METHODS AND SYSTEMS FOR PARTIAL PERSONALIZATION DURING APPLICATION UPDATE

• US 20170123789A1
• Filed: 01/09/2017
• Published: 05/04/2017
• Est. Priority Date: 10/10/2014
• Status: Active Grant

• Current Assignee: Christian Aabye, Glenn Powell, Igor Karpenko, Kiushan Pirzadeh
• Original Assignee: Christian Aabye, Glenn Powell, Igor Karpenko, Kiushan Pirzadeh
• Inventors: Aabye, Christian, Pirzadeh, Kiushan, Powell, Glenn, Karpenko, Igor
• Granted Patent: US 10,255,056 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/4451 User profiles; Roaming
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

Embodiments of the present invention are directed at methods and systems for providing a partial personalization process that allows for more efficient and effective personalization of a application on a communication device. For example, personalization profiles associated with multiple versions of the application may be stored at a provisioning system and the provisioning system may determine the appropriate partial provisioning information to update the application for each migration notification. Partial personalization information that is to be updated for the updated version of the application may be generated and installed to enable new functionality and/or update the information contained within an updated application without requiring re-personalization of all personalized information.

Claims

1. A method for updating personalization information associated with an update of an application on a communication device, the method comprising:

receiving, by a server computer, a migration notification including device identification information, applet identification information identifying an applet of the application, and application version information for the application installed on the communication device;

identifying, by the server computer, an account associated with the migration notification using the device identification information and the applet identification information;

validating, by the server computer, the migration notification by comparing the received application version information with stored application version information associated with the identified account;

identifying, by the server computer, a current personalization profile associated with the application using the received application version information;

identifying, by the server computer, an updated personalization profile associated with the update of the application;

determining, by the server computer, partial personalization information associated with a difference between the current personalization profile and the updated personalization profile;

providing, by the server computer, the partial personalization information for installation on the communication device to update the personalization information of the applet identified by the applet identification information.

2. The method of claim 1, wherein the partial personalization information includes at least one of an encryption key, a credential, a shared secret, and user information.

3. The method of claim 1, wherein the application version information indicates a previous version of the application installed on the communication device.

4. The method of claim 1, wherein the application is in an inactive state until the partial personalization information are installed on the communication device.

5. The method of claim 1, wherein updated functionality associated with the update of the application is disabled until the partial personalization information are installed on the communication device.

6. The method of claim 1, further comprising:

establishing, by the server computer, a secure channel with the communication device;

sending, by the server computer, a status update request to prepare the application for the update of the personalization information;

receiving, by the server computer, validation information from the application of the communication device through the secure channel; and

validating, by the server computer, the validation information to authenticate the application.

7. The method of claim 6, wherein the secure channel is established using a session key derived from information in the migration notification.

8. The method of claim 1, wherein the migration notification is generated by the application in response to an event associated with the application.

9. The method of claim 1, wherein the generation of the partial provisioning information is performed by an issuer computer.

10. The method of claim 1, wherein the server computer communicates with the application via a master application installed on the communication device.

11. A server computer comprising:

a processor; and

a computer-readable medium coupled to the processor, the computer-readable medium comprising code, executable by the processor, to perform operations for updating personalization information associated with an update of an application on a communication device, the operations including;

receiving a migration notification including device identification information, applet identification information identifying an applet of the application, and application version information for the application installed on the communication device;

identifying an account associated with the migration notification using the device identification information and the applet identification information;

validating the migration notification by comparing the received application version information with stored application version information associated with the identified account;

identifying a current personalization profile associated with the application using the received application version information;

identifying an updated personalization profile associated with the update of the application;

determining partial personalization information associated with a difference between the current personalization profile and the updated personalization profile;

providing the partial personalization information for installation on the communication device to update the personalization information of the applet identified by the applet identification information.

12. The server computer of claim 11, wherein the partial personalization information includes at least one of an encryption key, a credential, a shared secret, and user information.

13. The server computer of claim 11, wherein the application version information indicates a previous version of the application installed on the communication device.

14. The server computer of claim 11, wherein the application is in an inactive state until the partial personalization information are installed on the communication device.

15. The server computer of claim 11, wherein updated functionality associated with the update of the application is disabled until the partial personalization information are installed on the communication device.

16. The server computer of claim 11, wherein the operations further include:

establishing a secure channel with the communication device;

sending a status update request to prepare the application for the update of the personalization information;

receiving validation information from the application of the communication device through the secure channel; and

validating the validation information to authenticate the application.

17. The server computer of claim 16, wherein the secure channel is established using a session key derived from information in the migration notification.

18. The server computer of claim 11, wherein the migration notification is generated by the application in response to an event associated with the application.

19. The server computer of claim 11, wherein the generation of the partial provisioning information is performed by an issuer computer.

20. The server computer of claim 11, wherein the server computer communicates with the application via a master application installed on the communication device