English:
[0002] A Universal Integrated Circuit Card (UICC) refers to a computer-readable storage medium, which may have a card-like form. The UICC is often referred to as a smart card, which may include a processor, a memory including computer program code, input/output, and the like. The UICC may be used to provide secure storage to a device, such as a tablet, smartphone, computer, and/or any other device. For example, the UICC may provide secure storage of, among other things, user identity information, which can be used to authenticate a user or a device accessing a network or device, such as a public land mobile network, a server, a machine-to-machine communications network, and/or the like. The acronym "eUICC" may refer to an embedded UICC. The term embedded is generally used to indicate that the UICC, or in more general terms, secure element, supports a remote management functionality, this embedded secure element may not be removed from the device by the user, although the eUICC may often refer to a removable secure element as well. The form factor of an eUICC may be a System on Chip (SoC), a trusted platform chip, or a removable secure element. The eUICC is included in a device, which is able to communicate with other devices in a group and may also be able to communicate outside of this group.
[0003] Methods and apparatus, including computer program products, are provided for secure storage synchronization. In one aspect there is provided a method. The method may include receiving, at a user equipment, an update to an application stored in a secure memory device at the user equipment; sending a notification to announce the update being available at the secure memory device at the user equipment, wherein the notification is sent securely to at least one device, when the at least one device connects to a group network including the at least one device and the user equipment; and providing, by the user equipment, the update securely to the at least one device, when the at least one device connects to the group network.
[0004] In some variations, one or more of the features disclosed herein including following features can optionally be included in any feasible combination. The notification may be bound to the at least one device. The notification may include at least one of an identifier of the at least one device and a value to bind the notification to the at least one device. The notification may include an identify of the user equipment, an application identifier, and a version identifier for the application. The at least one device may provide the notification to the user equipment to obtain the provided update. The notification may be sent securely by the secure memory device by at least one of authenticating the at least one device and encrypting the notification. The updated may be provided securely by the secure memory device by at least one of authenticating the at least one device and encrypting the notification. The at least one other device may include another secure memory device to perform the authenticating and the encrypting with the secure memory device at the user equipment. The secure memory device at the user equipment may include at least one of a secure element, a universal integrated circuit card, an enhanced universal integrated circuit card, an embedded universal integrated circuit card, a smartcard, a secure memory card, a trusted execution environment, and a subscriber identity module.
[0005] The above-noted aspects and features may be implemented in systems, apparatus, methods, and/or articles depending on the desired configuration. The details of one or more variations of the subject matter described herein are set forth in the accompanying drawings and the description below. Features and advantages of the subject matter described herein will be apparent from the description and drawings, and from the claims.
[0006] In the drawings,
[0008] FIG. 2 depicts an example of a process for synchronizing a group of devices, in accordance with some exemplary embodiments;
[0009] FIGs. 3-4 depict the system of FIG. 1 after synchronization, in accordance with some exemplary embodiments;
[0010] FIG. 5 depicts an example network over which the system of FIG. 1 may be implemented, in accordance with some exemplary embodiments; and
[0011] FIG. 6 depicts an example of a user equipment, in accordance with some exemplary embodiments.
[0012] Like labels are used to refer to same or similar items in the drawings.
[0013] FIG. 1 depicts an example system 100 including a server 102, a user equipment 112, and one or more devices 1 14A-B, in accordance with some example embodiments.
[0014] The user equipment 1 12 may couple, via a wireless and/or wired network, to server 102 to obtain data, such as an application 104A and/or other information. For example, user equipment 1 12 may couple to server 102 to download an application, and this download may be performed securely. The secure download may be secure in the sense that user equipment 1 12 may utilize transport security to secure the messages (for example, via an encryption key or other mechanism) exchanged between the server 102 and the user equipment 1 12, and/or may utilize eUICC 190A to perform authentication, encryption, and/or provide other security mechanisms in order to access server 102 (or access a group network) to download data (for example, updates to application A 104B).
[0015] Once downloaded, application 104B may be under the control of the user at user equipment 1 12. For example, application 104B may allow a user to provide content and other information. To illustrate further, application 104B may be configured as a password safe application configured to store passwords securely at user equipment 1 12. In this example, passwords may be added to the password safe application, and these passwords may be stored in a secure storage device, such as eUICC 190A. Although the previous example described application 104B as a password safe application, any other application, data, and/or information may be used at application 104B. Examples of these applications include one-time passwords used for secure payment transactions, cryptographic certificates, cryptographic keys (which may have a lifetime), sensitive documents stored and edited on more than one device and any other data, application, electronic document, and the like that should be handled securely, may be changed, and where those changes may need to be synchronized with other devices. An eUICC may thus provide secure storage for applications and contain confidential information which may change over time and therefore needs to be synchronized with eUICCs located on other devices
[0016] In some example embodiments, user equipment 1 12 and devices 1 14A-B may be configured as a so-called "group" of devices. For example, user equipment 1 12 and devices 1 14A-B may couple to a common home wireless network, such as a WiFi network, an ad-hoc network, near field communications links, device-to-device links, and/or the like, to access a group network. The common home wireless network may require members of the group network, such as user equipment 1 12 and devices 1 14A-B, to authenticate using a password or a group key (both of which may securely stored in a eUICC) before being granted access to the group network. Moreover, the devices of the group network may also secure transmissions (for example, via transport security, such as link or message encryption) using the group key or other key known to, or derivable by, the members of the group.
