MANAGEMENT OF SUBSCRIBER PROFILES SIMULTANEOUSLY ACTIVE IN AN EUICC CARD USING A PLURALITY OF SEPARATE LINKS

• US 20200137555A1
• Filed: 10/29/2019
• Published: 04/30/2020
• Est. Priority Date: 10/30/2018
• Status: Active Grant

• Current Assignee: IDEMIA France (Advent International Corporation)
• Original Assignee: IDEMIA France (Advent International Corporation)
• Inventors: DOS SANTOS, Elder, DUMOULIN, Jerome, ESTEBAN, Jean-Michel, SOHIER, Sebastien, MICHEL, Alexis
• Granted Patent: US 11,064,343 B2
• Time in Patent Office: Days
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/42 using virtual identity modules
• CPC Class Codes: H04W 12/45 using multiple identity modules
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Disclosed is management of a plurality of active subscriber profiles at the same time within the same secure element integrated in a host terminal. A baseband processor of the terminal and a communication interface controller of the secure element together establish different separate links for each one of the active profiles. It is thus possible to address, and therefore to simultaneously use, a plurality of profiles. A link can be the conventional ISO 7816 link. The HCI/SWP interface allows a large number of logical links (or HCI pipes) to be established using a single additional tab for connecting the secure element in the terminal. Each active profile is thus associated with an HCI pipe for routing messages relating thereto. As a variant or in combination, an SPI interface allows master-slave logical links to be established.

Claims

1. A secure element (300) suitable for interacting with a host terminal (200), the secure element comprising a communication interface controller (305) for communicating with the host terminal and comprising a plurality of subscriber profiles (P), each subscriber profile authenticating a user in a mobile telephony network (100, 100′

), and being configured to simultaneously activate a plurality of subscriber profiles, wherein the communication interface controller is configured to respectively associate a plurality of separate communication links (100, 410-1, 410-3, 410-4, 420-1, 420-3, 420-4) with the host terminal with the plurality of active subscriber profiles.

2. The secure element (300) as claimed in claim 1, wherein the plurality of separate communication links comprises at least one logical link established through a Host Controller Interface, HCI, on a physical link (410) between the secure element (300) and the host terminal (200).

3. The secure element (300) as claimed in claim 2, wherein a plurality of logical links (410-1, 410-3, 410-4) established through the HCI on the physical link (410) is associated with a respective plurality of active subscriber profiles (P) of the secure element (300).

4. The secure element (300) as claimed in claim 2, wherein the HCI is implemented on the Single Wire Protocol, SWP, between the host terminal and the secure element.

5. The secure element (300) as claimed in claim 1, wherein the plurality of separate communication links comprises one, two or more logical links (420-1, 420-3, 420-4) established through a Serial Peripheral Interface, SPI.

6. The secure element (300) as claimed in claim 1, wherein the plurality of separate communication links comprises one, two or more ISO links (400) compliant with standard ISO 7816.

7. The secure element (300) as claimed in claim 1, wherein the communication interface controller is configured to, during the activation of a profile, instantiate a communication service (G_i) and to establish a communication link between the instantiated service and a pre-assigned service (g_i) of the host terminal (200).

8. The secure element (300) as claimed in claim 1, configured to simultaneously activate a plurality of subscriber profiles (P) managed under the same root security domain (ISD-R).

9. The secure element (300) as claimed in claim 1, wherein the plurality of subscriber profiles (P) present in the secure element is distributed under the management of two or more root security domains (ISD-R1, ISD-R2, ISD-R3), and the secure element is configured to activate a single subscriber profile per root security domain at a time.

16. The secure element (300) as claimed in claim 3, wherein the HCI is implemented on the Single Wire Protocol, SWP, between the host terminal and the secure element.

17. The secure element (300) as claimed in claim 2, wherein the plurality of separate communication links comprises one, two or more logical links (420-1, 420-3, 420-4) established through a Serial Peripheral Interface, SPI.

18. The secure element (300) as claimed in claim 2, wherein the plurality of separate communication links comprises one, two or more ISO links (400) compliant with standard ISO 7816.

19. The secure element (300) as claimed in claim 5, wherein the plurality of separate communication links comprises one, two or more ISO links (400) compliant with standard ISO 7816.

20. The secure element (300) as claimed in claim 2, wherein the communication interface controller is configured to, during the activation of a profile, instantiate a communication service (G_i) and to establish a communication link between the instantiated service and a pre-assigned service (g_i) of the host terminal (200).

10. A host terminal (200) suitable for integrating a secure element (300), the host terminal comprising a baseband processor (210) configured to associate a plurality of separate communication links (100, 410-1, 410-3, 410-4, 420-1, 420-3, 420-4) with the secure element with a respective plurality of active subscriber profiles (P) of the secure element.

11. The host terminal (200) as claimed in claim 10, further comprising a host controller of the Host Controller Interface, HCI, implemented in a CLF contactless communication management module (411),

and a host process (s1, s3) of the baseband processor (210) configured to establish, for an active subscriber profile (P), a pipe (410-1, 410-3, 410-4) with a service (S1, S3) managing the active subscriber profile in the secure element, via the CLF management module (411) acting as host controller of the HCI.

12. The host terminal (200) as claimed in claim 10, wherein the baseband processor (210) is configured to establish a master-slave link for each one of the one or more active subscriber profiles, with a dedicated slave entity provided in the secure element.

13. The host terminal (200) as claimed in claim 10, wherein a plurality of communication services (g_i) is pre-assigned to a plurality of communication resources on one or more mobile telephony networks, and said separate communication links are established on the basis of the pre-assigned communication services so that each active subscriber profile is associated with a respective communication resource.

14. A method for controlling communication between a host terminal (200) and a secure element (300) integrated in the host terminal and comprising a plurality of subscriber profiles (P), each authenticating a user in a mobile telephony network (100, 100′

), the method comprising;

establishing (44), for each active subscriber profile (P) of a plurality of subscriber profiles simultaneously active in the secure element, a separate communication link (100, 410-1, 410-3, 410-4, 420-1, 420-3, 420-4) between the host terminal and the secure element; and

routing (50-52, 65-67), in the host terminal or in the secure element, a stream of messages relating to an active subscriber profile to the communication link established for said active subscriber profile.

15. A non-transitory computer-readable medium, on which are stored instructions of a computer program for implementing the method of claim 14, when said instructions are downloaded and executed by a microprocessor.