Method, apparatus and computer program to transition a user device security module to an unlocked lifecycle state and to a locked lifecycle state

• US 9,021,548 B2
• Filed: 12/07/2012
• Issued: 04/28/2015
• Est. Priority Date: 12/07/2011
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Holtmanns, Silke, Lindholm, Rune
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US13/707,790
• Publication Number:
  US 20130152159A1
• Time in Patent Office: 872 Days
• Field of Search: 726/1
• US Class Current: 726/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/48 using secure binding, e.g. securely binding identity modules to devices, services or applications

Abstract

A method, computer program, apparatus and a secure module are described. By example, in the method there are steps of receiving a request from a first entity for a secure module to enter an unlock lifecycle state; requesting confirmation to enter the unlock lifecycle state; and if the request is confirmed, transitioning the secure module from a current lifecycle state to the unlock lifecycle state.

Claims

1. A method comprising:

receiving a request for a secure module to enter an unlocked lifecycle state;

requesting confirmation to enter the unlocked lifecycle state;

if the request is confirmed, transitioning the secure module from a current lifecycle state to the unlocked lifecycle state; and

subsequently transitioning the secure module from the unlocked lifecycle state to a locked lifecycle state;

where transitioning to the locked lifecycle state from the unlocked lifecycle state comprises requesting a user associated with the secure module to confirm the transition to the locked lifecycle state, and

where the user confirms the transition to the locked lifecycle state via a user interface of a device in which the secure module is contained;

where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state comprises, in one instance, returning management responsibility for the secure module to an entity that had management responsibility for the secure module prior to the unlocked life cycle state being entered.

2. The method of claim 1, where requesting confirmation to enter the unlocked lifecycle state comprises requesting an entity that currently manages the secure module to confirm the request to enter the unlocked lifecycle state.

3. The method of claim 1, where the user'"'"'s confirmation of the transition to the locked lifecycle state indicates that the user has knowledge of a contract that will apply when the locked lifecycle state is entered.

4. The method of claim 1, where transitioning the secure module from the current lifecycle state to the unlocked lifecycle state enables a forward reference to stored information related to operation in the unlocked life cycle state.

5. The method of claim 1, where transitioning the secure module from the current lifecycle state to the unlocked lifecycle state occurs automatically upon expiration of a current contract.

6. The method of claim 1, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state transfers management responsibility for the secure module to an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state, or to a different entity.

7. The method as in claim 1, where the method is performed at least in part by a policy control function of the secure module, and where the secure module is embodied as a UICC or is embodied as an embedded UICC.

16. The method of claim 1, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state, in a second instance, transfers management responsibility for the secure module to an entity other than an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state.

8. A non-transitory computer-readable medium that contains software program instructions, where execution of the software program instructions by at least one data processor results in performance of operations that comprise:

receiving a request for a secure module to enter an unlocked lifecycle state;

requesting confirmation to enter the unlocked lifecycle state;

if the request is confirmed, transitioning the secure module from a current lifecycle state to the unlocked lifecycle state; and

subsequently transitioning the secure module from the unlocked lifecycle state to a locked lifecycle state;

where transitioning to the locked lifecycle state from the unlocked lifecycle state comprises requesting a user associated with the secure module to confirm the transition to the locked lifecycle state, and

where the user confirms the transition to the locked lifecycle state via a user interface of a device in which the secure module is contained;

where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state comprises, in one instance, returning management responsibility for the secure module to an entity that had management responsibility for the secure module prior to the unlocked life cycle state being entered.

9. The computer readable medium of claim 8, where requesting confirmation to enter the unlocked lifecycle state comprises requesting an entity that currently manages the secure module to confirm the request to enter the unlocked lifecycle state.

10. The computer readable medium of claim 8, where the user'"'"'s confirmation of the transition to the locked lifecycle state indicates that the user has knowledge of a contract that will apply when the locked lifecycle state is entered, and where transitioning the secure module to the unlocked lifecycle state occurs automatically upon expiration of a current contract.

11. The computer readable medium of claim 8, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state returns management responsibility for the secure module to an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state, or to a different entity.

17. The computer readable medium of claim 8, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state, in a second instance, transfers management responsibility for the secure module to an entity other than an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state.

12. An apparatus comprising a secure module, a user interface, a processor and a memory including computer program code, the memory and computer program code being configured, with the processor, to cause the apparatus at least to receive a request for the secure module to enter an unlocked lifecycle state;

to request confirmation to enter the unlocked lifecycle state;

if the request is confirmed, to transition the secure module from a current lifecycle state to the unlocked lifecycle state; and

to subsequently transition the secure module from the unlocked lifecycle state to a locked lifecycle state;

where transitioning to the locked lifecycle state from the unlocked lifecycle state comprises requesting a user associated with the secure module to confirm the transition to the locked lifecycle state, and

where the user confirms the transition to the locked lifecycle state via the user interface of the apparatus that comprises the secure module,

where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state comprises, in one instance, returning management responsibility for the secure module to an entity that had management responsibility for the secure module prior to the unlocked life cycle state being entered.

13. The apparatus of claim 12, where requesting confirmation to enter the unlocked lifecycle state comprises requesting an entity that currently manages the secure module to confirm the request to enter the unlocked lifecycle state.

14. The apparatus of claim 12, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state returns management responsibility for the secure module to an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state, or to a different entity.

15. The apparatus of claim 12, where the secure module is embodied as a UICC or is embodied as an embedded UICC.

18. The apparatus of claim 12, where transitioning the secure module from the unlocked lifecycle state to the locked lifecycle state, in a second instance, transfers management responsibility for the secure module to an entity other than an entity that had management responsibility for the secure module when the secure module was previously in the locked lifecycle state.