ENABLING SECURE APPLICATION DISTRIBUTION ON A (E)UICC USING SHORT DISTANCE COMMUNICATION TECHNIQUES

• US 20160014601A1
• Filed: 11/03/2014
• Published: 01/14/2016
• Est. Priority Date: 07/14/2014
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Mellqvist, Anders, Berthet, David
• Granted Patent: US 9,848,325 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/205 Transfer to or from user equipment or user record carrier

Abstract

The present disclosure provides for methods and devices for enabling distribution of a first security application comprised in the first wireless device to the second wireless device. One method comprises the steps of receiving, in the first wireless device, using a short distance communication technology, a hardware identifier of the second wireless device, sending, from the first wireless device, the hardware identifier and information identifying the first security application to the network node, receiving, in the network node, from the first wireless device, the hardware identifier of the second wireless device and the information identifying the security application and authorising, in the network node, the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

Claims

1. A method performed in a system comprising a first wireless device, a second wireless device and a network node, for enabling distribution of a first security application comprised in the first wireless device to the second wireless device, the method comprising:

receiving, in the first wireless device, using a short distance communication technology, a hardware identifier of the second wireless device;

sending, from the first wireless device, the hardware identifier and information identifying the first security application to the network node;

receiving, in the network node, from the first wireless device, the hardware identifier of the second wireless device and the information identifying the security application; and

authorising, in the network node, the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

2. The method according to claim 1, comprising:

displaying, in the first wireless device, security applications available for distribution in the first wireless device; and

receiving, in the first wireless device, user input on which security application to distribute to the second wireless device, the selected security application is the first security application.

3. The method according to claim 1, wherein authorizing, in the network node, comprises requesting authorizing information from a Service provider.

4. The method according to claim 3, wherein authorizing, in the network node, comprises that the network node communicates with an external server wherein the external server is a service provider server such as a Mobile Network Operator, MNO, server, a server provided by a bank, a server provided by a car manufacturer or a server from an application software company.

5. The method according to claim 1, comprising:

sending, from the network node to the first wireless device, a first confirmation that the hardware identifier is received in the network node and/or that it is a correct hardware identifier;

receiving, in the first wireless device, a first confirmation from the network node that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

6. The method according to claim 1, comprising:

sending, from the network node, the second security application associated with the first security application of the first wireless device, to the second wireless device.

7. The method according to claim 1, comprising:

sending, from the network node, a second confirmation to the first wireless device that the second security application associated with the first security application is authorized in the second wireless device;

receiving, in the first wireless device, a second confirmation that the second security application associated with the first security application is authorized in the second wireless device.

8. The method according to claim 1, comprising:

receiving, in the first wireless device, user input to cancel the authorization to access the second security application, associated with the first security application, in the second wireless device;

sending, from the first wireless device, instructions to the network node to cancel the authorization to the second wireless device;

receiving, in the network node, instructions from the first wireless device to cancel the authorization to the second wireless device to access the second security application associated with the first security application;

canceling, in the network node, the authorization to the second wireless device.

9. A method, performed in a first wireless device, of enabling distribution of a first security application comprised in the first wireless device to a second wireless device, the method comprising:

receiving, using a short distance communication technology, a hardware identifier of the second wireless device; and

sending the hardware identifier and information identifying the first security application to a network node, thereby enabling the network node to authorise the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

10. The method according to claim 9, comprising:

displaying security applications available for distribution in the first wireless device;

receiving user input on which security application to distribute to the second wireless device, the selected security application is the first security application.

11. The method according to claim 9, comprising:

receiving a first confirmation from the network node that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

12. The method according to claim 9, comprising:

receiving a second confirmation that the second security application associated with the first security application is authorized in the second wireless device.

13. The method according to claim 9, comprising:

receiving user input to cancel the authorization to access the second security application, associated with the first security application, in the second wireless device;

sending instructions to the network node to cancel the authorization to the second wireless device;

14. The method according to claim 9, wherein the first and second security applications comprises an application for enabling access to external services.

15. The method according to claim 9, wherein the first and second security application comprises a Subscriber Identity Module, SIM.

16. The method according to claim 9, wherein the short distance communication technology is short distance radio technology.

17. The method according to claim 9, wherein the short distance communication technology is Body Coupled Communication, BCC, technology.

18. A method performed in a network node of enabling distribution of a first security application comprised in a first wireless device to a second wireless device, the method comprising:

receiving, from the first wireless device, a hardware identifier of the second wireless device and information identifying the security application;

authorising the second wireless device to receive and/or activate a second security application associated with a security application of the first wireless device.

