RU2691107C2 - Method and devices for managing subscriptions on a security element - Google Patents

Abstract

FIELD: data processing.SUBSTANCE: invention relates to services for emergency or emergency situations processing, namely to managing subscription profiles for registration in a mobile radio network stored on a security element of a telematic module of a vehicle. When controlling several subscription profiles (18a, 18b) on security element (14) of telematic module (13) of vehicle (12), comprising a standard subscription profile (18a) for registering a security element in a mobile radio network (30) and to use services of this mobile radio network and emergency calls subscription profile (18b), by means of which automatic emergency call can be made, security element (14) is switched from standard subscription profile (18a) to emergency call subscription profile (18b) in case of event detected by terminal, preferably registered by telematic module (13) of vehicle accident (12), and execution of an emergency call. After switching step from standard subscription profile (18a) to emergency call subscription profile (18b), security element (14) reloading step is performed, after which only parts of emergency call subscription profile (18b) are read by telematic module (13) from security element (14), which are absolutely necessary for registration in corresponding profile (18b) of subscription of emergency calls of mobile radio network (40) and execution of emergency call.EFFECT: prevention of loss of time before execution of an emergency call.8 cl, 2 dwg

Description

Scope of invention

The invention generally relates to communication over mobile radio networks and, above all, a method and devices for managing subscription profiles (subscriber profiles) for registration in a mobile radio network, with subscription profiles stored on the security element of the terminal, preferably on the security element of the vehicle telematics module .

Background of the invention

The use of mobile radio and telematics services in a vehicle over a mobile radio network (also called PLMN ("Public Land Mobile Network")), which is operated by the network operator (also called MNO ("mobile network operator")), as a rule, requires that the vehicle is equipped with a telematics module with a safety element for reliable storage of data that uniquely identify and identify the vehicle and / or driver of the vehicle in relation to the mobile ny radio network. Such data for identification and identification of the vehicle or vehicle driver, also called subscription credentials data ("Subscription Credentials"), including, for example, IMSI ("international identification number of mobile subscriber equipment") and the authentication key K ;, as a rule are part of the so-called subscription profile, which, along with the subscription authority data, may contain additional data and / or executable program code that, for example, implements operator-specific m BEATER network authentication algorithm.

In the case of security elements for terminals in the form of mobile phones, such as SIM ("subscriber identity module") or eUICC ("integrated universal integrated circuit card"), it is known that there are several subscription profiles on this security element, between which, according to need, , you can switch. However, as a rule, only one subscription profile can always be active at a certain point in time. Regardless of which of the subscription profiles on the mobile phone security element is currently active, it is prescribed that an emergency call can be made at any time using a mobile phone.

When making emergency calls in a mobile radio system, in accordance with the ETSI TS 24.008 technical specification, two different types of emergency calls are distinguished, namely, manually initiated or automatic emergency calls (“emergency calls”), for example, by a telematics module that is permanently mounted in the vehicle or emergency calls from mobile phones in which the person makes an emergency call, for example, by dialing the emergency number 112.

eCall - as a special form of an emergency call in a mobile radio system - is indicated by the mobile radio network by means of the so-called eCall-flag as an emergency call originating from the vehicle. Through the eCall-flag, the mobile radio network operator is able to send this eCall to the proper rescue control station. Using eCall, along with voice transmission, data, first of all, GPS position, current time, GPS tracking direction ("global navigation and positioning system"), as well as elementary parts are also transmitted to the rescue control post. chassis numbers.

Against this background, the present invention is tasked with proposing an improved method and device for managing several subscription profiles on a security element of a terminal, preferably a vehicle telematics module, for registration in a mobile radio network, which enables an automatic emergency call, that is, an emergency call in the sense of technical specification ETSI TS 24.008.

Brief description of the invention

The specified task in accordance with the present invention solved the relevant subject of the independent claims. Preferred embodiments of the invention are defined in the dependent claims.

