Enabling a software application to be executed on a mobile station
AssigneeIrdeto B.V.
InventorJeroen Mathias Doumen
Life of this patent
Estimating the term…
Abstract
The invention enables a software application to be executed on a mobile station in dependence of a SIM. Challenge data originating from the software application is input to the SIM to generate first response data using a security function of the SIM. The software application is enabled to be executed in dependence of the first response data. In addition, the challenge data may be transmitted to a verification server for the generation of second response data in dependence of the challenge data and possibly using an authentication center. The software application is then enabled to be executed in further dependence of the second response data.
Claims13
A method for enabling a software application to be executed on a mobile station, wherein the mobile station comprises a mobile equipment and a subscriber identity module, the method comprising, during execution of the software application on the mobile equipment:
- the software application inputting challenge data originating from the software application to the subscriber identity module, wherein the challenge data is preconfigured in the software application;
- generating first response data in the subscriber identity module, wherein said generating comprises the subscriber identity module performing a first security function using (a) data which is associated with the subscriber identity module and (b) the challenge data;
- verifying if the first response data corresponds with a preconfigured response data in the software application to obtain a verification result;
- and
- enabling continued execution of the software application in dependence of the verification result.
A method for generating a software application to be executed on a mobile station, wherein the mobile station comprises a mobile equipment and a subscriber identity module, wherein the subscriber identity module is arranged to generate response data, said generating comprising the subscriber identity module performing a first security function using (a) data which is associated with the subscriber identity module and (b) challenge data, the method comprising:
- obtaining challenge data and first response data in a server, wherein the first response data originates from the first security function using the challenge data as input;
- and
- embedding by the server the challenge data and the first response data in the software application to enable the software application, when installed in the mobile equipment, to be executed by, at runtime of the software application:
- inputting the challenge data to the subscriber identity module to obtain second response data;
- verifying if the first response data corresponds with the second response data to obtain a verification result;
- and
- enabling continued execution of the software application depending on the verification result.
A server for generating a software application to be executed on a mobile station, wherein the mobile station comprises a mobile equipment and a subscriber identity module, wherein the subscriber identity module is arranged to generate response data, said generating comprising the subscriber identity module performing a first security function using (a) data which is associated with the subscriber identity module and (b) challenge data, wherein the server is configured to:
- obtain challenge data and first response data, wherein the first response data originates from the first security function using the challenge data as input;
- and
- embed the challenge data and the first response data in the software application to enable the software application, when installed in the mobile equipment, to be executed by, at runtime of the software application, inputting the challenge data to the subscriber identity module to obtain second response data, verifying if the first response data corresponds with the second response data to obtain a verification result, and enabling continued execution of the software application depending on the verification result.
Dependencies are inferred from the claim text.