as claimed in claim 8 , wherein the Trusted Service Manager communicates with the Service Provider via a computer network, using HTTPS.

10. The Trusted Service Manager as claimed in claim 8 , wherein the Trusted Service Manager communicates with the secure element arranged in the mobile communication device via an Over-The-Air service of a Mobile Network Operator, using Short Message Service.

11. A Service Provider comprising:
a computing unit being adapted to store applications in a secure element that is arranged in a mobile communication device, wherein the Service Provider is further adapted to transmit a request for granting access to applications of the Service Provider in the secure element to a Trusted Service Manager, to receive an access right code from the Trusted Service Manager, to generate a wallet, to provide it with the access right code, and to send the access right code to the secure element.

12. The Service Provider as claimed in claim 11 , wherein the Service Provider communicates with the Trusted Service Manager via a computer network, using HTTPS.

13. The Service Provider as claimed in claim 11 , wherein the Service Provider communicates with the secure element arranged in the mobile communication device via an Over-The-Air service of a Mobile Network Operator, using Short Message Service.

14. A secure element comprising an arithmetic-logic unit and a non-transitory memory, the non-transitory memory storing a plurality of applications, the non-transitory memory further comprising instructions for:
receiving a first access right code from a Trusted Services Manager;
storing the first access right code in association with a set of the applications, the first access right code restricting access to the set of the applications;
connecting to a wallet that is installed in the secure element;
receiving from the wallet a second access right code;
comparing the second access right code to the stored first access right code; and
if the access right codes match, granting the wallet access to the set of applications installed in the secure element which are restricted by the first access right code.

15. The secure element according to claim 14 , being configured as a SmartMX device.

16. The secure element of claim 14 , wherein the wallet is received from a Service Provider.

Assignees

• Corda Alexandre
• Bobo Luis
• Azoulai Jonathan
• Nxp Bv

Inventors

• Corda Alexandre
• Bobo Luis
• Azoulai Jonathan

Classifications

• G06F21/35

  communicating wirelessly · CPC title

• H04L63/0853 Primary

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• G06F21/335

  for accessing specific resources, e.g. using Kerberos tickets · CPC title

• G06Q20/3278

  RFID or NFC payments by means of M-devices · CPC title

• G06F21/629

  to features or functions of an application · CPC title