WO2016008581A1

WO2016008581A1 - Participant identity module having a number of services

Info

Publication number: WO2016008581A1
Application number: PCT/EP2015/001441
Authority: WO
Inventors: Bernhard Inderst; Alexander SUMMERER; Tobias Beschnidt
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2014-07-18
Filing date: 2015-07-13
Publication date: 2016-01-21
Also published as: DE102014010698B3

Abstract

The invention relates to a participant identity module (1) which is inserted or which can be inserted into a mobile end device, and which has a subscription and a number of services, which services can have an activated and a deactivated status. The services are implemented in a single applet (2) in the participant identity module. The number of services are individually manageably designed, wherein the applet has a respective service management key for each service that is individually manageably designed, said service management key being designed in such a way that it can have an activated and a deactivated status, corresponding to an activated or deactivated status of each service. The status of each service management key can be switched between the activated and the deactivated status using a management command directed at the service management key, such that the service corresponding to the service management key is activated or deactivated.

Description

Subscriber identity module with multiple services

The invention relates to a subscriber identity module with a plurality of services, which are implemented in addition to a subscription implemented or still to be implemented for the use of a terminal in a mobile radio network in the subscriber identity module.

To use a mobile terminal such as smartphones or mobile phones in a mobile operator's cellular network, the terminal includes a subscriber identity module with a subscription. The subscription is formed by a record that allows the establishment, operation and removal of a connection of the terminal in the mobile network, and includes, for example, a cryptographic authentication key Ki and an International Mobile Subscriber Identity IMSI. The subscriber identity module may be configured as either a removable plug-in SIM (Subscriber Identity Module) or USIM (Universal SIM) or UICC (Universal Integrated Circuit Card) or, alternatively, a dedicated eICIC (embedded UICC) or eSIM or eUSIM.

Increasingly, in addition to the actual basic service voice connection (telephony) and possibly data connection, additional services are implemented in the subscriber identity module, such as services for encryption of voice connections or data connections, payment transactions, loyalty (ie bonus point programs), login to data and computational resources and the like.

The additional services are implemented by applets implemented in the subscriber identity module. With an Applet Lifecycle command directed to the applet of a service, the service can be controlled and managed. For example, you can use the applet lifecycle commands to delete, lock or unlock a service. In the case of a subscriber identity module established in accordance with [1] GPCS 2.1.1, "Global Platform Card Specification, Version 2.1.1, March 2003", for example, an applet can be deleted by means of the DELETE command described in Section 9.2, as per [1] GPCS 2.1.1, chapter 6.7.1 Application Locking, the Lifecycle command SET STATUS LOCKED can be used to put an applet in the locked state and to unlock it again.

In order for each service to be individually controllable and manageable (for example, by means of DELETE according to [1] GPCS 2.1.1), in implementations currently implemented, a separate applet is implemented for each service. This type of implementation is memory intensive. The conceivable alternative to realize all services in a single applet has the disadvantage that with an applet lifecycle command only the applet as a whole is controllable and manageable, but not selectively a single service.

The invention is based on the object to provide a subscriber identity module with multiple services that are implemented to save memory and at the same time the services are individually manageable.

The object is achieved by a subscriber identity module according to claim 1. Advantageous embodiments of the invention are specified in the dependent claims. The subscriber identity module according to the invention (eg plug-in (U) SIM card, or alternatively permanently soldered or otherwise embedded secure element) according to claim 1 is used or usable in a mobile terminal, eg smartphone, mobile phone or the like. Implemented or implemented in the subscriber identity module is a subscription for using the mobile terminal in a mobile network. Furthermore, in the subscriber identity module, several services independent of the subscription iW are implemented. The services may have an enabled state in which they are functional and a disabled state in which they are not functional and must first be activated for them to be functional.

The method is characterized in that the services are implemented in a single applet in the subscriber identity module. However, the multiple services are designed individually manageable. The applet has for this purpose, for each service that is individually manageable, its own service management key that is designed to have an enabled and a disabled status corresponding to an enabled or disabled status of the respective service. The status of the respective service management key can be switched between the activated and deactivated status with a management command directed to the service management key. This activates or deactivates the service corresponding to the service management key.

Since the multiple services are set up in a single applet, the administrative data area (also called metadata) of the applet is required only once. Thus, it can be synonymous save space here. On the other hand, the (de) activatable service management keys provide a mechanism for finely granular management of the services within the applet, as is conventionally only achieved by implementing for each service a separate applet instance in the subscriber identity module. Therefore, according to claim 1, a subscriber identity module is provided which meets both requirements of the memory-saving implementation and the individual manageability of the individual services. The administration command is optionally parameterized with one or more parameters. As a parameter, one or more of the following is optionally provided. An activation period or deactivation period for which the service management key is switched to the activated or deactivated status. After the expiration of the period, the service administration key returns without any further action to the status before switching (eg deactivated status, alternatively also possible: activated status). A number or maximum number of possible service management key activations, that is, how many times or how often at most the service management key can be activated. A number or maximum number of possible applications of the service. If the service management key has used the possible number of times, the service management key and therefore the service is deactivated without further action. For a service management key, the validity period and the allowed number or maximum number of applications can also be provided simultaneously. Furthermore, a subfunctionality of a service can be specified as a parameter.

