Security module and method of controlling usability of application modules

A non-transitory computer readable medium which comprises computer program code means for controlling one or more processors of a security module for communication terminals, the security module being configured to perform end-to-end authentication of a plurality of telecommunications networks and including one or more usable application modules and at least one authorization register, assigned to one or more application modules, such that the security module:

• performs a selective disablement of usability of one or more of the application modules;
• performs a selective re-enablement of usability of one or more of the application modules;
• and
• ties selective usability of one or more of the application modules to a usage of a specific telecommunications network operated by a specific operator among the plurality of telecommunication networks by activating the re-enablement of usability of the application module depending on:
• authentication data received in the security module, when the communication terminal is registered in the specific telecommunications network, from a central authentication unit supporting end-to-end authentication of the specific telecommunications network, which authentication data is assignable in an authenticated way to the specific telecommunications network and indicates an authentication of the specific telecommunications network;
• wherein the control module stores in the authorization register current data about at least one of:
• an authorized number of sessions through a logical channel of the application module and an authorized number of reset cycles of the security module.

A method of controlling usability of one or more application modules, the application module being implemented in a security module for a communication terminal, wherein the security module comprises at least one authorization register, assigned to one or more application modules, the security module being configured to perform end-to-end authentication of a plurality of telecommunications networks, the method comprising:

• selectively disabling, by a locking module of the security module, usability of one or more of the application modules;
• selectively re-enabling, by an unlocking module of the security module, usability of one or more of the application modules;
• storing in the authorization register, by the control module, current data about at least one of:
• an authorized number of sessions through a logical channel of the application module and an authorized number of reset cycles of the security module;
• and
• tying, by a control module of the security module, selective usability of one or more of the application modules to a usage of a specific telecommunications network operated by a specific operator among the plurality of telecommunication networks by activating the re-enabling of usability of the application module depending on:
• authentication data received in the security module, when the communication terminal is registered in the specific telecommunications network, from a central authentication unit supporting end-to-end authentication of the specific telecommunications network, which authentication data is assignable in an authenticated way to the specific telecommunications network and indicates an authentication of the specific telecommunications network.

A security module for a communication terminal, the security module being configured to perform end-to-end authentication of a plurality of telecommunications networks and comprising:

• at least one usable application module;
• at least one authorization register, assigned to one or more application modules;
• a locking module for disabling usability of the application module;
• a control module for tying usability of the application module to usage of a specific telecommunications network operated by a specific operator among the plurality of telecommunication networks by activating the unlocking module depending on:
• authentication data received in the security module, when the communication terminal is registered in the specific telecommunications network, from a central authentication unit supporting end-to-end authentication of the specific telecommunications network, which authentication data is assignable in an authenticated way to the specific telecommunications network and indicates an authentication of the specific telecommunications network, and
• a defined number of authentications of the specific telecommunications network within a defined time period;
• and wherein the control module is configured to store in the authorization register current data about at least one of:
• an authorized number of sessions through a logical channel of the application module and an authorized number of reset cycles of the security module.

A non-transitory computer readable medium which comprises computer program code means for controlling one or more processors of a security module for communication terminals, the security module being configured to perform end-to-end authentication of a plurality of telecommunications networks and including at least one usable application module and at least one authorization register, assigned to one or more application modules, such that the security module:

• performs a disablement of usability of the application module;
• performs a re-enablement of usability of the application module;
• and
• ties usability of the application module to a usage of a specific telecommunications network operated by a specific operator among the plurality of telecommunication networks by activating the re-enablement of usability of the application module depending on:
• authentication data received in the security module, when the communication terminal is registered in the specific telecommunications network, from a central authentication unit supporting end-to-end authentication of the specific telecommunications network, which authentication data is assignable in an authenticated way to the specific telecommunications network and indicates an authentication of the specific telecommunications network, and
• a defined number of authentications of the specific telecommunications network within a defined time period;
• wherein the control module stores in the authorization register current data about at least one of:
• an authorized number of sessions through a logical channel of the application module and an authorized number of reset cycles of the security module.

A method of controlling usability of an application module, the application module being implemented in a security module for a communication terminal, wherein the security module comprises at least one authorization register, assigned to one or more application modules, the security module being configured to perform end-to-end authentication of a plurality of telecommunications networks, the method comprising:

• disabling, by a locking module of the security module, usability of the application module;
• re-enabling, by an unlocking module of the security module, usability of the application module;
• and
• tying, by a control module of the security module, usability of the application module to a usage of a specific telecommunications network operated by a specific operator among the plurality of telecommunication networks by activating the re-enabling of usability of the application module depending on:
• authentication data received in the security module, when the communication terminal is registered in the specific telecommunications network, from a central authentication unit supporting end-to-end authentication of the specific telecommunications network, which authentication data is assignable in an authenticated way to the specific telecommunications network and indicates an authentication of the specific telecommunications network, and
• a defined number of authentications of the specific telecommunications network within a defined time period;
• and wherein the control module stores in the authorization register current data about at least one of:
• an authorized number of sessions through a logical channel of the application module and an authorized number of reset cycles of the security module.