Systems, methods, and computer program products for interfacing multiple service provider trusted service managers and secure elements

• US 9,479,571 B2
• Filed: 09/17/2013
• Issued: 10/25/2016
• Est. Priority Date: 09/18/2012
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Gargiulo, Michael J.
• Primary Examiner(s): SHINGLES, KRISTIE D
• Application Number:
  US14/029,463
• Publication Number:
  US 20140082056A1
• Time in Patent Office: 1,134 Days
• Field of Search: 709/203
• US Class Current: 1/1
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/40 Security arrangements using identity modules
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/18 Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

System, methods, and computer program products are provided for interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and one of a plurality of secure elements (SE). A first request to renew a service is received from an SP system over a communications network. The first request includes a service qualifier associated with the service. A secure element corresponding to the service qualifier is determined. A second request to delete data associated with the service qualifier from the secure element is transmitted to the secure element. A third request to install an application on the secure element is transmitted to the secure element. A fourth request to activate the application on the secure element is transmitted to the secure element.

Claims

1. A system to interface between one of a plurality of service provider computing systems and one of a plurality of secure elements, comprising:

a trusted service manager comprising at least one memory and a processor communicatively coupled to the at least one memory, wherein the processor executes application code instructions that are stored in the at least one memory to cause the system to;

receive, from a service provider computing system over a communications network, a request to renew a service, the request to renew the service comprising a service qualifier associated with the service;

determine a secure element that corresponds to the service qualifier associated with the service;

transmit, to the secure element, a request to delete data associated with the service qualifier from the secure element;

transmit, to the secure element, a request to install an instance of an application associated with the service on the secure element;

transmit, to the secure element, a request to extradite the instance of the application associated with the service to a security domain on the secure element associated with the service provider computing system; and

transmit, to the service provider computing system, a response comprising an indication whether the request to renew the service was successfully processed.

2. The system of claim 1, wherein the processor is further configured to execute computer-executable instructions stored in the storage device to cause the system to update the status of the service in the at least one memory.

3. The system of claim 1, wherein the request to renew the service is received from the service provider computing system via an enterprise service bus.

4. The system of claim 1, wherein the request to renew the service comprises a service identifier, and wherein the application installed in the secure element is selected based on the service identifier.

5. The system of claim 4, wherein the request to install the instance of the application comprises instructions for creating the instance of the application based on the service identifier.

6. A method to interface between one of a plurality of service provider computing systems and one of a plurality of secure elements, comprising:

receiving, by a trusted service manager computing system and from a service provider computing system over a communications network, a request to renew a service, the request to renew the service comprising a service qualifier associated with the service;

determining, by the trusted service manager computing system, a secure element that corresponds to the service qualifier associated with the service;

transmitting, by the trusted service manager computing system and to the secure element, a request to delete data associated with the service qualifier from the secure element;

transmitting, by the trusted service manager computing system and to the secure element, a request to install an instance of an application associated with the service on the secure element, the application instantiated for two or more of a plurality of service providers;

transmitting, by the trusted service manager computing system and to the secure element, a request to extradite the instance of the application associated with the service to a security domain on the secure element associated with the service provider computing system; and

transmitting, by the trusted service manager computing system and to the service provider computing system, a response comprising an indication whether the request to renew the service was successfully processed.

7. The method of claim 6, further comprising updating, by the trusted service manager computing system, the status of the service in at least one memory of the trusted service manager computing system.

8. The method of claim 6, wherein the request to renew the service is received from the service provider computing system via an enterprise service bus.

9. The method of claim 6, wherein the request to renew the service comprises a service identifier, and wherein the application installed in the secure element is selected based on the service identifier.

10. The method of claim 9, wherein the request to install the instance of the application comprises instructions for creating the instance of the application based on the service identifier.

11. A computer program product, comprising:

a non-transitory computer-readable medium having computer-readable program instructions embodied therein that when executed by a computer cause the computer to interface between one of a plurality of service provider computing systems and one of a plurality of secure elements, the computer-readable program instructions comprising;

computer-readable program instructions to receive, by a trusted service manager computing system and from a service provider computing system over a communications network, a request to renew a service, the request to renew the service comprising a service qualifier associated with the service;

computer-readable program instructions to determine, by the trusted service manager computing system, a secure element that corresponds to the service qualifier associated with the service;

computer-readable program instructions to transmit, by the trusted service manager computing system and to the secure element, a request to delete data associated with the service qualifier from the secure element;

computer-readable program instructions to transmit, by the trusted service manager computing system and to the secure element, a request to install an instance of an application associated with the service on the secure element;

computer-readable program instructions to transmit, by the trusted service manager computing system and to the secure element, a request to extradite the instance of the application associated with the service to a security domain on the secure element associated with the service provider computing system; and

computer-readable program instructions to transmit, by the trusted service manager computing system and to the service provider computing system, a response comprising an indication whether the request to renew the service was successfully processed.

12. The computer-readable medium of claim 11, further comprising computer-readable program instructions to update, by the trusted service manager computing system, the status of the service in the at least one memory of the trusted service manager computing system.

13. The computer-readable medium of claim 11, wherein request to renew the service is received from the service provider computing system via an enterprise service bus.

14. The computer-readable medium of claim 11, wherein the request to renew the service comprises a service identifier, and wherein the application installed in the secure element is selected based on the service identifier.

15. The computer-readable medium of claim 14, wherein the request to install the instance of the application comprises instructions for creating the instance of the application based on the service identifier.