Systems, methods, and computer program products for managing data re-installation

• US 10,521,589 B2
• Filed: 08/18/2017
• Issued: 12/31/2019
• Est. Priority Date: 01/25/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Gargiulo, Michael J.
• Primary Examiner(s): Abyaneh, Ali S
• Application Number:
  US15/680,938
• Publication Number:
  US 20170351863A1
• Time in Patent Office: 865 Days
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Systems, methods, and computer program products are provided for managing data re-installation including service re-installation. A re-installation procedure re-installs and optionally activates data at least partially installed on a secure element without intervention middleware to repair a personalization procedure failure. Thus, personalization data on a secure element (SE) may be comprehensively managed by interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and a central trusted service manager (central TSM). The processing time required to manage the re-installation procedure is minimized.

Claims

1. A system to manage data re-installation, comprising:

a memory;

a processor communicatively coupled to the memory, the processor being operable to execute computer-executable program instructions stored in the memory to cause the system to;

receive, from a particular one of a plurality of service provider trusted service managers (TSM) over a network, a re-install request to re-install data that was previously at least partially installed on a secure element of a user computing device;

re-install, over the network, the data on the secure element of the user computing device, wherein the re-installed data comprises a service;

extradite the reinstalled data comprising the service into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the plurality of service provider TSMs over the network; and

activate, over the network, the re-installed data comprising the service on the secure element of the user computing device so that the data comprising the service is usable by the user computing device.

2. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to delete the data that was previously at least partially installed on the secure element.

3. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to transmit a response over the network including a result of processing the re-install request.

4. The system of claim 1,

wherein the memory is further operable to store a state of the data, and

wherein the processor is further operable to execute computer-executable program instructions stored in the memory to cause the system to:

determine, upon receiving the re-install request, that the state of the data is personalizing; and

update the state of the data to indicate the data is being installed on the secure element.

5. The system of claim 4, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to update the state of the data to indicate that the data is being deleted from the secure element in response to determining that the state of the data is personalizing.

6. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to count a number of re-install requests from the network, wherein the number of re-install requests is limited to a predetermined number.

7. The system of claim 1, the processor being further operable to execute computer-executable program instructions stored in the memory to cause the system to:

instantiate, over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs.

8. A computer-implemented method to manage data re-installation, comprising, by one or more computing devices associated with a central trusted service manager (central TSM):

receiving, from a particular one of a plurality of service provider trusted service managers (TSM), over a network, a re-install request to re-install data that was previously at least partially installed on a secure element;

re-installing, over the network, the data on the secure element of a user computing device, wherein the re-installed data comprises a service;

extraditing the reinstalled data comprising the service into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the plurality of service provider TSMs over the network; and

activating, over the network, the re-installed data comprising the service on the secure element of the user computing device so that the data comprising the service is usable by the user computing device.

9. The method of claim 8, further comprising deleting, by the one or more computing devices over the network, the data that was previously at least partially installed on the secure element.

10. The method of claim 9, wherein the deleting the data occurs prior to re-installing the data on the secure element.

11. The method of claim 8, further comprising transmitting, by the one or more computing devices over the network, a response comprising a result of processing the re-install request.

12. The method of claim 8, further comprising, by the one or more computing devices:

determining, upon receiving the re-install request, that the state of the data is personalizing; and

updating the state of the data to indicate the data is being installed on the secure element.

13. The method of claim 12, further comprising updating, by the one or more computing devices, the state of the data to indicate that the data is being deleted from the secure element in response to determining that the state of the data is personalizing.

14. The method of claim 8, further comprising, by the one or more computing devices:

instantiating, over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs.

15. A computer program product comprising:

a non-transitory computer-readable medium having computer-executable program instructions embodied thereon that when executed by a computer, cause the computer to;

receive, from a particular one of a plurality of service provider trusted service managers (TSM) over a network, a re-install request to re-install a data at least partially installed on a secure element of a user computing device;

re-install, over the network, the data on the secure element of the user computing device, wherein the re-installed data comprises a service;

extradite the reinstalled data comprising the service into a security domain on the secure element of the user computing device, the security domain comprising data that are accessible by the particular one of the plurality of service provider TSMs over the network; and

activate, over the network, the re-installed data comprising the service on the secure element so that the data comprising the service is usable by the user computing device.

16. The computer program product of claim 15, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer, cause the computer to delete the data at least partially installed on the secure element.

17. The computer program product of claim 15, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer, cause the computer to transmit a response over the network including a result of processing the re-install request.

18. The computer program product of claim 15, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer, cause the computer to:

determine, upon receiving the re-install request, that the state of the data is personalizing; and

update the state of the data to indicate the data is being installed on the secure element if it is determined that the state of the data is personalizing.

19. The computer program product of claim 18, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer, cause the computer to update the state of the data to indicate that the data is being deleted from the secure element in response to determining that the state of the data is personalizing.

20. The computer program product of claim 15, wherein the non-transitory computer-readable medium further comprises computer-executable program instructions embodied thereon, that when executed by the computer, cause the computer to:

instantiate, over the network, the reinstalled data to create an instantiated service accessible by the particular one of the service provider TSMs.