Abstract:
A method for sharing applications (APPI, APP 2 , APPx; APP 4 ) being stored in a source mobile communication device (MOx; MOI) with a destination mobile communication device (MO 1 ; MOx) comprises: transmitting a sharing request (SR) from the source mobile communication device (MOx; MO 1 ) to a Trusted Service Manager (TSM) with information about the application and the destination mobile communication device (MO 1 ; MOx); at the Trusted Service Manager (TSM), retrieving the Service Provider (SP 1 , SP 2 , SPx) that has provided said application and sending a query (QU) to it; at the Service Provider (SP 1 , SP 2 , SPx), sending an installation request (INST) to the Trusted Service Manager (TSM) with an adapted version (APPx′) of the application and update instructions (UPD) for the source mobile communication device (MOx; MO 1 ); at the Trusted Service Manager (TSM), getting the adapted application (APPx′) installed in the destination mobile communication device (MO 1 ; MOx) and updating the source mobile communication device (MOx; MO 1 ).

Description:
FIELD OF THE INVENTION 
       [0001]    The invention relates to a method for sharing or reselling NFC applications being stored in a source mobile communication device with or to a destination mobile communication device. 
         [0002]    The invention further relates to a telecommunication system comprising at least one Service Provider, at least one Trusted Service Manager and a plurality of mobile communication devices, e.g. NFC mobile phones, being equipped to store NFC applications of the Service Providers. 
         [0003]    The invention further relates to a Trusted Service Manager. 
         [0004]    The invention further relates to a Service Provider. 
         [0005]    The invention further relates to a computer program product directly loadable into the memory of a mobile communication device being equipped with a memory device. 
         [0006]    The invention further relates to a mobile communication device being adapted to process the computer program product mentioned in the above paragraph. 
       BACKGROUND OF THE INVENTION 
       [0007]    There are mobile communication devices known which contain memory devices having unique memory device identifications, e.g. the MIFARE® classic family, developed by NXP Semiconductors, a contactless smart card IC operating in the 13.56 MHz frequency range with read/write capability. Recently, secure memory elements have been developed which are memory devices providing enhanced security features, particularly for the use in mobile phones and other mobile communication devices with Near Field Communication (NFC) capabilities. Said secure memory elements are also known as “Smard Cards”. One of the leading representatives of these secure memory elements is the SmartMX (Memory eXtension) smart card family that has been designed by NXP Semiconductors for high-security smart card applications requiring highly reliable solutions, with or without multiple interface options. Key applications are e-government, banking/finance, mobile communications and advanced public transportation. SmartMX architecture combines coprocessors for RSA, ECC, DES and AES and enables implementation of operating systems including Java Open Platform and MULTOS. The ability of SmartMX cards to run the MIFARE protocol concurrently with other contactless transmission protocols implemented by the User Operating System enables the combination of new services and existing applications based on MIFARE (e.g. ticketing) on a single Dual Interface controller based smart card. SmartMX cards are able to emulate MIFARE Classic devices and thereby makes this interface compatible with any installed MIFARE Classic infrastructure. The contactless interface can be used to communicate via any protocol, particularly the MIFARE protocol and self defined contactless transmission protocols. SmartMX enables the easy implementation of state-of-the-art operating systems and open platform solutions including JCOP (the Java Card Operating System) and offers an optimized feature set together with the highest levels of security. 
         [0008]    In February 2007 the GSM Association (GSMA) published a white paper outlining operator community guidance for the eco-system parties involved in the development of Mobile NFC (Near Field Communication) services. Mobile NFC is defined as the combination of contactless services with mobile telephony, based on NFC technology. The mobile phone with a hardware-based secure identity token (the UICC) can provide the ideal environment for NFC applications. The UICC can replace the physical card thus optimising costs for the Service Provider, and offering users a more convenient service. Various different entities are involved in the Mobile NFC ecosystem. These are defined below:
       Customer—uses the mobile device for mobile communications and Mobile NFC services. The customer subscribes to an MNO and uses Mobile NFC services.   Mobile Network Operator (MNO)—provides the full range mobile services to the Customer, particularly provides UICC and NFC terminals plus Over The Air (OTA) transport services.   Service Provider (SP)—provides contactless services to the Customer (SPs are e.g. banks, public transport companies, loyalty programs owners etc.).   Retailer/Merchant—service dependent, e.g. operates a NFC capable Point of Sales (POS) terminal.   Trusted Service Manager (TSM)—securely distributes and manages the Service Providers&#39; services to the MNO customer base.   Handset, NFC Chipset and UICC Manufacturer—produce Mobile NFC/Communication devices and the associated UICC hardware.   Reader Manufacturer—produces NFC reader devices.   Application developer—designs and develops the Mobile NFC applications.   Standardisation Bodies and Industry Fora—develop a global standard for NFC, enabling interoperability, backward compatibility and future development of NFC applications and services.       
