# US 10,769,279 B2 · Secure element operating system update notification > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,279 B2 - Document ID: US10769279B2 - Status: Granted - Kind: B2 - Application number: 16/026,912 - Filed: 2018-07-03 - Published: 2019-02-28 - Granted: 2020-09-08 - Earliest claimed: 2017-08-24 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Xiangying Yang - Web page: https://patentgrep.com/patent/US10769279B2 ## CPC - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode - H04L 67/30: Profiles - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - H04W 4/12: Messaging; Mailboxes; Announcements - G06F 21/33: using certificates - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract An operating system (OS) update to a secure element (SE) may be commanded, for example, in order to fix a security bug, upgrade a version of an OS, provide mobile network operator (MNO) specific extensions such as to an application programming interface (API) or to cause OS/profile switching. Many of these OS updates will affect one or more profiles present on the SE. An MNO associated with a given profile will benefit in some instances by being provided with a notification of the OS update, since the OS update may affect SE capabilities and thus affect what a given profile can or cannot do after the OS update occurs. Embodiments provided herein create notification entries that will appropriately inform the concerned MNO. In some embodiments, a capability linking variable (“linkedcapability”) is used to determine whether an SE capability change should trigger transmission of a notification to the concerned MNO. ## Claims ### Claim 1 A secure element (SE) of a cellular wireless communication device, the SE storing one or more profiles, the SE comprising: at least one processor; and a memory storing instructions that, when executed by the at least one processor, cause the SE to perform operations that include, for each profile of the one or more profiles managed by the SE: comparing (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE; for each SE capability included in both the first and second sets of SE capabilities: adding the SE capability to a respective notification list for the profile; and in response to determining that the respective notification list includes at least one SE capability: causing at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile, wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent. ### Claim 2 (depends on 1) The SE of claim 1, wherein the operations further comprise, for each profile of the one or more profiles managed by the SE, and prior to the operation of comparing: determining, based on notification configuration information indicated in a profile management operation value included in the profile, that notifications should be provided to the respective MNO. ### Claim 3 (depends on 1) The SE of claim 1, wherein: the linked capability value comprises a binary value, each bit of the binary value indicating whether an associated SE capability requires a notification to be sent. ### Claim 4 (depends on 1) The SE of claim 1, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO over a bearer independent protocol (BIP) channel established between the SE and the server of the MNO. ### Claim 5 (depends on 1) The SE of claim 1, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO by a local profile assistant (LPA) implemented on the cellular wireless communication device in which in the SE is included. ### Claim 6 (depends on 5) The SE of claim 5, wherein the operations performed by the SE further comprise, for at least one profile of the one or more profiles: sending a refresh command to the LPA to cause the LPA to obtain the respective notification list and to provide the at least one notification to the server of the respective MNO. ### Claim 7 (depends on 6) The SE of claim 6, wherein the server of the MNO comprises a network-based profile server of the respective MNO associated with the at least one profile. ### Claim 8 A method implemented by a secure element (SE) of a cellular wireless communication device, the SE storing one or more profiles, the method comprising, for each profile of the one or more profiles managed by the SE: comparing (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE; for each SE capability included in both the first and second sets of SE capabilities: adding the SE capability to a respective notification list for the profile; and in response to determining that the respective notification list includes at least one capability: causing at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile, wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent. ### Claim 9 (depends on 8) The method of claim 8, further comprising, for each profile of the one or more profiles managed by the SE, and prior to comparing: determining, based on notification configuration information indicated in a profile management operation value included in with the profile, that notifications should be provided to the respective MNO. ### Claim 10 (depends on 8) The method of claim 8, wherein: the linked capability value comprises a binary value, each bit of the binary value indicating whether an associated SE capability requires a notification to be sent. ### Claim 11 (depends on 8) The method of claim 8, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO over a bearer independent protocol (BIP) channel established between the SE and the server of the MNO. ### Claim 12 (depends on 8) The method of claim 8, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO by a local profile assistant (LPA) implemented on the cellular wireless communication device in which in the SE is included. ### Claim 13 (depends on 12) The method of claim 12, further comprising, for at least one profile of the one or more profiles: sending a refresh command to the LPA to cause the LPA to obtain the respective notification list and to provide the at least one notification to the server of the respective MNO. ### Claim 14 An apparatus configurable for operation in a cellular wireless communication device, the apparatus comprising: a processor; and a memory storing instructions that, when executed by the processor, cause a secure element (SE) of the cellular wireless communication device to, for each profile of the one or more profiles is stored in and managed by the SE: compare (1) a first set of SE capabilities associated with the profile for which a notification should be sent, as indicated in a linked capability value included in the profile, when any of the SE capabilities are updated with (2) a second set of SE capabilities that are affected by an operating system (OS) update that targets the SE; for each SE capability included in both the first and second sets of SE capabilities: add the SE capability to a respective notification list for the profile; and in response to determining that the respective notification list includes at least one SE capability: cause at least one notification based on the respective notification list to be provided to a server of a respective Mobile Network Operator (MNO) associated with the profile, wherein each profile comprises MNO data and applications provisioned to the cellular wireless communication device for access to cellular communication services of the respective MNO, the MNO data including an address for the server of the MNO to which notifications are to be sent. ### Claim 15 (depends on 14) The apparatus of claim 14, wherein the instructions further cause the SE to, for each profile of the one or more profiles managed by the SE, and prior to comparing: determining, based on notification configuration information indicated in a profile management operation value included in with the profile, that notifications should be provided to the respective MNO. ### Claim 16 (depends on 14) The apparatus of claim 14, wherein: the linked capability value comprises a binary value, each bit of the binary value indicating whether an associated SE capability requires a notification to be sent. ### Claim 17 (depends on 14) The apparatus of claim 14, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO over a bearer independent protocol (BIP) channel established between the SE and the server of the MNO. ### Claim 18 (depends on 14) The apparatus of claim 14, wherein, for at least one profile of the one or more profiles, the at least one notification is provided to the server of the respective MNO by a local profile assistant (LPA) implemented on the cellular wireless communication device in which in the SE is included. ### Claim 19 (depends on 18) The apparatus of claim 18, wherein the instructions further cause the SE to, for at least one profile of the one or more profiles: sending a refresh command to the LPA to cause the LPA to obtain the respective notification list and to provide the at least one notification to the server of the respective MNO. ### Claim 20 (depends on 19) The apparatus of claim 19, wherein the server of the MNO comprises a network-based profile server of the respective MNO associated with the at least one profile.