# US 10,484,370 B2 · Method for operating a security element

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,370 B2
- Document ID: US10484370B2
- Status: Granted
- Kind: B2
- Application number: 15/549,565
- Filed: 2016-02-05
- Published: 2018-08-23
- Granted: 2019-11-19
- Earliest claimed: 2015-02-09
- Assignees: Gieseck+Devrient Mobile Security GmbH
- Applicants: Giesecke+Devrient Mobile Security GmbH
- Inventors: Ulrich Wimböck
- Web page: https://patentgrep.com/patent/US10484370B2

## CPC

- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- G06F 21/575: {Secure boot}
- H04L 63/102: {Entity profiles}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 67/12: specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L 67/125: involving control of end-device applications over a network
- H04L 67/306: User profiles
- H04W 4/50: Service provisioning or reconfiguring
- H04W 8/183: {Processing at user equipment or user record carrier}
- H04W 12/08: Access security
- H04W 12/45: using multiple identity modules
- H04W 88/06: adapted for operation in multiple networks {or having at least two operational modes}, e.g. multi-mode terminals
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method for operating a security element of a mobile terminal with a memory unit includes using a first subscription profile with a first operating system for the security element, and a second subscription profile with a second operating system for the security element. The method involves operating the security element with the first operating system to communicate with the first subscription profile via a first mobile communication network; switching from the first operating system to the second operating system of the security element through a boot loader in the memory unit loading and executing the second operating system following a reboot of the security element; and operating the security element with the second operating system, to be able to communicate with the second subscription profile via a second mobile communication network. A corresponding security element and a corresponding mobile terminal are provided.

## Claims

### Claim 1

A method for operating a security element of a mobile terminal with a memory unit, in which there are present a first subscription profile with a first operating system for the security element and a second subscription profile with a second operating system for the security element, wherein the method includes the following steps of:
operating the security element with the first operating system, in order to be able to communicate with the first subscription profile via a first mobile communication network;
switching from the first operating system to the second operating system of the security element through a boot loader in the memory unit loading and executing the second operating system following a reboot of the security element; and
operating the security element with the second operating system, in order to be able to communicate with the second subscription profile via a second mobile communication network;
wherein the switching includes:
receiving a message from a background system by the security element operated with the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
forwarding the message to the boot loader; and
extracting the information content of the message from the message by the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the settings of the boot loader are changed by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element; and/or
receiving an input from a user by the security element operated with the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
forwarding the input to the boot loader; and
extracting the information content of the input from the input by the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the settings of the boot loader are changed by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element; and/or
receiving a message from a background system by the security element operated with the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
extracting the information content of the message from the message by the security element operated with the first operating system; and
forwarding the information content of the message to the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the settings of the boot loader are changed by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element.

### Claim 2 (depends on 1)

The method according to claim 1, wherein the communication between the security element operated with the first operating system and the boot loader is effected via a suitably configured program library or programming interface or API (“application programming interface”).

### Claim 3

A security element for a mobile terminal with a memory unit, in which there are present a first subscription profile with a first operating system for the security element and a second subscription profile with a second operating system for the security element, wherein the security element is configured to:
be operated with the first operating system, in order to be able to communicate with the first subscription profile via a first mobile communication network;
switch from the first operating system to the second operating system of the security element through a boot loader in the memory unit loading and executing the second operating system following a reboot of the security element;
be operated with the second operating system, in order to be able to communicate with the second subscription profile via a second mobile communication network;
wherein the switch includes:
receiving a message from a background system by the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
forwarding the message to the boot loader; and
extracting the information content of the message from the message by the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the settings of the boot loader are changed by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element; and/or
receiving a message from a background system by the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
extracting the information content of the message from the message by the first operating system; and
forwarding the information content of the message to the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the security element is configured to change the settings of the boot loader by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element.

### Claim 4 (depends on 3)

The security element according to claim 3, wherein the security element is configured such that the communication between the first operating system and the boot loader is effected via a suitably configured program library or programming interface or API (“application programming interface”).

### Claim 5

A mobile terminal comprising:
a security element, the security element comprising:
a memory unit, in which there are present a first subscription profile with a first operating system for the security element and a second subscription profile with a second operating system for the security element, wherein the security element is configured to:
be operated with the first operating system, in order to be able to communicate with the first subscription profile via a first mobile communication network;
switch from the first operating system to the second operating system of the security element through a boot loader in the memory unit loading and executing the second operating system following a reboot of the security element; and
be operated with the second operating system, in order to be able to communicate with the second subscription profile via a second mobile communication network;
wherein the switch includes:
receiving a message from a background system by the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
forwarding the message to the boot loader; and
extracting the information content of the message from the message by the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the settings of the boot loader are changed by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element; and/or
receiving a message from a background system by the first operating system, with the information content that a switch is to be effected from the first operating system to the second operating system of the security element;
extracting the information content of the message from the message by the first operating system; and
forwarding the information content of the message to the boot loader, so that the settings of the boot loader are changed such that the second operating system of the security element is loaded and executed following a reboot of the security element,
wherein the security element is configured to change the settings of the boot loader by placing in the boot loader a marker which defines that the second operating system of the security element is loaded and executed following a reboot of the security element.