Systems for provisioning universal integrated circuit cards

• US 9,185,085 B2
• Filed: 12/01/2014
• Issued: 11/10/2015
• Est. Priority Date: 11/19/2012
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.), AT&T Mobility II LLC (AT&T, Inc.)
• Inventors: Chastain, Walter Cooper, Campbell, Clifton Ashman, Chin, Stephen Emille, Harber, David, Rainer, Brian Keith, Smith, David K., Wang, Shih-Ming
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US14/556,511
• Publication Number:
  US 20150089225A1
• Time in Patent Office: 344 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: H04B 1/3816 Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

A system that incorporates the subject disclosure may include, for example, a system for receiving a request to modify a universal integrated circuit card, generating a package comprising configuration data for modifying the universal integrated circuit card, encrypting the package with a transport key to generate an encrypted package, transmitting the encrypted package to a communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card, and providing a mobile network operator trusted service manager system information relating to the configuration data to enable the mobile network operator trusted service manager system to manage content and memory allocation of the universal integrated circuit card. Other embodiments are disclosed.

Claims

1. A system, comprising:

a memory device that stores instructions; and

a controller device coupled to the memory device, wherein responsive to executing the instructions the controller device performs operations, comprising;

receiving a request to modify content in a mobile wallet security domain container of a universal integrated circuit card;

verifying that resources of the universal integrated circuit card and a communication device communicatively coupled to the universal integrated circuit card are capable of satisfying the request;

generating a script according to the request;

encrypting the script according to an application key to generate an encrypted script;

generating a package comprising the encrypted script and transport data;

encrypting the package with a transport key to generate an encrypted package;

transmitting the encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the content of the mobile wallet security domain container of the universal integrated circuit card; and

providing a mobile network operator trusted service manager system information relating to the provisioning of the mobile wallet security domain to manage content and memory allocation of the universal integrated circuit card,

wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adjusting an amount of memory allocated to a security domain container of a plurality of security domain containers of the universal integrated circuit card.

2. The system of claim 1, wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adding an additional security domain container to a plurality of security domain containers of the universal integrated circuit card.

3. The system of claim 1, wherein the controller device comprises:

a mobile wallet trusted service manager system comprising a first processor that performs the receiving of the request, the verifying of the resources of the universal circuit card and the communication device, the generating of the script, and the encrypting of the script;

an over-the-air system comprising a second processor that performs the generating of the package, the encrypting of the package, and the transmitting of the encrypted package to the communication device; and

the mobile network operator trusted service manager system comprising a third processor that performs the managing of the content and the memory allocation of the universal integrated circuit card.

4. The system of claim 3, wherein the third processor of the mobile network operator trusted service manager system further performs operations comprising modifying the security domain container of the plurality of security domain containers of the universal integrated circuit card, wherein the modifying comprises altering content.

5. The system of claim 4, wherein the modifying comprises deleting another security domain container of the plurality of security domain containers.

6. The system of claim 4, wherein the modifying comprises one of increasing or decreasing memory allocated to the security domain container.

7. The system of claim 1, wherein the communication device is a portable communication device.

8. The system of claim 1, wherein the universal integrated circuit card is an embedded universal integrated circuit card affixed to the communication device.

9. The system of claim 1, wherein the encrypted package is transmitted to the communication device over a data channel conforming to a hypertext transport protocol.

10. A method comprising:

generating, by a system including a processor, a script according to a request to modify content in a mobile wallet security domain container of a universal integrated circuit card;

verifying, by the system, that resources of the universal integrated circuit card and a communication device communicatively coupled to the universal integrated circuit card are capable of satisfying the request;

encrypting, by the system, the script according to an application key to generate an encrypted script;

generating, by the system, a package comprising the encrypted script and transport data;

encrypting, by the system, the package with a transport key to generate an encrypted package;

transmitting, by the system, the encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the content of the mobile wallet security domain container; and

providing, by the system, a mobile network operator trusted service manager system information relating to the provisioning of the mobile wallet security domain to manage content and memory allocation of the universal integrated circuit card,

wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adjusting an amount of memory allocated to a security domain container of a plurality of security domain containers of the universal integrated circuit card.

11. The method of claim 10, wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adding an additional security domain container to a plurality of security domain containers of the universal integrated circuit card.

12. The method of claim 10, wherein the universal integrated circuit card is an embedded universal integrated circuit card affixed to the communication device.

13. The method of claim 10, wherein the encrypted package is transmitted to the communication device over a data channel conforming to a hypertext transport protocol.

14. The method of claim 10, wherein the communication device is a portable communication device.

15. A machine-readable storage device, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

generating a script according to a request to modify content in a mobile wallet security domain container; and

verifying that resources of a universal integrated circuit card and a communication device communicatively coupled to the universal integrated circuit card are capable of satisfying the request;

encrypting the script according to an application key to generate an encrypted script;

generating a package comprising the encrypted script and transport data;

encrypting the package with a transport key to generate an encrypted package;

transmitting the encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision content of the mobile wallet security domain container of the universal integrated circuit card; and

providing a mobile network operator trusted service manager system information relating to the provisioning of the mobile wallet security domain to manage content and memory allocation of the universal integrated circuit card,

wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adjusting an amount of memory allocated to a security domain container of a plurality of security domain containers of the universal integrated circuit card.

16. The machine-readable storage device of claim 15, wherein the management of the content and the memory allocation of the universal integrated circuit card by the mobile network operator trusted service manager system comprises adding an additional security domain container to a plurality of security domain containers of the universal integrated circuit card.

17. The machine-readable storage device of claim 15, wherein the universal integrated circuit card is an embedded universal integrated circuit card affixed to the communication device.

18. The machine-readable storage device of claim 15, wherein the encrypted package is transmitted to the communication device over a data channel conforming to a hypertext transport protocol.