GIESECKE+DEVRIENT MOBILE SECURITY GERMANY GMBH

A method is for updating an operating system, OS, administering a file system in a secure element, SE. The method includes the steps of providing an update agent in the SE; assuming control of the SE by the update agent from the operating system; loading an OS image into the SE, the OS image representing an update of the operating system; providing an updated operating system by installing the OS image; and handing over control of the SE by the update agent to the updated operating system. Within this update process, the update agent provides a provisional file system in the SE and administers the provisional file system as long as the update agent is in control of the SE. A respective secure element, a respective update agent, and to a respective computer-program product employ the method.

A method in a secure element (SE), includes the following method steps: obtaining, in the SE, an identity query, in particular a GET IDENTITY command, sent by a network; encrypting, by means of the SE, identity data stored on the SE, in order to generate encrypted identity data using a symmetrical key generated in the SE before the obtaining step; applying, by means of the SE, a message authentication code (MAC) algorithm to the generated encrypted identity data in order to obtain a MAC; and creating and sending a response to the identity query from the SE to the network, wherein the message contains the encrypted identity data and the MAC. An SE is provided for a computer program product, and a system comprising a SE and a network.

This wireless communication device includes an embedded universal integrated circuit card (eUICC) and a communication modem. The eUICC has two parts: the SGP.22 part, containing the MNO1 profile and its Issuer Security Domain Root (ISD-R); and the SGP.32 part, with the MNO2 profile and its ISD-R. The modem features at least two baseband processors: the first for the MNO1 profile and the second for the MNO2 profile. The MNO1 profile is managed by a Local Profile Assistant (LPA), which can select the first ISD-R, while the MNO2 profile is managed by an IoT Profile Assistant (IPA), which can select the second ISD-R. The device is configured so that at least one of the profiles, MNO1 or MNO2, is active at any time.

Methods, interfaces and devices for delegated management of profiles of an embedded Universal Integrated Circuit Card, eUICC, are included in a mobile device. Delegated management is provided to a profile selected from a list of profiles available at the eUICC by registering the eUICC with a server and joining with the selected profile an existing subscription group of profiles on the server or by creating a new subscription group on the server based on the selected profile.

A method is provided for changing and recovering personalization data of a trusted software in a secure element and changing and restoring diversified data. The method includes the steps of providing an update agent in the secure element; storing personalization data in the installed software; performing a Full Reflash to recover or update a software or operating system comprising the steps of first securing personalization data to a memory of the update agent before, in following step, recovering or loading a software image into the secure element. The method includes as a final step personalizing the software image by the personalization data secured during the first step of the Full Reflash.

A UICC, preferably a subscriber identity module, includes at least one profile and a subscription manager. Each profile has a state which is active or inactive. The at least one profile further has a shareable interface object which enables the subscription manager to access each profile regardless of the state of the respective profile.

A secure element includes an SE application implemented therein or configured to implement an SE application therein. The secure element includes: an SE terminal interface to a terminal, in conjunction with which the secure element is able to be operated; an ARA application (ARA-X) and ARA access rules, by way of which access operations from applications implemented in the terminal to SE applications implemented or able to be implemented in the secure element via the SE terminal interface are controlled. The secure element is: an ARA user interface (ARA-UI), which is configured: to receive user commands that are input by a user on a user interface provided on the terminal or on the secure element; to forward received user commands to the ARA application; and to prompt the ARA application to apply forwarded user commands to the ARA application.

A method, an update agent and an off-card entity are provided for implementing an authentication scheme for providing a software image to a secure element. An installation package includes a package binding function for linking the installation package to the secure element, a manifest, a manifest signature generated using a block-cipher algorithm, and a software image is received at an update agent within the secure element. The update agent implements an authentication and integrity scheme by verifying various signatures contained within the installation package and installing the software image in case of successful authentication and integrity verification.

A method for establishing at least one profile in an eUICC includes: a) generating, within the eUICC, some of the profile data, known as on-board generated profile data; the method is characterized by the following steps: c) transferring all or part of the on-board generated profile data from the eUICC to a verifier entity; d) at the verifier entity, using the transferred on-board generated profile data and verification criteria and information to generate a verification result, which indicates either successful or unsuccessful verification of the on-board generated profile data, and sending this verification result from the verifier entity to a state manager entity; e) the state manager entity then setting the operational state of the profile in the eUICC only if the verification result indicates a successful verification; if the verification result indicates a failure, it prevents the profile from being operational.

Methods and systems are disclosed for configuring a user device. Security credentials are provided to allow a secure element of the user device to enable access to a secured service, for example, at least one mobile telecommunication network. The security credentials are stored in the secure element. An application program dataset is configured to at least partly access and alter information provided in the security credentials via an application programming interface (API).