Systems, methods, and computer program products for managing data re-installation

• US 9,767,287 B2
• Filed: 01/21/2014
• Issued: 09/19/2017
• Est. Priority Date: 01/25/2013
• Status: Expired due to Fees

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Gargiulo, Michael J.
• Primary Examiner(s): ABYANEH, ALI S
• Application Number:
  US14/160,062
• Publication Number:
  US 20140215639A1
• Time in Patent Office: 1,337 Days
• Field of Search: 726 28, 716 28, 455403
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Systems, methods, and computer program products are provided for managing data re-installation including service re-installation. A re-installation procedure re-installs and optionally activates data at least partially installed on a secure element without intervention middleware to repair a personalization procedure failure. Thus, personalization data on a secure element (SE) may be comprehensively managed by interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and a central trusted service manager (central TSM). The processing time required to manage the re-installation procedure is minimized.

Claims

1. A system to manage data re-installation, comprising:

a memory;

a processor communicatively coupled to the memory, the processor being operable to execute computer-executable program instructions stored in the memory to cause the system to;

receive, by a central trusted service manager (central TSM) from a particular one of a plurality of service provider trusted service managers (service provider TSMs) over a network, a re-install request to re-install data at least partially installed on a secure element of a user computing device;

re-install, by the central TSM over the network, the data on the secure element of the user computing device, wherein the re-installed data comprises an uninstantiated service;

instantiate, by the central TSM over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs;

extradite, by the central TSM, the instantiated data comprising the instantiated service on the secure element into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the service provider TSMs over the network; and

activate, by the central TSM over the network, the instantiated data comprising the instantiated service that has been extradited to the security domain on the secure element of the user computing device so that the data comprising the instantiated service is usable by the user computing device.

2. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to delete the data at least partially installed on the secure element.

3. The system of claim 2, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to delete the data at least partially installed on the secure element prior to performing the re-installation.

4. The system of claim 1, wherein the re-install request comprises a secure element identifier, a service identifier, and a service qualifier.

5. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to transmit a response over the network including a result of processing the re-install request.

6. The system of claim 1, the memory being operable to store a state of the data, and the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to:

determine, upon receiving the re-install request, the state of the data;

update the state of the data to indicate the data is being installed on the secure element when it is determined that the state of the data is personalizing; and

return an error message over the network when it is determined that the state of the data is other than personalizing.

7. The system of claim 6, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to update the state of the data to indicate that the data is being deleted from the secure element when it is determined that the state of the data is personalizing.

8. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to perform a technical eligibility check and a business eligibility check prior to reinstalling the data on the secure element of the user computing device.

9. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to count a number of re-install requests from the network, wherein the number of re-install requests is limited to a predetermined number.

10. A computer-implemented method to manage data re-installation, comprising:

receiving, using one or more computing devices associated with a central trusted service manager (central TSM) from a particular one of a plurality of service provider (SP) trusted service managers (TSM) over a network, a re-install request to re-install data at least partially installed on a secure element of a user computing device;

re-installing, over the network and using the one or more computing devices, the data on the secure element of the user computing device, wherein the re-installed data comprises an uninstantiated service;

instantiating, using the one or more computing devices, over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs;

extraditing, using the one or more computing devices, the instantiated data comprising the instantiated service on the secure element into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the plurality of service provider trusted service managers over the network; and

activating, over the network, using the one or more computing devices, the data re-installed on the secure element of the user computing device so that the data is usable by the user computing device.

11. The computer-implemented method of claim 10, wherein the data comprises a service.

12. The computer-implemented method of claim 10, further comprising deleting, over the network and using the one or more computing devices, the data at least partially installed on the secure element.

13. The computer-implemented method of claim 12, wherein the deleting the data at least partially installed on the secure element occurs prior to re-installing the data on the secure element.

14. The computer-implemented method of claim 10, wherein the re-install request comprises a secure element identifier, a service identifier, and a service qualifier.

15. The method of claim 10, further comprising transmitting, using the one or more computing devices, a response over the network including a result of processing the re-install request.

16. The method of claim 10, further comprising:

determining, using the one or more computing devices and upon receiving the re-install request, the state of the data;

updating, using the one or more computing devices, the state of the data to indicate the data is being installed on the secure element when it is determined that the state of the data is personalizing; and

returning, using the one or more computing devices an error message over the network when it is determined that the state of the data is other than personalizing.

17. The method of claim 16, further comprising updating, using the one or more computing devices, the state of the data to indicate that the data is being deleted from the secure element when it is determined that the state of the data is personalizing.

18. The method of claim 10, further comprising performing, using the one or more computing devices, a technical eligibility check and a business eligibility check prior to reinstalling the data on the secure element of the user computing device.

19. The method of claim 10, further comprising counting, using the one or more computing devices, a number of re-install requests from the network, wherein the number of re-install requests is limited to a predetermined number.

20. A computer program product comprising a non-transitory computer-readable medium having computer-executable program instructions embodied thereon that when executed by a computer cause the computer to

receive, by a central trusted service manager (central TSM) from a particular one of a plurality of service provider (SP) trusted service managers (TSMs) over a network, a re-install request to re-install a data at least partially installed on a secure element of a user computing device;

re-install, by the central TSM over the network, the data on the secure element of the user computing device, wherein the reinstalled data comprises an uninstantiated service;

instantiate, by the central TSM over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs;

extradite, by the central TSM, the data re-installed on the secure element into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the plurality of service provider trusted service managers; and

activate, by the central TSM over the network, the data re-installed on the secure element of the user computing device so that the data is usable by the user computing device.

21. The computer program product of claim 20, wherein the data comprises a service.

22. The computer program product of claim 20, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to delete the data at least partially installed on the secure element.

23. The computer program product of claim 22, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to delete the data at least partially installed on the secure element prior to performing the re-installation.

24. The computer program product of claim 20, wherein the re-install request comprises a secure element identifier, a service identifier, and a service qualifier.

25. The computer program product of claim 20, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to transmit a response over the network including a result of processing the re-install request.

26. The computer program product of claim 20, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to:

determine, upon receiving the re-install request, the state of the data;

update the state of the data to indicate the data is being installed on the secure element when it is determined that the state of the data is personalizing; and

return an error message over the network when it is determined that the state of the data is other than personalizing.

27. The computer program product of claim 26, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to update the state of the data to indicate that the data is being deleted from the secure element when it is determined that the state of the data is personalizing.

28. The computer program product of claim 20, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to perform a technical eligibility check and a business eligibility check prior to reinstalling the data on the secure element of the user computing device.

29. The computer program product of claim 20, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer further cause the computer to count a number of re-install requests from the network, wherein the number of re-install requests is limited to a predetermined number.