# US 2018/0027410 A1 · METHOD FOR REMOTE SUBSCRIPTION MANAGEMENT OF AN eUICC, CORRESPONDING TERMINAL

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0027410 A1
- Document ID: US20180027410A1
- Status: Published application
- Kind: A1
- Application number: 15/549,250
- Filed: 2016-02-05
- Published: 2018-01-25
- Earliest claimed: 2015-02-13
- Assignees: Gemalto SA
- Applicants: Gemalto SA
- Inventors: Xavier BERARD; Benjamin MAZET
- Web page: https://patentgrep.com/patent/US20180027410A1

## CPC

- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- G06F 21/602: {Providing cryptographic facilities or services}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04W 4/50: Service provisioning or reconfiguring
- H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC]
- H04W 12/06: Authentication
- H04W 12/069: using certificates or pre-shared keys
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- H04W 12/42: using virtual identity modules
- H04W 76/10: Connection setup
- H04L 2209/80: Wireless
- H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Remote subscription management of an eUICC comprising a private key and a public certificate, the public certificate comprising information allowing a subscription manager server to decide if it can agree to manage the eUICC. The method includes: establishing a secure channel between the terminal and the subscription manager server by using the public certificate and dedicated cryptographic services of the eUICC; sendingto the subscription manager server a subscription management request; verifying, based on the information in the public certificate in the subscription manager server, whether the eUICC is entitled to be managed by the subscription manager server and, if yes: performing a key establishment procedure between the subscription manager server and the eUICC by using the eUICC public certificate; establishing between the subscription manager server and the eUICC a secure channel with the established keys; and, executing by the subscription manager server the subscription management request on the eUICC.

## Claims

### Claim 1

Method for remote subscription management of an eUICC cooperating with a terminal, said eUICC comprising a private key and a public certificate signed by its manufacturer, said public certificate comprising information allowing a subscription manager server, with no prior knowledge of said eUICC, to decide if it can agree to manage said eUICC, said method comprising:
a—At the occurrence of an event, establishing a secure channel between said terminal and said subscription manager server by using said public certificate and dedicated cryptographic services of said eUICC;
b—Sending from said terminal to said subscription manager server a subscription management request, being considered as an enrolment request by said subscription manager server;
c—Verifying, based on said information in the received public certificate from said eUICC, in said subscription manager server if said eUICC is entitled to be managed by said subscription manager server and, if yes:
d—Performing a key establishment procedure between said subscription manager server and said eUICC by using said eUICC public certificate, this step being the enrolment of the eUICC by the subscription;
e—Establishing between said subscription manager server and said eUICC a secure channel with the keys generated at step—d—; and
f—Executing by said subscription manager server said subscription management request on said eUICC.

### Claim 2 (depends on 1)

Method according to claim 1, wherein said terminal comprises an application, said application performing steps—a—and—b—by:
at the occurrence of said event, establishing a local secure channel between said eUICC and said application by using said private key and said public certificate;
establishing a secure channel with said subscription manager server by using said public certificate and dedicated cryptographic services of said eUICC;
sending from said application to said subscription manager server a subscription management request of said eUICC.

### Claim 3 (depends on 1)

Method according to claim 1, wherein said eUICC performs the steps—a—and—b—.

### Claim 4 (depends on 1)

Method according to claim 1, wherein said event is generated by a user of said terminal.

### Claim 5

Terminal comprising a eUICC and an application, said eUICC comprising a private key and a public certificate, wherein said application comprises instructions that cause a computer to execute the following operations:
at the occurrence of an event, establishing a local secure channel between said eUICC and said application by using said private key and said public certificate, said public certificate comprising information allowing a subscription manager server, with no prior knowledge of said eUICC, to decide if it can agree to manage said eUICC;
establishing a secure channel with said subscription manager server by using said public certificate and dedicated cryptographic services of said eUICC;
sending from said application to said subscription manager server a subscription management request of said eUICC.

### Claim 6

Terminal comprising a eUICC, said eUICC comprising a private key and a public certificate, said public certificate comprising information allowing a subscription manager server, with no prior knowledge of said eUICC, to decide if it can agree to manage said eUICC, wherein said eUICC comprises instructions that cause a computer to execute the following operations:
at the occurrence of an event, establishing a secure channel between said eUICC and a subscription manager server by using said public certificate and dedicated cryptographic services of said eUICC;
sending from said eUICC to said subscription manager server a subscription management request of said eUICC.

### Claim 7

A non-transitory computer readable storage medium comprised in a terminal, said terminal also comprising a eUICC comprising a private key and a public certificate, said public certificate comprising information allowing a subscription manager server, with no prior knowledge of said eUICC, to decide if it can agree to manage said eUICC, said non-transitory computer-readable medium comprising instructions that cause a computer to execute the following operations:
at the occurrence of an event, establishing a secure channel between said terminal and said subscription manager server by using said private key and said public certificate;
sending from said terminal to said subscription manager server a subscription management request of said eUICC.

### Claim 8 (depends on 7)

A non-transitory computer readable storage medium according to claim 7, wherein the storage medium is comprised in said eUICC.