DE102018007576A1 - Subscriber identity module with profile or set up for profile - Google Patents

Abstract

The invention provides a Subscriber Identity Module (eUICC) comprising a Profile (PP) implemented therein, or adapted to implement a Profile (PP) therein, the Profile (PP) being arranged to connect the Subscriber Identity Module (eUICC) to a Mobile Radio Network ( Operator), characterized by a clone means (KL) arranged to create a clone profile (KP), comprising the steps of: (a) generating a profile (PP) implemented in the subscriber identity module (eUICC); exact clone of the profile (PP), and implementing the exact clone as a clone profile (KP) in the Subscriber Identity Module (eUICC); (b) providing or registering the clone profile (KP) instead of the profile (PP) for subscriber identity module (eUICC) authentication to a mobile network operator

Description

Field of the invention

The invention relates to a subscriber identity module comprising a profile implemented therein or adapted to be implemented in a profile, wherein the profile is adapted to authenticate the subscriber identity module to a mobile radio network.

The world is mobile connected, and mobile networking continues. Mobile-enabled terminals communicate via mobile networks. Classic mobile-capable devices include smartphones and cell phones. Mobile terminal devices also include control devices (control devices or measuring devices or combined control / measuring devices) for industrial installations in the commercial or private environment. For example, industrial facilities are production facilities that have one or more control devices (terminals) that can communicate with a background system and / or with each other over a cellular network. Other industrial devices are smart home devices such as e.g. Heaters or electricity consumers with terminals in the form of control devices.

To use a mobile-capable terminal, such as smartphones or mobile phones, in a mobile network of a network operator, the terminal contains a subscriber identity module with a subscription profile or profile. The profile accomplishes the configuration of the terminal and the connection of the terminal in the mobile network. The profile is formed by a record that allows the establishment, operation and removal of a connection of the terminal in the mobile network, and includes, for example, a cryptographic authentication key Ki and an International Mobile Subscriber Identity IMSI.

The terminal itself has one or more terminal chips for operating functions of the terminal. For example, current smartphones typically have at least three terminal chips, namely, a transceiver IC that performs physical radio communication, a baseband processor (or equivalent modem) that performs wireless communication functions at the protocol level, and an application processor AP, on which the operating system and application software are running. As further terminal chips, transceiver ICs may be provided for other radio channels, in particular for short-range radio channels such as NFC (near field communication) or Bluetooth.

The subscriber identity module can be designed in different form factors, in particular plug-in, embedded, integrated and software. Subscriber identity modules plug-in and embedded form factor are arranged on a dedicated, on-chip or SoC (system-on-chip). Examples of plug-ins are SIM card (Subscriber Identity Module SIM) or USIM card (Universal SIM) or UICC (Universal Integrated Circuit Card) and contact the terminal via a card reader. Alternatively, the dedicated chip may be integrated into a housing which is festeinlötbar or firmly soldered into the terminal. A solderable / soldered subscriber identity module is provided with the addition "embedded" and referred to as eUICC, where e stands for embedded and the other name is taken from the appropriately equipped plug-in. Further possible form factors of a subscriber identity module are integrated subscriber identity modules which are integrated on a terminal chip or SoC (system-on-chip) of the terminal, ie do not have their own chip. Integrated subscriber identity modules are provided with the addition "integrated" and e.g. as integrated UICC, iUICC. Further possible form factors of a subscriber identity module are pure software modules with the functionality of a subscriber identity module, which are integrated in a terminal chip.

State of the art

In the patent application EP 17002024.2 The applicant of the present application describes a method for managing SIM card profiles in which a command is received at an interface to erase a profile present on the SIM card and thus modifies access information in response to receipt of the command is that access to the profile is no longer possible. For example, a reference to the profile is removed from the profile registry. The profile remains stored in the SIM card, so it is not really deleted, but appears only as no longer available, so it is only deleted latent. With a second command and a re-entry of a reference to the profile in the profile registry, the deletion can be undone and the profile can be restored as a regular existing profile.

A so-called "eUICC memory reset" can be used to reset the settings of a subscriber module to the factory settings with which the subscriber identity module was delivered, and remain in effect until the profile is activated for the first time. The factory settings of a profile are therefore the settings that exist before or until the profile is activated for the first time.

An eUICC memory reset command would also be found in the solution from the patent application EP 17002024.2 suitable for restoring a latently deleted profile, since entries in the profile registry are also reset to factory settings at the time of delivery of the subscriber identity module by an eUICC memory reset command.