[0017] In the example embodiment of FIG. 1 , user equipment 1 12 may include application 104B downloaded from server 102, and this application 104B may include information not present in other home devices, such as devices 1 14A-B. The subject matter disclosed herein may, in some example embodiments, provide ways to synchronize the applications and/or information associated with the application among devices of a group network including, for example user equipment 1 12, devices 1 14A-B, and/or the like. Returning to the password safe application example noted above, user equipment 1 12 may add a password for secure storage by password safe application (which may correspond to application 104B at eUICC 190A). However, these additional passwords may not be stored at password safe applications 104C and 104D at for example device 114A including eUICC 190B and device 1 14B including eUICC 190C. Consequently, synchronization may be performed so that the additional passwords are provided to device 114A/eUICC 190B and device 1 14B/ eUICC 190C.
[0018] Although some of the examples described herein refer to eUICC 190A-C, other secure storage devices may be used as well including a smartcard, a secure memory device, a UICC, a subscriber identity module (SIM), and/or any other secure storage device.
[0019] FIG. 2 depicts an example process 200 for synchronizing devices in a group, in accordance with some example embodiments.
[0020] At 207, an update announcement may be sent, in some example embodiments. For example, when user equipment 1 12 has an update that should be shared with other devices within the group, user equipment 1 12 may announce an update to devices, which are members of the group. In the example of FIG. 1 , application 104B at eUICC 190A may include information not available (or present) at the other applications 104C-D of the group.
[0021] According to the password safe example, if new information, such as a new password, is added to application 104B (shown as version 2 due to the updated information), the other devices 1 14A-B in the group may require updating (shown as version 1 due to the lack of the new passwords at those devices). According to this example, at 207 user equipment 1 12 announces an update to devices 1 14A-B to indicate that a new version of the application 104B is available from user equipment 1 12.
[0022] According to a one-time password list example, if a one-time password is used at application 104B, the one-time password is removed from the list (shown as version 2 due to the updated information), the applications 104C-D at the other devices 114A-B in the group may require updating (shown as version 1 due to stale information at those devices). According to this example, at 207 user equipment 1 12 announces an update to devices 1 14A-B to indicate that a new version of application 104B is available from user equipment 1 12.
[0023] When an update should be performed to synchronize the applications including information contained therein, user equipment 1 12 including eUICC 190A may send a notification to the other devices in the group. The notification may be sent to one or more devices connected to the group network, and the notification may include one or more of the following: an identify of a source device (for example, user equipment 1 12 having the update); an application identifier (for example, the identity of application 104B having the update); a version identifier (for example, a time stamp when application 104B was last updated, a version number, and the like); and an identity of the receiving device(s) authorized to receive the update (for example, an identifier, such as a media access control address, international mobile subscriber identifier, and/or any other generally unique identifier).
[0024] In some example embodiments, the notification may include a ticket, which when received by a device, such a device 1 14B, authorizes the device to receive the update. For example, user equipment 1 12 may send tickets to each of devices 1 14A-B, and the tickets may be bound specifically to the identity of each of the devices authorized to receive the update. When this is the case, only device 1 14A can redeem its received ticket in order to obtain the update available at eUICC 190A, and only device 1 14B can redeem its received ticket in order to obtain the update. This ticket-based approach may thus be used to control the devices authorized to receive updates.
[0025] In some example embodiments, the notification is securely sent to a device by for example requiring authentication (for example, via a password or a group key), transport security (for example, message or link encryption), and/or any other security mechanism. For example, group members, such as user equipment 1 12/eUICC 190A and device 1 14A/eUICC 190B, may perform an authentication before exchanging messages (including the notification) and/or encrypt the messages (including the notification) exchanged via link 194A.
[0026] In some example embodiments, user equipment 1 12 may track devices authorized to receive updates and/or whether updates have been sent to certain devices.
[0027] In the example of FIG. 1 , user equipment 1 12 may announce the update to device 1 14C, which is already connected to the group network at 194A, by sending the notification via link 194A, and this notification may be sent securely. For example, the notification may be securely sent using a key specific to device 1 14C authorized to receive the update. In the example of FIG. 1 , device 1 14B is not connected to the group network, so device 1 14B does not receive the update announcement.
[0028] At 209, the update may be provided to one or more devices of the group, in accordance with some example embodiments. Referring to FIG. 1 , user equipment 112 may provide updates of application A to devices 114A-B, so that applications 104A-C are synchronized with respect to for example content information and/or any other aspect. In some example embodiments, the update may be performed securely over the network. For example, the update may be provided after devices 1 14A-B authenticate and/or the update may be performed using transport security (for example, message encryption based on a group key or any other type of key).
[0029] FIG. 3 depicts system 100 after an update to device 1 14A as shown by version 2 at applications 104C.
[0030] Referring to FIGs. 2 and 3, device 1 14B may, at 21 1 , be updated, when device 114B connects to the group network, in accordance with some example embodiments. When device 1 14B connects to user equipment 1 12 and/or connects to device 1 14A, device 1 14B may obtain the notification announced at 207 and/or the update to application 104D. In some example embodiments, the update may be performed securely over the group network, as noted with respect to 209. For example, when the device 1 14B couples to either user equipment 1 12 and/or device 1 14A, device 1 14B may request to receive (or be pushed with) the status of updates, notifications, tickets, updates, and the like. For example, the notification, or ticket, indicating an update to application 104D may be received by device 1 14B when it connects to the group network.
[0031] In some example embodiments, device 114B obtains the update to application 104D directly from device 1 14A, while in some other embodiments, device 114B obtains the update to application 104D directly from user equipment 1 12. In this case, the device 114B may need to obtain a notification that informs the device that the update is available at user equipment 1 12. FIG. 4 depicts device 1 14B after the update to application 104D directly from user equipment 112 (or from device 1 14A/eUICC 190B).
