WO2014096635A1

WO2014096635A1 - Method of automatically registering a subscriber to a contactless service on a mobile terminal

Info

Publication number: WO2014096635A1
Application number: PCT/FR2013/053056
Authority: WO
Inventors: Bastien Lamer; David Picquenot
Original assignee: Orange
Priority date: 2012-12-21
Filing date: 2013-12-12
Publication date: 2014-06-26
Also published as: FR3000342A1

Abstract

The invention pertains to a method of automatically registering a subscriber to a contactless service on a mobile terminal of the subscriber, said service being initially accessible by means of a contactless card, the mobile terminal comprising a contactless module and a security element, the method comprising the following steps: reading (E1, E2) first data of the card by the terminal, sending (E5) said first data to an aggregation entity of a network which the terminal accesses, receiving (E10) an identifier of a service provider managing the card, establishing (E13-1) a communication with the service provider, receiving and relaying (E13-3) to the card a command to read business data stored on the card, receiving and relaying (E13-6) to the service provider business data, installing (E16) an application for accessing the service and business data partly in the terminal and partly in the security element.

Description

Method for automatic registration of a subscriber to a contactless service on a mobile terminal

The present invention relates to a method for registering a subscriber to a contactless service on a mobile terminal. More specifically, the invention aims to transfer an already effective service subscription for a subscriber then using a contactless card to implement the service, to a mobile terminal of the subscriber, for an implementation of the same service mode without contact on the mobile terminal.

When a user subscribes to a contactless service on a mobile terminal, for example a service conforming to the NFC (Near Field Communication) protocol, he must first subscribe to an operator service which issues him a service. SIM card, or an NFC-compatible security element, for hosting an application associated with the NFC service to which it wishes to subscribe. He must then go to an agency of a service provider who provides the NFC service, in order to register in the information system of this service provider and possibly install / activate the application on his mobile terminal and initialize application data. The term "enrollment" is usually used to describe this underwriting phase.

A user who has subscribed to a contactless service, for example a banking service, or a transport service, and who has a contactless card to carry out transactions specific to the service, must follow the same route when he wishes to subscribe to this same service on his mobile terminal.

Thus, the path that the user must follow to subscribe to the contactless service and have the service on his mobile terminal is long and tedious. One of the aims of the invention is to remedy the shortcomings / disadvantages of the state of the art and / or to make improvements thereto.

To this end, the invention proposes a method of registering a subscriber to a contactless service on a mobile terminal of the subscriber, said service being initially accessible by the subscriber by means of a contactless card, the mobile terminal comprising a contactless module and a security element, characterized in that it comprises the following steps, implemented by the mobile terminal:

reading of the first data of the contactless card, the mobile terminal operating in card reader mode,

sending said first data to an aggregation entity of a network accessed by the mobile terminal, receiving a service provider identifier from the aggregation entity, said service provider managing the contactless card,

- establishment of a communication with the service provider,

reception and relaying to the contactless card of a business data reading command stored on the card, said command being generated by the service provider,

receiving and relaying to the service provider of the business data of the card,

- Installing a contactless access application and business data partly in the mobile terminal and partly in the security element.

The method according to the invention thus makes it possible to transfer a subscription to a contactless service, accessible by a subscriber by means of a contactless card, to the mobile terminal of the subscriber. This transfer is carried out without the subscriber having to follow again a customer journey with the service provider for it to deliver the service. In fact, with the method of the invention, the data inherent to the service and stored on the contactless card, such as subscriber-specific service and subscription configuration data, are downloaded to the mobile terminal of the subscriber. Subscriber as part of a new application proposed by the service provider. Such a subscription transfer is convenient for the subscriber, particularly in the context of the development of contactless technology and the provision of this technology on mobile terminals. It is indeed legitimate that a subscriber to a contactless service, who accesses this service by means of a contactless card wishes to migrate his subscription to his mobile terminal when the mobile terminal is adapted to implement transactions without touching.

In an exemplary embodiment, the recording method further comprises a step of receiving and relaying a deactivation command of the contactless card.

Disabling the contactless card following the installation of the new contactless application on the mobile terminal ensures consistent service continuity when switching from the contactless card to the mobile terminal. In fact, subscriber-specific service and subscription configuration data stored on the contactless card are thus frozen during the transfer and the contactless card is no longer usable from the moment the transfer has been transferred. made. This deactivation step is optional and depends on the service and choice of the service provider. For example, for a contactless loyalty card service, such deactivation is not essential.

In an exemplary embodiment, the communication between the mobile terminal and the contactless card is in accordance with the NFC protocol.

