Source: https://patents.google.com/patent/US8966262B2/en
Timestamp: 2020-01-25 05:41:08
Document Index: 357730208

Matched Legal Cases: ['Application No. 11187094', 'Application No. 11187094', 'Application No. 2011', 'Application No. 2011', 'Application No. 100139136', 'Application No. 100139136']

US8966262B2 - Methods and apparatus for delivering electronic identification components over a wireless network - Google Patents
US8966262B2
US8966262B2 US14/049,185 US201314049185A US8966262B2 US 8966262 B2 US8966262 B2 US 8966262B2 US 201314049185 A US201314049185 A US 201314049185A US 8966262 B2 US8966262 B2 US 8966262B2
US14/049,185
US20140099925A1 (en
2013-10-08 Application filed by Apple Inc filed Critical Apple Inc
2014-04-10 Publication of US20140099925A1 publication Critical patent/US20140099925A1/en
2015-02-24 Publication of US8966262B2 publication Critical patent/US8966262B2/en
This application is a continuation of U.S. patent Ser. No. 13/111,801, entitled “METHODS AND APPARATUS FOR DELIVERING ELECTRONIC IDENTIFICATION COMPONENTS OVER A WIRELESS NETWORK” filed May 19, 2011, which claims the benefit of U.S. Provisional Patent Application Ser. No. 61/407,862, entitled “METHODS AND APPARATUS FOR DELIVERING ELECTRONIC IDENTIFICATION COMPONENTS OVER A WIRELESS NETWORK” filed on Oct. 28, 2010, each of which is incorporated herein by reference in its entirety for all purposes.
FIG. 1 is a logical ladder diagram illustrating prior art Authentication and Key
Agreement (AKA) procedure using a Subscriber Identity Module (SIM).
FIG. 2 is a process diagram of one exemplary embodiment 200 of secure delivery of cSIM data according to the invention. A user purchases a wireless device from an authorized retail entity for a local carrier, the eUICC of the wireless device is pre-loaded with a access module. See, e.g., co-owned and co-pending U.S. patent application Ser. No. 13/080,521 filed on Apr. 5, 2011 and entitled “METHODS AND APPARATUS FOR STORAGE AND EXECUTION OF ACCESS CONTROL CLIENTS”, previously incorporated by reference herein, which describes exemplary apparatus and methods for establishing trusted communications.
At step 402, the mobile device establishes a connection to an update portal on one or more acceptable carrier networks. The update portal could be e.g., a carrier data portal, a third party software vendor, a mobile device manufacturer, etc. Various types of network entities capable of providing electronic identification components are described within U.S. patent application Ser. No. 13/093,722 filed on Apr. 25, 2011 and entitled “APPARATUS AND METHODS FOR STORING ELECTRONIC SUBSCRIBER IDENTITY MODULES”, Ser. No. 13/095,716 filed on Apr. 27, 2011 and entitled “SYSTEM FOR DISTRIBUTION OF UNIQUE SUBSCRIBER IDENTITY MODULES”, and U.S. Provisional Patent Application Ser. No. 61/479,319 filed on Apr. 26, 2011 and entitled “ELECTRONIC ACCESS CLIENT DISTRIBUTION APPARATUS AND METHODS”, and 61/483,582 filed on May 6, 2011 and entitled “METHODS AND APPARATUS FOR PROVIDING MANAGEMENT CAPABILITIES FOR ACCESS CONTROL CLIENTS”, each of the foregoing being incorporated herein by reference in its entirety. For example, a eUICC appliance or eSIM depot are network structures that can establish secure connections to mobile devices to exchange or modify existing eSIMs.
1. A method for receiving an operating system update from a wireless carrier, the method comprising:
accessing first identification data associated with an embedded secure element that is included in the mobile device;
transmitting, to an update portal of the wireless carrier, the first identification data to establish a set of access rights, wherein the set of access rights enable access to one or more packages comprising an operating system update for an operating system loaded in the mobile device;
receiving, from the update portal, second identification data associated with the wireless carrier; and
in response to authenticating the second identification data:
downloading, into the embedded secure element of the mobile device, the one or more packages comprising the operating system update,
assembling the operating system update based at least in part on the downloaded one or more packages, and
updating the operating system based on the assembled operating system update to enable the mobile device to access additional wireless services not available to the mobile device prior to updating the operating system.
2. The method of claim 1, wherein the operating system update is selected by a user of the mobile device.
5. The method of claim 1, wherein the one or more wireless services comprises placing or receiving a voice call.
6. The method of claim 1, wherein the one or more wireless services comprises accessing a wireless network provided by the wireless carrier.
7. The method of claim 1, wherein the one or more wireless services comprises accessing a media file not stored by the mobile device.
8. The method of claim 1, wherein the set of access rights established based on the first identification data does not include access to the one or more wireless services.
9. A method for providing an operating system update to a mobile device, the method comprising:
at a portal of a wireless carrier:
receiving, from the mobile device, a request for the operating system update, wherein the request includes first identification data associated with an embedded secure element that is included in the mobile device;
in response to authenticating the first identification data:
providing, to the mobile device, a set of access rights that grant the mobile device access to one or more packages comprising the operating system update;
providing, to the mobile device, second identification data associated with the wireless carrier; and
in response to receiving an indication from the mobile device that the mobile device has authenticated the second identification data:
providing, to the embedded secure element of the mobile device, the one or more packages comprising the operating system update to enable the mobile device to carry out an update of an operating system loaded in the mobile device by assembling the operating system updated based at least in part on the provided one or more packages, and
10. The method of claim 9, wherein the request for the update is generated by the mobile device in response to a selection made by a user of the mobile device.