[0032] FIG. 5 depicts an example system 500 including base stations 1 1 OA and 110C, which may be configured as evolved Node B (eNB) base stations serving macrocells 1 12A and 1 12C (also referred to herein as cells and coverage areas). System further includes a wireless access point 1 10B, which may be configured to serve a wireless local area network or a small cell 1 12B. System 500 further includes user equipment 1 12 and devices 1 14A-B, which may be served by base station 1 1 OA and/or wireless access point 1 10B. Further, server 102 may be coupled to via backhaul links, the Internet, and/or other networks to base station 1 10A.
[0033] In some example embodiments, the user equipment, such as for example user equipment 1 12, may be implemented as a mobile device and/or a stationary device. The user equipment may be referred to as, for example, mobile stations, mobile units, subscriber stations, wireless terminals, tablets, smart phones, wireless devices, or the like. A user equipment may be implemented as, for example, a wireless handheld device, a wireless plug-in accessory, or the like. In some example embodiments, user equipment may be configured as a multimode radio accessing cellular access networks via base station 1 1 OA and non-cellular access networks via access points 1 10B and/or other devices. In some example embodiments, devices 1 14A-B may be configured as user equipment and/or configured to provide machine-to-machine communications.
[0034] FIG. 6 illustrates a block diagram of an apparatus 10, which can be configured as user equipment in accordance with some example embodiments.
[0035] The apparatus 10 may include at least one antenna 12 in communication with a transmitter 14 and a receiver 16. Alternatively transmit and receive antennas may be separate.
[0036] The apparatus 10 may also include a processor 20 configured to provide signals to and receive signals from the transmitter and receiver, respectively, and to control the functioning of the apparatus. Processor 20 may be configured to control the functioning of the transmitter and receiver by effecting control signaling via electrical leads to the transmitter and receiver. Likewise processor 20 may be configured to control other elements of apparatus 10 by effecting control signaling via electrical leads connecting processor 20 to the other elements, such as for example for example, a display or a memory. The processor 20 may, for example, be embodied in a variety of ways including circuitry, at least one processing core, one or more microprocessors with accompanying digital signal processor(s), one or more processor(s) without an accompanying digital signal processor, one or more coprocessors, one or more multi-core processors, one or more controllers, processing circuitry, one or more computers, various other processing elements including integrated circuits (for example, an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), and/or the like), or some combination thereof. Accordingly, although illustrated in FIG. 6 as a single processor, in some example embodiments the processor 20 may comprise a plurality of processors or processing cores.
[0037] Signals sent and received by the processor 20 may include signaling information in accordance with an air interface standard of an applicable cellular system, and/or any number of different wireline or wireless networking techniques, comprising but not limited to Wi-Fi, wireless local access network (WLAN) techniques, such as for example, Institute of Electrical and Electronics Engineers (IEEE) 802.11 , 802.16, and/or the like. In addition, these signals may include speech data, user generated data, user requested data, and/or the like.
[0038] The apparatus 10 may be capable of operating with one or more air interface standards, communication protocols, modulation types, access types, and/or the like. For example, the apparatus 10 and/or a cellular modem therein may be capable of operating in accordance with various first generation (1 G) communication protocols, second generation (2G or 2.5G) communication protocols, third-generation (3G) communication protocols, fourth-generation (4G) communication protocols (LTE), Internet Protocol Multimedia Subsystem (IMS) communication protocols (for example, session initiation protocol (SIP) and/or the like. For example, the apparatus 10 may be capable of operating in accordance with 2G wireless communication protocols IS-136, Time Division Multiple Access TDMA, Global System for Mobile communications, GSM, IS-95, Code Division Multiple Access, CDMA, and/or the like. In addition, for example, the apparatus 10 may be capable of operating in accordance with 2.5G wireless communication protocols General Packet Radio Service (GPRS), Enhanced Data GSM Environment (EDGE), and/or the like. Further, for example, the apparatus 10 may be capable of operating in accordance with 3G wireless communication protocols, such as for example, Universal Mobile Telecommunications System (UMTS), Code Division Multiple Access 2000 (CDMA2000), Wideband Code Division Multiple Access (WCDMA), Time Division-Synchronous Code Division Multiple Access (TD-SCDMA), and/or the like. The apparatus 10 may be additionally capable of operating in accordance with 3.9G wireless communication protocols, such as for example, Long Term Evolution (LTE), Evolved Universal Terrestrial Radio Access Network (E-UTRAN), and/or the like. Additionally, for example, the apparatus 10 may be capable of operating in accordance with 4G wireless communication protocols, such as for example, LTE Advanced and/or the like as well as similar wireless communication protocols that may be subsequently developed.
[0039] It is understood that the processor 20 may include circuitry for implementing audio/video and logic functions of apparatus 10. For example, the processor 20 may comprise a digital signal processor device, a microprocessor device, an analog-to-digital converter, a digital-to-analog converter, and/or the like. Control and signal processing functions of the apparatus 10 may be allocated between these devices according to their respective capabilities. The processor 20 may additionally comprise an internal voice coder (VC) 20a, an internal data modem (DM) 20b, and/or the like. Further, the processor 20 may include functionality to operate one or more software programs, which may be stored in memory. In general, processor 20 and stored software instructions may be configured to cause apparatus 10 to perform actions. For example, processor 20 may be capable of operating a connectivity program, such as for example, a web browser. The connectivity program may allow the apparatus 10 to transmit and receive web content, such as for example, location-based content, according to a protocol, such as for example, wireless application protocol, WAP, hypertext transfer protocol, HTTP, and/or the like.
