Secure updating of telecommunication terminal configuration

Telecommunication apparatus, comprising:

• a communications interface configured to transmit and receive messages via a telecommunications network;
• a datastore configured for storage of a configuration record;
• and
• a security processor communicatively connected with the communications interface and the datastore and configured to:
• retrieve, from the datastore, a first configuration record comprising a first device identifier of the terminal and a cryptographic signature of at least a portion of the first configuration record;
• transmit, via the communications interface to a provider services entity of a network operator, a request message comprising the first configuration record and data of the first device identifier of the terminal, wherein the terminal is configured to communicate at least partly via services provided by the network operator;
• receive, via the communications interface, a reply message comprising a second configuration record, wherein the second configuration record includes a second device identifier and a second cryptographic signature of at least a portion of the second configuration record;
• verify that the second cryptographic signature is valid;
• verify that the second device identifier matches the first device identifier;
• and
• in response to the verifications of the second cryptographic signature and the second device identifier, modifying data in the datastore according to the second configuration record.

A method performed by a terminal for telecommunication, the method comprising:

• retrieving, from a datastore, a configuration record comprising a device identifier of the terminal and a cryptographic signature of at least a portion of the configuration record;
• transmitting, via a communications interface to a provider services entity of a network operator, a request message comprising the configuration record and the device identifier of the terminal, wherein the terminal is configured to communicate at least partly via services provided by the network operator;
• receiving, via the communications interface, a reply message comprising a second configuration record, wherein the second configuration record includes a second device identifier and a second cryptographic signature of at least a portion of the second configuration record;
• verifying that the second cryptographic signature is valid;
• verifying that the second device identifier matches the device identifier;
• and
• in response to the verifications of the second cryptographic signature and the second device identifier, modifying data in the datastore according to the second configuration record.