 
         [0018]    One of the key findings in said white paper is that Mobile NFC will be successful provided that the Mobile NFC ecosystem is steady, providing value for all entities within it; and is efficient, by introducing a new role of the Trusted Service Manager. 
         [0019]    The role of the Trusted Service Manager (TSM) is to:
       Provide the single point of contact for the Service Providers to access their customer base through the MNOs.   Manage the secure download and life-cycle management of the Mobile NFC application on behalf of the Service Providers.       
 
         [0022]    The TSM does not participate in the transaction stage of the service, thus ensuring that the Service Providers&#39; existing business models are not disrupted. Depending on the national market needs and situations, the TSM can be managed by one MNO, a consortium of MNOs, or by independent Trusted Third Parties. The number of operating TSMs in one market will depend on the national market needs and circumstances. 
         [0023]    Service Providers like banks, public transport companies, loyalty programs owners etc. provide contactless services to their subscribed customers who use these services in their mobile communication devices, e.g. NFC mobile phones. Contactless services comprise e.g. the provision of transport passes, cinema tickets, coupons, etc. which can be subsumed by the generic terms “applications” and “services”. In the following description the term “application” will be used in a broad sense that comprises all contactless services and applications and particularly NFC services and applications. 
         [0024]    A customer buys applications from Service Providers for instance by ordering them from the website of a Service Provider. In the course of the purchasing procedure the customer inputs a unique identification number of his/her mobile communication device, e.g. the telephone number of a NFC mobile phone, so that the Service Provider knows unambiguously where to send the application. The Service Provider transmits the purchased application to the customer&#39;s mobile communication device via a Trusted Service Manager which securely distributes and manages the Service Provider&#39;s applications and transmits them to the mobile communication device. 
         [0025]    When the applications are received by the mobile communication device they are stored in a secure memory element of the mobile communication device and can be consumed by the customer by positioning the mobile communication device within the range of transmission of a reading device which reads and processes the application in an appropriate manner, e.g. by giving the user access to an entrance of a concert hall. 
         [0026]    The present invention applies to a Mobile NFC ecosystem with Trusted Service Manager (TSM) as disclosed in the above referenced GSMA white book. Particularly, it takes into account the specific role of the TSM which acts as the single point of contact for the Service Providers to access their customer base through the MNOs and manages the secure download and life-cycle management of the Mobile NFC application on behalf of the Service Provider. However, while the GSMA white book defines the role of the TSM in theory, for successful applications in practice there are still a couple of obstacles and problems to overcome. The issue that has to be addressed by the present invention is that it would be desirable for a customer to share or resell applications being stored in his mobile communication device with other people like friends or relatives. While from a technical point of view this sharing or reselling of applications could be done directly by sending an application from one mobile communication device to another (by using Bluetooth, NFC, WIFI and so on) such a direct sharing would pose the following problems in the context of the concept of Trusted Service Managers. The first problem with sharing/reselling of an application is that this application which has been provided by a Service Provider (and maybe is still owned by it) might be specific to one particular customer or his/her mobile communication device, respectively, and therefore will not work on other mobile communication devices. The second problem to overcome for sharing/reselling of applications is that both the Service Provider and the Trusted Service Manager must be aware of the sharing/reselling of applications they are in charge of. The Service Provider (particularly, if it is still the owner of the application) must grant the right to the customer to do so. It has also been taken into account that a Service Provider should have the technical possibility to charge the customer for sharing/reselling an application. 
       OBJECT AND SUMMARY OF THE INVENTION 
       [0027]    It is an object of the invention to provide a mechanism to share or resell applications like NFC services among customers and their mobile communication devices, respectively, without violating the concept of a Trusted Service Manager to be the single point of contact for the Service Providers to access their customer base through Mobile Network Operators and to manage the secure download and life-cycle management of the applications on behalf of the Service Providers. 