[0040] Apparatus 10 may also comprise a user interface including, for example, an earphone or speaker 24, a ringer 22, a microphone 26, a display 28, a user input interface, and/or the like, which may be operationally coupled to the processor 20. The display 28 may, as noted above, include a touch sensitive display, where a user may touch and/or gesture to make selections, enter values, and/or the like. The processor 20 may also include user interface circuitry configured to control at least some functions of one or more elements of the user interface, such as for example, the speaker 24, the ringer 22, the microphone 26, the display 28, and/or the like. The processor 20 and/or user interface circuitry comprising the processor 20 may be configured to control one or more functions of one or more elements of the user interface through computer program instructions, for example, software and/or firmware, stored on a memory accessible to the processor 20, for example, volatile memory 40, non-volatile memory 42, and/or the like. The apparatus 10 may include a battery for powering various circuits related to the mobile terminal, for example, a circuit to provide mechanical vibration as a detectable output. The user input interface may comprise devices allowing the apparatus 20 to receive data, such as for example, a keypad 30 (which can be a virtual keyboard presented on display 28 or an externally coupled keyboard) and/or other input devices.
[0041] As shown in FIG. 4, apparatus 10 may also include one or more mechanisms for sharing and/or obtaining data. For example, the apparatus 10 may include a short- range radio frequency (RF) transceiver and/or interrogator 64, so data may be shared with and/or obtained from electronic devices in accordance with RF techniques. The apparatus 10 may include other short-range transceivers, such as for example, an infrared (IR) transceiver 66, a Bluetooth (BT) transceiver 68 operating using Bluetooth wireless technology, a wireless universal serial bus (USB) transceiver 70, and/or the like. The Bluetooth transceiver 68 may be capable of operating according to low power or ultra-low power Bluetooth technology, for example, Wibree, radio standards. In this regard, the apparatus 10 and, in particular, the short-range transceiver may be capable of transmitting data to and/or receiving data from electronic devices within a proximity of the apparatus, such as for example, within 10 meters, for example. The apparatus 10 including the WiFi or wireless local area networking modem may also be capable of transmitting and/or receiving data from electronic devices according to various wireless networking techniques, including 6LoWpan, Wi-Fi, Wi-Fi low power, WLAN techniques such as for example, IEEE 802.1 1 techniques, IEEE 802.15 techniques, IEEE 802.16 techniques, home eNB assisted communications, and/or the like.
[0042] The apparatus 10 may comprise memory, such as for example, a subscriber identity module (SIM) 38, a removable user identity module (R-UIM), an eUICC 99, UICC, and/or the like, which may store information elements related to a mobile subscriber. In addition to the SIM, the apparatus 10 may include other removable and/or fixed memory. The apparatus 10 may include volatile memory 40 and/or non-volatile memory 42. For example, volatile memory 40 may include Random Access Memory (RAM) including dynamic and/or static RAM, on-chip or off-chip cache memory, and/or the like. Nonvolatile memory 42, which may be embedded and/or removable, may include, for example, read-only memory, flash memory, magnetic storage devices, for example, hard disks, floppy disk drives, magnetic tape, optical disc drives and/or media, non-volatile random access memory (NVRAM), and/or the like. Like volatile memory 40, non-volatile memory 42 may include a cache area for temporary storage of data. At least part of the volatile and/or non-volatile memory may be embedded in processor 20. The memories may store one or more software programs, instructions, pieces of information, data, and/or the like which may be used by the apparatus for performing functions of the user equipment/mobile terminal. The memories may comprise an identifier, such as for example, an international mobile equipment identification (IMEI) code, capable of uniquely identifying apparatus 10 (or a manufacturer may issue a certificate, a media access control address, and/or other kind of device identity). The functions may include one or more of the operations disclosed herein with respect to the user equipment and devices, such as for example, the functions disclosed at process 200 and/or the like). The memories may comprise an identifier, such as for example, an international mobile equipment identification (IMEI) code, capable of uniquely identifying apparatus 10. In the example embodiment, the processor 20 may be configured using computer code stored at memory 40 and/or 42 to receive an update to an application stored in a secure memory device, securely send notifications/tickets to other devices to announce the availability of updates at the secure memory device of a user equipment, securely provide the update to the other devices connected to the user equipment via a group or home network, and/or the like as disclosed herein.
[0043] Some of the embodiments disclosed herein may be implemented in software, hardware, application logic, or a combination of software, hardware, and application logic. The software, application logic, and/or hardware may reside on memory 40, the control apparatus 20, or electronic components, for example. In some example embodiment, the application logic, software or an instruction set is maintained on any one of various conventional computer-readable media. In the context of this document, a "computer- readable medium" may be any non-transitory media that can contain, store, communicate, propagate or transport the instructions for use by or in connection with an instruction execution system, apparatus, or device, such as for example, a computer or data processor circuitry, with examples depicted at least at FIG. 6. A computer-readable medium may comprise a non-transitory computer-readable storage medium that may be any media that can contain or store the instructions for use by or in connection with an instruction execution system, apparatus, or device, such as for example, a computer. Moreover, some of the embodiments disclosed herein include computer programs configured to cause methods as disclosed herein (see, for example, process 200 and/or the like).
[0044] Without in any way limiting the scope, interpretation, or application of the claims appearing below, a technical effect of one or more of the example embodiments disclosed herein is providing secure synchronization of data among applications in a home network.
[0045] If desired, the different functions discussed herein may be performed in a different order and/or concurrently with each other. Furthermore, if desired, one or more of the above-described functions may be optional or may be combined. Although various aspects of the invention are set out in the independent claims, other aspects of the invention comprise other combinations of features from the described embodiments and/or the dependent claims with the features of the independent claims, and not solely the combinations explicitly set out in the claims. It is also noted herein that while the above describes example embodiments, these descriptions should not be viewed in a limiting sense. Rather, there are several variations and modifications that may be made without departing from the scope of the present invention as defined in the appended claims. Other embodiments may be within the scope of the following claims. The term "based on" includes "based on at least."

