# US 12,225,374 B2 · Method and apparatus for managing bundles of smart secure platform > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,374 B2 - Document ID: US12225374B2 - Status: Granted - Kind: B2 - Application number: 17/558,311 - Filed: 2021-12-21 - Published: 2022-04-14 - Granted: 2025-02-11 - Earliest claimed: 2018-10-29 - Assignees: Samsung Electronics Co., Ltd. - Applicants: Samsung Electronics Co., Ltd. - Inventors: Hyewon Lee; Kangjin Yoon; Duckey Lee; Jonghoe Koo - Web page: https://patentgrep.com/patent/US12225374B2 ## CPC - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/06: Authentication - H04L 9/32: including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} - H04W 4/50: Service provisioning or reconfiguring - H04W 4/60: Subscription-based services using application servers or record carriers, e.g. SIM application toolkits - H04W 8/183: {Processing at user equipment or user record carrier} - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/08: Access security - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W 12/40: Security arrangements using identity modules - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method, performed by a user equipment (UE), of managing secondary platform bundles (SPBs), includes receiving an end user selection for managing a state of at least one SPB among SPBs installed in a smart secure platform (SSP) module; checking bundle management information required to manage the state of the at least one SPB based on the end user selection; determining whether end user intent confirmation is required to manage the state of the at least one SPB according to the end user selection based on the bundle management information; and managing the state of the at least one SPB based on a result of the determining. ## Claims ### Claim 1 A method, performed by a terminal in a communication system, the method comprising: identifying information on a user selection for performing a management procedure associated with at least one secondary platform bundle (SPB) included in a smart secure platform (SSP); identifying a user intent based on SPB related information; and performing the management procedure associated with the at least one SPB, wherein the management procedure comprises at least one of enabling the at least one SPB, disabling the at least one SPB, or deleting the at least one SPB, and wherein the at least one SPB is associated with a telecom SPB. ### Claim 2 (depends on 1) The method of claim 1, wherein the SPB related information comprises a certain string corresponding to the management procedure associated with the at least one SPB. ### Claim 3 (depends on 1) The method of claim 1, wherein the user intent is determined based on biometric information, identification information, or configuration information of a user. ### Claim 4 (depends on 1) The method of claim 1, wherein the at least one SPB is identified by a family identifier. ### Claim 5 (depends on 4) The method of claim 4, further comprising identifying the telecom SPB to access a mobile communication network, based on the family identifier, wherein the at least one SPB is the telecom SPB identified based on the family identifier. ### Claim 6 A terminal, comprising: a transceiver; and at least one processor coupled to the transceiver and configured to: identify information on a user selection for performing a management procedure associated with at least one secondary platform bundle (SPB) included in a smart secure platform (SSP), identify a user intent based on SPB related information and perform the management procedure associated with the at least one SPB, wherein the management procedure comprises at least one of enabling the at least one SPB, disabling the at least one SPB, or deleting the at least one SPB, and wherein the at least one SPB is associated with a telecom SPB. ### Claim 7 (depends on 6) The terminal of claim 6, wherein the SPB related information comprises a certain string corresponding to the management procedure associated with the at least one SPB. ### Claim 8 (depends on 6) The terminal of claim 6, wherein the user intent is determined based on biometric information, identification information, or configuration information of a user. ### Claim 9 (depends on 6) The terminal of claim 6, wherein the at least one SPB is identified by a family identifier. ### Claim 10 (depends on 6) The terminal of claim 6, wherein the at least one processor is further configured to identify the telecom SPB to access a mobile communication network, based on a family identifier, and wherein the at least one SPB is the telecom SPB identified based on the family identifier.