Method for binding a terminal application to a security element and corresponding security element, terminal application and server

Security element cooperating with a terminal, said security element containing a first key generated by a terminal application comprised in said terminal, said security element comprising a microprocessor storing instructions dedicated to:

• A—Receive, from a service provider, a first message [[[Nonce4MobileApp]Pubkey4app] II Nonce4SIM]Pubkey4SIM, where:
• Nonce4MobileApp and Nonce4SIM are data generated by said service provider;
• Pubkey4app and Pubkey4SIM are respectively the public keys of said terminal application and of said security element;
• B—Decrypt said first message with the private key of said security element;
• and
• C—Send to said terminal application said decrypted first message encrypted by said first key.

Server of a service provider able to check if a terminal application comprised in a terminal is entitled to request for a service provided by said service provider, a security element cooperating with said terminal, said security element containing a first key generated by said terminal application during an enrolment phase, said server comprising one or more microprocessors for:

• A—Sending, from said service provider to said security element, a first message [[[Nonce4MobileApp]Pubkey4app] II Nonce4SIM]Pubkey4SIM, where:
• Nonce4MobileApp and Nonce4SIM are data generated by said service provider;
• Pubkey4app and Pubkey4SIM are respectively the public keys of said terminal application and of said security element;
• B—Receiving from said terminal application said data Nonce4MobileApp and said Nonce4SIM;
• C—Checking that the received data Nonce4MobileApp and Nonce4SIM correspond to those sent at step A and,
• if said data correspond, consider that said service provider can trust said terminal application and authorize said service to be executed;
• if said data do not correspond, consider that said service provider cannot trust said terminal application and forbid said service to be executed.

Terminal application comprised in a terminal, said terminal cooperating with a security element, said security element containing a first key generated by said terminal application during an enrolment phase, said terminal application being configured to:

• A—Receive from said security element, a first message [[[Nonce4MobileApp]Pubkey4app] II Nonce4SIM]PSK-SIM-App, where:
• Nonce4MobileApp and Nonce4SIM are data generated by a service provider;
• Pubkey4app and Pubkey4SIM are respectively the public keys of said terminal application and of said security element;
• PSK-SIM-App is said first key;
• B—Decrypt said first message which contains Nonce4SIM with a second key and decrypt said data Nonce4MobileApp with the private key of said terminal application;
• C—Send to said service provider said data Nonce4MobileApp and said Nonce4SIM or a function thereof.