11. The method of claim 9, wherein the set of access rights is limited to providing packages associated with operating system updates to the mobile device.
12. The method of claim 9, wherein the first identification data and the second identification data are based on a cryptographic key protocol.
13. The method of claim 12, wherein the cryptographic key protocol is based on one or more asymmetric Rivest Shamir and Adelman (RSA) public and private keys.
14. The method of claim 9, wherein the one or more wireless services comprises placing or receiving a voice call.
15. The method of claim 9, the one or more wireless services comprises accessing a wireless network provided by the wireless carrier.
at least one wireless interface adapted to connect to at least one wireless network provided by a wireless carrier;
an embedded secure element associated with first identification data; and
a processor device, wherein the processor device is configured to cause the wireless apparatus to:
access the first identification data;
transmit, to an update portal of the wireless carrier, the first identification data to establish a set of access rights, wherein the set of access rights enable access to one or more packages comprising an operating system update for an operating system loaded in the mobile device;
receive, from the update portal, second identification data associated with the wireless carrier; and
download, into the embedded secure element of the mobile device, the one or more packages comprising the operating system update,
assemble the operating system update based at least in part on the downloaded one or more packages, and
update the operating system based on the assembled operating system update to enable the mobile device to access additional wireless services not available to the mobile device prior to updating the operating system.
17. The wireless apparatus of claim 16, wherein the operating system update is selected by a user of the mobile device.
18. The wireless apparatus of claim 16, wherein the first identification data and the second identification data are based on a cryptographic key protocol.
US14/049,185 2010-10-28 2013-10-08 Methods and apparatus for delivering electronic identification components over a wireless network Active US8966262B2 (en)
US13/111,801 Continuation US8555067B2 (en) 2010-10-28 2011-05-19 Methods and apparatus for delivering electronic identification components over a wireless network
US14/629,386 Continuation US9344832B2 (en) 2010-10-28 2015-02-23 Methods and apparatus for delivering electronic identification components over a wireless network
US20140099925A1 US20140099925A1 (en) 2014-04-10
US8966262B2 true US8966262B2 (en) 2015-02-24
US10536467B2 (en) * 2018-08-02 2020-01-14 Comcast Cable Communications, Llc Distributed content uploading and validation
JP5538560B2 (en) * 2010-11-01 2014-07-02 かもめエンジニアリング株式会社 Access control method, access control apparatus, and access control program
KR20170015462A (en) 2014-07-03 2017-02-08 애플 인크. Methods and apparatus for establishing a secure communication channel
KR20170140809A (en) * 2015-04-13 2017-12-21 삼성전자주식회사 Techniques for managing profiles in communication systems
EP3579592A1 (en) * 2017-03-21 2019-12-11 Huawei Technologies Co., Ltd. Operating system updating method and device
CA2242401C (en) 1997-02-14 2002-07-30 Ntt Mobile Communications Network Inc. Method for controlling activation of mobile station and mobile station using same
DE60208067T2 (en) 2001-10-25 2006-08-17 Research In Motion Ltd., Waterloo Multi-stage system and method for processing the coded messages
DE50200601D1 (en) 2002-05-24 2004-08-12 Swisscom Mobile Ag Devices and methods for the certification of digital signatures
AU2003265034A1 (en) 2002-10-07 2004-04-23 Telefonaktiebolaget Lm Ericsson (Publ) Security and privacy enhancements for security devices
SE0300670A (en) 2003-03-10 2004-08-17 Smarttrust Ab Method for secure downloading of applications
CA2848112C (en) 2004-11-29 2016-10-25 Blackberry Limited System and method for service activation in mobile network billing
JP4173889B2 (en) 2005-01-07 2008-10-29 エルジー エレクトロニクス インコーポレイティド Authentication processing method for copy terminal in mobile communication system
ES2364574T3 (en) 2005-02-04 2011-09-07 Qualcomm Incorporated Safe initial sequence for wireless communications.
CN102405630B (en) 2009-04-20 2017-04-12 交互数字专利控股公司 System of multiple domains and domain ownership
"3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Feasibility Study on Remote Management of USIM Application on M2M Equipment; (Release 8)", 3GPP TR 33.812 V0.3.0 (May 2008), pp. 1-61.
"3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Feasibility study on the security of remote provisioning and change of subscription for Machine for Machine (M2M) equipment (Release 9)", 3GPP TR 33.812, V9.2.0 (Jun. 2010), pp. 1-88.
Chinese Application for Invention No. 201110462177.X-First Office Action dated Dec. 20, 2013.
Chinese Application for Invention No. 201110462177.X—First Office Action dated Dec. 20, 2013.
European Patent Application No. 11187094.5-Office Action dated Mar. 21, 2014;.
European Patent Application No. 11187094.5—Office Action dated Mar. 21, 2014;.
Japanese Patent Application No. 2011-251074-Office Action dated Dec. 11, 2013.
Japanese Patent Application No. 2011-251074—Office Action dated Dec. 11, 2013.
Michael Kasper et al. "Subscriber Authentication in Cellular Networks with Trusted Virtual SIMs", Feb. 17-20, 2008, ICACT 2008, pp. 903-908.
Taiwanese Patent Application No. 100139136-Office Action dated Apr. 24, 2014.
Taiwanese Patent Application No. 100139136—Office Action dated Apr. 24, 2014.
KR20130033474A (en) 2013-04-03 Apparatus and methods for provisioning subscriber identity data in a wireless network
JP5750519B2 (en) 2015-07-22 Migration of authentication information and / or domains between THSMs