Method for obtaining a profile for access to a communication network by a secondary terminal via a main terminal

A method for aiding the obtaining of a profile for access to a communication network by a secondary terminal via a main terminal, the main terminal comprising a security module comprising an authentication key, said authentication key being used by the network and by the main terminal to generate at least one session master key specific to the main terminal, the method, implemented by the main terminal, comprising:

• obtaining of an identifier of the secondary terminal,
• dispatching to the communication network of a request for temporary subscription for the secondary terminal, said request comprising the identifier of the secondary terminal,
• receiving, from the communication network, a temporary identifier of the secondary terminal generated by the communication network,
• generating a temporary key specific to the secondary terminal, on the basis of the session master key of the main terminal and of the temporary identifier of the secondary terminal, and
• dispatching to the secondary terminal the temporary key and the temporary identifier of the secondary terminal, and an identifier of an access network for access to the communication network.

A secondary terminal designed to obtain a profile for access to a communication network via a main terminal, the main terminal comprising a security element comprising an authentication key, said authentication key being used by the communication network and by the main terminal to generate at least one session master key specific to the main terminal, the secondary terminal comprising:

• a processor;
• and
• a non-transitory computer-readable medium comprising instructions stored thereon which when executed by the processor configure the secondary terminal to perform acts comprising:
• providing an identifier of the secondary terminal to the main terminal,
• receiving from the main terminal data comprising a temporary key specific to the secondary terminal, a temporary identifier of the secondary terminal, and an identifier of an access network for access to the communication network, said temporary key being generated on the basis of the temporary identifier of the secondary terminal generated by the communication network and of the session master key of the main terminal, the temporary key, the temporary identifier, the identifier of the secondary terminal and the identifier of the access network being included in a profile for access to the communication network of the secondary terminal, the reception of these data indicating to the secondary terminal its authentication with the access network identified and the authentication of said access network with the secondary terminal.

A non-transitory computer-readable medium comprising instructions stored thereon, which when executed by a secondary terminal configure the secondary terminal to obtain a profile for access to a communication network by the secondary terminal via a main terminal, the main terminal comprising a security element comprising an authentication key, said authentication key being used by the communication network and by the main terminal to generate at least one session master key specific to the main terminal, where the obtaining by the secondary terminal comprises:

• providing to the main terminal an identifier of the secondary terminal,
• receiving from the main terminal data comprising a temporary key specific to the secondary terminal, a temporary identifier of the secondary terminal, and an identifier of an access network for access to the communication network,
• said temporary key being generated on the basis of the temporary identifier of the secondary terminal generated by the communication network and of the session master key of the main terminal,
• the temporary key, the temporary identifier, the identifier of the secondary terminal and the identifier of the access network being included in a profile for access to the communication network of the secondary terminal,
• the reception of these data indicating to the secondary terminal its authentication with the access network identified and the authentication of said access network with the secondary terminal.

A main terminal designed to aid the obtaining of a profile for access to a communication network by a secondary terminal, the main terminal comprising a security module comprising an authentication key, said authentication key being used by the communication network and by the main terminal to generate at least one session master key specific to the main terminal, the main terminal comprising:

• a processor;
• and
• a non-transitory computer-readable medium comprising instructions stored thereon which when executed by the processor configure the main terminal to perform acts comprising:
• obtaining an identifier of the secondary terminal,
• dispatching to the communication network a request for temporary subscription for the secondary terminal, said request comprising the identifier of the secondary terminal,
• receiving from the communication network a temporary identifier of the secondary terminal generated by the communication network,
• generating a temporary key specific to the secondary terminal, said temporary key being generated on the basis of the session master key of the main terminal and of the temporary identifier of the secondary terminal,
• dispatching to the secondary terminal the temporary key, the temporary identifier and an identifier of an access network for access to the communication network.

A non-transitory computer-readable medium comprising instructions stored thereon, which when executed by a main terminal configure the main terminal to aid the obtaining of a profile for access to a communication network by a secondary terminal via a main terminal, the main terminal comprising a security module comprising an authentication key, said authentication key being used by the network and by the main terminal to generate at least one session master key specific to the main terminal, the aiding by the main terminal comprising:

• obtaining an identifier of the secondary terminal,
• dispatching to the communication network a request for temporary subscription for the secondary terminal, said request comprising the identifier of the secondary terminal,
• receiving, from the communication network, a temporary identifier of the secondary terminal generated by the communication network,
• generating a temporary key specific to the secondary terminal, on the basis of the session master key of the main terminal and of the temporary identifier of the secondary terminal, and
• dispatching to the secondary terminal the temporary key and the temporary identifier of the secondary terminal, and an identifier of an access network for access to the communication network.

A device of a communication network, designed to generate a profile for access to a communication network for a secondary terminal via a main terminal, the main terminal comprising a security module comprising an authentication key, said authentication key being used by the communication network and by the main terminal to generate at least one session master key specific to the main terminal, the device comprising:

• a processor;
• and
• a non-transitory computer-readable medium comprising instructions stored thereon which when executed by the processor configure the device to perform acts comprising:
• receiving, from the main terminal, a request for temporary subscription for the secondary terminal, said request comprising an identifier of the secondary terminal,
• generating a temporary identifier and a temporary key specific to the secondary terminal, said temporary key being generated on the basis of the temporary identifier of the secondary terminal and of the session master key of the main terminal, the temporary key, the temporary identifier, the identifier of the secondary terminal and an identifier of an access network for access to the communication network being included in a profile for access to the communication network of the secondary terminal,
• dispatching the temporary identifier of the secondary terminal to the main terminal.