# US 10,375,085 B2 · Apparatus and method for securely managing the accessibility to content and applications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,085 B2 - Document ID: US10375085B2 - Status: Granted - Kind: B2 - Application number: 16/131,223 - Filed: 2018-09-14 - Published: 2019-01-10 - Granted: 2019-08-06 - Earliest claimed: 2013-10-28 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Walter Cooper Chastain; Stephen Emille Chin - Web page: https://patentgrep.com/patent/US10375085B2 ## CPC - H04L 63/123: {received data contents, e.g. message integrity} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 12/45: using multiple identity modules - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A system that incorporates the subject disclosure may perform, for example, receive secret information and non-secret information from a secure download application function, provide a request for a first verification to a secure element where the first verification is associated with access to content and/or an application that is accessible via the secure download application function, receive the first verification which is generated by the secure element based on the secret information without providing the secret information to the secure device processor, receive the non-secret information from the secure element, and generate a second verification for the access based on the non-secret information, where the content and/or application is accessible from the secure download application function responsive to the first and second verifications. Other embodiments are disclosed. ## Claims ### Claim 1 A device, comprising: a secure element having a secure element memory; and a secure device processor separate from the secure element and in communication therewith, the secure device processor having a secure device processor memory with executable instructions, wherein the secure device processor, responsive to executing the instructions, facilitates performance of operations comprising: generating a first verification for access by the device to content that is sourced via a source server, wherein the first verification is based on non-secret information, wherein the content is accessed from the source server based on the first verification and a second verification, wherein the second verification is generated by the secure element based on secret information that is stored in the secure element memory without the secure element providing the secret information to the secure device processor, and wherein the secure device processor does not have access to the secret information; generating consumption information by monitoring the access to the content; providing the consumption information associated with the access to the content to the secure element, the consumption information indicating that the content has been presented by the device; and preventing the device from further accessing the content according to access instructions from the secure element, wherein the access instructions are responsive to the consumption information. ### Claim 2 (depends on 1) The device of claim 1, wherein the access instructions are generated by the secure element. ### Claim 3 (depends on 1) The device of claim 1, wherein the secret information and the non-secret information are obtained by the secure element from a remote management server. ### Claim 4 (depends on 1) The device of claim 1, wherein the non-secret information comprises a distribution rule associated with digital rights management for the content. ### Claim 5 (depends on 1) The device of claim 1, further comprising a device processor that is separate from the secure element and the secure device processor, wherein the device processor facilitates wireless communications between the device and the source server. ### Claim 6 (depends on 1) The device of claim 1, wherein the secret information includes a decryption key and an authentication credential. ### Claim 7 (depends on 1) The device of claim 1, wherein the non-secret information includes a user identification, a device identification, digital rights management data, or a combination thereof. ### Claim 8 (depends on 7) The device of claim 7, wherein the access instructions are based at least in part on the digital rights management data. ### Claim 9 (depends on 1) The device of claim 1, wherein the secure element comprises a universal integrated circuit card (UICC). ### Claim 10 (depends on 9) The device of claim 9, wherein the secure device processor obtains the non-secret information via communication with a secure download management function of the UICC. ### Claim 11 A non-transitory machine-readable medium comprising executable instructions that, when executed by a processing system including a secure device processor, facilitate performance of operations comprising: generating a first verification for access to content that is sourced via a source server, wherein the first verification is based on non-secret information, wherein the content is accessed from the source server based on the first verification and a second verification, wherein the second verification is generated by a secure element having a secure element memory, the secure element separate from the secure device processor and in communication therewith, the second verification based on secret information that is stored in the secure element memory without the secure element providing the secret information to the secure device processor, and wherein the secure device processor does not have access to the secret information; generating consumption information by monitoring the access to the content; providing the consumption information associated with the access to the content to the secure element; and preventing the secure device processor from further accessing the content according to access instructions from the secure element, wherein the access instructions are responsive to the consumption information. ### Claim 12 (depends on 11) The non-transitory machine-readable medium of claim 11, wherein the secret information and the non-secret information are obtained by the secure element from a remote management server. ### Claim 13 (depends on 11) The non-transitory machine-readable medium of claim 11, wherein the non-secret information comprises a distribution rule associated with digital rights management for the content. ### Claim 14 (depends on 11) The non-transitory machine-readable medium of claim 11, wherein the non-secret information includes a user identification, a device identification, digital rights management data, or a combination thereof. ### Claim 15 (depends on 14) The non-transitory machine-readable medium of claim 14, wherein the access instructions are based at least in part on the digital rights management data. ### Claim 16 A method comprising: generating, by a processing system comprising a secure device processor, a first verification for access to content that is sourced via a source server, wherein the first verification is based on non-secret information, wherein the content is accessed from the source server based on the first verification and a second verification, wherein the second verification is generated by a secure element having a secure element memory, the secure element separate from the secure device processor and in communication therewith, the second verification based on secret information that is stored in the secure element memory without the secure element providing the secret information to the secure device processor; generating, by the processing system, consumption information by monitoring the access to the content; providing, by the processing system, the consumption information associated with the access to the content to the secure element, the consumption information indicating that the content has been presented by the device; and preventing, by the processing system, the secure device processor from further accessing the content according to access instructions from the secure element, wherein the access instructions are responsive to the consumption information. ### Claim 17 (depends on 16) The method of claim 16, wherein the access instructions are based at least in part on digital rights management data included in the non-secret information. ### Claim 18 (depends on 16) The method of claim 16, wherein the secret information and the non-secret information are obtained by the secure element from a remote management server. ### Claim 19 (depends on 16) The method of claim 16, wherein the secret information includes a decryption key and an authentication credential. ### Claim 20 (depends on 16) The method of claim 16, wherein the secure element comprises a universal integrated circuit card (UICC), and wherein the secure device processor obtains the non-secret information via communication with a secure download management function of the UICC.