Mode switching with multiple security certificates in a wireless device
AssigneeApple Inc.
InventorsXiangying YANG, Li LI
Life of this patent
Estimating the term…
Abstract
This application describes various embodiments to manage multiple security certificates in a wireless device, including switching between different security certificates to support different functions, including supporting connectivity for multiple industry sectors that use different certificate authorities, and/or supporting different operational modes that require different security certificates for performing administrative functions. The wireless device includes a smart secure platform (SSP) or an embedded Universal Integrated Circuit Card (eUICC) that stores multiple security certificates to use for different industry sectors and/or for different operational modes.
Claims20
A method for switching between multiple security certificates by a wireless device to support different functions for different industry sectors, the method comprising:
- by the wireless device:
- detecting a request to provision a higher layer operating system (OS) bundle for a first industry sector;
- selecting a wireless device security certificate associated with the first industry sector;
- sending a request to a network entity to provision the higher layer OS bundle, the request including an identifier for the first industry sector and a first signature generated based on the wireless device security certificate;
- receiving, from the network entity, the higher layer OS bundle including a second signature generated by the network entity using a server security certificate associated with the first industry sector;
- verifying the higher layer OS bundle using a certificate authority associated with the server security certificate;
- and
- upon successful verification, installing the higher layer OS bundle in the wireless device.
A method of triggering operational mode switching during a remote subscriber identity module (SIM) provisioning (RSP) process, the method comprising:
- by a local profile assistant (LPA) of a wireless device:
- establishing a transport level security (TLS) with a provisioning server;
- determining i) the provisioning server uses a first operational mode for the RSP process and ii) a secure element (SE) of the wireless device is initially operating in a second operational mode for the RSP process;
- and
- providing a message to the SE that indicates the provisioning server operates in the first operational mode;
- and
- by the SE of the wireless device:
- determining the provisioning server uses the first operational mode for the RSP process based on the message provided by the LPA;
- switching from the second operational mode to the first operational mode for the RSP process;
- and
- executing the RSP process using the first operational mode to obtain an electronic SIM or to update a previously obtained electronic SIM from the provisioning server.
An apparatus configurable for operation in a wireless device, the apparatus comprising:
- one or more processors;
- and
- a memory communicatively coupled to the one or more processors and storing instructions that, when executed by the one or more processors, causes the wireless device to perform operations that include:
- detecting a request to provision a higher layer operating system (OS) bundle for a first industry sector;
- selecting a wireless device security certificate associated with the first industry sector;
- sending a request to a network entity to provision the higher layer OS bundle, the request including an identifier for the first industry sector and a first signature generated based on the wireless device security certificate;
- receiving from the network entity the higher layer OS bundle including a second signature generated by the network entity using a server security certificate associated with the first industry sector;
- verifying the higher layer OS bundle using a certificate authority associated with the server security certificate;
- and
- upon successful verification, installing the higher layer OS bundle in the wireless device.
Dependencies are inferred from the claim text.