Methods, Secure Element, Server, Computer Programs and Computer Program Products for Improved Application Management

• US 20150032865A1
• Filed: 10/13/2014
• Published: 01/29/2015
• Est. Priority Date: 12/04/2009
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Arvidsson, Petter, Eld, Mattias
• Granted Patent: US 9,456,027 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

It presented a method, performed in a secure element, the secure element being arranged to enable user applications of the secure element to verify authenticity of incoming user application commands. The method comprises the steps of: receiving a command from a secure element reader for a user application on the secure element, the command comprising an application identifier of the user application; determining whether there is a matching user application in the secure element; invoking the matching user application; and establishing, when there is an absence of any matching user applications, a communication channel with a remote application manager server and sending an absent user application message to the application manager server indicating that the user application has been requested on the secure element. A corresponding secure element, method for an application manager server and application manager server are also presented.

Claims

1. A method, performed in an application manager server, comprising:

receiving a message indicating an absent user application from a secure element, the secure element configured to enable user applications of the secure element to verify authenticity of incoming user application commands, the secure element comprised in a mobile communication terminal, the absent user application message indicating that a command was sent to access a user application absent on the secure element;

reading a configuration to determine how to handle absent user application for the user application;

retrieving, in response to the configuration for the user application indicating user application retrieval, the user application from a storage accessible to the application manager server;

sending the user application to the secure element.

2. The method of claim 1 further comprising retrieving an application instance state comprising state data of the user application from when the user application was most recently executed from being stored in the secure element.

3. The method of claim 1 further comprising sending, in response to the configuration for the user application indicating that a service provider server should be informed, the absent user application message to the service provider server, wherein the service provider server is connected to a secure element reader which has requested access to the user application on the secure element.

4. The method of claim 3 further comprising receiving a configuration message from the service provider server indicating how the absent user application message is to be handled by the application manager server.

5. An application manager server comprising:

a receiver configured to receive an absent user application message from a secure element, the secure element configured to enable user applications of the secure element to verify authenticity of incoming user application commands, the secure element comprised in a mobile communication terminal, the absent user application message indicating that a command was sent to access a user application absent on the secure element;

a transmitter;

a controller configured to read a configuration to determine how to handle absent user application for the user application;

wherein the controller is configured to retrieve, in response to the configuration for the user application indicating user application retrieval, the user application from storage and send the user application to the secure element using the transmitter.

6. The application manager server of claim 5 wherein the transmitter is configured to, in response to the configuration for the user application indicating that a service provider server should be informed, send the absent user application message to the service provider server, wherein the service provider server is connected to a secure element reader which has requested access to the user application on the secure element.

7. A computer program product stored in a non-transient computer readable medium in an application manager server, the computer program product comprising software code instructions which, when run on the application manager server, causes the application manager server to:

receive an absent user application message from a secure element, the secure element configured to enable user applications of the secure element to verify authenticity of incoming user application commands, the secure element comprised in a mobile communication terminal, the absent user application message indicating that a command was sent to access a user application absent on the secure element;

read a configuration to determine how to handle absent user application for the user application;

retrieve, in response to the configuration for the user application indicating user application retrieval, the user application from storage;

send the user application to the secure element.