Methods and apparatus for access data recovery from a malfunctioning device

• US 8,913,992 B2
• Filed: 11/02/2011
• Issued: 12/16/2014
• Est. Priority Date: 11/03/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V.
• Primary Examiner(s): Arevalo, Joseph
• Application Number:
  US13/287,874
• Publication Number:
  US 20120115441A1
• Time in Patent Office: 1,140 Days
• Field of Search: 455/556.1, 455/456.4, 455/418, 455/41.2, 455/411, 455/575.1, 455/517, 455/518, 455/456.3, 455/3, 455/6, 455/417, 455/7, 455/410, 455/466, 455/558, 455/435.2, 455/13.1, 455/16
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Methods and apparatus for recovering access data from a malfunctioning device. In one embodiment, trained service personnel are provided a specialized apparatus for retrieving access data from a malfunctioning device. For example, in the instance the device comprises a cellular device having an unrecoverable hardware failure, trained service personnel can connect to the secure element and retrieve the one or more electronic Subscriber Identity Modules (eSIMs) stored thereon. The eSIMs are then “reclaimed” and reprogrammed/distributed to a new device. In one implementation, security and integrity measures are taken to protect and control distribution of sensitive access data.

Claims

1. A wireless apparatus, comprising:

a communications interface;

a power supply;

a processor;

an electronic Universal Integrated Circuit Card (eUICC) adapted to store a plurality of electronic Subscriber Identity Modules (eSIMs) wherein each eSIM of the plurality of eSIMs enables the wireless apparatus to access a particular cellular network using the communications interface; and

a bypass interface, wherein the bypass interface;

comprises a power input, a data input, a data output, and a clock input, and

provides access to the plurality of eSIMs without requiring the communications interface, the power supply, and the processor to be operable.

2. The wireless apparatus of claim 1, wherein the wireless apparatus comprises a cellular phone.

3. The wireless apparatus of claim 1, wherein the bypass interface provides access to the plurality of eSIMs by:

retrieving, from the eUICC, at least one eSIM of the plurality of eSIMs access, and

removing, from the eUICC, the at least one eSIM.

4. The wireless apparatus of claim 1, wherein the bypass interface provides access to the plurality of eSIMs during a recoverable malfunction operation that involves one or more of the power supply, the processor, and the communications interface being inoperable.

5. The wireless apparatus of claim 4, wherein, when the power supply, the processor, and the communications interface are operable, the wireless apparatus authenticates to a cellular network using at least one eSIM of the plurality of eSIMs.

6. The wireless apparatus of claim 5, wherein the wireless apparatus is further configured to communicate with the cellular network upon a successful authentication.

7. The wireless apparatus of claim 1, wherein the bypass interface comprises an external interface that is accessible to a user without assistance from a third party.

8. The wireless apparatus of claim 7, wherein the external interface comprises a connector whose primary purpose is not a recovery of the plurality of eSIMs.

9. The wireless apparatus of claim 8, wherein the connector comprises a 30-pin connector.

10. The wireless apparatus of claim 7, wherein the bypass interface comprises an internal interface that is inaccessible to the user without assistance from the third party.

11. A method for recovering at least one electronic Subscriber Identity Module (eSIM) from a wireless device that is inoperable, the method comprising:

at a retrieval device;

establishing, using a bypass interface included in the wireless device, a secure connection to an electronic Universal Integrated Circuit Card (eUICC) included in the wireless device, wherein the eUICC stores the at least one eSIM, the bypass interface comprises a power input, a data input, a data output, and a clock input, and the bypass interface operates when the wireless device is inoperable;

exchanging cryptographic material with the eUICC;

retrieving the at least one eSIM from the eUICC, wherein the at least one eSIM is encrypted based at least in part on the cryptographic material; and

voiding the at least one eSIM within the eUICC.

12. The method of claim 11, wherein the wireless device is inoperable when one or more of a power supply, a processor, and a communications interface included in the wireless device is inoperable.

13. The method of claim 11, wherein, when the wireless device is operable, the wireless device authenticates to a cellular network using the at least one eSIM.

14. The method of claim 11, wherein the bypass interface comprises a connector whose primary purpose is not a recovery of the at least one eSIM.

15. The method of claim 11, wherein the bypass interface comprises an internal interface that is inaccessible to an end user of the wireless device without assistance from a third.

16. A method for providing at least one electronic Subscriber Identity Module (eSIM) to a retrieval device, the method comprising:

at an inoperable wireless device including a bypass interface that comprises a power input, a data input, a data output, and a clock input;

responsive to a connection to the retrieval device;

entering into a recovery mode, and

exchanging, with the retrieval device, cryptographic material to secure the connection to the retrieval device;

responsive to a request for the at least one eSIM, providing the at least one eSIM to the retrieval device, wherein the at least one eSIM is stored in an electronic Universal Integrated Circuit Card (eUICC) included in the wireless device; and

subsequent to providing the at least one eSIM, voiding the at least one eSIM within the eUICC.

17. The method of claim 16, wherein the wireless device is inoperable when one or more of a power supply, a processor, and a communications interface included in the wireless device is inoperable.

18. The method of claim 16, wherein the bypass interface comprises a connector whose primary purpose is not the recovery of the at least one eSIM.

19. The method of claim 18, wherein:

the wireless device comprises a cellular phone; and

the eUICC comprises an electronic Universal Integrated Circuit Card (eUICC), and the at least one eSIM comprises an electronic Subscriber Identity Module (eSIM).

20. The method of claim 16, wherein the retrieval device is a personal computer.