         [0028]    In order to achieve the object defined above, with a method according to the invention characteristic features are provided so that a method according to the invention can be characterized in the way defined below, that is: 
         [0029]    A method for sharing or reselling applications being stored in a source mobile communication device with or to a destination mobile communication device comprising: 
         [0030]    at the source mobile communication device, transmitting a sharing or reselling request to a Trusted Service Manager which request comprises information about the application to be shared/resold and the destination mobile communication device; 
         [0031]    at the Trusted Service Manager, extracting from the request the application to be shared/resold and the destination communication device; connecting to a repository that contains information about applications associated with mobile communication devices in which the applications are installed and with the Service Providers which have provided said applications; retrieving from the repository the Service Provider that has provided the application to be shared/resold; and sending a query to said Service Provider asking if reselling or sharing the application with/to the destination mobile communication device is possible; 
         [0032]    at the Service Provider, processing said query by checking whether reselling or sharing the application with/to destination mobile communication device is possible or not, and in the affirmative, sending an installation request to the Trusted Service Manager which installation request comprises an adapted version of the application to be shared/resold, and sending update instructions to the Trusted Service Manager instructing it how to proceed with the application to be shared/resold in the source mobile communication device; 
         [0033]    at the Trusted Service Manager, compiling the adapted application into a setup-message and sending it to the destination mobile communication device; sending update instructions to the source mobile communication device; and updating the repository according the Service Provider&#39;s installation instructions and update instructions; 
         [0034]    at the destination mobile communication device, installing the application according to the setup-message; 
         [0035]    at the source mobile communication device, updating the stored application according to the update instructions. 
         [0036]    In order to achieve the object defined above, with a telecommunication system according to the invention characteristic features are provided so that a telecommunication system according to the invention can be characterized in the way defined below, that is: 
         [0037]    A telecommunication system comprising at least one Service Provider, at least one Trusted Service Manager and a plurality of mobile communication devices, e.g. NFC mobile phones, being equipped to store applications provided by the Service Providers, wherein the Service Providers, the Trusted Service Manager and the mobile communication devices comprise computing units and software code portions for performing the steps of the above method. 
         [0038]    In order to achieve the object defined above, with a Trusted Service Manager according to the invention characteristic features are provided so that a Trusted Service Manager according to the invention can be characterized in the way defined below, that is: 
         [0039]    A Trusted Service Manager being adapted to: 
         [0040]    receive from a source mobile communication device a sharing or reselling request which request comprises information about an application to be shared/resold and a destination mobile communication device; 
         [0041]    extract from the request the application to be shared/resold and the destination communication device; 
         [0042]    connect to a repository that contains information about applications associated with mobile communication devices in which the applications are installed and with Service Providers which have provided said applications; 
         [0043]    retrieve from the repository the Service Provider that has provided the application to be shared/resold; 
         [0044]    send a query to said Service Provider asking if reselling or sharing the application with/to the destination mobile communication device is possible; 
         [0045]    compile an adapted application received from the Service Provider into a setup-message and send it to the destination mobile communication device; 
         [0046]    send update instructions to the source mobile communication device according the Service Provider&#39;s SPx installation instructions; and update the repository according the Service Provider&#39;s installation instructions and update instructions. 
         [0047]    In order to achieve the object defined above, with a Service Provider according to the invention characteristic features are provided so that a Service Provider according to the invention can be characterized in the way defined below, that is: 
         [0048]    A Service Provider being adapted to provide applications via a Trusted Service Manager to mobile communication devices, wherein the Service Provider is further adapted to: 
         [0049]    receive a query from the Trusted Service Manager asking if reselling or sharing the application with/to a destination mobile communication device is possible; 
         [0050]    process said query by checking whether reselling or sharing the application with/to destination mobile communication device is possible or not, and in the affirmative, send an installation request to the Trusted Service Manager which installation request comprises an adapted version of the application to be shared/resold, and send update instructions to the Trusted Service Manager instructing it how to proceed with the application to be shared/resold in a source mobile communication device. 
         [0051]    In order to achieve the object defined above, with a computer program product according to the invention characteristic features are provided so that a computer program product according to the invention can be characterized in the way defined below, that is: 
         [0052]    A computer program product being directly loadable into the memory of a mobile communication device being equipped with a memory device for storing applications which have been provided to the mobile communication device by Service Providers, wherein the computer program product comprises software code portions for performing—when running on the mobile communication device—the steps of 
         [0053]    transmitting a sharing or reselling request to a Trusted Service Manager which request comprises information about an application to be shared/resold and a destination mobile communication device; 
         [0054]    installing applications in the memory device according to a setup-message of a Trusted Service Manager; and 
         [0055]    updating application that are stored in the memory device according to update instructions of a Trusted Service Manager. 