中文:
[0002]通用集成电路卡(UICC:UniversalIntegratedCircuitCard)是指可以具有类似卡片形式的计算机可读存储介质。UICC经常被称作智能卡,其可以包括处理器、包含计算机程序代码的存储器、输入/输出等。UICC可以被用来向诸如平板电脑、智能电话、计算机和/或任意其它设备之类的设备提供安全存储。例如,除其它之外,UICC可以提供用户标识信息的安全存储,该信息能够被用来对访问诸如公共陆地移动网络(PLMN:PublicLandMobileNetwork)、服务器、机器对机器(machine-to-machine)通信网络等网络设备或设备的用户或设备进行认证。缩写形式“eUICC”可以是指嵌入式UICC。术语嵌入式一般被用来表明该UICC—或更一般地称之为安全元件(secureelement)—支持远程管理功能,该嵌入式安全元件可以并不被用户从设备中移除,但是该eUICC经常也可以是指可移除的安全元件。eUICC的形状因数(formfactor)可以是片上系统(SoC)、可信平台芯片或者可移除的安全元件。eUICC被包括在设备之中,该设备能够与群组中的其它设备进行通信并且可能还能够在该群组外进行通信。
[0003]提供了用于安全存储同步的方法和装置,包括计算机程序产品。在本发明的一个方面,提供了一种方法。该方法可以包括:在用户设备处,接收针对存储在该用户设备处的安全存储器设备中的应用的更新;发送通知以声明在该用户设备处的安全存储器设备处该更新可用,其中在至少一个设备连接至包括该至少一个设备和该用户设备的群组网络时,该通知被安全地发送至该至少一个设备;并且在该至少一个设备连接至该群组网络时,由该用户设备将该更新安全地提供至该至少一个设备。
[0004]在一些变化形式中,可选地可以以任意可行的组合方式包括本文所公开的包括以下特征在内的一个或多个特征。该通知可以被绑定至该至少一个设备。该通知可以包括该至少一个设备的标识符和用于将该通知绑定至该至少一个设备的数值中的至少一个。该通知可以包括该用户设备的标识、应用标识符以及该应用的版本标识符。该至少一个设备可以将该通知提供至该用户设备以获得所提供的更新。该通知可以由该安全存储器设备通过对该至少一个设备进行认证和对该通知进行加密中的至少一种操作而被安全地发送。该更新可以由该安全存储器设备通过对该至少一个设备进行认证和对该通知进行加密中的至少一种操作而被安全地发送。至少一个其它设备可以包括与该用户设备处的安全存储器设备一起执行该认证和该加密的另一安全存储器设备。该用户设备处的安全存储器设备可以包括安全元件、通用集成电路卡、增强型通用集成电路卡、嵌入式通用集成电路卡、智能卡、安全存储卡、可信执行环境和订户身份模块(SIM:SubscriberIdentityModule)中的至少一种。
[0005]以上所提到的方面和特征可以根据所期望的配置而以系统、装置、方法和/或产品(articles)来实施。在附图和以下的描述中给出本文所描述主题的一种或多种变化形式的细节。本文所描述主题的特征和优点将从该描述和附图以及权利要求中变得显而易见。
[0006]在附图中:
[0008]图2描绘了根据一些示例性实施例的用于对一组设备进行同步的处理过程的示例;
[0009]图3-4描绘了根据一些示例性实施例的同步之后的图1的系统;
[0010]图5描绘了根据一些示例性实施例的可以在其上实施图1的系统的示例网络;以及
[0011]图6描绘了根据一些示例性实施例的用户设备的示例。
[0012]同样的附图标记被用来指代图中相同或相似项。
[0013]图1描绘了根据一些示例实施例的示例系统100,其包括服务器102、用户设备112以及一个或多个设备114A-B。
[0014]用户设备112可以经由无线和/或有线网络连接至服务器102以获得诸如应用104A和/或其它信息的数据。例如,用户设备112可以连接至服务器102以下载应用,并且该下载可以被安全地执行。就如下意义而言,该安全下载可以是安全的:用户设备112可以利用传输安全机制来使得服务器102和用户设备112之间交换的消息安全(例如,经由加密密钥或其它机制),和/或为了访问服务器102(或者访问群组网络)以下载数据(例如,针对应用A104B的更新),用户设备112可以利用eUICC190A来执行认证、加密和/或提供其它安全机制。
[0015]一旦应用104B被下载,其就可以处于用户设备112处的用户的控制之下。例如,应用104B可以允许用户提供内容以及其它信息。为了进一步说明,应用104B可以被配置为密码安全应用,其被配置为在用户设备112处安全地存储密码。在该示例中,密码可以被添加至该密码安全应用,并且这些密码可以被存储在诸如eUICC190A的安全存储设备中。虽然之前的示例将应用104B描述为密码安全应用,但是在应用104B处可以使用任意其它的应用、数据和/或信息。这些应用的示例包括用于安全支付交易的一次性密码、加密证书、加密密钥(其可能具有使用期)、在多于一个的设备上存储并编辑的敏感文档以及如下情形的任意其它的数据、应用、电子文档等,这些数据、应用、电子文档等应当被安全地处理并且可能被更改同时其中可能需要将那些更改与其它设备同步。eUICC因此可以为应用提供安全存储,并包含机密信息,这些机密信息可能随时间变化,因而需要将其与位于其它设备上的eUICC同步。
