UNIVERSAL INTEGRATED CIRCUIT CARD HAVING A VIRTUAL SUBSCRIBER IDENTITY MODULE FUNCTIONALITY

• US 20100062808A1
• Filed: 08/25/2009
• Published: 03/11/2010
• Est. Priority Date: 08/25/2008
• Status: Abandoned Application

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Inventors: Cha, Inhyok, Meyerstein, Michael V., Schmidt, Andreas U., Shah, Yogendra C.
• Application Number:
  US12/546,827
• Publication Number:
  US 20100062808A1
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: G06Q 20/308 using the Internet of Things
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/10 Integrity

Abstract

Universal integrated circuit card (UICC) having a virtual subscriber identity module functionality is disclosed. A wireless transmit/receive unit (WTRU) comprises a mobile equipment (ME) configured to perform wireless communication and a UICC. The UICC is configured to perform security functionalities. The UICC supports multiple isolated domains including UICC issuer'"'"'s domain. Each domain is owned by a separate owner so that each owner stores and executes an application on the UICC under a control of an UICC issuer and the UICC issuer'"'"'s domain controls creation and deletion of other domains and defines and enforces security rules for authorizing third parties to have an access to the domains. The UICC is configured to verify integrity of operating system functions and applications stored on the UICC. The UICC is configured to control an access to information regarding applications according to security policies stored within the UICC.

Claims

1. A wireless transmit/receive unit (WTRU) comprising:

a mobile equipment (ME) configured to perform wireless communication; and

a universal integrated circuit card (UICC) configured to perform security functionalities, the UICC supporting multiple isolated domains including;

a UICC issuer'"'"'s domain configured to control creation and deletion of other domains and define and enforce security rules for authorizing third parties to have an access to the domains;

a user'"'"'s domain owned by a user of a UICC-hosting device; and

at least one remote owner'"'"'s domain owned by a remote owner, wherein the remote owner stores and executes an application on the UICC under a control of the UICC issuer'"'"'s domain.

2. The WTRU of claim 1 wherein the UICC is configured to verify integrity of operating system functions and of applications stored on the UICC.

3. The WTRU of claim 2 wherein the UICC is configured to verity the integrity of the operating system functions every time the UICC is reset or powered up.

4. The WTRU of claim 2 wherein the UICC is configured to verity the integrity of the applications when a system-level integrity check is performed or when an application in a security domain is selected for use.

5. The WTRU of claim 2 wherein the UICC is configured to perform an integrity check of a downloaded application package upon receipt.

6. The WTRU of claim 1 wherein the UICC includes an application management entity, the application management entity being configured to manage a downloading process, manage installation, updating and deletion of applications, move applications though their lifecycle stages according to instructions from an authorized external entity or from a function within the UICC, or maintain a registry of applications and their current lifecycle stages.

7. The WTRU of claim 1 wherein the UICC is configured to respond to a query from a remote entity regarding presence and lifecycle status of applications.

8. The WTRU of claim 1 wherein the UICC is configured to control an access to information regarding applications according to security policies stored within the UICC.

9. The WTRU of claim 1 wherein the UICC is configured to control a lifecycle status of downloaded applications.

10. The WTRU of claim 1 wherein the UICC is configured to enable an authorized party to remotely discover existence and lifecycle status of applications on the UICC.

11. The WTRU of claim 1 wherein the UICC includes an application for exchange of credentials so that a remote stakeholder verifies a state of the UICC and sets up credentials in the UICC in preparation for provisioning of a stakeholder application.

12. The WTRU of claim 1 wherein the UICC is configured to download application including security-sensitive objects including at least one of encryption keys, algorithm customization parameters, user identities, executable encryption algorithms, executable commands and responses, file systems, or security policies.

13. The WTRU of claim 1 wherein the UICC is configured to support migration of an application to another UICC.

14. The WTRU of claim 1 wherein the UICC is configured to support a function required to implement a secure channel between the UICC and a UICC-hosting device.

15. The WTRU of claim 14 wherein the UICC is configured to support multiple secure channels each of which corresponds to each of the isolated domains of the UICC to secure a channel between each of the isolated domains of the UICC and the UICC-hosting device.

16. A universal integrated circuit card (UICC) having a virtual subscriber identity module (SIM) functionality, the UICC comprising:

a UICC issuer'"'"'s domain configured to control creation and deletion of other domains and define and enforce security rules for authorizing third parties to have an access to the domains;

a user'"'"'s domain owned by a user of a UICC-hosting device; and

at least one remote owner'"'"'s domain owned by a remote owner, wherein the remote owner stores and executes an application on the UICC under a control of the UICC issuer'"'"'s domain.

17. The UICC of claim 16 further comprising an entity to verify integrity of operating system and applications stored on the UICC.

18. The UICC of claim 16 further comprising an entity to control a lifecycle status of downloaded applications.

19. The UICC of claim 16 further comprising an entity to enable an authorized party to remotely discover existence and lifecycle status of applications on the UICC.

20. The UICC of claim 16 further comprising an entity configured to exchange credentials so that a remote stakeholder verifies a state of the UICC and sets up credentials in the UICC in preparation for provisioning of a stakeholder application.

21. The UICC of claim 16 further comprising a plurality of secure channels between each of the domains and the UICC-hosting device.