19. The method according to claim 18, wherein authorizing comprises requesting authorizing information from a subscription distributing center.

20. The method according to claim 19, wherein authorizing comprises that the network node communicates with an external server.

21. The method according to claim 20, wherein the external server is a service provider server such as a Mobile Network Operator, MNO, server, a server provided by a bank, a server provided by a car manufacturer or a server from an application software company.

22. The method according to, claim 18 comprising:

sending the second security application associated with the first security application of the first wireless device, to the second wireless device.

23. The method according to claim 18, comprising:

sending, to the first wireless device, a first confirmation that the hardware identifier is received in the network node and/or that it is a correct hardware identifier.

24. The method according to claim 18, comprising:

sending a second confirmation to the first wireless device that the second security application associated with the first security application is authorized in the second wireless device.

25. The method according to claim 18, comprising:

receiving instructions from the first wireless device to cancel the authorization to the second wireless device to access the second security application associated with the first security application;

canceling the authorization to the second wireless device.

26. The method according to claim 18, wherein the first and second security application comprises an application for enabling access to external services.

27. The method according to claim 18, wherein the first and second security application comprises a Subscriber Identity Module, SIM received from a SIM server.

28. The method according to claim 27, wherein the sending comprises pushing SIM to the second wireless device using SMS or another connectivity protocol such as IP.

29. A method, performed in a second wireless device, of enabling distribution of a first security application comprised in a first wireless device to the second wireless device, the method comprising:

receiving, using a short distance communication technology, information identifying the first security application of the first wireless device; and

sending a hardware identifier of the second wireless device and information identifying the first security application to a network node, thereby enabling the network node to authorise the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.

30. A system, comprising a first wireless device, a second wireless device and a network node, for enabling distribution of a first security application comprised in the first wireless device to the second wireless device, comprising:

a first wireless device, comprising;

communication circuitry for short distance communication;

processing circuitry configured to;

i. receive, using the communication circuitry, a hardware identifier of the second wireless device; and

ii. send, using the communication circuitry, the hardware identifier and information identifying the security application to a network node, thereby enabling the network node to authorise the second wireless device to get access to a second security application associated with the security application of the first wireless device;

and

a network node, comprising;

communication circuitry for short distance communication;

processing circuitry configured to;

i. receive, using the communication circuitry, from the first wireless device, a hardware identifier of the second wireless device and information identifying the security application; and

ii. authorise the second wireless device to access a security application associated with a second security application of the first wireless device;

and a second wireless device.

31. A first wireless device, for enabling distribution of a first security application comprised in the first wireless device to a second wireless device, comprising:

communication circuitry for short distance communication;

processing circuitry configured to;

iii. receive, using the communication circuitry, a hardware identifier of the second wireless device; and

iv. send, using the communication circuitry, the hardware identifier and information identifying the security application to a network node, thereby enabling the network node to authorise the second wireless device to get access to a second security application associated with the security application of the first wireless device.

32. The first wireless device according to claim 31, wherein the first and second security application comprises an application for enabling access to external services.

33. The first wireless device according to claim 31, wherein the first and second security application comprises a Subscriber Identity Module, SIM.

34. The first wireless device according to claim 31, wherein the short distance communication technology is short distance radio technology.

35. The first wireless device according to claim 31, wherein the short distance communication technology is Body Coupled Communication, BCC, technology.

36. A network node, for enabling distribution of a first security application comprised in a first wireless device to a second wireless device, comprising:

communication circuitry for short distance communication;

processing circuitry configured to;

receive, using the communication circuitry, from the first wireless device, a hardware identifier of the second wireless device and information identifying the security application; and

authorise the second wireless device to access a security application associated with a second security application of the first wireless device.

37. The network node according to claim 36, wherein the first and second security application comprises an application for enabling access to external services.

38. The network node according to claim 36, wherein the first and second security application comprises a Subscriber Identity Module, SIM received from a SIM server.

39. The network node according to claim 38, wherein the sending comprises pushing SIM to the second wireless device using SMS or another connectivity protocol such as IP.

40. A second wireless device, for enabling distribution of a first security application comprised in a first wireless device to the second wireless device, comprising:

communication circuitry for short distance communication;

processing circuitry configured to;

receive, using a short distance communication technology, information identifying the first security application of the first wireless device; and

send a hardware identifier of the second wireless device and information identifying the first security application to a network node, thereby enabling the network node to authorise the second wireless device to receive and/or activate a second security application associated with the first security application of the first wireless device.