BLOCKING THE ACCEPTANCE OR THE PROCESSING OF A PACKET FOR LOADING A PROFILE INTO A EUICC

• US 20180302782A1
• Filed: 10/06/2016
• Published: 10/18/2018
• Est. Priority Date: 10/07/2015
• Status: Active Application

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Inventors: NITSCH, Nils
• Granted Patent: US 10,292,043 B2
• Time in Patent Office: Days
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A method for managing a profile for a subscription in a subscriber identity module comprises the steps of (a) sending a management message from a server to the subscriber identity module; (c) carrying out a management measure corresponding to the management message in the subscriber identity module; wherein the following step b) which is effected before step c): (b) requesting and receiving a user input at the subscriber identity module; and carrying out step (c) only on the occasion of a successful carrying out of step (b).

Claims

1-9. -9. (canceled)

10. A method for managing a profile for a subscription in a subscriber identity module, comprising the steps of:

a) sending a management message from a server to the subscriber identity module;

c) carrying out a management measure corresponding to the management message in the subscriber identity module;

wherein the following step b) which is effected before step c);

b) requesting and receiving a user input at the subscriber identity module; and

carrying out step c) only on the occasion of a successful carrying out of step b).

11. The method according to claim 10, wherein as a user input there is provided an authentication input, in particular a static access code or a one-time password.

12. The method according to claim 10, wherein the user input is requested and received via an input/output interface of a mobile end device in which the subscriber identity module is operated.

13. The method according to claim 10, wherein as a management measure there is provided a loading of a management message for loading a profile into the subscriber identity module or/and an implementing of a profile in the subscriber identity module.

14. The method according to claim 10, wherein as a management measure there is provided a loading of a management message for altering or/and an altering of a profile already implemented in the subscriber identity module.

15. The method according to claim 10, wherein step a) is carried out as sending the management message from a data preparation server via a security router to the subscriber identity module.

16. The method according to claim 10, wherein step c) comprises the following substeps:

c1) releasing the management measure on the part of the subscriber identity module;

c2) carrying out the management measure.

17. The method according to claim 10, further comprising the following step of, which is effected before step b), evaluating the management message as to whether an exception criterion is satisfied, wherein, if the exception criterion is satisfied by the management message, step b) is skipped and immediately step c) is carried out.

18. The method according to claim 17, wherein the exception criterion was created on the basis of a user input received at an earlier time.