Methods for provisioning universal integrated circuit cards

• US 10,681,534 B2
• Filed: 05/25/2018
• Issued: 06/09/2020
• Est. Priority Date: 11/16/2012
• Status: Active Grant

• Current Assignee: AT&T Mobility II LLC (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Chastain, Walter Cooper, Campbell, Clifton Ashman, Chin, Stephen Emille, Harber, David, Rainer, Brian Keith, Smith, David K., Wang, Shih-Ming
• Primary Examiner(s): Le, David
• Application Number:
  US15/989,904
• Publication Number:
  US 20180279117A1
• Time in Patent Office: 746 Days
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A system is described that can perform a method for receiving a request to modify a universal integrated circuit card, generating a package comprising configuration data for modifying the universal integrated circuit card, instructing an over-the-air system to transmit the package encrypting the package with a transport key to generate an encrypted package, and transmitting the encrypted package to a communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card. The system can also perform a method of providing a mobile network operator trusted service manager system information relating to the configuration data to enable the mobile network operator trusted service manager system to manage content and memory allocation of the universal integrated circuit card.

Claims

1. A device, comprising:

a processing system including a processor; and

a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising;

providing a first mobile network operator trusted manager service system of a first mobile network operator with information relating to configuration data to enable the first mobile network operator trusted service manager system to manage content and memory allocation for a plurality of security domain containers of a universal integrated circuit card of a communication device;

detecting that the communication device is to be provided services by a second mobile network operator; and

responsive to determining that there is a pre-arrangement between the first mobile network operator and the second mobile network operator, delegating security management of the universal integrated circuit card of the communication device by providing a second mobile network operator trusted service manager system of the second mobile network operator with the information relating to the configuration data to enable the second mobile network operator trusted service manager system to manage the content and the memory allocation for the plurality of security domain containers of the universal integrated circuit card of the communication device,

wherein the second mobile network operator trusted service manager determines a first group of services provided to the communication device by the first mobile network operator and determines a second group of services provided to the communication device by the second mobile network operator, wherein the second mobile network operator trusted service manager adjusts the memory allocation for the plurality of security domain containers according to the second group of services.

2. The device of claim 1, wherein the operations further comprise instructing an over-the-air system to transmit a first package that comprises configuration data for modifying the universal integrated circuit card.

3. The device of claim 2, wherein the instructing causes the over-the-air system to encrypt the first package with a transport key to generate a first encrypted package.

4. The device of claim 3, wherein the instructing causes the over-the-air system to transmit the first encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card.

5. The device of claim 1, wherein the providing the information to the first mobile network operator trusted service manager system is based on monitoring for configuration changes at the universal integrated circuit card and occurs in response to and after a detection of a particular configuration change at the universal integrated circuit card.

6. The device of claim 5, wherein the particular configuration change is based on the configuration data of a first package, wherein the communication device and the first mobile network operator trusted service manager system are separate devices, wherein the first mobile network operator trusted service manager system is remotely located from the communication device.

7. The device of claim 5, wherein management of the content and the memory allocation for the plurality of security domain containers includes changing an amount of memory resource allocated to a particular security domain container of the plurality of security domain containers, wherein the plurality of security domain containers comprises an issuer security domain, a supplementary security domain, and a controlling authority security domain, wherein the issuer security domain stores first content that includes card issuer content, wherein the supplementary security domain stores second content that includes application provider content, and wherein the controlling authority security domain stores third content that includes security policy content.

8. A non-transitory, machine-readable storage medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the comprising:

providing a first mobile network operator trusted manager service system of a first mobile network operator with information relating to configuration data to enable the first mobile network operator trusted service manager system to manage content and memory allocation for a plurality of security domain containers of a universal integrated circuit card of a communication device; and

responsive to determining that there is a pre-arrangement between the first mobile network operator and a second mobile network operator, delegating security management of the universal integrated circuit card of the communication device in response to detecting that the communication device is to be provided services by the second mobile network operator by providing a second mobile network operator trusted service manager system of the second mobile network operator with the information relating to the configuration data to enable the second mobile network operator trusted service manager system to manage the content and the memory allocation for the plurality of security domain containers of the universal integrated circuit card of the communication device, wherein the providing the information to the first mobile network operator trusted service manager system is based on monitoring for configuration changes at the universal integrated circuit card and occurs in response to and after a detection of a particular configuration change at the universal integrated circuit card,

wherein the second mobile network operator trusted service manager determines a first group of services provided to the communication device by the first mobile network operator and determines a second group of services provided to the communication device by the second mobile network operator, wherein the second mobile network operator trusted service manager adjusts the memory allocation for the plurality of security domain containers according to the second group of services.