According to a first aspect of the invention, a method is proposed for managing several subscription profiles on a security element of a terminal, preferably in the form of a vehicle telematics module. At the same time, subscription profiles contain at least one standard subscription module for registering a security element in a mobile radio network and for using the services of this mobile radio network. In addition, the subscription profiles contain an emergency call subscription profile, through which an automatic emergency call can be made, that is, an emergency call in the sense of ETSI TS 24.008 technical specification. The method comprises the steps of switching a security element from a standard subscription profile to an emergency call subscription profile in the event of a terminal-registered event, preferably registered by the vehicle's telematics module, and making an emergency call. In this case, after the step of switching from the standard profile of the subscription to the emergency call subscription profile, a reset step (reset to “O”) of the security element is performed, after which the telematics module reads only those parts of the emergency call subscription profile that are absolutely necessary for registration in corresponding to the subscription profile of the emergency calls of the mobile radio network and the emergency call. Reading only those parts of the emergency call subscription profile that are absolutely necessary for registering an emergency mobile radio network call and making an emergency call in the corresponding subscription profile of the mobile radio network allows you to save time before making an emergency call.

Preferably, switching from a standard emergency subscription profile subscription profile is initiated by the telematics module in the event of an alarm registered by the telematics module.

Preferably, the aforementioned reboot is initiated by the telematics module.

According to the preferred embodiments of the invention, the reboot is initiated by the telematics module as soon as the telematics module received confirmation from the security element that the switch from the standard subscription profile to the emergency call subscription profile was successful.

According to a second aspect of the invention, a security element is proposed for a terminal, preferably a telematics module for a vehicle, with several memory cells for storing several subscription profiles. At the same time, several subscription profiles contain at least one standard subscription profile for registering a security element in a mobile radio network and for using the services of this mobile radio network. In addition, subscription profiles contain an emergency call subscription profile through which an automatic emergency call can be made, that is, an emergency call in the sense of ETSI TS 24.008 technical specification. The security element is designed so that in the event of a terminal-registered event, preferably a vehicle-registered vehicle accident, the operation of the security element and the terminal switches from the standard subscription profile to the subscription profile for emergency calls, and an emergency call is made through the profile of the subscription for emergency calls. After switching from a standard subscription profile to an emergency call subscription profile, a reloading step of the security element is performed, after which the telematics module reads only those parts of the emergency call subscription profile that are absolutely necessary for registering the emergency radio calls to the corresponding subscription profile of the mobile radio network and making emergency call.

Preferably, in the case of a security element, this is an eUICC, SIM or M2M module.

As the skilled person understands, the preferred options described above are favorably implemented, both within the first aspect of the invention, that is, within the method of managing multiple subscription profiles on a security element for a terminal, preferably a vehicle telematics module, and within the second aspect of the invention, that is, within this element of security.

Additional features, advantages, and objects of the invention emerge from the following detailed description of several embodiments and implementation options. Reference is made to the drawings in which is shown in:

FIG. 1: schematic representation of a communication system with a safety element installed in a vehicle for communication over a mobile radio network that illustrates various aspects of the present invention,

FIG. 2: A schematic representation of the preferred course of the process when switching a security element from a standard subscription profile to an emergency call subscription profile for making an emergency call in the system of FIG. one.

FIG. 1 shows a schematic representation of the components of the communication system 10, as well as some of the communication links between these components, which illustrates various aspects of the present invention.

FIG. 1, the vehicle 12 includes a telematics module 13 in which a security element (“Secure Element”) is embedded 14. Along with the security element 14, the telematics module 13 has a GSM module (not shown in FIG. 1) for communication via a mobile radio network.

According to preferred embodiments of the invention, security element 14 is designed as an eUICC with a SIM application implemented on it, that is, as a security element that is a solid component of the telematics module 13 and is used in a mobile radio network to uniquely and reliably identify a user or participant and to provide various value added services and services. Alternatively, security element 14 may be implemented as a UICC (Universal Integrated Circuit Card) or as a SIM card ("subscriber identification module"), which is known to the expert as one of the currently most frequently used forms of security element. However, it will be clear to the expert that other types of security elements, which, depending on the generation and type of underlying mobile radio standard, are referred to as USIM, R-UIM, ISIM, etc., are covered by the present invention.

