Procedure for the control of applications stored in a subscriber identity module

• US 6,711,262 B1
• Filed: 12/30/1999
• Issued: 03/23/2004
• Est. Priority Date: 07/02/1997
• Status: Expired due to Term

• Current Assignee: Sonera Smarttrust OY
• Original Assignee: Sonera Oyj
• Inventors: Vatanen, Harri
• Primary Examiner(s): Peeso, Thomas R.
• Assistant Examiner(s): Zand, Kambiz
• Application Number:
  US09/475,554
• Time in Patent Office: 1,545 Days
• Field of Search: 380/255, 380/257, 380/258, 380/259, 380/260, 380/277, 380/41
• US Class Current: 380/277
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A procedure for the control of applications stored in a user'"'"'s subscriber identity module (SIM) in a data communication system that includes a data communication network, a terminal device connected to the data communication network and to which the subscriber identity module is connected, and an application control server that is connected to the data communication network. The subscriber identity module contains a stored application that makes use of the data communication network and that is used by way of the terminal device. A key list comprising one or more application-specific keys is stored in the user'"'"'s subscriber identity module, and a corresponding key list is also stored in the application control server which is operable to control applications stored in the subscriber identity modules of multiple users of the network. The application stored in the user'"'"'s subscriber identity module is activated and/or closed through the transmission, verification and use of keys stored in the key lists at the subscriber identity module and at the application control server.

Claims

1. In a data communication system that includes a data communication network, a terminal device connected to the data communication network, a subscriber identity module connected to the terminal device and containing a stored application for use by the terminal device and which makes use of the data communication network, and an application control server connected to the data communication network, a procedure for controlling the application stored in the subscriber identity module, comprising the steps of:

storing in the subscriber identity module a key list comprising a plurality of keys associated with the stored application, said keys comprising a closing key for use in closing the application and an activation key for use in activating the application;

storing in the application control server a server key list corresponding to the key list stored in the subscriber identity module;

generating at the application control server one of an activating message including the activation key stored in the server key list and a closing message including the closing key stored in the server key list;

transmitting the generated one of the activating message and the closing message from the application control server to the subscriber identity module; and

checking, at the subscriber identity module after receipt from the application control server of the transmitted one of the activating message and the closing message, the key included in the received one of the activating message and the closing message against the key list stored in the subscriber identity module and, if the received key is found to match one of the stored keys, activating the application if the received key matches the activation key in the stored key list in the subscriber identity module and closing the application if the received key matches the closing key in the stored key list in the subscriber identity module.

2. A procedure in accordance with claim 1, wherein the subscriber identity module includes a module operable for selectively activating and closing the stored application.

3. A procedure in accordance with claim 1, further comprising the step of periodically determining whether there exists a valid right of access to the stored application in the subscriber identity module.

4. A procedure in accordance with claim 1, wherein the subscriber identity module has a unique identifier associated with the subscriber identity module, and further comprising the step of linking, at the application control server, the server key list to the unique identifier.

5. A procedure in accordance with claim 1, wherein the subscriber identity module has a unique identifier associated with the subscriber identity module, and further comprising the steps of:

transmitting, from the application control server to the subscriber identity module, a message concerning opening of the application and including an application key k(n) for use in the application; and

linking, at the application control server, the application key k(n) to the unique identifier of the subscriber identity module.

6. A procedure in accordance with claim 1, further comprising the steps of:

verifying, at the application control server, whether there exists a right of access to the application using the subscriber identity module; and

transmitting from the application control server to the subscriber identity module, where it is verified that the right of access exists, special data needed to use the application.

7. A procedure in accordance with claim 1, wherein transmissions between the application control server and the subscriber identity module are encrypted.

8. A procedure in accordance with claim 1, further comprising the step of establishing between the terminal device, to which the subscriber identity module is connected, and the application control server a telecommunication connection via a mobile telephone communication network for carrying transmissions between the application control server and the subscriber identity module.

9. A procedure in accordance with claim 1, wherein the data communication network is a GSM network and the terminal device is a GSM telephone.