Method, server, computer program and computer program product for communicating with secure element

• US 9,572,025 B2
• Filed: 05/08/2009
• Issued: 02/14/2017
• Est. Priority Date: 04/16/2009
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Arvidsson, Petter, Eld, Mattias, Pierrel, Sbastien
• Primary Examiner(s): Chea, Philip
• Assistant Examiner(s): Ma, Wing
• Application Number:
  US13/264,226
• Publication Number:
  US 20120047237A1
• Time in Patent Office: 2,839 Days
• Field of Search: 709/219, 455/411, 455/410
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A method is presented for sending a message to a secure element connected to a mobile equipment, wherein the secure element is coupled to a user of the mobile equipment. The method comprises the steps, performed in an application manager server of: receiving, from an application server, an application message and an identifier of a destination secure element; generating a secure element message from the application message; from a plurality of connectivity providers, selecting a connectivity provider capable of communicating with the destination secure element; and sending the secure element message to the selected connectivity provider for forwarding to the destination secure element. A corresponding application manager server, computer program and computer program product are also presented.

Claims

1. A method for sending a message to a secure element connected to a mobile equipment, wherein the secure element is associated with a user of the mobile equipment, the method being performed in an application manager server and comprising:

receiving, by the application manager server from an application server, an application message and an identifier of a destination secure element;

generating, by the application manager server, a secure element message from the application message;

sending, by the application manager server, the secure element message to a secure element manager server which is different from the application server and the mobile equipment;

receiving, by the application manager server from the secure element manager server, a signature of the secure element message;

from a plurality of connectivity providers, selecting, by the application manager server, a connectivity provider capable of communicating with the destination secure element;

sending, by the application manager server, the secure element message, including the signature, to the selected connectivity provider for forwarding to the destination secure element over a real-time communication channel;

receiving, by the application manager server, a response to the secure element message from the selected connectivity provider, wherein the response is sent from the destination secure element using the real-time communication channel; and

sending, by the application manager server, the response to the application server;

wherein the plurality of connectivity providers are separate from the mobile equipment and are also separate from the application manager server.

2. The method of claim 1, wherein said response to the secure element message received from the selected connectivity provider acknowledges that the destination secure element has received the secure element message.

3. The method of claim 1, wherein generating the secure element message comprises using the application message as the secure element message.

4. The method of claim 1, further comprising:

setting up, by the application manager server, a secure channel to the secure element;

wherein sending the secure element message, by the application manager server, for forwarding to the destination secure element comprises sending the secure element message over the secure channel.

5. The method of claim 1, wherein the signature is appended to the secure element message.

6. The method of claim 1, further comprising, prior to sending the secure element message to the secure element manager server:

from a plurality of secure element manager servers, selecting, by the application manager server, a secure element manager server which is associated with the destination secure element;

wherein sending the secure element message, by the application manager server, to the secure element manager server comprises sending the secure element message to the selected secure element manager server.

7. The method of claim 1, wherein several secure element messages to be signed are sent collectively and corresponding signatures are received collectively.

8. An application manager server for sending messages to a secure element connected to a mobile equipment, wherein the secure element is associated with a user of the mobile equipment, the application manager server comprising hardware circuitry configured as:

a receiver of the application manager server configured to receive, from an application server, an application message and an identifier of a destination secure element;

a controller of the application manager server configured to generate a secure element message from the application message;

a secure element manager interface of the application manager server configured to;

send the secure element message to a secure element manager server which is different from the application server and the mobile equipment; and

receive, from the secure element manager server, a signature of the secure element message;

a connection selector of the application manager server configured to select, from a plurality of connectivity providers, a connectivity provider capable of communicating with the destination secure element; and

a sender of the application manager server configured to send the secure element message, including the signature, to the selected connectivity provider for forwarding to the destination secure element over a real-time communication channel;

wherein the receiver is further configured to receive a response to the secure element message from the selected connectivity provider, wherein the response is sent from the destination secure element using the real-time communication channel;

wherein the sender is further configured to send the response to the application server; and

wherein the plurality of connectivity providers are separate from the mobile equipment and are also separate from the application manager server.

9. The application manager server of claim 8, wherein the connection selector is configured to select a second application manager server that is capable of communicating with the destination secure element.

10. The application manager server of claim 8, wherein said response to the secure element message received from the selected connectivity provider includes an acknowledgement that the destination secure element has received the secure element message.

11. The application manager server of claim 8, wherein the hardware circuitry of the application manager server is further configured as a secure element manager server selector configured to select, from a plurality of secure element manager servers, the secure element manager server which is associated with the destination secure element.

12. A computer program product stored in non-transitory computer-readable media, said computer program product comprising program instructions for sending a message to a secure element connected to a mobile equipment, wherein the secure element is associated with a user of the mobile equipment, the computer program product comprising computer program code which, when run on an application manager server, configures the application manager server to:

receive, by the application manager server from an application server, an application message and an identifier of a destination secure element;

generate, by the application manager server, a secure element message from the application message;

send, by the application manager server, the secure element message to a secure element manager server which is different from the application server and the mobile equipment;

receive, by the application manager server from the secure element manager server, a signature of the secure element message;

from a plurality of connectivity providers, select, by the application manager server, a connectivity provider capable of communicating with the destination secure element;

send, by the application manager server, the secure element message, including the signature, to the selected connectivity provider for forwarding to the destination secure element over a real-time communication channel;

receive, by the application manager server, a response to the secure element message from the selected connectivity provider, wherein the response is sent from the destination secure element using the real-time communication channel; and

send, by the application manager server, the response to the application server;

wherein the plurality of connectivity providers are separate from the mobile equipment and are also separate from the application manager server.