As already mentioned above, the telematics module 13 is configured by means of its GSM module in order to communicate via the air interface with the mobile radio network (also called briefly the "mobile radio network" or "Public Land Mobile Network") of the mobile radio communication system 20. FIG. 1, mobile radio networks 30 and 40 are exemplified. It is conceivable that mobile radio network 30 is operated by the first mobile radio network operator (also called the “Mobile Network Operator” or MNO), and the second mobile radio network 40 is operated by the second mobile radio network operator. According to preferred embodiments of the invention, the mobile radio network 30 and / or the mobile radio network 40 is operated according to the GSM standard ("global mobile communication standard").

The following describes preferred embodiments of the invention in connection with mobile radio networks 30, 40 as part of a mobile radio system 20 according to the GSM standard, which is specified in several ETSI specifications. However, it will be understood by the skilled person that the present invention may be favorably used in connection with other mobile radio networks. Such networks include third-generation mobile radio networks (3GPP), such as UMTS (Universal Mobile Telecommunications System), fourth-generation mobile radio networks (4G), such as LTE (Long Term Evolution), and other mobile radio networks, such as CDMA (collective code division access), etc.

As a specialist, it is known that a GSM-built mobile radio network or PLMN generally contains a BSS ("base station system"), which consists of several BTSs ("base transceiver station"), which define the corresponding PLMN radio cells and are connected with BSC ("base station controller"). Usually in the case of a BSC, this is one of several BSCs that communicate with a common MSC ("mobile switching center"). Often, the local databank, called VLR (Visiting Movement Register), is part of the MSC to pre-empt information about mobile radio participants who are currently in radio cells that are provided by the MSC (i.e., the area covered by the MSC). The MSC provides essentially the same functionality as a switching station in a fixed network (public switched telephone network; PSTN) is in communication with the HLR ("reference location register" or "own subscribers register"), in which case it is about PLMN primary databank, which stores information on registration or authentication of mobile radio participants. For this, the HLR usually has access to the AUC ("authentication center"). As is known to the skilled person, the communication links between the above PLMN components may be based on proprietary and / or open standards. The protocols used may be based, for example, on SS7 or IP. How network components are implemented as separate or combined units, and how the interfaces between these components are implemented, is a matter of MNO, so the above description should be understood only as an example.

It will be clear to the skilled person that, although the functional units described above for the traditional mobile radio network according to the GSM standard in other or future mobile radio standards may have other names, the underlying principles are essentially the same, and therefore they are also covered by the invention.

For clarity, of the above described components of a mobile radio network in the schematic diagram in FIG. 1 shows only the following: an exemplary base transceiver station 32, as well as the own subscriber register 34 for the mobile radio network 30 and an exemplary base transceiver station BTS 42, as well as the own subscriber register 44 for the mobile radio network 40. As seen in FIG. 1, the mobile radio network 30 and the mobile radio network 40 are at least partially connected to the background system 50, preferably in the form of a properly executed subscription management server, as will be described in further detail below. The mobile radio network 30 and / or the mobile radio network 40, along with other functional units known to a person skilled in the art, may have, for example, one SMS-C ("short message service center") for storing, transmitting, converting and delivering SMS messages, by which data can be transmitted from the background system 50 to the security element 14 of the telematics module 13 and vice versa.

As is apparent from the enlarged view of the security element 14 in FIG. 1, security element 14 preferably contains one central processing module or a central processing unit ("central processing unit"; CPU) 15. Preferably, processor 15 is equipped so that applications, such as application 16, can be executed on processor 15 subscriptions ('subscription management applet "; SM Applet), which preferably provides at least some of the special capabilities for managing subscriptions on security element 14, as further described in detail in connection with Fig. 2. Preferably, Subscription management is implemented in the form of Java applications.

In addition, the security element 14 preferably contains memory 17, which is preferably designed as a volatile, rewritable memory, for example in the form of a flash drive. As seen in FIG. 1, the first subscription profile in the form of a standard subscription profile 18a is stored in memory 17 of security element 14. Preferably, the standard subscription profile 18a contains data that allows the security element 14 and the telematics module 13 to register with and communicate through the mobile radio network 30, i.e., such as subscription credential data ("Subscription Credentials"), an MNO-specific authentication algorithm and / or the like. Preferably, at least portions of the memory 17 of the security element 14 are provided to securely store data therein, for example, subscription authorization data to be kept secret, such as an authentication key K _i , which is part of the standard subscription profile 18a.

