Methods and apparatus for delivering electronic identification components over a wireless network

• US 8,966,262 B2
• Filed: 10/08/2013
• Issued: 02/24/2015
• Est. Priority Date: 10/28/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V., Mathias, Arun G., Hauck, Jerrold Von, Haggerty, David T., McLaughlin, Kevin, Juang, Ben-Heng, Li, Li
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/049,185
• Publication Number:
  US 20140099925A1
• Time in Patent Office: 504 Days
• Field of Search: 713/169
• US Class Current: 713/169
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

Methods and apparatus enabling programming of electronic identification information of a wireless apparatus. In one embodiment, a previously purchased or deployed wireless apparatus is activated by a cellular network. The wireless apparatus connects to the cellular network using an access module to download operating system components and/or access control client components. The described methods and apparatus enable updates, additions and replacement of various components including Electronic Subscriber Identity Module (eSIM) data, OS components. One exemplary implementation of the invention utilizes a trusted key exchange between the device and the cellular network to maintain security.

Claims

1. A method for receiving an operating system update from a wireless carrier, the method comprising:

at a mobile device;

accessing first identification data associated with an embedded secure element that is included in the mobile device;

transmitting, to an update portal of the wireless carrier, the first identification data to establish a set of access rights, wherein the set of access rights enable access to one or more packages comprising an operating system update for an operating system loaded in the mobile device;

receiving, from the update portal, second identification data associated with the wireless carrier; and

in response to authenticating the second identification data;

downloading, into the embedded secure element of the mobile device, the one or more packages comprising the operating system update,

assembling the operating system update based at least in part on the downloaded one or more packages, and

updating the operating system based on the assembled operating system update to enable the mobile device to access additional wireless services not available to the mobile device prior to updating the operating system.

2. The method of claim 1, wherein the operating system update is selected by a user of the mobile device.

3. The method of claim 2, wherein the first identification data and the second identification data are based on a cryptographic key protocol.

4. The method of claim 3, wherein the cryptographic key protocol is based on one or more asymmetric Rivest Shamir and Adelman (RSA) public and private keys.

5. The method of claim 1, wherein the one or more wireless services comprises placing or receiving a voice call.

6. The method of claim 1, wherein the one or more wireless services comprises accessing a wireless network provided by the wireless carrier.

7. The method of claim 1, wherein the one or more wireless services comprises accessing a media file not stored by the mobile device.

8. The method of claim 1, wherein the set of access rights established based on the first identification data does not include access to the one or more wireless services.

9. A method for providing an operating system update to a mobile device, the method comprising:

at a portal of a wireless carrier;

receiving, from the mobile device, a request for the operating system update, wherein the request includes first identification data associated with an embedded secure element that is included in the mobile device;

in response to authenticating the first identification data;

providing, to the mobile device, a set of access rights that grant the mobile device access to one or more packages comprising the operating system update;

providing, to the mobile device, second identification data associated with the wireless carrier; and

in response to receiving an indication from the mobile device that the mobile device has authenticated the second identification data;

providing, to the embedded secure element of the mobile device, the one or more packages comprising the operating system update to enable the mobile device to carry out an update of an operating system loaded in the mobile device by assembling the operating system updated based at least in part on the provided one or more packages, and

updating the operating system based on the assembled operating system update to enable the mobile device to access additional wireless services not available to the mobile device prior to updating the operating system.

10. The method of claim 9, wherein the request for the update is generated by the mobile device in response to a selection made by a user of the mobile device.

11. The method of claim 9, wherein the set of access rights is limited to providing packages associated with operating system updates to the mobile device.

12. The method of claim 9, wherein the first identification data and the second identification data are based on a cryptographic key protocol.

13. The method of claim 12, wherein the cryptographic key protocol is based on one or more asymmetric Rivest Shamir and Adelman (RSA) public and private keys.

14. The method of claim 9, wherein the one or more wireless services comprises placing or receiving a voice call.

15. The method of claim 9, the one or more wireless services comprises accessing a wireless network provided by the wireless carrier.

16. A wireless apparatus, comprising:

at least one wireless interface adapted to connect to at least one wireless network provided by a wireless carrier;

an embedded secure element associated with first identification data; and

a processor device, wherein the processor device is configured to cause the wireless apparatus to;

access the first identification data;

transmit, to an update portal of the wireless carrier, the first identification data to establish a set of access rights, wherein the set of access rights enable access to one or more packages comprising an operating system update for an operating system loaded in the mobile device;

receive, from the update portal, second identification data associated with the wireless carrier; and

in response to authenticating the second identification data;

download, into the embedded secure element of the mobile device, the one or more packages comprising the operating system update,

assemble the operating system update based at least in part on the downloaded one or more packages, and

update the operating system based on the assembled operating system update to enable the mobile device to access additional wireless services not available to the mobile device prior to updating the operating system.

17. The wireless apparatus of claim 16, wherein the operating system update is selected by a user of the mobile device.

18. The wireless apparatus of claim 16, wherein the first identification data and the second identification data are based on a cryptographic key protocol.