METHOD, SYSTEM AND TRUSTED SERVICE MANAGER FOR SECURELY TRANSMITTING AN APPLICATION TO A MOBILE PHONE

• US 20100291896A1
• Filed: 07/21/2008
• Published: 11/18/2010
• Est. Priority Date: 07/24/2007
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: CORDA, ALEXANDRE
• Granted Patent: US 8,391,837 B2
• Time in Patent Office: Days
• US Class Current: 455/410
• CPC Class Codes: G06F 8/60 Software deployment
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 41/5096 wherein the managed service relates to distributed or central networked applications
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A Trusted Service Manager (TSM) receives via a first communication channel from a Service Provider (SP) a request (REQ(MIA)) that contains an application (MIA) together with a unique identifier of a mobile phone (MOB), particularly its telephone number. The mobile phone (MOB) is equipped with a memory device (MIF) that comprises multiple memory sectors being protected by sector keys. Preferably the memory device (MIF) is a MIFARE device. The TSM extracts the application (MIA) and the unique identifier from the received request, assigns destination sector(s) and associated sector key(s) of the memory device (MIF), compiles the application (MIA), the sector key(s) and the sector number(s) of the destination sector(s) into a setup-message (SU(MIA)), encrypts the setup-message and transmits it to either the mobile phone via a second communication channel or the Service Provider via the first communication channel (CN). If the setup-message (SU(MIA)) is transmitted to the Service Provider, the Service Provider sends it over the second communication channel to the mobile phone.

Claims

1. A method for transmitting at least one of a service and an application from a Service Provider via a Trusted Service Manager to a mobile phone having a memory device comprising a plurality of memory sectors, wherein the sectors are protected against unauthorized access by sector keys, wherein the method comprises:

at the Service Provider, sending a request that contains the service or application together with a unique identifier of the mobile phone, to the Trusted Service Manager via a first communication channel;

at the Trusted Service Manager, extracting the service or application and the unique identifier of the mobile phone from the received request;

assigning at least one destination sector and an associated sector key of the memory device to the service or application;

compiling the service or application, the sector key(s) and the sector number(s) of the destination sector(s) into a setup-message;

encrypting the setup-message; and

transmitting the setup-message via a second communication channel of a Mobile Network Operator, to the mobile phone.

3. The method as claimed in claim 1, wherein the first communication channel is a computer network.

4. The method as claimed in claim 3, wherein the data transmission protocol used in the first communication channel is HTTPS.

5. The method as claimed in claim 1, wherein the service to transmit the setup-message over the second communication channel is Short Message Service.

6. The method as claimed in claim 1, wherein in the mobile phone the service or application, the destination sector(s) of the memory device and the sector key(s) are decrypted and extracted from the received setup-message and the service or application is stored in the destination sector(s) of the memory device by using the extracted sector key(s).

7. The method as claimed in claim 1, wherein the memory device is a MIFARE device.

8. A system for transmitting at least one of a service and an application from a Service Provider via a Trusted Service Manager to a mobile phone being equipped with a memory device comprising a plurality of memory sectors, wherein the sectors are protected against unauthorized access by sector keys, wherein the Service Provider, the Trusted Service Manager and the mobile phone comprise computing units and software code portions for performing the steps of a method according to claim 1.

9. The system as claimed in claim 8, wherein the memory device is a MIFARE device.

13. A mobile phone with at least one of an arithmetic-logic unit and a central processing unit and a memory, wherein the mobile phone is adapted to process the computer program product as claimed in claim 9.

14. The mobile phone as claimed in claim 13, wherein the memory device is a MIFARE device.

2. A method for transmitting at least one of a service and an application from a Service Provider via a Trusted Service Manager to a mobile phone having a memory device comprising a plurality of memory sectors wherein the sectors are protected against unauthorized access by sector keys, wherein the method comprises:

at the Service Provider, sending a request that contains the service or application together with a unique identifier of the mobile phone to the Trusted Service Manager via a first communication channel;

at the Trusted Service Manager, extracting the service or application and the unique identifier of the mobile phone from the received request;

assigning at least one destination sector and associated sector key of the memory device to the service or application;

compiling the service or application, the sector key(s) and the sector number(s) of the destination sector(s) into a setup-message;

encrypting the setup-message; and

transmitting the setup-message via the first communication channel to the Service Provider;

at the Service Provider, transmitting the setup-message via a second communication channel of a Mobile Network Operator, to the mobile phone.

10. A Trusted Service Manager being adapted to receive from a Service Provider—

via a first communication channel request that contains an application together with a unique identifier of a mobile phone, wherein the mobile phone is equipped with a memory device comprising a plurality of memory sectors wherein the sectors are protected against unauthorized access by sector keys;

extracting the application and the unique identifier of the mobile phone from the received request;

assigning at least one destination sector and associated sector key of the memory device to the application;

compiling the application, the sector key(s) and the sector number(s) of the destination sector(s) into a setup-message;

encrypting the setup-message; and

transmitting the setup-message to at least one of the mobile phone via a second communication channel, and the Service Provider via the first communication channel.

11. A computer program product being directly loadable into the memory of a mobile phone being equipped with a memory device being equipped with a memory device comprising a plurality of memory sectors wherein the sectors are protected against unauthorized access by sector keys, wherein the computer program product comprises software code portions for performing—

when running on the mobile phone—

the steps of decrypting a setup-message;

extracting from the setup-message an application, at least one destination sector of the memory device and associated sector key(s); and

storing the application in the destination sector(s) of the memory device by using the extracted sector key(s).

12. A computer program product as claimed in claim 11, wherein the computer program product is one of stored on a computer readable medium and downloadable from a remote server via a communication network.