9. The non-transitory, machine-readable storage medium of claim 8, wherein the operations further comprise instructing an over-the-air system to transmit a first package that comprises configuration data for modifying the universal integrated circuit card.

10. The non-transitory, machine-readable storage medium of claim 9, wherein the instructing causes the over-the-air system to encrypt the first package with a transport key to generate a first encrypted package.

11. The non-transitory, machine-readable storage medium of claim 10, wherein the instructing causes the over-the-air system to transmit the first encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card.

12. The non-transitory, machine-readable storage medium of claim 8, wherein the particular configuration change is based on the configuration data of a first package, wherein the communication device and the first mobile network operator trusted service manager system are separate devices, wherein the first mobile network operator trusted service manager system is remotely located from the communication device.

13. The non-transitory, machine-readable storage medium of claim 8, wherein management of the content and the memory allocation for the plurality of security domain containers includes changing an amount of memory resource allocated to a particular security domain container of the plurality of security domain containers, wherein the plurality of security domain containers comprises an issuer security domain, a supplementary security domain, and a controlling authority security domain, wherein the issuer security domain stores first content that includes card issuer content, wherein the supplementary security domain stores second content that includes application provider content, and wherein the controlling authority security domain stores third content that includes security policy content.

14. A method, comprising:

instructing, by processing system of a secure element issuer system including a processor, an over-the-air system to transmit a first package that comprises configuration data for modifying a universal integrated circuit card;

providing, by the processing system of the secure element issuer system, a first mobile network operator trusted manager service system of a first mobile network operator with information relating to configuration data to enable the first mobile network operator trusted service manager system to manage content and memory allocation for a plurality of security domain containers of the universal integrated circuit card of a communication device;

detecting, by the processing system of the secure element issuer system, that the communication device is to be provided services by a second mobile network operator; and

responsive to determining that there is a pre-arrangement between the first mobile network operator and the second mobile network operator, delegating, by the processing system of the secure element issuer system, security management of the universal integrated circuit card of the communication device by providing a second mobile network operator trusted service manager system of the second mobile network operator with the information relating to the configuration data to enable the second mobile network operator trusted service manager system to manage the content and the memory allocation for the plurality of security domain containers of the universal integrated circuit card of the communication device,

wherein the second mobile network operator trusted service manager determines a first group of services provided to the communication device by the first mobile network operator and determines a second group of services provided to the communication device by the second mobile network operator, wherein the second mobile network operator trusted service manager adjusts the memory allocation for the plurality of security domain containers according to the second group of services.

15. The method of claim 14, wherein the instructing causes the over-the-air system to encrypt the first package with a transport key to generate a first encrypted package.

16. The method of claim 15, wherein the instructing causes the over-the-air system to transmit the first encrypted package to the communication device communicatively coupled to the universal integrated circuit card to provision the universal integrated circuit card.

17. The method of claim 14, wherein the providing the information to the first mobile network operator trusted service manager system is based on monitoring for configuration changes at the universal integrated circuit card and occurs in response to and after a detection of a particular configuration change at the universal integrated circuit card.

18. The method of claim 17, wherein the particular configuration change is based on the configuration data of the first package, wherein the communication device and the first mobile network operator trusted service manager system are separate devices, wherein the first mobile network operator trusted service manager system is remotely located from the communication device.

19. The method of claim 17, wherein management of the content and the memory allocation for the plurality of security domain containers includes changing an amount of memory resource allocated to a particular security domain container of the plurality of security domain containers, wherein the plurality of security domain containers comprises an issuer security domain, a supplementary security domain, and a controlling authority security domain.

20. The method of claim 19, wherein the issuer security domain stores first content that includes card issuer content, wherein the supplementary security domain stores second content that includes application provider content, and wherein the controlling authority security domain stores third content that includes security policy content.