Methods and apparatus for access data recovery from a malfunctioning device

• US 9,560,693 B2
• Filed: 12/15/2014
• Issued: 01/31/2017
• Est. Priority Date: 11/03/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V.
• Primary Examiner(s): Arevalo, Joseph
• Application Number:
  US14/571,146
• Publication Number:
  US 20150099560A1
• Time in Patent Office: 778 Days
• Field of Search: 455/558, 455/411, 455/404.1, 455/435.1, 455/417, 455/41.2, 455/410, 455/432.1, 455/552.1
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Methods and apparatus for recovering access data from a malfunctioning device. In one embodiment, trained service personnel are provided a specialized apparatus for retrieving access data from a malfunctioning device. For example, in the instance the device comprises a cellular device having an unrecoverable hardware failure, trained service personnel can connect to the secure element and retrieve the one or more electronic Subscriber Identity Modules (eSIMs) stored thereon. The eSIMs are then “reclaimed” and reprogrammed/distributed to a new device. In one implementation, security and integrity measures are taken to protect and control distribution of sensitive access data.

Claims

1. A wireless apparatus, comprising:

a communications interface;

a power supply;

a processor;

an electronic Universal Integrated Circuit Card (eUICC) configured to store a plurality of electronic Subscriber Identity Modules (eSIMs), wherein each eSIM of the plurality of eSIMs enables the wireless apparatus to access a particular cellular network using the communications interface; and

a bypass component that enables an external device to interface with the eUICC and Access the plurality of eSIMs when at least one of the communications interface, the power supply, and the processor is inoperable.

2. The wireless apparatus of claim 1, wherein, when the power supply is inoperable, the eUICC is configured to receive power from the external device via the bypass component.

3. The wireless apparatus of claim 1, wherein, when the processor is inoperable, the eUICC is configured to receive a clock signal from the external device via the bypass component.

4. The wireless apparatus of claim 1, wherein enabling the external device to access the plurality of eSIMs comprises:

at the eUICC;

entering into a recovery mode operation; and

establishing a secure communications link with the external device.

5. The wireless apparatus of claim 4, wherein enabling the external device to access the plurality of eSIMs further comprises:

at the eUICC;

retrieving at least one eSIM of the plurality of eSIMs; and

providing, to the external device via the secure communications link, the at least One eSIM.

6. The wireless apparatus of claim 5, wherein the eUICC removes the at least one eSIM from the plurality of eSIMs after providing the at least one eSIM to the external device.

7. The wireless apparatus of claim 1, wherein the bypass component comprises an externally-accessible connector whose primary purpose is not for a recovery of the plurality of eSIMs.

8. The wireless apparatus of claim 1, wherein the bypass component comprises an internally-accessible connector.

9. A computing device configured to recover electronic Subscriber Identity Modules (eSIMs) from an electronic Universal Integrated Circuit Card (eUICC) included in a mobile device, the computing device comprising:

a communications interface;

a power supply; and

a processor, configured to cause the computing device to;

route power from the power supply to the eUICC included in the mobile device When a primary power supply included in the mobile device is inoperable;

establish, via the communications interface, a secure communications link with the eUICC; and

recover, via the secure communications link, at least one eSIM from the eUICC.

10. The computing device of claim 9, further comprising:

a clock signal generator, wherein the processor is further configured to;

cause the clock signal generator to route a generated clock signal to the eUICC included in the mobile device when a primary clock signal generator included in the mobile device is inoperable.

11. The computing device of claim 9, wherein the processor is further configured to cause the computing device to:

prior to establishing the secure communications link, cause the eUICC included in the mobile device to enter into a recovery mode operation.

12. The computing device of claim 9, wherein the processor is further configured to cause the computing device to:

subsequent to recovering the at least one eSIM, cause the eUICC to delete the at least one eSIM from the eUICC.

13. The computing device of claim 9, wherein the computing device is configured to route power and establish the secure communications link via an externally-accessible bypass interface of the mobile device whose primary purpose is not for a recovery of the eSIMs.

14. The computing device of claim 9, wherein the computing device is configured to route power and establish the secure communications link via an internally-accessible bypass interface of the mobile device.

15. A method for recovering at least one electronic Subscriber Identity Module (eSIM) from a wireless device that is inoperable, the method comprising:

at a retrieval device;

establishing, via a bypass component included in the wireless device, a secure connection to an electronic Universal Integrated Circuit Card (eUICC) included in the wireless device, wherein the eUICC stores the at least one eSIM;

retrieving the at least one eSIM from the eUICC; and

voiding the at least one eSIM within the eUICC.

16. The method of claim 15, wherein the wireless device is inoperable when one or more of a power supply, a processor, and a communications interface included in the wireless device is inoperable.

17. The method of claim 16, wherein, when the power supply is inoperable, method further comprises:

routing external power to the eUICC via the bypass component.

18. The method of claim 16, wherein, when the processor is inoperable, method further comprises:

generating a clock signal; and

routing the clock signal to the eUICC via the bypass component.

19. The method of claim 15, wherein the bypass component comprises an external connector whose primary purpose is not a recovery of the at least one eSIM.

20. The method of claim 15, wherein the bypass component comprises an internal connector.