[0016]在一些示例实施例中,用户设备112和设备114A-B可以被配置为所谓的设备“群组”。例如,用户设备112和设备114A-B可以连接至诸如WiFi网络、ad-hoc网络、近场通信链路、设备对设备(device-to-device)链路等的共用家庭无线网络(commonhomewirelessnetwork)以访问群组网络。在诸如用户设备112和设备114A-B等的群组网络成员被准许访问该群组网络之前,该共用家庭无线网络可能要求群组网络成员使用密码或群组密钥(它们二者都可以被安全地存储在eUICC中)进行认证。此外,该群组网络的设备还可以使用该群组成员所知晓或者其可获取的群组密钥或其它密钥来使得传输安全(例如,经由链路或消息加密之类的传输安全机制)。
[0017]在图1的示例实施例中,用户设备112可以包括从服务器102所下载的应用104B,并且该应用104B可以包括并未在其它家庭设备—诸如设备114A-B—之中出现的信息。在一些示例实施例中,本文所公开的主题可以提供多种方式以对多个应用和/或与群组网络设备中的应用相关联的信息进行同步,该群组网络例如包括用户设备112、设备114A-B等。回到以上所提到的密码安全应用的示例,用户设备112可以添加密码以便由密码安全应用(其可以对应于eUICC190A处的应用104B)进行安全存储。然而,这些附加的密码可能并未被存储在例如包含eUICC190B的设备114A和包含eUICC190C的设备114B处的密码安全应用104C和104D中。因此,可以执行同步而使得附加的密码被提供至设备114A/eUICC190B和设备114B/eUICC190C。
[0018]虽然本文所描述的一些示例提到了eUICC190A-C,但是也可以使用其它的安全存储设备,包括智能卡、安全存储器设备、UICC、订户身份模块(SIM)和/或任意其它安全存储设备。
[0019]图2描绘了依据一些示例实施例的用于对群组中的设备进行同步的示例处理过程200。
[0020]在207处,在一些示例实施例中,可以发送更新声明。例如,当用户设备112有应当与群组内的其它设备共享的更新时,用户设备112可以向作为群组中的成员的设备声明更新。在图1的示例中,eUICC190A处的应用104B可以包括在群组的其它应用104C-D处不可用(或不存在)的信息。
[0021]根据该密码安全应用示例,如果诸如新密码之类的新信息被添加至应用104B(由于更新的信息而被示为版本2),则该群组中的其它设备114A-B可能需要更新(由于在那些设备处缺少该新的密码而被示为版本1)。根据该示例,在207处,用户设备112向设备114A-B声明更新以表明从用户设备112可得到应用104B的新版本。
[0022]根据一次性密码列表的示例,如果在应用104B处使用了一次性密码,则该一次性密码就从该列表被移除(由于更新的信息而被示为版本2),该群组中的其它设备114A-B处的应用104C-D可能需要更新(由于那些设备处的陈旧信息而被示为版本1)。根据该示例,在207处,用户设备112向设备114A-B声明更新以表明从用户设备112可得到应用104B的新版本。
[0023]当应当执行更新以对包括其中所包含信息的应用进行同步时,包含eUICC190A的用户设备112可以向群组中的其它设备发送通知。该通知可以被发送至连接到群组网络的一个或多个设备,并且该通知可以包括以下一项或多项:源设备(例如,具有更新的用户设备112)的标识;应用标识符(例如,具有更新的应用104B的标识);版本标识符(例如,应用104B最后被更新的时间戳、版本编号等);以及被授权接收更新的(多个)接收设备的标识(例如,诸如媒体访问控制(MAC)地址、国际移动订户识别码(IMSI)之类的标识符,和/或任意其它通用的唯一标识符)。
[0024]在一些示例实施例中,该通知可以包括票券(ticket),当其被诸如设备114B的设备所接收时,其授权该设备接收更新。例如,用户设备112可以向每个设备114A-B发送票券,并且该票券可以被专门绑定至被授权接收更新的每个设备的标识。当是这种情况时,仅设备114A能够兑换其所接收到的票券以便获得在eUICC190A处可用的更新,并且仅设备114B能够兑换其所接收到的票券以便获得该更新。因此,这种基于票券的方法可以被用于控制被授权接收更新的设备。
[0025]在一些示例实施例中,通过例如获取认证(例如,经由密码或群组密钥)、传输安全机制(例如,消息或链路加密)和/或任意其它安全机制,该通知被安全地发送至设备。例如,诸如用户设备112/eUICC190A和设备114A/eUICC190B的群组成员可以经由链路194A在交换消息(包括该通知)之前执行认证,以及/或对交换的消息(包括该通知)进行加密。
[0026]在一些示例实施例中,用户设备112可以追踪被授权接收更新的设备和/或追踪更新是否已经被发送至某些设备。
[0027]在图1的示例中,用户设备112可以通过经由链路194A发送该通知,向已经在194A连接至群组网络的设备114C声明该更新,并且该通知可以被安全地发送。例如,使用专用于被授权接收更新的设备114C的密钥,该通知可以被安全地发送。在图1的示例中,设备114B并未连接至群组网络,因此设备114B并未接收到更新声明。
[0028]在209处,根据一些示例实施例,该更新可以被提供至群组中的一个或多个设备。参考图1,用户设备112可以将应用A的更新提供至设备114A-B,从而应用104A-C关于例如内容信息和/或任意其它方面得以被同步。在一些示例实施例中,该更新可以在网络上被安全地执行。例如,该更新可以在设备114A-B认证之后被提供,以及/或通过使用传输安全机制(例如,基于群组密钥或任意其它类型密钥的消息加密)该更新可以被执行。
[0029]图3描绘了对设备114A进行更新之后(如由应用104C处的版本2所示)的系统100。
