Patent ID: 8510559

Claim:
A method for securing communications between a Universal Integrated Circuit Card (UICC) and a Terminal, the method comprising: generating a first secure shared session key, wherein the first secure shared session key is configured to enable secure communication between the UICC and the Terminal, during a procedure that requires communications between the UICC and the Terminal, wherein the procedure is at least one of an authentication and key agreement (AKA) procedure or a generic bootstrapping architecture (GBA) procedure; encrypting communications between the UICC and the Terminal using the first secure shared session key to establish a secure channel between the UICC and the Terminal; performing, via the established secure channel between the UICC and the Terminal, the at least one of the AKA procedure or the GBA procedure resulting in generation of a second secure shared session key, whereby communications between the UICC and the Terminal resulting in generation of the second secure shared session key are encrypted by the first secure shared session key; and using the second secure shared session key to encrypt communications to and from the Terminal subsequent to the at least one of the AKA procedure or the GBA procedure.