# US 10,484,861 B2 · Electronic device comprising a secure module supporting a mode for the local management of the configuration of a subscriber profile > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,861 B2 - Document ID: US10484861B2 - Status: Granted - Kind: B2 - Application number: 15/768,430 - Filed: 2016-10-13 - Published: 2018-11-08 - Granted: 2019-11-19 - Earliest claimed: 2015-10-15 - Assignees: Idemia France - Applicants: Idemia France - Inventors: Tomasz Wozniak; Alexis Michel - Web page: https://patentgrep.com/patent/US10484861B2 ## CPC - H04W 8/183: {Processing at user equipment or user record carrier} - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04W 4/50: Service provisioning or reconfiguring - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract In the field of electronic devices, there is disclosed a secure module for housing at least one subscriber profile and an interface allowing the local configuration of a profile. The secure module also includes an activation agent including a unit for detection of a mode of local management of the profile for authorising and/or prohibiting the processing of the local configuration requests by a local manager according to the result of the detection. Also disclosed is a detachable integrated circuit cards or secure elements soldered into the device communicating via a mobile telecommunication network. ## Claims ### Claim 1 An electronic device, comprising: a secure module configured to host at least one mobile communication network subscriber profile; and a first interface that transmits local profile configuration requests to the secure module, the secure module including a local manager that receives local profile configuration requests coming from the first interface, and an activation agent that includes detection means for detection of a local profile management mode that authorizes or prohibits processing by the local manager of the local configuration requests as a function of a result of the detection, wherein the secure module also includes a second interface that communicates with a remote server for receiving remote profile configuration requests, and wherein the detection means includes means for determining at least one secure radiofrequency transport protocol that has been executed by the second interface at a time of provisioning of the profile in order to determine the result of the detection. ### Claim 2 (depends on 1) The device as claimed in claim 1, wherein the detection means also includes means for verifying, at the time of provisioning of the profile, that said provisioning of the profile originates from the first interface in order to determine the result of the detection. ### Claim 3 (depends on 2) The device as claimed in claim 2, wherein the activation agent is configured to prohibit the local manager from processing the local configuration requests if the result of the detection indicates that a radiofrequency secure transport protocol has been detected. ### Claim 4 (depends on 1) The device as claimed in claim 1, wherein the activation agent is configured to prohibit the local manager from processing the local configuration requests if the result of the detection indicates that a radiofrequency secure transport protocol has been detected. ### Claim 5 (depends on 1) The device as claimed in claim 1, wherein the secure radiofrequency transport protocol is of the SCP80 or SCP81 type. ### Claim 6 (depends on 5) The device as claimed in claim 5, wherein the detection means also includes means for verifying that the second interface has received an instruction to activate the local profile management mode coming from the remote server in order to determine the result of the detection. ### Claim 7 (depends on 5) The device as claimed in claim 5, wherein the first interface includes means for notifying the remote server to activate the local profile management mode. ### Claim 8 (depends on 1) The device as claimed in claim 1, wherein the detection means also includes means for verifying that the second interface has received an instruction to activate the local profile management mode coming from the remote server in order to determine the result of the detection. ### Claim 9 (depends on 1) The device as claimed in claim 1, wherein the first interface includes means for notifying the remote server to activate the local profile management mode. ### Claim 10 (depends on 1) The device as claimed in claim 1, wherein the activation agent also includes means for authorizing and/or prohibiting the local manager processing some or all of the local configuration requests coming from the first interface. ### Claim 11 (depends on 1) The device as claimed in claim 1, wherein the local configuration requests are requests for activation of the subscriber profile, requests for deactivation of the subscriber profile, and requests for deletion of the subscriber profile. ### Claim 12 A method of activation of a local management mode of requests for configuration of a subscriber profile for an electronic device that includes a secure module adapted to host at least one subscriber profile, said method comprising: a detection step of detecting a local profile management mode by detection means of an activation agent of the secure module, followed by a process authorization step of either authorizing or prohibiting a local manager of the secure module processing local configuration requests coming from a first interface of the electronic device as a function of the result of the detection, wherein the detection step includes determining at least one secure radiofrequency transport protocol that has been executed by a second interface of the secure module in order to determine the result of the detection. ### Claim 13 (depends on 12) The method as claimed in claim 12, wherein the detection step also includes verifying that, at the time of provisioning of the profile, said provisioning of the profile originates from the first interface in order to determine the result of the detection. ### Claim 14 (depends on 12) The method as claimed in claim 12, wherein, upon detecting execution of a secure radiofrequency transport protocol by the second interface, a local profile management mode is not detected and the local manager is prohibited from transmitting the local configuration request. ### Claim 15 (depends on 12) The method as claimed in claim 12, wherein the secure radiofrequency transport protocol is of the SCP80 or SCP81 type. ### Claim 16 (depends on 12) The method as claimed in claim 12, wherein the detection step also includes verifying the reception by the second interface of an instruction for activation of the local profile management mode coming from a remote server in order to determine the result of the detection. ### Claim 17 (depends on 16) The method as claimed in claim 16, further comprising: a notification step of notifying, by the interface to the remote server, to activate the local profile management mode. ### Claim 18 (depends on 12) The method as claimed in claim 12, further comprising: a step of either authorizing or prohibiting the local manager processing some or all of the local configuration requests coming from the first interface. ### Claim 19 (depends on 12) The method as claimed in claim 12, wherein the local configuration requests are requests for activation of the subscriber profile, requests for deactivation of the subscriber profile, and requests for deletion of the subscriber profile. ### Claim 20 (depends on 12) A non-transitory computer-readable medium on which is stored code that is executable by an electronic device equipped with a secure module for hosting at least one mobile communication network subscriber profile, the code, upon execution by the electronic device, causing the electronic device to implement the method as claimed in claim 12.