[0030]参考图2和图3,根据一些示例实施例,在211处,当设备114B连接至群组网络时,设备114B可以被更新。当设备114B连接至用户设备112和/或连接至设备114A时,设备114B可以获得在207处所声明的通知和/或针对应用104D的更新。在一些示例实施例中,如关于209处所提到的,该更新可以在群组网络上被安全地执行。例如,当设备114B连接至用户设备112和/或设备114A时,设备114B可以请求接收(或者被推送以)更新的状态、通知、票券、更新等。例如,当设备114B连接至群组网络时,其可以接收到指示针对应用104D的更新的通知或票券。
[0031]在一些示例实施例中,设备114B直接从设备114A获得针对应用104D的更新,而在其它示例实施例中,设备114B直接从用户设备112获得针对应用104D的更新。在这种情况下,设备114B可能需要获得通知,该通知告知该设备在用户设备112处该更新是可用的。图4描绘了直接来自用户设备112(或者来自设备114A/eUICC190B)的针对应用104D的更新之后的设备114B。
[0032]图5描绘了包括基站110A和110C的示例系统500,这些基站可以被配置为服务宏小区112A和112C(本文中也被称作小区和覆盖区域)的演进NodeB(eNB)基站。系统进一步包括无线接入点110B,其可以被配置为服务无线局域网或小小区112B。系统500进一步包括用户设备112和设备114A-B,它们可以由基站110A和/或无线接入点110B来服务。另外,服务器102可以经由回程链路、互联网和/或其它网络连接至基站110A。
[0033]在一些示例实施例中,诸如例如用户设备112的用户设备可以被实施为移动设备和/或静止设备。用户设备可以被称作例如移动台、移动单元、用户站、无线终端、平板电脑、智能电话、无线设备等。用户设备可以被实施为例如无线手持设备、无线插入(plug-in)配件等。在一些示例实施例中,用户设备可以被配置为经由基站110A接入蜂窝接入网络以及经由接入点110B和/或其它设备接入非蜂窝接入网络的多模无线电装置。在一些示例实施例中,设备114A-B可以被配置为用户设备和/或被配置为提供机器对机器通信。
[0034]图6图示了根据一些示例实施例的能够被配置为用户设备的装置10的框图。
[0035]装置10可以包括与发射器14和接收器16通信的至少一根天线12。可替换地,发射和接收天线可以是分离的。
[0036]装置10还可以包括处理器20,其被配置为分别提供信号给发射器以及接收来自接收器的信号,并且控制该装置的功能。处理器20可以被配置为,通过经由到发射器和接收器的电引线实施控制信令来控制发射器和接收器的功能。同样,处理器20可以被配置为,通过经由将处理器20与例如显示屏或存储器的其它部件连接的电引线实施控制信令来控制装置10的其它部件。处理器20例如可以以各种方式来体现,包括电路、至少一个处理内核、带有(多个)数字信号处理器的一个或多个微处理器、没有附带数字信号处理器的一个或多个处理器、一个或多个协同处理器、一个或多个多核处理器、一个或多个控制器、处理电路、一个或多个计算机、包括集成电路(例如,专用集成电路(ASIC)、现场可编程门阵列(FPGA)等)的各种其它处理部件,或者它们的某些组合。因此,虽然在图6中被示为单个处理器,但在一些示例实施例中,处理器20可以包括多个处理器或处理内核。
[0037]处理器20所发送和接收的信号可以包括按照适用蜂窝系统和/或任意多个不同有线或无线联网技术的空中接口标准的信令信息,这些联网技术包括但并不局限于Wi-Fi、无线局域网(WLAN)技术,例如电气与电子工程师协会(IEEE)802.11、802.16等。此外,这些信号可以包括语音信号、用户所生成的数据、用户所请求的数据等。
[0038]装置10能够以一种或多种空中接口标准、通信协议、调制类型、接入类型等进行操作。例如,装置10和/或其中的蜂窝调制解调器能够根据各种第一代(1G)通信协议、第二代(2G或2.5G)通信协议、第三代(3G)通信协议、第四代(4G)通信协议(LTE)、IP多媒体子系统(IMS)通信协议(例如,会话发起协议(SIP))等进行操作。例如,装置10能够根据2G无线通信协议IS-136、时分多址TDMA、全球移动通信系统GSM、IS-95、码分多址CDMA等进行操作。而且,例如,装置10能够根据2.5G无线通信协议通用分组无线服务(GPRS)、增强数据GSM环境(EDGE)等进行操作。另外,例如,装置10能够根据3G无线通信协议进行操作,诸如通用移动电信系统(UMTS)、码分多址2000(CDMA2000)、宽带码分多址(WCDMA)、时分同步码分多址(TD-SCDMA)等。装置10此外还能够根据3.9G无线通信协议进行操作,诸如长期演进(LTE)或演进的通用陆地无线接入网(E-UTRAN)等。此外,例如,装置10能够根据例如高级LTE(LTEAdvanced)等的第四代(4G)无线通信协议等以及后续可能研发的类似无线通信协议进行操作。
[0039]应理解的是,处理器20可以包括用于实现装置10的音/视频和逻辑功能的电路。例如,处理器20可以包括数字信号处理器设备、微处理器设备、模数转换器、数模转换器等。装置10的控制和信号处理功能可以根据这些设备的相应能力而在它们之间进行分配。处理器20还可以包括内部语音编码器(VC)20a、内部数据调制解调器(DM)20b等。另外,处理器20可以包括对可存储在存储器中的一个或多个软件程序进行操作的功能。通常,处理器20和所存储的软件指令可以被配置为使得装置10执行动作。例如,处理器20能够对诸如web浏览器的连接程序进行操作。该连接程序可以允许装置10根据诸如无线应用协议WAP、超文本传输协议HTTP等协议发送和接收Web内容,例如基于位置的内容。
