METHOD FOR LOADING CREDENTIALS INTO A MOBILE COMMUNICATION DEVICE SUCH AS A MOBILE PHONE

• US 20110028125A1
• Filed: 12/02/2008
• Published: 02/03/2011
• Est. Priority Date: 12/07/2007
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Marseille, Francois-Xavier, Castillo, Laurent, Dehlinger, Franck
• Granted Patent: US 8,483,661 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

The invention relates to a personal token (10) for being associated with a mobile telecommunication device (20) and for storing credentials for access to an operator'"'"'s network, characterized that the personal token (10) is arranged for loading the credentials into a memory (23) of the mobile telecommunication device (20), so that the mobile telecommunication device (20) is taken away from the personal token (10) and operative for connecting to the operator'"'"'s network with the credentials in its memory (23).

Claims

1. A method to associate to a mobile telecommunication device (20) some credentials for connecting to an operator'"'"'s network, the method comprising:

providing a personal token (10) a memory (13);

associating the personal token (10) to the mobile telecommunication device (20)

loading the credentials from the memory (13) of the personal token (10) to a memory (23) of the mobile telecommunication device (20); and

taking the personal token (10) away from the mobile telecommunication device (20) so that the mobile telecommunication device (20) is operative for connecting to the operator'"'"'s network with the credentials in its memory (23).

2. The method according to claim 1 wherein loading the credentials from the memory (13) of the personal token (10) to the memory (23) of the mobile telecommunication device (20) is performed by contactless communication between the personal token (10) and the mobile telecommunication device (20).

3. The method according to claim 1 or claim 2 further comprising the step of carrying out a change in the memory (13) of the personal token (10) which prevents the personal token (10) from a further loading of credentials into a further mobile telecommunication device (20) once the credentials have been loaded into the said mobile telecommunication device (20).

4. The method according to claim 1 or 2, further comprising:

associating the personal token (10) with the mobile telecommunication device (20);

authenticating in the mobile telecommunication device (20) that the personal token (10) has been associated therewith previously; and

allowing in the mobile telecommunication device (20) that the credentials be extracted thereof after the mobile telecommunication device (20) has authenticated that the personal token (10) has been associated therewith previously.

5. The method according to claim 4, further comprising operating the personal token (10) to authenticate the mobile telecommunication device (20) for allowing extraction of the credentials from the mobile telecommunication device (20).

6. The method according to claim 5, wherein the step of loading the credentials further comprises generating a shared secret in the personal token (10) and the mobile telecommunication device (20) and the method further comprising using said shared secret for said authentication allowing the extraction of the credentials.

7. The method according to claim 1 or 2, further comprising transferring personal data generated by the end-user from the mobile telecommunication device (20) to the personal token (10) at the time of extraction of the credentials.

8. The method according to claim 1 or 2, further comprising transferring at least an application from the memory of the personal token (10) to the memory of the mobile telecommunication device (20).

9. The method according to, claim 1 or 2 wherein the personal token (10) is a smart card.

10. A personal token (10) for being associated with a mobile telecommunication device (20) and for storing credentials for access to an operator'"'"'s network, comprising means for loading the credentials into a memory (23) of the mobile telecommunication device (20), so that the mobile telecommunication device (20) is taken away from the personal token (10) and operative for connecting to the operator'"'"'s network with the credentials in its memory (23).