If a permissible number of applications is provided as a parameter, the subscriber identity module optionally also has a key counter that tracks the number of applications already in use or still permissible for the key. Optionally, the key counter can also be changed accordingly by a management command with which a new permissible number is specified. Optionally, receiving the management command at the subscriber identity module causes the status of the applet to be checked, eg, whether the applet itself is enabled or disabled. Only if the applet is enabled in the status, service management keys and thus services will continue to be activated. For example, disabling the applet disables the activation of service management keys and services.

As a service, one or more of the following are optionally provided. A voice encryption service for encrypting voice data transmitted over the cellular network. A data encryption service for encrypting wireless data transmitted data that is not voice data. An access service, i. a login service for data and / or computational resources of a computer system. A loyalty service (bonus points program service) for managing bonus points. A ticketing service for the management of electronic tickets for a means of transport (= transit system) or for a ticket system.

The service management key is optionally configured as a private or public, preferably private, key of a PKI key pair.

The subscriber identity module is optionally further configured to communicate in accordance with the Secure Channel Protocol SCP according to the Global Platform Card Specification, in particular Version 2.1.1, March 2003, or successor version. The management command in this case is optionally designed as an additional lifecycle command, and structurally similar to the already existing card and applet lifecycle commands. In contrast to known lifecycle commands, a substructure within an applet is influenced by the inventive administration command. Through the parameterization of the administration With parameters, an even finer substructure within the applet is created that allows for selective management, control, and manipulation. Optionally, the administration command for sending over the mobile radio network is designed, optionally for sending in a secure form, so that a user of the terminal has no access to the administrative command, in particular as interpretable by the subscriber identity module control command, in particular an encrypted binary short message service message such as a binary SMS according to the SCP protocol. A binary SMS is encrypted and interpretable by the subscriber identity module. On the other hand, a binary SMS is not visible to a user of the terminal in which the subscriber identity module is operated and also not interpretable because of the end-to-end encryption from the sender to the subscriber identity module. Thus, the subscriber identity module can extract and execute the management command contained in the binary SMS from the binary SMS. A user can not manipulate the administration command. In a method according to the invention for activating a service in a subscriber identity module according to the invention, the following steps are carried out. A server sends a management command for one or more of the service management keys to the subscriber identity module. In the subscriber identity module, the management command is evaluated and the status of the respective service management key is switched according to the management command. As a result, the respective service is activated or deactivated in accordance with the management command. Optionally, a subscriber identity module is provided with an applet with multiple services set up for service management keys, but which do not yet contain the service management keys. In order to activate or at least activate the services, service management keys for the services are loaded into the applet. Optionally, the services are already activated by loading the service management keys. Alternatively, the service management keys and thus the services can be activated by a subsequent administration command sent to the subscriber identity module.

In the following the invention will be explained in more detail with reference to exemplary embodiments and with reference to the drawing, in which:

Fig. 1 shows a SIM card with a multi-service applet, according to an embodiment of the invention.

Fig. 1 shows, as an exemplary subscriber identity module 1, a SIM card 1 with an applet 2 with me reren services Dl, D2, D3, D4, according to an embodiment of the invention. Dl is a voice encryption service for voice connections in the mobile network. D2 is a D is a data encryption service for data connections in the mobile network. D3 is a service for access (login) to data and computing resources on a computer. D4 is a loyalty service, i. a bonus point service. The four services Dl, D2, D3, D are implemented in a single applet 2, which has only a single management area MgDat, which is available for all four services.

The SIM card 1 of FIG. 1 is for processing Secure Channel commands according to [1] GPCS 2.1.1, "Global Platform Card Specification, Version 2.1.1, March 2003 ", which sends a server 3 via an OTA channel to the SIM card 1 (OTA = over the air) With status commands, the server 3 can first of all determine the status of the applet 2 and the services D1, D2 With a status request "request" to the applet 2, the server 3 retrieves all keys of the applet 2 including the status of the respective key (eg activated or deactivated). If certificates for the keys are stored in the SIM card, the certificates and their places are also retrieved. The SIM card of FIG. 1 sends to the status request, for example, the following response "Rep" to the server 3: <4, true, K01, 0, false, K02, 0, false, K03, Z03, 5, true , K04, sub_write, true, sub_read, true>. The answer is as follows: Applet 2 contains 4 keys (for 4 services), the applet is in the "true" state. The first key K01 has the ID01, allows a number of 0 (zero) uses, and is disabled ("false"). The second key K02 has the ID02, allows a number of 0 (zero) uses, and is disabled (" false "). The third key K03 has the ID03, a certificate Z03 with ID03, permits five uses and is activated ("true"). In particular, a maximum validity period of the key can also be stored in the certificate Z03, so that the maximum of five uses only within at most The fourth key K04 has the ID04, the subfunction points to write "sub_write" is activated ("true"), the subfunction points to read "sub_read" is also activated ("true").

