# US 2016/0366137 A1 · Installation of a secure-element-related service application in a secure element in a communication device, system and telecommunications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2016/0366137 A1
- Document ID: US20160366137A1
- Status: Published application
- Kind: A1
- Application number: 15/175,088
- Filed: 2016-06-07
- Published: 2016-12-15
- Earliest claimed: 2015-06-09
- Assignees: Deutsche Telekom AG
- Applicants: Deutsche Telekom AG
- Inventors: Frank Borgards; Michael Dupre
- Web page: https://patentgrep.com/patent/US20160366137A1

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)}
- H04W 4/50: Service provisioning or reconfiguring
- H04W 12/08: Access security
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method for installation of a secure-element-related service application in a secure element of a user equipment (UE) associated with a subscriber of a telecommunications network includes: transmitting an initial request, transmitting a request to install, receiving token information, transmitting the token information, transmitting an access and/or installation request together with the token information, and establishing a communication link. The secure-element-related service application, when installed within the secure element, is configured to allow the first server entity, together with a UE-related application installed on the user equipment, to provide a service to the subscriber of the telecommunications network.

## Claims

### Claim 1

A method for installation of a secure-element-related service application in a secure element of a user equipment (UE) associated with a subscriber of a telecommunications network, wherein the secure element corresponds to a secure element issuer, the method comprising:
in a first step, transmitting an initial request, via a request message, from a UE-related service application of the user equipment towards a first server entity to request installation of the secure-element-related service application in the secure element, wherein the first server entity corresponds to a service provider;
in a second step, subsequent to the first step, transmitting, by the first server entity, a request to install the secure-element-related service application to a second server entity, and receiving, by the first entity, token information related to the request to install the secure-element-related service application from the second server entity, wherein the second server entity relates to the secure element issuer;
in a third step, subsequent to the second step, transmitting, by the first server entity, the token information to the UE-related service application of the user equipment;
in a fourth step, subsequent to the third step, transmitting, by the UE-related service application of the user equipment, an access and/or installation request, together with the token information, to a proxy application of the secure element issuer, the proxy application being configured to access the secure element and/or to install secure-element-related applications on the secure element, wherein the proxy application is further configured to interact with the secure element and is installed in the user equipment as a link between the second server entity and the secure element; and
in a fifth step, subsequent to the fourth step, establishing a communication link between the proxy application and the second server entity for transmission of the token information, together with Secure Element Identifier (SEID) information of the user equipment to the second server entity for validation by the second server entity;
wherein, during the fifth step, the token information is assigned to the SEID information; and
wherein the secure-element-related service application, when installed within the secure element, is configured to allow the first server entity, together with the UE-related application installed on the user equipment, to provide a service to the subscriber of the telecommunications network.

### Claim 2 (depends on 1)

The method according to claim 1, wherein, during the fifth step, installation commands from the second server entity are received by the proxy application for installation of the secure-element-related service application in the secure element.

### Claim 3 (depends on 2)

The method according to claim 2, wherein the installation commands received by the proxy application are transmitted in encrypted form.

### Claim 4 (depends on 1)

The method according to claim 1, wherein the second server entity is part of the telecommunications network.

### Claim 5

A system for installation of a secure-element-related service application in a secure element of a user equipment (UE)_associated with a subscriber of a telecommunications network, wherein the system comprises:
the telecommunications network;
a first server entity, wherein the first server entity corresponds to a service provider;
a second server entity, wherein the second server entity is related to a secure element issuer related to the secure element; and
the user equipment;
wherein the secure-element-related service application, when installed within the secure element, is configured to allow the first server entity, together with a UE-related application installed on the communication device, to provide a service to the subscriber of the telecommunications network;
wherein the UE-related application of the user equipment is configured to transmit, via a request message, an initial request towards the first server entity to request installation of the secure-element-related service application in the secure element;
wherein the first server entity is configured to transmit a request to install the secure-element-related service application to the second server entity;
wherein the second server entity is configured to generate token information related to the request to install the secure-element-related service application, and to transmit the token information to the first server entity;
wherein the first server entity is configured to transmit the token information to the UE-related service application of the user equipment;
wherein the UE-related service application of the user equipment is configured to transmit an access and/or installation request, related to the secure-element-related service application, together with the token information, to a proxy application of the secure element issuer, the proxy application being configured to access the secure element and/or to install secure-element-related applications on the secure element, wherein the proxy application is configured to interact with the secure element and is installed in the user equipment as a link between the second server entity and the secure element;
wherein the proxy application and the second server entity are configured to establish a communication link for transmission of that the token information, together with Secure Element Identifier (SEID) information of the user equipment to the second server entity for validation by the second server entity, wherein the token information is assigned to the SEID information upon the establishment of the communication link between the proxy application and the second server entity.

### Claim 6 (depends on 5)

The system according to claim 5, wherein the second server entity is configured to transmit installation commands to the proxy application for installation of the secure-element-related service application in the secure element.

### Claim 7 (depends on 6)

The system according to claim 6, wherein the second server entity is configured to transmit the installation commands in encrypted form.

### Claim 8

One or more non-transitory, computer-readable mediums having processor-executable instructions stored thereon for installation of a secure-element-related service application in a secure element of a user equipment (UE) associated with a subscriber of a telecommunications network, wherein the secure element corresponds to a secure element issuer, the processor-executable instructions, when executed, facilitating performance of the following steps:
in a first step, transmitting an initial request, via a request message, from a UE-related service application of the user equipment towards a first server entity to request installation of the secure-element-related service application in the secure element, wherein the first server entity corresponds to a service provider;
in a second step, subsequent to the first step, transmitting, by the first server entity, a request to install the secure-element-related service application to a second server entity, and receiving, by the first entity, token information related to the request to install the secure-element-related service application from the second server entity, wherein the second server entity relates to the secure element issuer;
in a third step, subsequent to the second step, transmitting, by the first server entity, the token information to the UE-related service application of the user equipment;
in a fourth step, subsequent to the third step, transmitting, by the UE-related service application of the user equipment, an access and/or installation request, together with the token information, to a proxy application of the secure element issuer, the proxy application being configured to access the secure element and/or to install secure-element-related applications on the secure element, wherein the proxy application is further configured to interact with the secure element and is installed in the user equipment as a link between the second server entity and the secure element; and
in a fifth step, subsequent to the fourth step, establishing a communication link between the proxy application and the second server entity for transmission of the token information, together with Secure Element Identifier (SEID) information of the user equipment to the second server entity for validation by the second server entity;
wherein, during the fifth step, the token information is assigned to the SEID information; and
wherein the secure-element-related service application, when installed within the secure element, is configured to allow the first server entity, together with the UE-related application installed on the user equipment, to provide a service to the subscriber of the telecommunications network.

### Claim 9 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein, during the fifth step, installation commands from the second server entity are received by the proxy application for installation of the secure-element-related service application in the secure element.

### Claim 10 (depends on 9)

The non-transitory computer-readable medium according to claim 9, wherein the installation commands received by the proxy application are transmitted in encrypted form.

### Claim 11 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the second server entity is part of the telecommunications network.