Apparatus and method for managing security domains for a universal integrated circuit card
AssigneeAT&T Intellectual Property I, L.P.
InventorWalter Cooper Chastain
Life of this patent
Estimating the term…
Abstract
A device that incorporates the subject disclosure may perform, for example, generating a security domain root structure for a universal integrated circuit card of an end user device, where the security domain root structure includes a hierarchy of a link provider operator security domain above a mobile network operator trusted security domain, where the link provider operator security domain enables transport management by a link provider operator, and where the mobile network operator trusted security domain enables card content management and subscription eligibility verification by a mobile network operator trusted service manager. Other embodiments are disclosed.
Claims20
A device comprising:
- a universal integrated circuit card;
- a processor;
- and
- a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising:
- receiving an over-the-air message;
- and
- responsive to the over-the-air message, generating a security domain root structure for the universal integrated circuit card, wherein the security domain root structure includes a hierarchy of a link provider operator security domain above a mobile network operator trusted security domain, wherein the link provider operator security domain enables transport management by a link provider operator, and wherein the mobile network operator trusted security domain enables card content management and subscription eligibility verification by a mobile network operator trusted service manager.
A computer-readable storage device comprising executable instructions that, when executed by a processor of an end user device, facilitate performance of operations, comprising:
- generating a security domain root structure for a universal integrated circuit card of the end user device, wherein the security domain root structure includes a hierarchy of a link provider operator security domain above a mobile network operator trusted security domain, wherein the link provider operator security domain enables transport management by a link provider operator, and wherein the mobile network operator trusted security domain enables card content management and subscription eligibility verification by a mobile network operator trusted service manager;
- and
- adjusting the security domain root structure to include a service provider trusted security domain in the hierarchy below the link provider operator security domain, wherein the service provider trusted security domain enables a third party trusted service manager to perform card content management actions without obtaining authorization from the mobile network operator trusted service manager.
A method comprising:
- determining, by a system including a processor, to operate a universal integrated circuit card of an end user device in a delegated mode, wherein the system is operated by a mobile network operator trusted service manager, wherein the universal integrated circuit card has a security domain root structure with a hierarchy including a mobile network operator trusted security domain;
- responsive to the determining to operate in the delegated mode, causing, by the system, the security domain root structure of the universal integrated circuit card to add a service provider trusted security domain in the hierarchy below the mobile network operator trusted security domain;
- receiving, by the system, a request from a third party trusted service manager to perform a card content management action;
- and
- enabling, by the system via the mobile network operator trusted security domain, the third party trusted service manager to perform the card content management action via the service provider trusted security domain.
Dependencies are inferred from the claim text.