METHODS AND APPARATUS FOR ESTABLISHING A SECURE COMMUNICATION CHANNEL

• US 20160006729A1
• Filed: 07/01/2015
• Published: 01/07/2016
• Est. Priority Date: 07/03/2014
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: YANG, Xiangying, LI, Li, HAUCK, Jerrold Von
• Granted Patent: US 9,722,975 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H05K 999/99 dummy group

Abstract

A method for establishing a secure communication channel between an off-card entity and an embedded Universal Integrated Circuit Card (eUICC) is provided. The method involves establishing symmetric keys that are ephemeral in scope. Specifically, an off-card entity, and each eUICC in a set of eUICCs managed by the off-card entity, possess long-term Public Key Infrastructure (PKI) information. When a secure communication channel is to be established between the off-card entity and an eUICC, the eUICC and the off-card entity can authenticate one another in accordance with the respectively-possessed PKI information (e.g., verifying public keys). After authentication, the off-card entity and the eUICC establish a shared session-based symmetric key for implementing the secure communication channel. Specifically, the shared session-based symmetric key is generated according to whether perfect or half forward security is desired. Once the shared session-based symmetric key is established, the off-card entity and the eUICC can securely communicate information.

Claims

1. A method for establishing a secure connection between a server and an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device that is associated with a long-term public key (PK_eUICC) and a long-term private key (SK_eUICC), the method comprising:

at the server, which is associated with a long-term public key (PK_server) and a long-term private key (SK_server);

receiving, from the mobile device, a request to establish the secure connection with the mobile device, wherein the request includes PK_eUICC; and

upon authenticating the mobile device using PK_eUICC;

generating an ephemeral public key (ePK_server) and an ephemeral private key (eSK_server);

signing ePK_server using SK_server to produce a signed ePK_server;

providing the signed ePK_server to the mobile device;

receiving, from the mobile device, an ephemeral key (ePK_eUICC) that is signed using SK_eUICC;

generating a shared symmetric key using eSK_server and ePK_eUICC; and

establishing the secure connection using the shared symmetric key.

2. The method of claim 1, further comprising:

transmitting, over the secure connection, an electronic Subscriber Identity Module (eSIM) to the eUICC.

3. The method of claim 1, further comprising:

providing, over the secure connection, an update to an eSIM managed by the eUICC.

4. The method of claim 1, further comprising:

causing, over the secure connection, the eUICC to remove an eSIM managed by the eUICC.

5. The method of claim 1, further comprising:

caching, within a security domain associated with the eUICC, the shared symmetric key for establishing a different secure connection at a later time with the mobile device.

6. A method for establishing a secure connection between a server and an embedded Universal Integrated Circuit Card (eUICC) included in a mobile device that is associated with a long-term public key (PK_eUICC) and a long-term private key (SK_eUICC), the method comprising:

at the server, which is associated with a long-term public key (PK_server) and a long-term private key (SK_server);

receiving, from the mobile device, a request to establish the secure connection with the mobile device, wherein the request includes PK_eUICC; and

upon authenticating the mobile device using PK_eUICC;

generating an ephemeral public key (ePK_server) and an ephemeral private key (eSK_server);

signing ePK_server using SK_server to produce a signed ePK_server;

providing the signed ePK_server to the mobile device;

generating a shared symmetric key using eSK_server and PK_eUICC; and

establishing the secure connection using the shared symmetric key.

7. The method of claim 6, further comprising:

transmitting, over the secure connection, an electronic Subscriber Identity Module (eSIM) to the eUICC.

8. The method of claim 6, further comprising:

providing, over the secure connection, an update to an eSIM managed by the eUICC.

9. The method of claim 6, further comprising:

causing, over the secure connection, the eUICC to remove an eSIM managed by the eUICC.

10. The method of claim 6, further comprising:

caching, within a security domain associated with the eUICC, the shared symmetric key for establishing a different secure connection at a later time with the mobile device.

11. A method for establishing a secure connection between an embedded Universal Integrated Circuit Card (eUICC) and a server that is associated with a long-term public key (PK_server) and a long-term private key (SK_server), the method comprising:

at the eUICC, which is associated with a long-term public key (PK_eUICC) and a long-term private key (SK_eUICC);

transmitting, to the server, a request to establish the secure connection with the server, wherein the request includes PK_eUICC;

receiving, from the server, PK_server; and

upon authenticating the server using PK_server;

generating an ephemeral public key (ePK_eUICC) and an ephemeral private key (eSK_eUICC);

signing ePK_eUICC using SK_eUICC to produce a signed ePK_eUICC;

providing the signed ePK_eUICC to the server;

receiving, from the server, an ephemeral key (ePK_server) that is signed using SK_server;

generating a shared symmetric key using SK_eUICC and ePK_server; and

establishing the secure connection using the shared symmetric key.

12. The method of claim 11, further comprising:

receiving, from the server over the secure connection, an electronic Subscriber Identity Module (eSIM).

13. The method of claim 11, further comprising:

receiving, from the server over the secure connection, an update to an eSIM managed by the eUICC; and

processing the update to the eSIM.

14. The method of claim 11, further comprising:

receiving, from the server over the secure connection, a command to remove an eSIM managed by the eUICC; and

removing the eSIM from the eUICC.

15. The method of claim 11, further comprising:

caching, within a security domain of the eUICC, the shared symmetric key for establishing a different secure connection at a later time with the server.

16. A method for establishing a secure connection between an embedded Universal Integrated Circuit Card (eUICC) and a server that is associated with a long-term public key (PK_server) and a long-term private key (SK_server), the method comprising:

at the eUICC, which is associated with a long-term public key (PK_eUICC) and a long-term private key (SK_eUICC);

transmitting, to the server, a request to establish the secure connection with the server, wherein the request includes PK_eUICC;

receiving, from the server, PK_server; and

upon authenticating the server using PK_server;

providing PK_eUICC to the server;

receiving, from the server, an ephemeral key (ePK_server) that is signed using SK_server;

generating a shared symmetric key using SK_eUICC and ePK_server; and

establishing the secure connection using the shared symmetric key.

17. The method of claim 16, further comprising:

receiving, from the server over the secure connection, an electronic Subscriber Identity Module (eSIM).

18. The method of claim 16, further comprising:

receiving, from the server over the secure connection, an update to an eSIM managed by the eUICC; and

processing the update to the eSIM.

19. The method of claim 16, further comprising:

receiving, from the server over the secure connection, a command to remove an eSIM managed by the eUICC; and

removing the eSIM from the eUICC.

20. The method of claim 16, further comprising:

caching, within a security domain associated with the eUICC, the shared symmetric key for establishing a different secure connection at a later time with the server.