As soon as a profile is active and in use, the values of some profile data, namely the dynamically changing profile data, change dynamically - or at least they can change dynamically if a change is made to them. The dynamically variable profile data include, for example, the count of the authentication counter, which counts the number of successful authentication processes of the subscriber identity module compared to the background system (MNO server), the count of the OTA SMS counter, which counts the number of sent SMS, and possibly also changed value of the PIN (Personal Identification Number) used to restrict access to the subscriber identity module.

If a profile that is already in use, at any time according to EP 17002024.2 As described above, when put into a latently erased state, the profile is set out of use and frozen with the values that the dynamic profile data had at that point in time.

After an eUICC memory reset, an according to EP 17002024.2 latently deleted profile with the changed values of the dynamic profile data restored.

However, at least the option of restoring a latently deleted profile with the factory settings or initial values at the time of delivery would be desirable in the case of an eUICC memory reset.

SG.P22 GSMA RSP Technical Specification, Version 2.2, 1 September 2017, describes architectures and commands associated with Provisioning of Subscriber Identity Modules eUICC with Profiles by Provisioning Server SM-DP + so that a Device operated with a Subscriber Identity Module eUICC device later faces the mobile network a mobile network server operator can authenticate. 1 shows a typical architecture as required by SGP.22.

Summary of the invention

The invention is based on the object to provide a subscriber identity module that enables a true eUICC memory reset to factory settings or initial values at the time of delivery of the subscriber identity module even for latently deleted profiles.

The object is achieved by a subscriber identity module according to claim 1. Advantageous embodiments of the invention are specified in the dependent claims.

The subscriber identity module according to the invention according to claim 1 comprises a profile implemented therein, or is at least arranged so that later a profile can be implemented therein. The profile is adapted to authenticate the subscriber identity module to a mobile network (e.g., MNO Operator Server according to SG.P22 GSMA RSP Technical Specification, Version 2.2, 1 September 2017).

1. (a) zu einem im Teilnehmeridentitätsmodul implementierten Profil, Erzeugen eines exakten Klons des Profils, und Implementieren des exakten Klons als Klon-Profil im Teilnehmeridentitätsmodul;
2. (b) Bereitstellen oder Registrieren des Klon-Profils anstelle des Profils für Authentisierungen des Teilnehmeridentitätsmodul gegenüber einem Mobilfunknetzwerk.

The subscriber identity module according to the invention according to claim 1 is characterized by a clone device that is set up to create a clone profile, with the steps:

1. (a) to a profile implemented in the subscriber identity module, generating an exact clone of the profile, and implementing the exact clone as a clone profile in the subscriber identity module;
2. (b) providing or registering the clone profile instead of the subscriber identity module authentication profile to a mobile network.

Exact clone means that profile and clone are consistent in content except for a fixed indicator that makes the two distinguishable.

For mobile network authentication, do not use the profile itself, but an exact clone of it. In the clone, the dynamic profile data changes as they would usually change for the profile. The profile itself is not used for mobile network authentication. As a result, the dynamic profile data remains unchanged. If the clone is deleted when deleting the profile, the profile can be restored later in the factory state based on the original profile.

Therefore, according to claim 1, a subscriber identity module is provided which enables a true eUICC memory reset to factory settings or initial values at the time of delivery of the subscriber identity module even for latently deleted profiles.

The creation of the clone profile can optionally be done in connection with downloading the profile if the profile is downloaded and immediately afterwards activated. Alternatively, activating the profile may be organizationally and / or temporally separate from downloading the profile, and in any case later than downloading. In this case, the creation of the clone profile is preferably not carried out when the profile is downloaded, but only when the profile is activated. Alternatively, the clone profile can also be created while downloading.

Preferably, to erase profiles so that they can be recovered, the subscriber identity module includes a latent-eraser configured to erase profiles latently, comprising the steps of receiving a latent-erase command for a profile or for a clone Profile and in response to receiving the latent-erase command, deleting the clone profile of the profile without deleting the profile.

The latent-delete command is optionally configured as ES10c.DeleteProfile command according to the technical specification SGP.22, in particular version 2.2 or previous version V2.1 or V2.0. In other words, the clone profile can be erased with an ordinary erase command, in which, however, the clone profile is designated as erase instead of the original profile. For this purpose, either the deletion command is equipped with a modified identifier, which makes it possible to selectively delete the clone profile. Alternatively, the implemented original profile and the implemented clone profile are implemented within the subscriber identity module, e.g. with indicators that a deletion command directed to the profile leads to the deletion of the clone profile, not to the deletion of the original profile.