According to the invention, along with the standard profile 18a, another subscription profile is stored in memory 17 of security element 14 in the form of an emergency call subscription profile 18b. At the same time, the emergency call profile 18b differs from the standard subscription profile 18a in that the emergency call profile 18b is substantially implemented so that an emergency call can be made through it in the sense of the technical specification ETSI TS 24.008, while the standard subscription profile 18a provides other mobile radio and telematics services, especially telephone communications over the mobile radio network 30. Needless to say, the present invention also covers the case where the standard subscription profile 18a has Emergency calls rationality, which, for example, allows the driver to conveniently make an emergency call on the mobile radio network 30.

Further, with reference to FIG. 2, describes a preferred method according to the invention for switching from a standard subscription profile 18a for communicating over a mobile radio network 30 to an emergency call subscription profile 18b for making an emergency call over a mobile radio network 40.

Step S1 in FIG. 2 is the normal operation of the safety element 14 and the telematics module 13, in which the security element 14 and the telematics module 13 are communicated via the active standard profile 18a through the mobile radio network 30, for example, to transmit vehicle data to a background system or to receive current information about traffic from such a background system. If the vehicle 12 has got into an accident and it is registered by the telematics module 13, for example, using appropriate sensors (for example, as a result of an airbag deployment), in step S2 in FIG. 2, it is preferable that the switching from the standard profile 18a of the subscription to the profile 18b of the emergency call subscription is initiated by the telematics module 13. For this, the telematics module 13 in step S3 in FIG. 2 sends a switch command from the standard profile 18a subscription to the emergency call subscription profile 18b to the security element 14, namely, preferably to its subscription management application 16.

In step S4 of FIG. 2, switching from the standard profile 18a subscription to the profile 18b of the subscription emergency calls. This step may, for example, contain that in the EF IMSI IMSI file on the security element 14 of the standard subscription profile 18a, the IMSI of the emergency call profile 18b is overwritten.

Once the switch to the emergency call profile 18b is complete, the security element 14 confirms the telematics module 13 in step S5 of FIG. 2 that the command to switch successfully completed. As it is known to the expert, such confirmation may occur, for example, by means of an APDU (application protocol data packet) with the status word "90 00".

Traditionally, in accordance with the standardized "Card Application Toolkit", which is defined in the ETSI specification TS 102 223, the further process would look like this. First, the telematics module 13, for example, through the "STATUS" command, would ask the security element 14 whether the security element 14 has a CAT command to be executed by the telematics module 13. Then the security element 14 would confirm to the telematics module 13 that the CAT team ready to receive. And, finally, the telematics module 13 would take this CAT command, in the case of which we are talking about the "REFRESH" command, take security element 14 (via the "FETCH" command), interpret the "REFRESH" CAT command, and reset it security element 14. As it is known to the specialist, the “Card Application Toolkit” bypassing the otherwise usual “Master-Slave-Prinzip” (“master-slave” principle) serves essentially to enable the security element 14 to proactively affect the telematics module 13, for example, when security element 14 is provided with direct access to the functions of the telematics module 13. For additional details on the "Card Application Toolkit" or its predecessor "SIM Application Toolkit", reference is made to the above-mentioned ETSI specification and to section 19.4.4.6 of the book "Handbuch der Chipkarten "(Right Chip on chip cards) Wolfgang Rankl and Wolfgang Effing in the 5th edition.

As it follows from the preferred embodiment in FIG. 2, according to the invention, the following procedure is provided by step S5. Immediately after confirming the security element 14 in step S5 in FIG. 2, in step S6, the telematics module 13 is restarted by the security element 14. This reboot, among other things, leads to the fact that now the data of the emergency call profile 18b to which the transition was made or switched to at step S4 in FIG. 2, are downloaded to the telematics module 13, for example the IMSI of the emergency call profile 18b. Preferably, in this step, the telematics module 13 from the security element 14 reads only the data of the now active emergency call profile 18b, which is absolutely necessary for registration in the mobile radio network 40 and should not remain on the security element 14, such as the IMSI of the emergency call profile 18b, so as not to lose time before making an emergency call.

