Apparatuses, methods, and systems for configuring a trusted java card virtual machine using biometric information
AssigneeGigsky, Inc.
InventorIsmaila Wane
Life of this patent
Estimating the term…
Abstract
Apparatuses, methods, and systems are provided for securely configuring a Java Card virtual machine operating on a cellular device's application processor. In one embodiment, a connected device with an integrated cellular modem, a virtual universal integrated circuit chip and an integrated fingerprint scanner are used. In another embodiment, the cellular device's built-in camera is used, instead of an integrated fingerprint scanner, to capture the user's facial image.
Claims20
A mobile station comprising:
- a modem and at least one antenna configured to communicate with a plurality of cellular networks;
- and
- one or more memories storing computer-executable instructions that, when executed, configure a mobile application running on a processor that facilitates communication between the modem and a virtual reprogrammable universal integrated circuit chip (eUICC) that is not physically or electrically connected to the modem, and
- cause configuration of a virtual machine to host the virtual eUICC, wherein causing configuration of the virtual machine includes causing:
- initialization of a data storage module of the virtual machine with user-provided biometric information as a parameter to create encryption, decryption, and signature keys;
- loading of the data storage module upon each device boot-up;
- encryption and decryption of data associated with the virtual machine using the encryption and decryption keys;
- digital signing of data associated with the virtual machine using the signature key;
- and
- storage of the digitally signed data in a storage memory,
- wherein security of the virtual eUICC is maintained using the user-provided biometric information and without reliance on a trusted execution environment of the mobile station.
A method for communicating in multi-active mode with a plurality of cellular networks, the method comprising:
- providing a mobile device having a modem and at least one antenna configured to communicate with a plurality of cellular networks;
- configuring a mobile application running on a processor to facilitate communication between the modem and a virtual reprogrammable universal integrated circuit chip (eUICC) that is not physically or electrically connected to the modem;
- and
- causing configuration of a virtual machine to host the virtual eUICC, wherein causing configuration of the virtual machine includes causing:
- initialization of a data storage module of the virtual machine with user-provided biometric information as a parameter to create encryption, decryption, and signature keys;
- loading of the data storage module upon each device boot-up;
- encryption and decryption of data associated with the virtual machine using the encryption and decryption keys;
- digital signing of data associated with the virtual machine using the signature key;
- and
- storage of the digitally signed data in a storage memory,
- wherein security of the virtual eUICC is maintained using the user-provided biometric information and without reliance on a trusted execution environment of a mobile station.
One or more non-transitory computer-readable media storing computer executable instructions that, when executed by a mobile station having a modem and at least one antenna configured to communicate with a plurality of cellular networks, cause the mobile station to:
- configure a mobile application running on a processor to facilitate communication between the modem and a virtual reprogrammable universal integrated circuit chip (eUICC) that is not physically or electrically connected to the modem;
- and
- cause configuration of a virtual machine to host the virtual eUICC by causing:
- initialization of a data storage module of the virtual machine with user-provided biometric information as a parameter to create encryption, decryption, and signature keys;
- loading of the data storage module upon each device boot-up;
- encryption and decryption of data associated with the virtual machine using the encryption and decryption keys;
- digital signing of data associated with the virtual machine using the signature key;
- and
- storage of the digitally signed data in a storage memory,
- wherein security of the virtual eUICC is maintained using the user-provided biometric information and without reliance on a trusted execution environment of the mobile station.
Dependencies are inferred from the claim text.