US 10,769,279 B2Granted

Secure element operating system update notification

AssigneeApple Inc.

InventorXiangying Yang

Life of this patent

Estimating the term…

Loading patent…

Abstract

An operating system (OS) update to a secure element (SE) may be commanded, for example, in order to fix a security bug, upgrade a version of an OS, provide mobile network operator (MNO) specific extensions such as to an application programming interface (API) or to cause OS/profile switching. Many of these OS updates will affect one or more profiles present on the SE. An MNO associated with a given profile will benefit in some instances by being provided with a notification of the OS update, since the OS update may affect SE capabilities and thus affect what a given profile can or cannot do after the OS update occurs. Embodiments provided herein create notification entries that will appropriately inform the concerned MNO. In some embodiments, a capability linking variable (“linkedcapability”) is used to determine whether an SE capability change should trigger transmission of a notification to the concerned MNO.

Claims20

Dependent claims

A secure element (SE) of a cellular wireless communication device, the SE storing one or more profiles, the SE comprising:

at least one processor;
and
a memory storing instructions that, when executed by the at least one processor, cause the SE to perform operations that include, for each profile of the one or more profiles managed by the SE:
comparing (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE;
for each SE capability included in both the first and second sets of SE capabilities:
adding the SE capability to a respective notification list for the profile;
and
in response to determining that the respective notification list includes at least one SE capability:
causing at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile,
wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent.

7 more elements

A method implemented by a secure element (SE) of a cellular wireless communication device, the SE storing one or more profiles, the method comprising, for each profile of the one or more profiles managed by the SE:

comparing (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE;
for each SE capability included in both the first and second sets of SE capabilities:
adding the SE capability to a respective notification list for the profile;
and
in response to determining that the respective notification list includes at least one capability:
causing at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile,
wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent.

4 more elements

An apparatus configurable for operation in a cellular wireless communication device, the apparatus comprising:

a processor;
and
a memory storing instructions that, when executed by the processor, cause a secure element (SE) of the cellular wireless communication device to, for each profile of the one or more profiles is stored in and managed by the SE:
compare (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE;
for each SE capability included in both the first and second sets of SE capabilities:
add the SE capability to a respective notification list for the profile;
and
in response to determining that the respective notification list includes at least one SE capability:
cause at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile,
wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/026,912Filed 3 Jul 2018 · us provisional application
Priority: 24 Aug 2017
Published: US 2019/0065749 A128 Feb 2019
Granted: 8 Sep 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

G06F 21/572
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 8/65
Software deployment: updates
G06F 21/74
To assure secure computing or processing of information: operating in dual or compartmented mode, i.e. at least one secure mode
H04L 67/30
Architectures; Arrangements: profiles

Family

Application62/549,787Us provisional application · filed 24 Aug 2017
US 2019/0065749 A1Pre-grant publication · published 28 Feb 2019
US 10,769,279 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key