METHODS AND APPARATUS FOR ACCESS DATA RECOVERY FROM A MALFUNCTIONING DEVICE

• US 20120115441A1
• Filed: 11/02/2011
• Published: 05/10/2012
• Est. Priority Date: 11/03/2010
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Schell, Stephan V.
• Granted Patent: US 8,913,992 B2
• Time in Patent Office: Days
• US Class Current: 455/411
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

Methods and apparatus for recovering access data from a malfunctioning device. In one embodiment, trained service personnel are provided a specialized apparatus for retrieving access data from a malfunctioning device. For example, in the instance the device comprises a cellular device having an unrecoverable hardware failure, trained service personnel can connect to the secure element and retrieve the one or more electronic Subscriber Identity Modules (eSIMs) stored thereon. The eSIMs are then “reclaimed” and reprogrammed/distributed to a new device. In one implementation, security and integrity measures are taken to protect and control distribution of sensitive access data.

Claims

1. A wireless apparatus comprising:

a communications interface;

a power supply;

a processor;

a secure element adapted to store a plurality of user access data, where each user access data enables the apparatus access to a corresponding network via the communications interface; and

a bypass interface, wherein the bypass interface enables access to the secure element without requiring the communications interface, the power supply, and the processor.

2. The wireless apparatus of claim 1, wherein:

the wireless apparatus comprises a cellular phone, the secure element comprises an electronic Universal Integrated Circuit Card (eUICC) configured to store one or more electronic Subscriber Identity Modules (eSIMs);

the bypass interface comprises a Joint Test Action Group (JTAG) interface that further comprises a power input, a data input, a data output, and a clock input; and

the bypass interface'"'"'s access to the eUICC enables retrieval of one or more eSIMs, and deletion of the eUICC contents.

3. The wireless apparatus of claim 1, wherein the wireless apparatus comprises a cellular phone.

4. The wireless apparatus of claim 3, wherein the bypass interface enables access to the user access data during recoverable malfunction operation, said recoverable malfunction operation being characterized by one or more of the power supply, the processor, and the wireless interface being rendered inoperable.

5. The wireless apparatus of claim 4, wherein during normal operation, the cellular phone authenticates to a cellular network with the user access data.

6. The wireless apparatus of claim 5, wherein the cellular phone is further configured to communicate with the cellular network upon successful authentication.

7. The wireless apparatus of claim 4, wherein the bypass interface comprises an external interface that is accessible to a user without third party assistance.

8. The wireless apparatus of claim 7, wherein the external interface comprises a connector whose primary purpose is not the recovery of data.

9. The wireless apparatus of claim 7, wherein the connector comprises a 30-pin connector.

10. The wireless apparatus of claim 4, wherein the bypass interface comprises an internal interface with is accessible only to trained personnel.

11. A method for recovering user access data from a malfunctioning device, comprising:

establishing a secure connection to a secure element, the secure element adapted to store a plurality of user access data, where each user access data enables an apparatus to wirelessly access a corresponding network via a wireless interface;

exchanging one or more cryptographic material;

retrieving the user access data, the user access data encrypted based at least in part on the one or more cryptographic material;

voiding the retrieved user access data; and

where the secure connection is performed via a bypass interface, the bypass interface configured to function without the wireless interface.

12. The method of claim 11, where the bypass interface enables access to the user access data during recoverable malfunction operation.

13. The wireless apparatus of claim 12, wherein during normal operation, the cellular phone authenticates to a cellular network with the user access data.

14. The wireless apparatus of claim 11, wherein the bypass interface comprises a connector whose primary purpose is not the recovery of data, that is accessible to a user.

15. The wireless apparatus of claim 11, wherein the bypass interface comprises an internal interface with is accessible only to trained personnel.

16. A method for recovering user access data from a malfunctioning device, comprising:

responsive to connection to a recovery apparatus, booting from a recoverable malfunction mode;

establishing a secure connection;

when the secure connection is successfully established, responsive to a request for user access data, providing one or more user access data; and

when the secure connection is successfully established, responsive to a request to void data, voiding the one or more user access data.

17. The method of claim 16, where the secure connection is performed over a bypass interface configured to enable access to the one or more user access data during recoverable malfunction operation.

18. The method of claim 17, where the bypass interface comprises a connector whose primary purpose is not the recovery of data, that is readily accessible to a user.

19. The method of claim 18, where the recovery apparatus is a personal computer.

20. The method of claim 17, wherein the bypass interface is a JTAG interface that is accessibly only with specialized recovery apparatus.