The subscriber identity module optionally further comprises a reactivation device arranged to reactivate a profile whose clone profile has been deleted, comprising the steps of: receiving a reactivation command for a profile or for a clone profile whose clone profile Profile, and in response to receiving the reactivation command, causing the clone device to create a new clone profile, with steps (a) and (b). Since only the clone was deleted when deleting, but not the original profile, it is possible to reactivate the profile without having to reload the profile.

The reactivation command can optionally be configured as eUICC memory reset command according to the technical specification SGP.22, in particular version 2.2 or previous version V2.1 or V2.0. In this case, the eUICC memory reset will undo the profile, but restore the profile in the initial state.

The reactivation command can alternatively be designed as an ES10c.EnableProfile command according to the technical specification SGP.22. In this case, it is possible to undo the deletion of the profile by means of a standardized enable command, thereby restoring the profile in its initial state, with dynamic profile data such as in the factory state or initial state.

The reactivation device is optionally designed as a device cooperating with the clone device. Alternatively, the reactivation device is integrated into the clone device or identical to the clone device. The latter case means that an eUICC memory reset or another enable command for a profile simply creates a clone profile again.

The clone device is optionally configured to perform steps (a) and (b) in response to receipt of an activation command to activate a profile implemented in the subscriber identity module.

In a method according to the invention for activating a profile, instead of the profile, a clone of the profile is activated and set up for authentication in the mobile radio network.

In a method according to the invention for deleting an activated profile (in which the clone profile is activated), the clone of the profile is deleted instead of the profile, and the profile itself is retained.

Optionally, the original profile can be deleted by another command to permanently remove the profile.

list of figures

• 1 ein mobiles Endgerät mit einem Teilnehmeridentitätsmodul in Kommunikation mit Servern einer Mobilfunk-Infrastruktur, gemäß Ausführungsformen der Erfindung;
• 2 einen Ausschnitt aus 1, mit Veranschaulichung des Aktivierens eines Profils, gemäß Ausführungsformen der Erfindung;
• 3 einen Ausschnitt aus 1, mit Veranschaulichung des Löschens und erneuten Aktivierens eines Profils, zu dem ein Klon-Profil angelegt worden ist, gemäß Ausführungsformen der Erfindung.

In the following the invention will be explained in more detail with reference to exemplary embodiments and with reference to the drawing, in which:

• 1 a mobile terminal having a subscriber identity module in communication with servers of a mobile radio infrastructure, according to embodiments of the invention;
• 2 a section from 1 illustrating activation of a profile according to embodiments of the invention;
• 3 a section from 1 with illustration of the deletion and reactivation of a profile to which a clone profile has been applied, according to embodiments of the invention.

Detailed description of embodiments

1 shows a mobile terminal Dev with a subscriber identity module eUICC in accordance with embodiments of the invention in communication with a eUICC Manufacturers, Server EUM , a data provisioning server SM-DP + and a mobile network server operator. The subscriber identity module eUICC functionally includes a clone device KL , a latent-extinguishing device LL and a reactivation device RE , The clone device KL generates clones KP to profiles PP , The latent-extinguishing device LL deletes clones KP of profiles KP without the profile PP to delete itself, which is here called latent deletion of the profile. The reactivation facility RE reactivates latently deleted profiles PP in which only the clone KP was deleted, but not the original profile.

2 shows a section 1 , with illustration of activating a profile PP According to embodiments of the invention. The provisioning server SM-DP + sends (a) to the subscriber identity module eUICC an activation command Enable PP to the profile PP to activate. In reaction (b), the clone device generates KL to the Profile PP a clone profile KP , For later authentications (c) of the terminal Dev with the subscriber identity module eUICC towards the mobile network server operator becomes the clone profile KP used. The profile PP in the original serves only as a reserve for a possible later restoration of the (latently) deleted profile PP ,

3 shows a section 1 , with an explanation of deleting and reactivating a profile PP to which a clone profile KP has been created, according to embodiments of the invention. The subscriber identity module eUICC is in a state like in 1 , Subfigure (c), ie for mobile network authentication, the clone profile is set up. The provisioning server SM-DP + sends (a) to the subscriber identity module eUICC a delete command Delete PP to the profile PP to delete. In reaction (b), the latent-erase device clears LL the clone profile KP but not the profile PP itself. Sends the provisioning server SM-DP + later (c) an activation command Enable PP to the profile PP is activated again in the 1 (a) + (b) started process, in particular a new clone profile KP * generated.