Now with the data of the emergency call profile 18b, the telematics module 13 can register with the emergency radio mobile radio network 40 relating to the emergency call profile 18b (see step S7 in FIG. 2). In step S8 in FIG. 2, an emergency call is made by the telematics module 13 on the mobile radio network 40. Such an emergency call, as already described above, is indicated by the mobile radio network 40 by means of the so-called emergency call box as an emergency call originating from the vehicle. By means of the emergency call flag, the mobile radio network 40 can direct an emergency call to a competent rescue command center.

As one skilled in the art will understand, steps S7 and S8 in FIG. 2 can be performed essentially simultaneously to make an emergency call as quickly as possible.

After making an emergency call in step S8 in the one shown in FIG. 2, the preferred embodiment provides that in step S9, the telematics module 13 sends a message to the background system, preferably to the subscription management server 50, to inform the subscription management server 50 that the emergency call profile 18b on the security element 14 is now active. Alternatively or additionally, according to the invention, it can be provided that thereafter again switches back to the standard subscription profile 18a.

The skilled person will understand that, although the preferred embodiment of the invention disclosed above is described within the terminal in the form of a vehicle telematics module, the invention may also be favorably applied to security elements that are part of the terminal in another form.

Claims (11)

1. The method of managing multiple subscription profiles (18a, 18b) on the security element (14) of the terminal (13), preferably the telematics module (13) of the vehicle (12), containing at least one standard subscription profile (18a) for registering the security element in the mobile radio network (30) and to use the services of this mobile radio network and an emergency call subscription profile (18b), by means of which an automatic emergency call can be made, the method comprising the following steps: - switching the security element (14) from the standard profile (18a) of the subscription to the profile (18b) of the subscription of emergency calls in the event of a terminal-registered event, preferably registered by the vehicle telematics module (13) (12), and - make an emergency call, moreover, after switching from the standard profile (18a) of the subscription to the emergency call subscription to the profile (18b), the security element reloading step (14) is performed, then from the safety element (14) only those parts of the subscription profile (18b) are read by the telematics module (13) Emergency calls that are absolutely necessary for registering an emergency mobile radio network (40) subscription and making an emergency call in the corresponding profile (18b) of the subscription for an emergency call to a mobile radio network. 2. A method according to claim 1, wherein the step of switching from the standard profile (18a) of the subscription to the profile (18b) of the subscription of emergency calls in the event of an accident registered by the vehicle (12) is initiated by the thematic module (13). 3. A method according to claim 1, wherein the step of carrying out the reset is initiated by the telematics module (13). 4. The method of claim 3, wherein the reloading step is initiated by the telematics module (13), as soon as the telematics module (13) has received confirmation from the security element (14) that switching from the standard profile (18a) to the profile subscription (18b) emergency call subscriptions completed successfully. 5. Security element (14) for a terminal (13), preferably a telematics module (13) for a vehicle (12), with several memory cells for storing several subscription profiles, with several subscription profiles containing at least one standard profile (18a) subscriptions to register security element (14) in the mobile radio network (30) and to use the services of this mobile radio network (30) and emergency call subscription profile (18b), through which an automatic emergency call can be made, and The security element (14) is designed so that in the event of a preset event, preferably an accident registered by the vehicle (12), the operation of the security element (14) and the terminal (13) switches from the standard subscription profile (18a) to the subscription profile (18b) emergency calls, and an emergency call is made through the emergency call subscription profile (18b), and after the switch step from the standard profile (18a) subscription to the emergency call subscription profile profile (18b), the step of reloading element (14) b is performed security, then from the security element (14) the telematics module (13) reads only those parts of the profile (18b) of the emergency call subscription that are absolutely necessary for registering the emergency radio calls of the mobile radio network (40) in the appropriate profile (18b) and making emergency calls call 6. Security element (14) according to claim 5, in the case of security element (14), this is an eUICC, SIM or M2M module. 7. Telematic module (13) with a safety element (14) according to claim 5 or 6. 8. Vehicle (12) with a telematics module (13) according to claim 7.

Images