The method of the invention finds an interesting application to NFC-type contactless services, in full swing. The invention also relates to a method of aggregation between data of a network and data of a service provider, the method comprising the following steps, implemented by an aggregation entity of the network:

a step of receiving first data from a mobile terminal that accesses the network,

a step of obtaining an identifier of the service provider associated with the first data, said service provider offering a contactless service initially accessible by means of a contactless card,

a step of sending the identifier of the service provider to the mobile terminal to enable the mobile terminal to establish a communication with the service provider.

The aggregation entity of the network makes it possible to establish a link between the subscriber holding the mobile terminal and the service provider who issued him the contactless card. The aggregation entity transmits an identifier of the service provider to the mobile terminal used by the latter to request the establishment of a communication channel between the mobile terminal and the service provider in order to implement the service provider. subscription transfer.

Advantageously, the aggregation method further comprises a subscriber authentication phase during which it is verified that an identity of the user of the mobile terminal is identical to an identity of the subscriber to the service.

The aggregation entity makes it possible to authenticate a subscriber. More specifically, it makes it possible to verify that a subscriber, holder of a contactless card issued by a service provider is the same person as the subscriber holding the mobile terminal on which a subscription transfer is desired. Thus, this entity of the network correlates network information and information of the service provider.

The invention also relates to a method for transferring a subscription to a contactless service delivered by a service provider to a subscriber to the service initially accessible by means of a contactless card, to a mobile terminal of the subscriber, said terminal comprising a contactless module and a security element, said method comprising the following steps, implemented by a server of the service provider:

a step of establishing a communication channel with the mobile terminal, initiated by said mobile terminal,

a step of sending to the mobile terminal a command for reading business data from the card,

a step of receiving business data from the card, from the mobile terminal, and a step of sending a service access application and business data in part to the mobile terminal and in part to the security element.

The invention also relates to a mobile terminal, comprising:

a security element and a contactless module,

reading means, arranged to read first data of a contactless card,

means for sending, arranged to send said first data to an aggregation entity of a network accessed by the mobile terminal,

receiving means, arranged to receive from the aggregation entity an identifier of a service provider, said service provider offering a contactless service initially accessible by means of the contactless card,

means for establishing a communication, arranged to establish a communication with the service provider,

reception and relay means, arranged for:

receiving a command for reading business data stored on the contactless card, said command being generated by the service provider, and for relaying this command to the contactless card,

- receive business data from the card and relay it to the service provider,

installation means, arranged to install an application and the business data partly in the mobile terminal and partly in the security element.

The invention also relates to a program on a data carrier and loadable in the internal memory of a mobile terminal, the program comprising portions of code for performing the steps of the method of recording a subscriber to a service without contact on a mobile terminal according to the invention, when the program is executed on said mobile terminal.

The invention also relates to a data carrier on which the previous program is recorded.

The invention also relates to an aggregation entity of a network, comprising:

receiving means, arranged to receive first data, from a mobile terminal which accesses the network,

means for obtaining an identifier, arranged to receive an identifier of a service provider associated with the first data, said service provider offering a contactless service initially accessible by means of a contactless card, sending means arranged to send the identifier of the service provider to the mobile terminal to enable the mobile terminal to establish communication with the service provider.

The invention also relates to a program on a data carrier and loadable in the internal memory of a computer, the program comprising portions of code for executing the steps of the aggregation method according to the invention, when the program is executed on said computer.

The invention also relates to a server of a service provider, comprising:

means for establishing a communication channel with a mobile terminal that accesses a network, the establishment of the channel being initiated by the mobile terminal,

means for sending, arranged to send to the mobile terminal, a command for reading business data from a contactless card,

receiving means, arranged to receive the business data of the card, from the mobile terminal, and

second sending means, arranged to send an access application to a service and the business data in part to the mobile terminal and in part to the security element, said service being initially accessible by means of the card without contact.

The invention also relates to a program on a data carrier and loadable in the internal memory of a server of a service provider, the program comprising portions of code for the execution of the steps of the method of transfer of a subscription to a contactless service to a mobile terminal according to the invention, when the program is executed on said server.

Finally, the invention also relates to a data carrier on which the previous program is recorded.

Other features and advantages of the present invention will be better understood from the description and the appended drawings in which:

FIG. 1 shows the steps of a method of registering a subscriber to a service on a mobile terminal according to a first embodiment of the invention;

FIG. 2 is a schematic representation of an aggregation entity according to an exemplary embodiment of the invention;

FIG. 3 is a schematic representation of a mobile terminal, according to an exemplary embodiment of the invention; - Figure 4 is a schematic representation of a server of a service provider, according to an exemplary embodiment of the invention.

The steps of a method of registering a user with a contactless service on a mobile terminal, according to a first exemplary embodiment, will now be described in relation with FIG. 1.