In 1 and 2 are the clone setup KL , the latent-extinguishing device LL and the reactivation device RE shown as separate devices, according to their different logical functions. However, some of the units can also be realized in a single combined unit.

Cited prior art:

• EP 17002024.2
• SGP.22 - GSMA RSP Technical Specification, Version 2.2, 1 September 2017

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• EP 17002024 [0006, 0008, 0010, 0011, 0036]

Claims (10)

Subscriber identity module (eUICC) comprising a profile (PP) implemented therein, or adapted to implement a profile (PP) therein, the profile (PP) being arranged to authenticate the subscriber identity module (eUICC) to a mobile network operator characterized by clone means (KL) adapted to apply a clone profile (KP), comprising the steps of: (a) to a profile (PP) implemented in the subscriber identity module (eUICC), generating an exact clone of the profile (PP), and implementing the exact clone as a clone profile (KP) in the Subscriber Identity Module (eUICC); (b) providing or registering the clone profile (KP) instead of the profile (PP) for subscriber identity module (eUICC) authentication to a mobile operator. Subscriber Identity Module (eUICC) Claim 1 , further comprising a latent-erasing device (LL), which is set up to delete profiles (PP) latently, with the steps: receiving a latent-erase command for a profile (PP) or for a clone profile ( KP) and in response to receiving the latent-clear command, deleting the clone profile (KP) of the profile (PP) without deleting the profile (PP). Subscriber Identity Module (eUICC) Claim 2 , where the latent-clear command is designed as ES10c.DeleteProfile command according to the technical specification SGP.22. Subscriber Identity Module (eUICC) Claim 2 or 3 , further comprising a reactivation device (RE), set up a profile (PP) whose clone profile (KP) has been deleted, to reactivate again, with the steps: - Receiving a reactivation command for a profile (PP) or for a clone profile (KP) whose clone profile (KP) has been deleted, and in response to the receipt of the reactivation command, causing the clone device to create a new clone profile (KP *), with steps (a ) and (b). Subscriber Identity Module (eUICC) Claim 4 , wherein the reactivation command is designed as eUICC memory reset command according to the technical specification SGP.22 or designed as ES10c.EnableProfile command according to the technical specification SGP.22. Subscriber Identity Module (eUICC) Claim 4 or 5 wherein the reactivation device (RE) is configured as a device cooperating with the cloning device (KL) or is integrated in the cloning device (KL) or is identical to the cloning device (KL). Subscriber Identity Module (eUICC) according to one of Claims 1 to 6 wherein the clone means (KL) is arranged to perform steps (a) and (b) in response to receipt of an activation command (10c.EnableProfile) for activating a profile (PP) implemented in the subscriber identity module (eUICC) , A method for activating a profile (PP) implemented in a subscriber identity module (eUICC), comprising the steps of: receiving an activation command (10c.EnableProfile); characterized by : a clone device (KL) implemented in the subscriber identity module (eUICC); and, in response to receipt of the activation command (10c.EnableProfile), the step of: causing the cloning means (KL) to create a clone profile (KP), comprising the steps of: (a) the profile ( PP), generating an exact clone of the profile (PP), and implementing the exact clone as a clone profile (KP) in the Subscriber Identity Module (eUICC); (b) providing or registering the clone profile (KP) instead of the profile (PP) for subscriber identity module (eUICC) authentication to a mobile operator; (c) Applying the activation command (10c.EnableProfile) to the clone profile, putting the clone profile in an activated state. A method for deleting a profile (PP) implemented in a subscriber identity module (eUICC), comprising the steps of: receiving a deletion command; characterized by : a clone profile (KP) implemented in the subscriber identity module (eUICC) which is an exact clone of the profile (PP); - in response to receiving the clear command (ES10c.DeleteProfile; eUICC memory reset): - Clearing the clone profile (KP). Method according to Claim 8 or 9 in which the activation command (10c.EnableProfile) or the delete command (ES10c.DeleteProfile; eUICC memory reset) is received by a provisioning server (SM-DP +).

Images