Diagnostics for secure elements in a mobile device

• US 8,689,012 B1
• Filed: 10/17/2008
• Issued: 04/01/2014
• Est. Priority Date: 10/17/2008
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Bierbaum, Christopher J., Katzer, Robin D., Koellner, Todd N., Zhu, Kevin K.
• Primary Examiner(s): KIM, TAE K
• Application Number:
  US12/253,762
• Time in Patent Office: 1,992 Days
• Field of Search: 726/2, 726/3, 380/270, 380/277, 380/278, 380/283, 380/247, 455/410, 455/411
• US Class Current: 713/193
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: H04W 12/047 without using a trusted network node as an anchor

Abstract

A method of diagnosing a mobile device is provided. The method comprises obtaining an access key from a key store based on an identity of the mobile device and based on an identity associated with an issuer of a confidential information, wherein the access key is associated with a secure element of the mobile device storing the confidential information. The method also comprises wirelessly transmitting a message from a station associated with the issuer to the mobile device to initiate diagnostics of at least the secure element of the mobile device, the message comprising the access key, wherein the diagnostics are performed by diagnostic instructions stored on the mobile device. The method also comprises displaying the result of the diagnostics.

Claims

1. A method of diagnosing an electronic transaction functionality of a mobile device, comprising:

in response to failure of an electronic transaction functionality of the mobile device, obtaining, by a station associated with an issuer of confidential information for use with electronic transactions, an access key from a remote key store based on an identity of the mobile device and based on an identity associated with the issuer of the confidential information, wherein the access key is associated with a secure element of the mobile device storing the confidential information;

wirelessly transmitting, by the station, the access key initially obtained from the remote key store to the mobile device;

executing, by the mobile device, a mobile device diagnostic application stored on the mobile device in response to communication from the station, wherein the mobile device diagnostic application further diagnoses a hardware functionality of the mobile device and a payment application functionality, and wherein the payment application is installed on the mobile device;

using, by the mobile device diagnostic application, the access key received from the station to initiate a secure element diagnostic application stored in the secure element to test the electronic transaction functionality; and

displaying the result of the diagnostics.

2. The method of claim 1, further including when the displayed result of the diagnostics indicates the confidential information is inoperable, wirelessly transmitting replacement confidential information from the station to the mobile device to re-provision the confidential information on the secure element.

3. The method of claim 1, wherein the displaying the result of the diagnostics is performed by the station.

4. The method of claim 1, wherein the displaying the result of the diagnostics is performed by the mobile device.

5. The method of claim 1, wherein the confidential information is electronic transit card information and the issuer is an operator of a transit system.

6. The method of claim 1, wherein the confidential information is at least one of credit card information, debit card information, loyalty program information, coupon information, electronic access information, transit card information, or transit token information.

7. The method of claim 1, wherein the confidential information is at least one of building electronic access information or electronic computer system access information.

8. A method of diagnosing an electronic transaction functionality of a mobile device, comprising:

in response to failure of an electronic transaction functionality of the mobile device, transmitting, by a service station, a request for an access key to a provisioning server based on an identity of the mobile device, wherein the access key is associated with a secure element of the mobile device storing confidential information for use with performing electronic transactions;

transmitting, by the provisioning server, the request for the access key to a remote key store;

transmitting, by the provisioning server, the access key to the service station;

transmitting, by the service station, the access key to the mobile device;

executing, by the mobile device, a mobile device diagnostic application stored on the mobile device in response to communication from the service station, wherein the mobile device diagnostic application further diagnoses a hardware functionality of the mobile device and a payment application functionality, and wherein the payment application is installed on the mobile device;

using, by the mobile device diagnostic application, the access key received from the provisioning server to invoke a secure element diagnostic application stored in the secure element to diagnose the secure element; and

presenting the results of the diagnosis of the secure element.

9. The method of claim 8, further including the service station reissuing a payment card to the secure element of the mobile device based on the results of the diagnosis of the secure element.

10. The method of claim 8, wherein the service station is a station operated by an agent of a transit company.

11. The method of claim 8, wherein the access key is encrypted using public key encryption methods by the key store, and wherein decryption of the access key depends upon a private key associated with the secure element.

12. The method of claim 8, wherein the access key is hidden from an operator of the service station.

13. A mobile device, comprising:

a secure element;

a processor;

a wireless communication transceiver configured to receive an access key from a remote diagnostic controller based on an identity of the mobile device in response to failure of an electronic transaction functionality of the mobile device, wherein the access key is initially obtained from a remote key store; and

a mobile device diagnostic application that, when executed by the processor of the mobile device and in response to the wireless communication transceiver receiving the access key, uses the access key initially obtained from the remote key store to invoke a secure element diagnostic application stored in the secure element to perform diagnostics of the electronic transaction functionality, wherein the mobile device diagnostic application is initially executed in response to communication from the remote diagnostic controller, wherein the mobile device diagnostic application further diagnoses a hardware functionality of the mobile device and a payment application functionality, and wherein the payment application is installed on the mobile device.

14. The mobile device of claim 13, wherein the secure element comprises a smart card integrated circuit chip.

15. The mobile device of claim 13, wherein the secure element comprises a secure application and a secure memory area reserved for exclusive access by the secure application.

16. The mobile device of claim 13, wherein the mobile device is one of a mobile phone, a personal digital assistant, a media player, a camera, a wrist watch, an identification badge, or a flexible card.

17. The mobile device of claim 13, wherein the mobile device diagnostic application uses the access key to perform diagnostics on the secure element.

18. The mobile device of claim 13, further including a display, wherein the mobile device diagnostic application presents a result of the diagnostics on the display.