Method to manage subscriptions in a provisioning server

A system comprising:

• a hardware security module (HSM) including at least an HSM key (K), a load and a reload function respectively triggered by a load request and a reload request;
• and
• a hardware provisioning server that:
• store scripts (Scr) corresponding to the creation of subscriptions, said scripts being encrypted using a storage key (Ks), said scripts ((Scr)Ks) being intended to be loaded in secure devices (SEi), each of the secure devices (SEi) being associated with a secure device key (Kei), and
• store said storage key (Ks) and said secure device keys (Kei) encrypted using the HSM key (K),
• wherein:
• the load function receives two keys (Ke1,Ks) encrypted using the HSM key (K), encrypts the second key (Ks) using the first and outputs the thus encrypted key (((Ks)Ke1)K) further encrypted using the HSM key (K) and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the first key (Ke1), to put the retrieved storage key (Ks) on a secure device (SE1),
• the reload function receives two keys ((Ke1)K,((Ks)Ke1)K) encrypted using the HSM key (K) and outputs the second key ((Ks)Ke1) encrypted using the first key (Ke1) and an APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the secure device key (Ke1), to put the retrieved storage key ((Ks)Ke1) encrypted using the first key (Ke1) on the secure device (SE1),
• further wherein, in response to a request to load a given script (ScrA) on a secure device (SE1), the provisioning server is configured to:
• checks if the given script (ScrA) has been loaded on any secure device,
• in the case (N) such a previous loading does not appear, provide the secure device key ((Ke1)K) and the storage key ((Ks)K) as encrypted and stored to the load function of the Hardware Security Module (HSM) in a load request,
• retrieve, from the load function of said Hardware Security Module (HSM), the storage key ((Ks)Ke1)K) encrypted using the provided secure device key (Ke1) and the HSM key K, and the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key (Ke1), to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key (Ke1),
• overwrite the storage key as stored ((Ks)K), with the storage key (((Ks)Ke1)K) encrypted using the secure device key (Ke1) and the HSM key (K) returned by the Hardware Security Module (HSM),
• forward the APDU putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device (SE1), and
• send the script (ScrA) as stored to the secure device (SE1),
• and in the case (Y) a previous loading does appear during the checking step, the provisioning server is configured to:
• provide the secure device key ((Ke1)K) and the storage key (((Ks))Ke1)K) as encrypted and stored to a reload function of the hardware security module (HSM) in a reload request,
• retrieve, from the reload function of said Hardware Security module (HSM), the storage key (((Ks)Ke1)K) encrypted using the provided secure device key (Ke1) and the HSM key (K) and the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1), encrypted using the provided secure device key (SE1), to put the retrieved storage key ((Ks)Ke1) also encrypted using the provided secure device key (Ke1),
• forward the APDU_putkey command ((APDU_PUTKEY((Ks)Ke1))Ke1) to the secure device (SE1), and
• sends the script ((ScrA)Ks) as stored to the secure device (SE1), to avoid the possibility of subscription cloning on a plurality of secure devices.