         [0056]    In order to achieve the object defined above, a mobile communication device according to the invention comprises an arithmetic-logic unit and a memory and processes the computer program product according to the above paragraph. 
         [0057]    The characteristic features according to the invention provide the advantage that a customer of a Service Provider is enabled to share or resell applications like NFC services that he/she has installed in his/her mobile communication device with other customers and their mobile communication devices, respectively, without violating the concept of a Trusted Service Manager to be the single point of contact for the Service Providers to access their customer base through Mobile Network Operators. 
         [0058]    The measures as claimed in claim  2 , claim  3 , claim  5  or claim  6 , respectively, provide the advantage that they rely on well-defined highly accessible network infrastructure and services. 
         [0059]    The aspects defined above and further aspects of the invention are apparent from the exemplary embodiment to be described hereinafter and are explained with reference to this exemplary embodiment. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0060]    The invention will be described in more detail hereinafter with reference to an exemplary embodiment. However, the invention is not limited to this exemplary embodiment. 
           [0061]      FIG. 1  shows a schematic diagram of a telecommunication system in which context the invention is embedded as well as the steps of the method according to the present invention. 
           [0062]      FIG. 2  shows a schematic diagram of the status of the telecommunication system when the steps of the method according to the invention have been completed. 
       
    
    
     DESCRIPTION OF EMBODIMENTS 
       [0063]      FIG. 1  schematically shows a Mobile NFC ecosystem as disclosed in the above referenced GSMA white book. The system comprises a Mobile Network Operator MNO, a couple of Service Providers SP 1 , SP 2 , SPx, mobile communication devices MO 1 , MOx and a Trusted Service Manager TSM. The mobile communication device MO 1  is assigned to a customer CU 1  who has registered the mobile communication device MO 1  at the Mobile Network Operator MNO. The mobile communication device MOx is assigned to a customer CUx who has registered the mobile communication device MOx at the Mobile Network Operator MNO. The Mobile Network Operator MNO provides the full range mobile services to the customers CUl, CUx and their mobile communication devices MO 1 , MOx, respectively, particularly provides UICC and NFC terminals plus Over The Air (OTA) transport services for the mobile communication devices MO 1 , MOx. The mobile communication devices MO 1 , MOx are equipped with memory devices MIF 1 , MIFx being adapted to securely store applications APP 1 , APP 2 , APPx in memory device MIFx and APP 4  in memory device MIF 1 . The memory devices MIF 1 , MIFx advantageously comprise MIFARE memory cards (e.g. a MIFARE Standard 1 k memory card as shown in  FIG. 1 ) or smartcards like SmartMX cards. The mobile communication devices MO 1 , MOx equipped with said memory devices MIF 1 , MIF 2  are preferably configured as NFC mobile phones. For instance, the application APP 1  is provided by Service Provider SP 1 , the applications APP 2  and APP 4  are provided by Service Provider SP 2 , and the application APPx is provided by the Service Providers SPx. The Service Providers SP 1 , SP 2 , SPx are e.g. banks, public transport companies, loyalty programs owners etc. 
         [0064]    The Trusted Service Manager TSM securely distributes and manages the Service Providers&#39; SP 1 , SP 2 , SPx applications APP 1 , APP 2 , APP 4 , APPx to the Mobile Network Operator&#39;s MNO customer base as will be explained in more detail below. 
         [0065]    When a Service Provider, e.g. Service Provider SPx wants to install a new application APPx (ticket, access control, coupon, etc.) in a memory device MIFx of the mobile communication device MOx it sends an installation request INST via a first communication channel C 1  to the Trusted Service Manager TSM. The installation request INST comprises the application APPx to be installed, an identifier of the Service Provider SPx and a unique identifier of the target mobile communication devices MOx, e.g. an assigned telephone number. The first communication channel C 1  is e.g. configured as a computer network such as the Internet. In the present example the preferred data transmission protocol between the Service Provider SPx and the Trusted Service Manager TSM is HTTPS. Usually, the Service Provider SPx has got the unique identifier of the mobile communication device MOx directly from the customer CUx, e.g. when he orders a ticket (=Application APPx) via the website of the Service Provider SPx and in order to complete this order has to input the telephone number of his mobile communication device MOx into an online-form. 
