Infrastructure for remote profile provisioning
AssigneeThales Dis France SAS
InventorsMichel ANSLOT, Joël DEMARTY
Life of this patent
Estimating the term…
Loading patent…
AssigneeThales Dis France SAS
InventorsMichel ANSLOT, Joël DEMARTY
Estimating the term…
Embodiments herein relate to an infrastructure for remote profile provisioning (RSP) comprising secure elements to be provisioned, and a subscription manager adapted to prepare data to be routed to secure elements to be provisioned and a ledger storing keys. Secure elements have at least an identifier, a pre-stored key corresponding to one stored in the ledger and pre-stored generic profile elements as defined in an RSP template, at least one profile element necessitating credentials for the secure element to have an operational profile. Said subscription manager is adapted to receive a request for profile provisioning comprising a secure element identifier, to retrieve a key associated to the received identifier from the ledger, to retrieve credentials to be pushed in the secure element having the received identifier, to encode the retrieved credentials using the retrieved key, to route the encoded credentials to the secure element for the secure element to decode the credentials using the pre-stored key and to complete the pre-stored profile element of the template to have an operational profile.
An Infrastructure for remote profile provisioning (RSP) comprising secure elements to be provisioned, a subscription manager adapted to prepare data to be routed to secure elements to be provisioned,
The Infrastructure according to clam 1, wherein the encoding is a logical operation applied on the credentials and the stored key, which is a shared key.
The Infrastructure according to clam 1, wherein the keys pre-stored in secure elements being private keys of a pair of assymetric keys, the keys in the ledger are corresponding public keys, associated to the secure element identifier and the encoding of the credentials is an encryption with the public key.
The Infrastructure according to clam 1, wherein the credentials are chosen among IMSI, Ki, OPC, OTA keys, ICCID, RiCi.
The Infrastructure according to clam 1, wherein the ledger is a blockchain based ledger.
A method to provision profiles in secure elements to be provisioned by a subscription manager adapted to prepare data to be routed to secure elements to be provisioned, wherein said secure elements having at least an identifier, a pre-stored key and pre-stored generic profile elements as defined in an RSP template, at least one profile element necessitating credentials for the secure element to have an operational profile, and said subscription manager having access to a ledger storing keys corresponding to the keys as pre-stored in secure elements, the method comprises the steps of, for the subscription manager:
Dependencies are inferred from the claim text.