The server 3 can change the status of the applet 2 and the services with a management command "Modify" The administration command <Modify K01, -1, true> is used, for example, to change the status of the service Dl activated (set to "true"), with unlimited validity (parameter validity period has the value -1). With the administration command <Modify K02, ta-te, trUe>, the status of the service D2 is activated. fourth (set to "true"), with validity period starting at date / time ta and ending at date / time te (parameter validity period has the value ta-te), eg hexadecimal 34929478582 AE6- 34929478582F08 With the administration command <Modify K03 , Z03, 10, true> the status of the already activated service D3 is retained

("True"), and the validity period is increased from 5 to 10 applications (parameter validity changed from value 5 to 10.) With <Modify K04, sub_write, false> the subfunction write points of the loyalty service 4 is deactivated (new status " false "). The other subfunction points read sub_read of the loyalty service 4 remains unchanged in activated status.

Quoted literature

[1] GPCS 2.1.1, "Global Platform Card Specification, Version 2.1.1, March 2003"

Claims

Patent claims

1. Subscriber identity module (1), used or deployable in a mobile terminal, with a subscriber identity module (1) implemented or yet to be implemented subscription for use of the mobile terminal in a mobile network, and with several in the subscriber identity module (1) implemented services (Dl , D2, D3, D4), which are designed to have an activated and a deactivated status,

characterized in that

the services (D1, D2, D3, D4) are implemented in a single applet (2) in the subscriber identity module (1), and

the plurality of services (Dl, D2, D3, D4) are individually manageable designed, the applet (2) for each service, which is designed individually manageable, has its own service management key (K01, K02, K03, K04) configured to have an activated and a deactivated status corresponding to an activated or deactivated status of the respective service, wherein the status of the respective service management key (K01, K02, K03, K04) by means of a the service management key (K01, K02, K03, K04) is switchable between the activated and the disabled status, so that the service corresponding to the service management key (K01, K02, K03, K04) ( Dl, D2, D3, D4) is activated or deactivated.

2. Subscriber identity module (1) according to claim 1, wherein the management command is parameterized with one or more parameters, wherein as parameter one or more of the following is / are provided:

an activation period or deactivation period for which the service management key (K01, K02, K03, K04) is switched to the activated or deactivated status;

a number or maximum number of possible activations of the service management key (K01, K02, K03, K04); - a number or maximum number of possible activations of the service (Dl, D2, D3, D4);

a subfunctionality of the service (D1, D2, D3, D4).

A subscriber identity module (1) according to claim 1 or 2, wherein one or more of the following is provided as a service:

a voice encryption service (D1) for encrypting voice data transmitted in the mobile network;

- a data encryption service (D2) for encrypting mobile network transmitted data other than voice data;

- an access service (D3) for data and / or computational resources of a computer system;

- a loyalty service (D4) for managing bonus points;

- a ticketing service for the management of electronic tickets for a transit system or ticketing system.

4. subscriber identity module (1) according to one of claims 1 to 3, wherein the service management key (KOI, K02, K03, K04) as a private or public, preferably private, key of a PKI key pair is designed.

5. subscriber identity module (1) according to one of claims 1 to 4, which is adapted to communicate according to the Secure Channel Protocol SCP according to Global Platform Card Specification, in particular Version 2.1.1, March 2003, or successor version, in particular to communicate encrypted ,

6. subscriber identity module (1) according to one of claims 1 to 5, wherein the management command to send over the mobile network staltet, in particular in an encrypted binary short message service message (binary SMS).

The subscriber identity module (1) according to any one of claims 1 to 6, wherein the subscriber identity module (1) and the management command are further arranged such that

- caused by the receipt of the administration command at the subscriber identity module (1) that an applet status of the applet is checked, wherein the applet status can be either activated or deactivated, and

- only if the applet has enabled applet status, it is allowed to enable service management keys and thus services.

8. A method for activating a service (D1, D2, D3, D4) in a subscriber identity module (1) according to one of claims 1 to 7, wherein

- a management command for one or more of the service management keys (KOI, K02, K03, K04) is sent from a server (3) to the subscriber identity module (1),

in the subscriber identity module (1) the management command is evaluated and the status of the respective service management key (K01,

K02, K03, K04) is switched according to the management command, so that the respective service is activated or deactivated according to the management command.

A method for activating or putting into an activatable state a service (D1, D2, D3, D4) in a subscriber identity module (1) according to any one of claims 1 to 7, wherein

one or more service management keys (K01, K02, K03, K04) are sent from a server (3) to the subscriber identity module (1) become,

the service management key (KOI, K02, K03, K04) is / are implemented in the subscriber identity module (1),

- So that the service (Dl, D2, D3, D4) is activated or put into an activatable state.