Patent ID: 9495558
Filing Date: 2016-11-15
CPC Classification: G06F,H04W

Claim Text:
1. A method to manage access control, comprising: storing, by a mobile communication device, a first set of access control rules in a memory of the mobile communication device separate from a secure element communicatively coupled to the mobile communication device, the first set of access control rules governing access by one or more service applications resident on the mobile communication device to one or more applets resident on the secure element; receiving, by the secure element from a trusted server via a communication network, a second set of access control rules comprising one or more updates to one or more of the first set of access control rules, wherein the second set of access control rules comprises at least an update to a particular access control rule governing access by a particular service application resident on the mobile communication device to one or more particular applets of the one or more applets resident on the secure element; storing, by the secure element, the second set of access control rules received from the trusted server to replace the first set of access control rules stored in the secure element; receiving, by the mobile communication device from the trusted server via the communication network, a notification message indicating that the particular access control rule has been updated by the trusted server in the secure element; in response to receiving the notification message, retrieving, by the mobile communication device and from the secure element, the second set of access control rules comprising at least the updated particular access control rule; updating, by the mobile communication device, the first set of access control rules based on the second set of access control rules retrieved from the secure element; receiving, by the mobile communication device and from the particular service application resident on the mobile communication device, a request to access one or more of the one or more particular applets resident on the secure element, one or more applet identifiers corresponding to the one or more particular applets, and an identifier associated with the particular service application; identifying, by the mobile communication device, one or more applicable access control rules of the updated first set of access control rules, wherein applicable access control rules state whether the particular service application identified by the identifier associated with the particular service application is permitted to access the one or more particular applets identified by the one or more corresponding applet identifiers; and in response to identifying the one or more applicable access control rules, accessing the requested one or more of the one or more particular applets resident on the secure element via the particular service application resident on the mobile communication device, in accordance with the identified one or more applicable access control rules of the updated first set of access control rules.