A user (not shown in FIG. 1) is subscribed to a contactless service, for example a transport service. For this purpose, it uses a contactless card 10, which comprises data, such as technical data linking the card to the subscriber and to the service, for example a card identifier, a service identifier and an identifier of the card. subscriber for the transport service, and service data, or business data, such as a subscription form, a current number of tickets, and so on. This card was issued to him by a service provider 20 after a registration phase. To accomplish this registration phase, the subscriber has moved physically to the service provider 20; he presented papers such as an identity card, proof of address, etc. This registration phase is intended to validate the fact that the subscribed user, who has moved, is the person to whom the contactless card 10 has been issued. Once the contactless card 10 in possession of the subscribed user and the service activated with the service provider 20, the user can present it in front of a non-contact transport terminal (not shown in Figure 1) administered by the supplier. 20 and access the means of transport for which he has subscribed.

The contactless card 10 is conventionally provided with a passive radio tag, which receives its energy from a reader, here a contactless terminal, when it is close to this reader. Conventionally, the communication between the card and the terminal is established on a predetermined frequency. For example, the card and the terminal communicate on a UHF channel whose frequency range is around 890 MHz, depending on local regulations. In another exemplary embodiment, an HF channel of 13.56 MHz frequency is used; this last channel corresponds to an "NFC" (Near Field Communication) communication.

The subscriber user also has a mobile terminal 30 arranged to access a mobile operator network and equipped with a security element and a contactless module (the operator, the security element and the contactless module are not shown in Figure 1) allowing the mobile terminal 30 to perform transactions without contact with terminals without contact. More specifically, this module allows data exchanges between the contactless terminal and an application downloaded into the security element. The security element is by example a "SIM" card (for "Subscriber Identity Module"). The mobile network is for example a GSM network (for "Global System for Mobile Communication"). The invention is not limited to this type of network and in another embodiment, the network is a "GPRS" type network (for "General Packet Radio Services"), or "UMTS" (for "Universal Mobile Standard Telecommunications "), architectures designed to integrate with existing mobile networks such as the GSM network.

The subscribed user wishes to be able to use the contactless service that he accesses from his contactless card 10 from his mobile terminal 30. In other words, the subscriber wishes to transfer subscription and service data to his terminal. mobile 30, without having to follow a registration process with his mobile network operator and with the service provider 20 who issued him the contactless card 10.

In order to define such a procedure, an aggregation entity 40 of the mobile network is arranged to establish a link in the mobile network between service data received from the contactless card 10 via the mobile terminal 30 via the network. mobile, and the service provider 20, in charge of this data.

Thus, in a pre-subscription phase E0, the service provider 20 registers with the aggregation entity 40. At this registration, the service provider 20 sends the aggregation entity 40 data that are unique to it: a service provider identifier 20 and information that characterizes the contactless cards issued by the service provider 20 for a given contactless service. The identifier of the service provider 20 includes an address of the service provider 20, for example an IP address. The information which characterizes the contactless cards issued by the service provider 20 for a given service comprises, for example, a code of a few alphanumeric characters present in any card identifier issued for a service given by the service provider 20. For example, such prefix code any card identifier issued by the service provider 20 for the contactless service. In another embodiment, the information that characterizes the cards includes a card specific code issued by the service provider 20 and a service identifier that identifies the service for which the card has been issued. In other words, the aggregation entity 40 manages correspondence data which to a characteristic information of a contactless card associates an identifier of the service provider 20.

In a next step El of request to read the first data of the card, the mobile terminal 30 sends a request for reading technical data from the contactless card 10. The technical data are general data of the service, specific to the service, to the card and to the subscriber. Technical data includes a technical identifier of the subscriber, for example in the form of a number specific to the service provider 20 and the subscriber, and data that characterizes the contactless card 10, for example a unique number of card assigned by the service provider 20 for contactless service. As mentioned previously, in the embodiment described here, the data characterizing the card is prefixed by a code which identifies the service provider 20 and the contactless service. In order to read the technical data, it is assumed that the mobile terminal 30 comprises in a memory (not shown in FIG. 1) a formal description of the blocks of data that it can access on the contactless card 10. The formal description has been provided previously by the service provider 20 in the form of an "XML" (Extensible Markup Language) file, according to the ISO 7816-4 specifications. For example, the file has been downloaded by the user to the mobile terminal 30. It includes "APDU" (Application Protocol Data Unit) commands. The mobile terminal 30 is approached at a distance of the order of a few centimeters from the contactless card 10. The mobile terminal 30 is arranged to operate in card reader mode. It is assumed that the mobile terminal 30 and the contactless card 10 are arranged to talk on the same frequency range. For example, the mobile terminal 30 is equipped with an NFC-type contactless module, arranged to operate on the 13.56 MHz frequency, and the contactless card 10 is an NFC card, arranged to be read on the frequency of 13.56 MHz. , 56 Mhz. The request for reading the first data is received by the contactless card 10 in a step E2.

In a next step E3 sending the first data, the contactless card 10 transmits to the mobile terminal 30 the technical service data requested by the mobile terminal 30. These technical data are formally described in the XML file stored in the mobile terminal 30 Thus, only this data is sent to the mobile terminal 30 in the form of APDU responses. The service technical data is received by the mobile terminal 30 during a receiving step E4. It is noted that at this stage the technical service data are not significant, since they are not crossed with data from the service provider 20. Thus, in this form, they do not give any personal information specific to the service provider. 'subscriber. In other words, if a mobile terminal of a second subscriber reads the data of the contactless card of the subscriber, the second subscriber can not use the data read and deduce information on the subscriber.

In a step E5 sent to the aggregation entity, the mobile terminal 30 sends the service technical data received in step E3 to the aggregation entity 40 of the network. The purpose of this sending is to allow identification of the service provider 20. In the embodiment described, it is assumed that the technical service data are sent over the IP network. The technical service data is received by the aggregation entity 40 in a reception step E6. They are extracted from the responses in APDU format and stored by the aggregation entity 40 in association with an identifier of the SIM card of the mobile terminal 30. The identifier of the SIM card of the mobile terminal 30 in the network is a number " IMSI "(International Mobile Subscriber Identity). The IMSI number identifies a subscriber in the mobile network. The technical data is received by the aggregation entity 40 during the receiving step E6.

In an identification step E7, the aggregation entity 40 consults the correspondence data that it has stored during the prior subscription step E0 and identifies, from the data characterizing the contactless card 10 , more precisely from the code that prefixes this data, the identifier of the associated service provider. The identified service provider is the one who administers the contactless card 10. In the example described here, the identifier of the service provider comprises the IP address of a server of the service provider 20.

In an authentication phase E8, the aggregation entity 40 authenticates the user of the mobile terminal 30. More specifically, the aggregation entity 40 verifies that the user of the mobile terminal 30 is also the legitimate owner of the mobile terminal 30. contactless card 10. The purpose here is to correlate data held by the subscriber-related service provider with those of the network operator. For this purpose, in an interrogation sub-step E8-1, the aggregation entity 40 queries an identity server of the network (not shown in FIG. 1) in order to know the identity of the cardholder. SIM inserted into the mobile terminal 30. The aggregation entity 40 provides the identity server with the identifier of the SIM card stored during the receiving step E6. The aggregation entity 40 receives in response from the identity server an alias of the identity of the one to whom the SIM card has been issued and which uses the mobile terminal 30 in which the SIM card is inserted. This alias is calculated for example by applying a hash function to the identity of the SIM card holder. The use of this alias is intended to avoid circulating the identity of this person.

In a service provider polling sub-step E8-2, the aggregation entity 40 queries the service provider 20 to verify that the identity of the SIM card holder 30 is the same as the identity of the service provider 20. of the contactless card holder 10. For this purpose, the aggregation entity 40 transmits a verification request to the service provider 20. This request includes the alias of the identity of the SIM card holder obtained from the identity provider during the substep E8-1 interrogation, the technical identifier of the subscriber and if necessary, an identifier of the algorithm used by the identity provider to calculate the alias. This request is received by the service provider 20 during a reception step E8-3. In a next verification step E8-4, the service provider 20 consults a contactless subscriber base and calculates an alias of the identity of the contactless card holder associated with the technical identifier of the contactless person. subscriber, using the same hash function that used by the identity provider 20 in step E8-1. The service provider 20 then verifies that the alias of the identity of the holder of the contactless card 10 is identical to the alias of the identity of the holder of the SIM card received during the substep E8-3 reception.

In an answer sub-step E8-5, the service provider 20 responds to the aggregation entity positively if the alias associated with the identity of the contactless card holder 10 is identical to the alias associated with the identity of the holder of the SIM card, and negatively in the opposite case. The response is received by the aggregation entity 40 during a receiving substep E8-6.

In an answer analysis substep E8-7, the aggregation entity 40 checks the received response. In a case where the answer is negative (branch "nok" in FIG. 1), that is to say in a case where the SIM card holder is not the same as the holder of the contactless card then, the process stops. In the opposite case (branch "ok" in FIG. 1), that is to say in a case where the holder of the contactless card is the same person as the holder of the SIM card, this means that the transfer the subscription of the contactless card 10 to the mobile terminal 30 is legitimate. In this case, in a step E9 for sending the identifier and the alias, the aggregation entity 40 sends the mobile terminal 30 the identifier of the service provider 20, in this case its IP address, as well as the alias of the identity of the SIM card holder. The identifier of the service provider 20 and the alias of the subscriber identity are received by the mobile terminal 30 during a receiving step E10.

In a next step El 1 transfer request, the mobile terminal 30 sends the service provider 20 a request for establishment of a communication channel so as to transfer the subscription to the contactless service of the contactless card 10 to the mobile terminal 30. The request includes the alias of the identity of the SIM card holder. The alias of the identity of the SIM card holder allows the service provider 20 to verify that the transfer is legitimate. Indeed, it can verify that the identity of the holder of the contactless card 10 is the same as that of the SIM card holder by comparing the aliases. This request is received by the service provider 20 during a step E12.

The transfer of the subscription is carried out during a subsequent transfer phase E13 which comprises several sub-steps.

Thus, in a substep E13-1 of establishment of a communication channel, it is established, according to a known method, a communication channel between the mobile terminal 30 and the service provider 20. Preferably, the channel is secure. For example, it is established according to the protocol "HTTPS" (of the "HyperText Transport Protocol Secure"). This communication channel is intended to transmit APDU commands from the service provider 20 to the contactless card 10, via the mobile terminal 30 which relays these commands. Communications established through the secure channel are for retrieving second data. These second data are business data and include subscriber-specific service and subscriber configuration data stored on the contactless card 10. Configuration data is service-specific data, e.g. displayed to the user while using the service. Subscriber-specific subscriber data is service-and subscriber-specific dynamic data, for example, the subscriber's subscription formula, or the number of tickets it has .

In a subsequent second data request sub-step E13-2, the service provider 20 sends the mobile terminal 30 a business data request APDU command to the contactless card 10. This command is encapsulated in a compatible message with the communication protocol established between the mobile terminal 30 and the service provider 20, here HTTPS. The mobile terminal 30 extracts the APDU command from the business data request of the HTTPS protocol and relays it to the contactless card 10. Given the proximity between the mobile terminal and the contactless card, it is considered that it is not necessary. to implement a security measure for the exchanges between the mobile terminal 30 and the contactless card 10. This request is received and relayed by the mobile terminal 30 to the card 10 during a substep El 3-3. The command is received by the contactless card 10 during a receiving sub-step E13-4.

In a step E13-5 for sending business data, the contactless card 10 sends to the mobile terminal 30 the requested business data. More specifically, the mobile terminal 30 operates in card reader mode and reads the business data on the contactless card 10. The business data is received by the mobile terminal 30, encapsulated inside an HTTPS message, and relayed to the service provider 20 during a sub-step E13-6 of retransmission of business data. The business data is received by the service provider 20 during a substep E13-7 of receipt.

In an optional substep E13-8 of the deactivation request (in dashed lines in FIG. 1), the service provider 20 sends a deactivation APDU command to the contactless card 10, extracted and relayed by the mobile terminal 30 during of a step E13-9. In a substep E13-10 of deactivation, following the substep E13-8, the deactivation command is executed on the contactless card 10. This command has the effect of disable the contactless card 10. This deactivation freezes the business data on the card at a time T, before switching the service and business data to the mobile terminal 30. This has the advantage of avoiding inconsistencies between the data stored in the contactless card 10 and the data that will be installed in the SIM card of the mobile terminal 30, as business data associated with the contactless service.

In a next step E14 for preparing a new application, the service provider 20 prepares a new contactless application for the mobile terminal 30. The new application is intended to render on the mobile terminal 30 the same service, in terms of functionalities. than that initially offered on the contactless card 10. This new application includes a first software module intended to be installed on the mobile terminal 30; this first module comprises code instructions associated with a user interface specific to the mobile terminal 30 and the contactless service, and a second software module intended to be installed in the security element of the mobile terminal 30 and which includes code instructions. of the new contactless application. At the end of step E14, the service provider 20 sends a message to the mobile terminal 30 proposing a download of a new contactless application, corresponding to the application initially accessible by means of the contactless card 10. This message is received by the mobile terminal 30 during a receiving step E15.

In a download step E16, the user of the mobile terminal 30 controls the downloading of the new application to the mobile terminal 30 from the service provider 20. This download installs the first software module on the mobile terminal 30 and the second module in the security element of the mobile terminal 30 and configures the security element with subscriber-specific service and subscription configuration data. Conventionally, the download of the new application, specifically the download of the second module in the security element can be done according to a procedure "OTA" (of the English "Over The Air"). The service provider 20 can use for this purpose an operator interface (not shown in Figure 1), adapted to perform this update on the secure module.

Thus, at the end of this procedure, the mobile terminal 30 comprises the new contactless application, in the form of a first software module installed in the mobile terminal, a second software module and configuration and subscription data specific to the subscriber installed in the security element. This configuration and subscription data is consistent with the data that was associated with the subscriber when he was using his contactless card 10. The user can now use his mobile terminal to implement the contactless service by means of its mobile terminal 30. Thus, there is no break in the service when transferring the subscription from the contactless card to the mobile terminal.

In addition, the user has transferred his subscription without going to his service provider to register. Seen from the user, such a subscription transfer mode is convenient.

In the example described here, the security element is a SIM card. The invention is of course not limited to this type of module. Thus, the security element can also be a "(e) UICC" card (for "(embedded) Uni vers Integrated Circuit Card"), or a secure memory area, or a removable SD card type component.

In another exemplary embodiment, the authentication step E8 is a little different.

In a substep Ε8-Γ identical to the interrogation sub-step E8-1, the aggregation entity 40 queries the identity provider to obtain the alias of the identity of the holder of the mobile terminal. . In a sending sub-step E8-2 ', the aggregation entity 40 sends the technical identifier of the subscriber received during the receiving step E6 to the service provider 20. The technical identifier is received by the service provider 20 during a receiving step E8-3 '. In a subsequent step E8-4 'of obtaining an alias, the service provider 20 calculates an alias of the identity of the card holder contactless 10. In an alternative embodiment, it queries the identity provider from the identity of the holder of the contactless card 10 to obtain the associated alias. In an alias sending step E8-5 ', the service provider 20 sends the alias of the identity of the contactless card holder 10 he has calculated in step E8-4 to the aggregation entity 40. This alias is received by the aggregation entity 40 during a receiving step E8-6 '. In a verification step E8-7, the aggregation entity 40 checks whether the alias of the identity of the mobile terminal holder it obtained in step Ε8- is identical to the alias of the identity of the contactless card holder that it has received from the service provider during the receiving step E8-6 '.

The other steps of the method are the same as those described with reference to FIG. 1. In this exemplary embodiment, it is the aggregation entity 40 that checks the equality of the aliases.

An aggregation entity 40, according to an exemplary embodiment of the invention, will now be described, with reference to FIG. 2.

The aggregation entity is a server-type network device that includes:

a microprocessor 40-1, or "CPU" (of the "Central Processing Unit"), able to load instructions in memory, to execute them, to perform operations; a set of memories, including a volatile memory 40-2, or "RAM" (for "Random Access Memory"), used to execute code instructions, store variables, etc., and a storage memory 40-3 type "ROM" or "EEPROM" (English "Read-Only Memory" and "Electronically-Erasable Programmable Read-Only Memory). The storage memory 40-3 is arranged to store an application that includes code instructions for implementing the steps of the method of the invention performed by the aggregation entity 40. It is also arranged to store a table that associates with a piece of information that characterizes the contactless cards issued for a given service, a service provider identifier, for example in the form of an IP address.

Aggregation entity 40 also includes:

receiving means 40-4, arranged to receive first data, from a mobile terminal that accesses the network. The reception means 40-4 which receive the first data in the form of APDU responses are also arranged to extract these first data and to store them,

means 40-5 for obtaining an identifier, arranged to receive an identifier of the service provider associated with the first data, said service provider offering the contactless service initially accessible by means of the contactless card,

sending means 40-6, arranged to send the identifier of the service provider to the mobile terminal, to enable the mobile terminal to establish communication with the service provider.

In an exemplary embodiment of the invention, the aggregation entity 40 further comprises:

subscriber authentication means 40-7 (in dashed lines in FIG. 2), arranged to verify that the identity of the user of the mobile terminal is identical to the identity of the subscriber to the service who initially accesses the service using the contactless card.

The reception means 40-4, the means for obtaining an identifier 40-5, the sending means 40-6 and, if appropriate, the authentication means 40-7 are preferably software modules comprising software instructions for performing the steps of the aggregation process between network data and data of a previously described service provider.

The invention therefore also relates to:

a computer program comprising instructions for implementing the method of aggregation between network data and data of a service provider as described above when this program is executed by a processor of the data entity; aggregation 40; a readable recording medium on which is recorded the computer program described above.

The software modules can be stored in, or transmitted by, a data carrier. This may be a hardware storage medium, for example a CD-ROM, a magnetic diskette or a hard disk, or a transmission medium such as a signal or a telecommunications network.

A mobile terminal 30, according to an exemplary embodiment of the invention, will now be described in relation to FIG.

