METHOD AND APPARATUS FOR MANAGING BUNDLES OF SMART SECURE PLATFORM

• US 20200137572A1
• Filed: 10/29/2019
• Published: 04/30/2020
• Est. Priority Date: 10/29/2018
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LEE, Hyewon, YOON, Kangjin, LEE, Duckey, KOO, Jonghoe
• Granted Patent: US 11,206,534 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/40 Security arrangements using identity modules
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A method, performed by a user equipment (UE), of managing secondary platform bundles (SPBs), includes receiving an end user selection for managing a state of at least one SPB among SPBs installed in a smart secure platform (SSP) module; checking bundle management information required to manage the state of the at least one SPB based on the end user selection; determining whether end user intent confirmation is required to manage the state of the at least one SPB according to the end user selection based on the bundle management information; and managing the state of the at least one SPB based on a result of the determining.

Claims

1. A method, performed by a user equipment (UE), of managing secondary platform bundles (SPBs), the method comprising:

receiving an end user selection for managing a state of at least one SPB among SPBs installed in a smart secure platform (SSP) module;

checking bundle management information required to manage the state of the at least one SPB based on the end user selection;

determining whether end user intent confirmation is required to manage the state of the at least one SPB according to the end user selection based on the bundle management information; and

managing the state of the at least one SPB based on a result of the determining.

2. The method of claim 1, wherein the managing of the state of the at least one SPB comprises:

checking an end user consent to manage the state of the at least one SPB based on the result of the determining indicating that the end user intent confirmation is required; and

determining the state of the at least one SPB based on a result of the checking of the end user consent.

3. The method of claim 2, wherein the managing of the state of the at least one SPB comprises managing the state of the at least one SPB based on the bundle management information in response to the result of the determining indicating that the end user intent confirmation is not required.

4. The method of claim 1, wherein the managing of the state of the at least one SPB comprises enabling the at least one SPB, disabling the at least one SPB, or deleting the at least one SPB.

5. The method of claim 1, wherein the bundle management information is received from an external server or is pre-stored in the at least one SPB.

6. The method of claim 1, wherein the bundle management information comprises:

an indicator indicating whether the end user intent confirmation is required;

or

means information for the end user intent confirmation.

7. The method of claim 6, wherein the indicator comprises a certain string corresponding to an enabled state, a disabled state, or a deleted state of the at least one SPB to check the end user intent confirmation.

8. The method of claim 6, wherein:

the means information comprises biometric information, identification information, or configuration information of an end user, and

the method further comprises;

receiving an end user input based on the means information when the result of the determining indicates that the end user intent confirmation is required; and

managing the state of the at least one SPB based on the received end user input.

9. The method of claim 1, wherein the at least one SPB is identified by a family identifier based on a function related to the at least one SPB.

10. The method of claim 9, further comprising identifying a telecom SPB to access a mobile communication network based on the family identifier, wherein the at least one SPB is the telecom SPB identified based on the family identifier.

11. A user equipment (UE) for managing secondary platform bundles (SPBs), the UE comprising:

a transceiver;

a smart secure platform (SSP) module; and

at least one processor connected to the transceiver and configured to;

receive an end user selection for managing a state of at least one SPB among SPBs installed in the SSP module;

check bundle management information required to manage the state of the at least one SPB based on the end user selection;

determine whether end user intent confirmation is required to manage the state of the at least one SPB according to the end user selection based on the bundle management information; and

manage the state of the at least one SPB based on a result of the determining.

12. The UE of claim 11, wherein the at least one processor is further configured to:

check an end user consent to manage the state of the at least one SPB based on the result of the determining indicating that the end user intent confirmation is required; and

determine the state of the at least one SPB based on a result of the checking of the end user consent.

13. The UE of claim 12, wherein the at least one processor is further configured to manage the state of the at least one SPB based on the bundle management information, in response to the result of the determining indicating that the end user intent confirmation is not required.

14. The UE of claim 11, wherein the at least one processor is further configured to enable the at least one SPB, disable the at least one SPB, or delete the at least one SPB.

15. The UE of claim 11, wherein the bundle management information is received from an external server or is pre-stored in the at least one SPB.

16. The UE of claim 11, wherein the bundle management information comprises:

an indicator indicating whether the end user intent confirmation is required;

or

means information for checking the end user intent confirmation.

17. The UE of claim 16, wherein the indicator comprises a certain string corresponding to an enabled state, a disabled state, or a deleted state of the at least one SPB to check the end user intent confirmation.

18. The UE of claim 16, wherein:

the means information comprises biometric information, identification information, or configuration information of an end user, and

the at least one processor is further configured to;

receive an end user input based on the means information when the result of the determining indicates that the end user intent confirmation is required; and

manage the state of the at least one SPB based on the received end user input.

19. The UE of claim 11, wherein the at least one SPB is identified by a family identifier based on a function related to the at least one SPB.

20. The UE of claim 19, wherein:

the at least one processor is further configured to identify a telecom SPB to access a mobile communication network, based on the family identifier, and

the at least one SPB is the telecom SPB identified based on the family identifier.