         [0066]    As the Trusted Service Manager TSM receives the installation request INST from the Service Provider SPx it extracts the application APPx and the identifier of the mobile communication device MOx and—provided that the memory device MIFx of the mobile communication device MOx is a MIFARE memory—assigns under its own discretion one or more destination sectors and the associated sector key(s) of the memory device MIFx. Next, the Trusted Service Manager TSM compiles the application APPx, the sector key(s) and the sector number(s) of the destination sectors into a setup-message SU. In order to improve security the Trusted Service Manager TSM may encrypt the setup-message SU. Then the Trusted Service Manager TSM sends the setup-message SU via a second communication channel C 2 , e.g. an over-the-air (OTA) service of the Mobile Network Operator MNO to the mobile communication device MOx. Presently, the preferred OTA service is SMS. In the mobile phone MOx there is a software application running being designed to extract all the data from the received setup-message SU, if necessary decrypting it first, and writing the extracted application APPx into the assigned destination sector(s) of the memory device MIFx by using the extracted sector key(s). 
         [0067]    Further, as the Trusted Service Manager TSM receives the installation request INST from the Service Provider SPx and extracts the application APPx and the identifier of the mobile communication device MOx it further writes (WRT) these data into a repository REP so that it can retrieve all Service Providers SPx that are associated with a specific mobile communication device MOx. The repository REP shown in  FIG. 1  presently contains one application APP 4  assigned to the mobile communication device MO 1 , which application APP 4  has been delivered by the Service Provider SP 2 , and three applications APP 1 , APP 2 , APPx assigned to the mobile communication device MOx, which applications have been delivered by the Service Providers SP 1 , SP 2  and SPx, respectively. The repository REP could for instance be configured as a data base, a file system or the like. 
         [0068]    According to the present invention when the customer CUx wants to share or resell e.g. the application APPx with the customer CU 1  he/she selects the application APPx and the destination mobile communication device MO 1  of the customer CU 1  (e.g. either by inputting a sequence of key strokes or by selection from menus of the user interface of the mobile communication device MOx) and gets his/her mobile communication device MOx to send a request SR to the Trusted Service Manager TSM to share/resell the application APPx with the mobile communication device M 01 . The Trusted Service Manager TSM retrieves (RTR) the application APPx for finding out by which Service Provider it has been provided (in the present example Service Provider SPx) and sends a query QU to the Service Provider SPx asking if reselling or sharing the application APPx with/to destination mobile communication device MO 1  is possible. If the Service Provider SPx agrees it sends an installation request INST comprising an adapted version APPx′ of the original application, its own identifier (i.e. SPx) and the unique identifier of the target mobile communication device MO 1 . Further, the Service Provider sends update instructions UPD to the Trusted Service Manager TSM instruction how to proceed with the application APPx in the source mobile communication device MOx. Update instructions comprise e.g. the instruction to delete the application APPx from the source mobile communication device MOx or to update a value (e.g. number of remaining tickets) that is contained in the application APPx. 
         [0069]    The Trusted Service manager TSM updates its repository REP according the Service Provider&#39;s SPx instructions. The Trusted Service manager TSM further compiles the adapted application APPx′, and if necessary sector key(s) and target the sector number(s) of the memory device MIF 1  into a setup-message SU and sends it via the Mobile Network Operator MNO to the destination mobile communication device MO 1 . The Trusted Service manager TSM also sends the update instructions UPD via the Mobile Network Operator MNO to the source mobile communication device MOx. 
         [0070]      FIG. 2  shows the state of the Mobile NFC ecosystem after the sharing/reselling request has been completed. It is assumed that the uptdate instructions had been deleting instructions. It can be seen that application APPx has been deleted from the memory device MIFx of the source mobile communication device MOx and that adapted application APPx′ has been stored in the memory device MIF 1  of the destination mobile communication device MOx. Further, the information in the repository has been updated accordingly. 
         [0071]    It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design many alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word “comprising” does not exclude the presence of elements or steps other than those listed in a claim. The indefinite article “a” or “an” preceding an element does not exclude the presence of a plurality of such elements. In the device claim enumerating several means, several of these means may be embodied by one and the same item of hardware. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage.