PERSONALISING A SIM BY MEANS OF A UNIQUE PERSONALIZED MASTER SIM

• US 20110059773A1
• Filed: 04/20/2009
• Published: 03/10/2011
• Est. Priority Date: 05/29/2008
• Status: Active Grant

• Current Assignee: Deutsche Telekom AG
• Original Assignee: Deutsche Telekom AG
• Inventors: Neumann, Peter, Pagano, Giulio Leopoldo
• Granted Patent: US 8,295,807 B2
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 8/265 for initial activation of new user

Abstract

Method for starting up and personalising a further second non-personalised identification module (VSIM), in particular for operation of a mobile radio terminal, wherein a first identification module MasterSIM (MSIM) containing a personalised user data set is present, characterised in that an authentication and/or checking of the second identification module (VSIM) is carried out and the user data set for storage on the second identification module (VSIM) for personalising the second identification module (VSIM) is read from the MasterSIM (MSIM), transmitted to the second identification module (VSIM) and stored therein, in particular containing one or more unique definitive user identification (IMSI).

Claims

1. A method of starting up and personalizing a further second nonpersonalized identification module, the method comprising the steps of

providing a first identification module,

storing on the first identification module a personalized data set containing one or more unique definitive subscriber identifications,

providing a second identification module,

authenticating or checking the second identification module,

reading the data set from the first identification module,

transmitting the data set read from the first identification module to the second identification module, and

storing the transmitted data set in the second identification module.

2. The method according to claim 1, wherein the first identification module contains a plurality of subscriber identifications that are used for starting up and personalizing a plurality of nonpersonalized second identification modules.

3. The method according to claim 1 wherein an originally nonpersonalized identification module can be repersonalized several times after a first personalization, either via the same original first identification module with the same or changed data set, or also via another first identification module.

4. The method according to claim 1 wherein only subscriber identifications of the data set on personalized identification modules are changed.

5. The method according to claim 1 wherein the data set is transmitted via a radio connection or other connection to a read/write device holding the second identification module or is transmitted by a read/write device holding the first identification module as well as the second identification module.

6. The method according to claim 1, further comprising the step before transmitting the data set from the first identification module of

checking or authenticating the serial number of the second identification module or the mobile radio terminal by an equipment identity number by means of which the mobile radio terminal is uniquely identifiable, or

checking security parameters of the second identification module.

7. The method according to claim 1, further comprising the step before transmitting the data set from the first identification module of

checking or authenticating the first identification module.

8. The method according to claim 1, further comprising the step of

storing the serial number of the second identification module in the first identification module.

9. The method according to claim 1, further comprising the step of

storing the date of a performed personalization of a second identification module in the first identification module.

10. The method according to claim 1, further comprising the step of

storing the data set generated during the personalization and the associated user data or subscriber data, including the serial number of the second identification module in a home location register of a mobile radio network.

11. The method according to claim 1, further comprising the step of

transmitting the serial number of the second identification module via the first identification module to a home location register of the mobile radio network and storing the serial number of the second identification module therein.

12. The method according to claim 1 wherein the data transmission of the data set from the first identification module to the second identification module is carried out via a secure data connection.

13. The method according to claim 1, further comprising the step after completed receipt and storage of the data set on the second identification module of

transmitting a confirmation to the first identification module or to a mobile radio network.

14. The method according to claim 1 wherein the first or the second identification module is a user identification module or a subscriber identification module for operating a mobile radio terminal.

15. The method according to claim 14 wherein the data set is a subscriber data set of a mobile radio user.