The mobile terminal 30 comprises:

a microprocessor 30-1, able to implement the conventional functions of a telecommunications terminal and to load instructions in memory, to execute them, to perform operations;

a set of memories, including a volatile memory 30-2, or RAM, used to execute code instructions, store variables, etc., and a storage memory 30-3 of the ROM or EEPROM type. The storage memory 30-3 stores an operating system, an HMI module (for "Human-Machine Interface") HMI _REC of a subscriber registration application to a mobile terminal service according to the invention. This HMI module provides the interface between the user and the contactless automatic registration application of a subscriber to a contactless service installed in a security element. The storage memory 30-3 is also arranged to receive, at the end of the registration of the subscriber to the contactless service on a mobile terminal a second HMI module, HMI _SERV contactless service issued by the service provider. This second HMI _SERV UMI module is the interface between the user and the SERV contactless service installed in the security element. The storage memory is also arranged to store an XML file that formally describes the first data that can be read on the contactless card;

the security element 30-4, which comprises a processor, a RAM memory, one or more memories of ROM or EEPROM type in which programs which can be executed by the microprocessor are recorded. In an exemplary embodiment described here, the security element 30-4 is a SIM card that includes a memory in which secure areas are defined. A secure area is arranged to store an application. A first zone is arranged to store the non-contact automatic registration application according to the invention. A second memory zone is arranged to store, at the end of the transfer method according to the invention, the contactless service SERV administered by the service provider 20. In another exemplary embodiment, the security element 30-4 conforms to the GlobalPlatform specifications that define one or more security domains SD in the security element. A security domain is a memory area dedicated to an application or / and a service provider. For example, a first security domain may be dedicated to the automatic registration application according to the invention. This first domain is for example managed by the network operator. A second security domain can be dedicated to the SERV contactless service. This second domain is managed by the service provider;

a contactless module 30-5, designed to communicate and / or carry out non-contact transactions with so-called "contactless terminals" and to read passive radio tags. This last case corresponds to an operation of the mobile terminal 30 in card reader mode.

The terminal 30 also comprises the following means, which are part of the registration application of the subscriber mentioned above:

reading means 30-6, arranged to read first data of a contactless card,

sending means 30-7, arranged to send said first data to the aggregation entity of the network to which the mobile terminal accesses,

means 30-8 for receiving, arranged to receive from the aggregation entity an identifier of the service provider that proposes the contactless service, initially accessible by means of the contactless card,

means 30-9 for setting up a communication, arranged to establish a communication with the service provider,

- 30-10 receiving and relay means, arranged for:

- receive business data from the card and relay it to the service provider,

installation means 30-11, arranged to install an application and the business data partly in the mobile terminal and partly in the security element.

The reading means 30-6, the sending means 30-7, the receiving means 30-8, the means 30-9 for setting up a communication, the receiving and relaying means 30 and 10, and Installation means 30-11 are preferably software modules comprising software instructions for executing the steps of the subscriber registration method to a mobile terminal contactless service previously described. The invention therefore also relates to:

a computer program comprising instructions for implementing the registration method as described above when this program is executed by a processor of the server 20 of the service provider;

a readable recording medium on which is recorded the computer program described above.

A server 20 of a service provider, according to an exemplary embodiment of the invention, will now be described in connection with FIG. 4

The server 20 of the service provider includes:

a microprocessor 20-1, able to load instructions in memory, to execute them, to perform operations;

a set of memories, including a volatile memory 20-2 of the RAM type, used to execute code instructions, store variables, etc., and a storage memory 20-3 of the ROM or EEPROM type. The storage memory 20-3 is arranged to store an application that includes code instructions for implementing the steps of the method of the invention performed by the server of the service provider 40. It is also arranged to store relative data. to the contactless transport service. The service data includes, for example, subscriber information, such as its identity, address, and so on. characterization data of the contactless card that has been issued to it, such as a card identifier, etc. and subscriber data a table which associates with a contactless card technical identifier, a service provider identifier, for example in the form of an IP address.

The server of the service provider 20 also includes:

means 20-4 for establishing a communication channel with the mobile terminal 30 which accesses a network, the establishment of the channel being initiated by the mobile terminal,

sending means 20-5, arranged to send to the mobile terminal, a contactless card business data reading command 10,

reception means 20-6, arranged to receive the business data of the card, from the mobile terminal, and second sending means 20-7, arranged to send an access application to a service and the business data in part to the mobile terminal and in part to the security element, said service being initially accessible by means of the contactless card.

The means 20-4 for establishing a communication channel, the means 20-5 for sending, the means 20-6 for receiving and the second sending means 20-7 are preferably software modules comprising instructions software for performing the steps of the previously described subscription transfer method.

