Operation of a Security Element with the Set of Operating Parameters Matched to the Selected Use Profile

• US 20160134661A1
• Filed: 06/11/2014
• Published: 05/12/2016
• Est. Priority Date: 06/18/2013
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke & Devrient GmbH
• Inventors: WIMBOCK, Ulrich
• Granted Patent: US 9,930,069 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

A method for operating a security element which is part of a mobile end device, and a security element, have functionality depending on a set of operating parameters that is deposited on the security element. The method comprises the following steps: operating the security element with the set of operating parameters that is deposited on the security element; collecting data about the use of the security element and/or of the mobile end device; selecting a use profile on the basis of the collected data, with the use profile being assigned a set of operating parameters that is matched thereto; and operating the security element with the set of operating parameters that is matched to the selected use profile.

Claims

1-10. -10. (canceled)

11. A method for operating a security element which is part of a mobile end device, with the functionality of the security element depending on a set of operating parameters that is deposited on the security element, wherein the method comprises the following steps:

operating the security element with the set of operating parameters that is deposited on the security element;

collecting data about the use of the security element and/or of the mobile end device;

selecting a use profile on the basis of the collected data, with the use profile being assigned a set of operating parameters that is matched thereto; and

operating the security element with the set of operating parameters that is matched to the selected use profile.

12. The method according to claim 11, wherein the step of collecting data about the use of the security element and/or of the mobile end device is carried out by means of an application on the security element.

13. The method according to claim 11, wherein the step of selecting a use profile is effected through the security element.

14. The method according to claim 11, wherein the step of selecting a use profile is effected through a server entity which is in communication with the security element and which has access to a database having a multiplicity of use profiles.

15. The method according to claim 14, wherein the security element is a subscriber identification module which is configured for authenticating a subscriber toward a mobile radio network and communicating with the server entity via the mobile radio network.

16. The method according to claim 15, wherein the method is used for adapting an operating parameter of the security element, said parameter determining the size as of which access counters deposited in a volatile memory of the security element and respectively stating the number of accesses to a respective memory page of the non-volatile memory of the security element are stored in the non-volatile memory of the security element.

17. The method according to claim 15, wherein the method is used for adapting an operating parameter of the security element, said parameter determining the length of the time window within which the security element can log into the mobile radio network.

18. The method according to claim 11, wherein the steps of the method are carried out several times in succession in order to iteratively determine optimal operating parameters and/or to be able to take account of changes of the use of the security element and/or of the mobile end device.

19. A security element which is part of a mobile end device, with the functionality of the security element depending on a set of operating parameters that is deposited on the security element, wherein the security element is configured for being operated according to a method according to claim 11.

20. A mobile end device having a security element according to claim 19.