[0040]装置10还可以包括用户接口,其包括例如耳机或扬声器24、振铃器22、麦克风26、显示屏28、用户输入接口等,它们可操作地连接至处理器20。如以上所提到的,显示屏28可以包括触摸感应屏,用户可以触摸和/或作出手势以进行选择、输入数值等。处理器20还可以包括用户接口电路,其被配置为控制例如扬声器24、振铃器22、麦克风26、显示屏28等用户接口的一个或多个部件的至少一些功能。处理器20和/或包括处理器20的用户接口电路可以被配置为通过例如软件和/或固件的计算机程序指令来控制用户接口的一个或多个部件的一个或多个功能,计算机程序指令存储在处理器20所能够访问的例如易失性存储器40、非易失性存储器42等存储器上。装置10可以包括用于对与移动终端相关的各种电路进行供电的电池,上述电路例如是用于提供机械振动作为可检测输出的电路。用户输入接口例如可以包括允许装置20接收数据的设备,诸如键盘30(其可以是呈现在显示屏28上的虚拟键盘或者外部连接的键盘)和/或其它输入设备。
[0041]如图4所示,装置10还可以包括一个或多个用于共享和/或获取数据的机制。例如,该装置10可以包括短距离射频(RF)收发器和/或问答器(interrogator)64,从而可以根据RF技术与电子设备共享数据和/或从电子设备获得数据。装置10可以包括其它短距离收发器,例如红外(IR)收发器66、使用蓝牙无线技术进行操作的蓝牙(BT)收发器68、无线通用串行总线(USB)收发器70等。蓝牙收发器68能够根据例如Wibree无线电标准的低功率或超低功率蓝牙技术进行操作。就此而言,例如,装置10以及尤其是短距离收发器能够向电子设备发送数据或接收来自电子设备的数据,这些电子设备处于装置附近(例如10米以内)。根据包括6LoWpan、Wi-Fi、低功率Wi-Fi、IEEE802.11技术(这些技术例如IEEE802.11技术、IEEE802.15技术、IEEE802.16技术、家庭eNB辅助通信等)在内的各种无线联网技术,包括WiFi或者无线局域网调制解调器的装置10能够向电子设备发送数据或接收来自电子设备的数据。。
[0042]装置10可以包括诸如订户身份模块(SIM)38、可移除用户身份模块(R-UIM)、eUICC99、UICC等的存储器,其可以存储与移动订户相关的信息要素。除了SIM之外,装置10可以包括其它可移除和/或固定存储器。装置10可以包括易失性存储器40和/或非易失性存储器42。例如,易失性存储器40可以包括随机访问存储器(RAM),其包括动态和/或静态RAM、片上或片外缓存存储器等。非易失性存储器42可以是嵌入式和/或可移除的,其可以包括例如只读存储器、闪存、磁性存储设备(例如硬盘、软盘驱动器、磁带等)、光盘驱动器和/或媒质、非易失性随机访问存储器(NVRAM)等。与易失性存储器40一样,非易失性存储器42可以包括用于数据临时存储的缓存区域。易失性和/或非易失性存储器的至少一部分可以被嵌入在处理器20中。存储器可以存储一个或多个软件程序、指令、信息、数据等,装置可以使用它们来执行用户设备/移动终端的功能。存储器可以包括能够唯一地识别装置10的诸如国际移动设备标识(IMEI)代码的标识符(或者生产商可以发布证书、媒体访问控制地址和/或其他种类的设备标识)。该功能可以包括本文关于该用户设备或设备所公开的一种或多种操作,例如在处理过程200所公开的功能等。存储器可以包括能够唯一地识别装置10的诸如国际移动设备标识(IMEI)代码的标识符。在示例实施例中,处理器20可以被配置使用存储在存储器40和/或42处的计算机代码以接收针对存储在安全存储器设备中的应用的更新,安全地向其他设备发送通知/票券以声明用户设备的安全存储器设备处的更新的可用性,安全地向经由群组或家庭网络连接至该用户设备的其他设备提供该更新,和/或本文所公开的其他操作。。
[0043]本文所公开的一些实施例可以以软件、硬件、应用逻辑或者软件、硬件和应用逻辑的组合来实施。软件、应用逻辑和/或硬件可以驻留在例如存储器40、控制设备20或电子组件上。在一些示例实施例中,应用逻辑、软件或指令集被保存在各种常规计算机可读介质的任何一种上。在本文的情境中,“计算机可读介质”可以是能够包含、存储、通信、传播或传送指令的非瞬态介质,这些指令由诸如计算机或数据处理器电路的指令执行系统、装置或设备所使用或者结合其使用,如至少在图6中描绘的示例。计算机可读介质可以包括非瞬态计算机可读存储介质,其可以是能够包含或存储指令以便由诸如计算机的指令执行系统、装置或设备所使用或者结合其使用的任意介质。并且,本文所公开的一些实施例包括被配置为使得如本文所描述的方法(参见例如处理过程200等)发生的计算机程序。
[0044]本文所公开的一个或多个示例实施例的技术效果是提供了在家庭网络中的应用之间的数据安全同步,但并不以任何方式对所给出的权利要求的范围、解释或应用加以限制。
[0045]如果需要的话,本文所讨论的不同功能可以以不同顺序被执行和/或彼此同时被执行。此外,如果需要,以上所描述的一个或多个功能可以是可选的或者可以进行组合。虽然在独立权利要求中描述了本发明的各个方面,但是本发明的其它方面包括来自所描述实施例和/或具有独立权利要求特征的从属权利要求的特征组合,而并非仅是权利要求中所明确给出的组合。本文中还要注意的是,虽然以上描述了本发明的示例实施例,但是这些描述并不应当以限制的含义进行理解。相反,可以进行若干种变化和修改而并不背离如所附权利要求中所限定的本发明的范围。其它实施例可以处于权利要求的范围之内。术语“基于”包括“至少基于”。