The invention therefore also relates to:

a computer program comprising instructions for implementing the subscription transfer method as described above when this program is executed by a processor of the server 20 of the service provider;

Claims

1. A method of registering a subscriber to a contactless service on a mobile terminal (30) of the subscriber, said service being initially accessible by the subscriber by means of a contactless card (10), the terminal mobile device comprising a contactless module and a security element, characterized in that it comprises the following steps, implemented by the mobile terminal:

reading (El, E2) first data of the contactless card, the mobile terminal operating in card reader mode,

sending (E5) said first data to an aggregation entity (40) of a network accessed by the mobile terminal,

receiving (E10) an identifier of a service provider (20) from the aggregation entity, said service provider managing the contactless card,

establishing (E13-1) a communication with the service provider,

- reception and relay (E13-3) to the contactless card of a business data reading command stored on the card, said command being generated by the service provider,

- reception and relay (E13-6) to the business data service provider of the card,

- installing (E16) a contactless service access application and business data partly in the mobile terminal and partly in the security element.

2. The method of claim 1 further comprising a step of receiving and relaying (E13-9) a deactivation command of the contactless card.

3. Method according to one of the preceding claims wherein the communication between the mobile terminal and the contactless card is in accordance with the NFC protocol.

A method of aggregating data of a network with data of a service provider (20), the method comprising the following steps, implemented by an aggregation entity (40) of the network:

a step (E6) for receiving first data from a mobile terminal that accesses the network, a step (E7) of obtaining an identifier of the service provider associated with the first data, said service provider offering a contactless service initially accessible by means of a contactless card,

- A step of sending (E9) the identifier of the service provider to the mobile terminal to allow the mobile terminal to establish communication with the service provider.

The method of claim 4, further comprising:

an authentication phase (E8) of the subscriber during which it is verified that an identity of the user of the mobile terminal is identical to an identity of the subscriber to the service.

A method of transferring a subscription to a contactless service delivered by a service provider (20) to a service subscriber initially accessible by means of a contactless card (10) to a mobile terminal (30). the subscriber, said terminal comprising a contactless module and a security element, said method comprising the following steps, implemented by a server of the service provider:

a step (E13-1) for establishing a communication channel with the mobile terminal, initiated by said mobile terminal,

a step of sending (E13-2) to the mobile terminal a command for reading business data from the card,

a step of reception (El 3-7) of business data of the card, coming from the mobile terminal, and

a step of sending (E16) a service access application and business data in part to the mobile terminal and partly to the security element.

7. Mobile terminal (10), comprising:

a security element (30-4) and a non-contact module (30-5),

reading means (30-6) arranged to read first data of a contactless card,

means (30-7) for sending, arranged to send said first data to an aggregation entity (40) of a network accessed by the mobile terminal,

means (30-8) for receiving, arranged to receive from the aggregation entity an identifier of a service provider, said service provider offering a contactless service initially accessible by means of the contactless card,

means (30-9) for establishing a communication, arranged to establish a communication with the service provider, means (30-10) for receiving and relaying, arranged for:

- receive business data from the card and relay it to the service provider,

installation means (30-11) arranged to install an application and the business data partly in the mobile terminal and partly in the security element.

8. Program on a data carrier and loadable in the internal memory of a mobile terminal, the program comprising portions of code for performing the steps of the method of registering a subscriber to a contactless service on a mobile terminal according to one of claims 1 to 3, when the program is executed on said mobile terminal.

Data carrier on which the program according to claim 8 is recorded.

Aggregation entity (40) of a network, comprising:

receiving means (40-4), arranged to receive first data, from a mobile terminal which accesses the network,

means (40-5) for obtaining an identifier, arranged to receive an identifier of a service provider associated with the first data, said service provider offering a contactless service initially accessible by means of a card without contact,

sending means (40-6) arranged to send the identifier of the service provider to the mobile terminal to enable the mobile terminal to establish communication with the service provider.

11. Program on a data medium and loadable in the internal memory of a computer, the program comprising portions of code for performing the steps of the aggregation method according to one of claims 4 to 5, when the program is executed on said computer.

12. Data carrier on which the program is recorded according to the claim

11.

13. Server of a service provider (20), comprising means (20-4) for establishing a communication channel with a mobile terminal that accesses a network, the establishment of the channel being initiated by the mobile terminal,

means (20-5) for sending, arranged to send to the mobile terminal, a command for reading business data from a contactless card,

reception means (20-6), arranged to receive the card business data, from the mobile terminal, and

second sending means (20-7), arranged to send an access application to a service and the business data in part to the mobile terminal and in part to the security element, said service being initially accessible to the way of the contactless card.

14. Program on a data carrier and loadable in the internal memory of a server of a service provider, the program comprising portions of code for the execution of the steps of the method of transferring a subscription to a service without contact to a mobile terminal according to claim 6, when the program is executed on said server.

15. Data carrier on which the program is recorded according to the claim

14.