Facilitating use of a universal integrated circuit card (UICC) for secure device updates

• US 10,346,152 B2
• Filed: 09/20/2016
• Issued: 07/09/2019
• Est. Priority Date: 09/20/2016
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Becker, Thomas, Nichols, Sr., Paul W., Calamusa, Michael, Horton, Mike, Osterwise, Robert
• Primary Examiner(s): Rahim, Monjur
• Application Number:
  US15/271,135
• Publication Number:
  US 20180081669A1
• Time in Patent Office: 1,022 Days
• Field of Search: 713159
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Apparatus, methods and systems facilitating communications via a mobile internet-enabled connection interface are provided. One apparatus is configured to perform various operations, including performing a first type of security function associated with determining whether an information package is authorized to be received and downloaded to a device other than the apparatus, wherein the information package is associated with updating a functionality of the device; and performing a second type of security function associated with identifying an authorized user of the apparatus.

Claims

1. An apparatus, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

performing, by the apparatus, a first type of security function associated with determining whether an information package is authorized to be downloaded to a device other than the apparatus, wherein the information package is associated with updating a functionality of the device, wherein the apparatus comprises a universal integrated circuit card partitioned into domains, and wherein a first domain of the domains is associated with a telecommunications carrier entity and a second domain of the domains is associated with an entity that provides software to update the device; and

performing, by the apparatus, a second type of security function associated with identifying an authorized user of the apparatus.

2. The apparatus of claim 1, wherein the updating the functionality of the device comprises updating a software functionality of the device other than the apparatus.

3. The apparatus of claim 2, wherein the operations further comprise:

performing, by the apparatus, a key negotiation with a server configured to transmit the information package to the device other than the apparatus and that facilitates the updating of the functionality of the device; and

validating, by the apparatus, a digital signature of the information package for the device prior to installation of the information package to cause the updating the software functionality on the device.

4. The apparatus of claim 3, wherein the validating the digital signature comprises comparing the digital signature to a value stored in a firmware over the air partition of the apparatus, and wherein the firmware over the air partition is associated with the performing the first type of security function.

5. The apparatus of claim 1, wherein the performing the second type of security function comprises performing the second type of security function associated with the identifying the authorized user of the apparatus via a carrier domain partition of the apparatus.

6. The apparatus of claim 1, wherein the device comprises a component of a connected car.

7. The apparatus of claim 1, wherein the device comprises a sensor of a digital home environment.

8. The apparatus of claim 1, wherein the device comprises an Internet of Things device.

9. A method, comprising:

receiving, by a first device comprising a processor, an information package for updating a functionality of a component of first device, wherein the information package is received from a distribution authority device comprising a key negotiated with a second device associated with providing security for the first device, wherein the second device comprises a universal integrated circuit card partitioned into domains, and wherein a first domain of the domains is associated with a telecommunications carrier entity and a second domain of the domains is associated with an entity that provides software to update the first device; and

validating, by the first device, the information package with the second device based on whether a first value of the information package corresponds to a second value stored at the second device, wherein the second value is stored at an apparatus in response to a negotiation of the key with the distribution authority device prior to the receiving by the first device.

10. The method of claim 9, further comprising:

updating, by the first device, a software functionality of the component of the first device based on determining that the information package was successfully validated.

11. A non-transitory machine-readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations, comprising:

performing a first type of security function associated with determining whether an information package is authorized to be employed to facilitate a software update to a device communicatively coupled to an apparatus comprising the processor and machine-readable storage medium, wherein the processor is associated with a universal integrated circuit card partitioned into two domains, and wherein a first domain of the two domains is associated with a telecommunications carrier entity and a second domain of the two domains is associated with an entity that provides software to update the device; and

performing a second type of security function associated confirming a privilege associated with use of the apparatus.

12. The non-transitory machine-readable storage medium of claim 11, wherein the operations further comprise:

performing a key negotiation with a server configured to transmit the information package to the device communicatively coupled to the apparatus and that facilitates the software update to the device; and

validating a digital signature of the information package for the device prior to installation of the information package on the device.

13. The non-transitory machine-readable storage medium of claim 12, wherein the information package comprises a firmware over the air package.

14. The non-transitory machine-readable storage medium of claim 12, wherein the first type of security function is associated with a first executable instruction of the executable instructions, wherein the first executable instruction is comprised in a first partition of the executable instructions and is associated with a first entity.

15. The non-transitory machine-readable storage medium of claim 14, wherein the first entity is an original equipment manufacturer of the device.

16. The non-transitory machine-readable storage medium of claim 12, wherein the second type of security function is associated with a second executable instruction in a second partition of the executable instructions and is associated with a second entity.

17. The non-transitory machine-readable storage medium of claim 16, wherein the second entity is a telecommunications entity of the apparatus.

18. The non-transitory machine-readable storage medium of claim 11, wherein the device comprises a component of a connected car.

19. The non-transitory machine-readable storage medium of claim 11, wherein the device comprises an Internet of Things device.