# US 8,571,537 B2 · Method for over-the-air personalizing of chip cards in telecommunications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,571,537 B2 - Document ID: US8571537B2 - Status: Granted - Kind: B2 - Application number: 12/989,867 - Filed: 2009-04-17 - Published: 2011-06-09 - Granted: 2013-10-29 - Earliest claimed: 2008-05-23 - Assignees: Deutsche Telekom AG - Applicants: Stefan Kaliner - Inventors: Stefan Kaliner - Web page: https://patentgrep.com/patent/US8571537B2 ## CPC - H04W 8/265: {for initial activation of new user} - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The invention relates to a method for commissioning and personalizing a subscriber identification module SIM, wherein the SIM is set up with a non-individual and preliminary set (S*) of initial identifying and authenticating parameters prior to first commissioning, said set comprising at least one non-individual and preliminary subscriber identification (IMSI*) and a non-individual and preliminary secret key (K*), wherein the parameter set (S*) allows first commissioning of the SIM in a mobile telecommunications network by means of a mobile terminal device, wherein personalizing is performed after the first commissioning of the SIM, in that an individual and final subscriber data set (S) is transferred to and stored on the SIM, particularly comprising a unique final subscriber identification (IMSI) and a unique final secret key (K), particularly in that the final subscriber data set (S) is transferred by means of a regular connection of the mobile telecommunications system using the preliminary set (S*). The number of potential preliminary subscriber data sets is prescribed and is particularly much less than the total number of subscriber identification modules (SIM) equipped with said data sets. It can also be reused cyclically. The final subscriber data set is first stored after the mobile terminal device confirms that the personalization process was successful. Otherwise, the personalization request is automatically repeated, or the personalization data are sent again. ## Claims ### Claim 1 A method of commissioning and personalizing subscriber identification modules, the method comprising the steps of: providing a plurality of subscriber identification modules; equipping each of the subscriber identification modules with a preliminary data set containing at least one non-individual, not unique, provisional, and preliminary subscriber identification and a non-individual, not unique, and provisional secret key that together permit a first commissioning of the subscriber identification module in a mobile telecommunications network by means of a mobile radio terminal; and first commissioning a subscriber module of the plurality of subscriber identification modules by sequentially: logging onto the telecommunications network and requesting personalization using the preliminary data set, transmitting from the telecommunications network to the subscriber identification module an individual and final subscriber data set containing a final and unique subscriber identification and a final and unique secret key via a regular connection of the mobile telecommunications network, and storing on the subscriber identification module the individual and final subscriber data set. ### Claim 2 (depends on 1) The method according to claim 1 wherein the first commissioning further comprises the steps of: setting up a connection to a personalization server in the mobile telecommunications network, generating the individual and final subscriber data set for the personalization by the personalization server using the preliminary data set, and transmitting the individual and final subscriber data set to the subscriber identification module. ### Claim 3 (depends on 1) The method according to claim 1, further comprising before the personalization the step of: reviewing either the serial number of the one subscriber identification module, or the equipment identity number of the mobile radio terminal or other security parameters of the subscriber identification module. ### Claim 4 (depends on 1) The method according to claim 1, further comprising the step of: cyclically reusing the preliminary data set during the initial equipment of each of the plurality of subscriber identification modules. ### Claim 5 (depends on 1) The method according to claim 1, further comprising the step of: storing the individual and final subscriber data set generated during the personalization in a home register after the first commissioning of the subscriber identification module. ### Claim 6 (depends on 5) The method according to claim 5, wherein the activation or release of the subscriber relationship characterized by the individual and final subscriber data set in the home register does not take place until after confirmation from the mobile radio terminal to the mobile telecommunications network. ### Claim 7 (depends on 1) The method according to claim 1, further comprising, after the receipt and storage of the individual and final subscriber data set on the subscriber identification module, the step of: transmitting a confirmation from the mobile radio terminal to the mobile telecommunications network, and carrying out a warm boot of the mobile radio terminal holding the subscriber identification module using the individual and final subscriber data set. ### Claim 8 (depends on 7) The method according claim 7, further comprising, if the confirmation of the mobile radio terminal to the mobile telecommunications network does not occur, the step of: effecting a new transmission of the individual and final subscriber data set. ### Claim 9 (depends on 7) The method according to claim 7, wherein the storage of the individual and final subscriber data set in the home register does not take place until after confirmation from the mobile radio terminal to the mobile telecommunications network. ### Claim 10 (depends on 1) The method according to claim 1, further comprising, during the first commissioning of the subscriber identification module with the preliminary data set, the step of: setting a subscriber relationship given by the preliminary subscriber identification by the network to an in use status during which only a restricted use is released, and, after completion of the personalization of the subscriber identification module with the individual and final subscriber data set, setting the subscriber relationship given by the preliminary subscriber identification to a released status permitting new use of the subscriber relationship given by the preliminary subscriber identification by another of the plurality of subscriber identification modules. ### Claim 11 (depends on 1) The method according to claim 1, further comprising, during a commissioning attempt of at least one other subscriber identification module with a preliminary subscriber identification identical to the subscriber identification module already logged into the mobile telecommunications network for personalization, the steps of: ordering the at least one other subscriber identification module in a queue takes place and processing the at least one other subscriber identification module according to the chronological order of commissioning attempts. ### Claim 12 (depends on 1) The method according to claim 1, further comprising, during a commissioning attempt of at least one other subscriber identification module with a preliminary subscriber identification identical to the subscriber identification module already logged into the mobile telecommunications network for personalization, the steps of: recognizing a possible blocking of the personalization by the subscriber identification module, and automatically repeating the personalization request. ### Claim 13 (depends on 1) The method according to claim 1, further comprising, during a commissioning attempt of at least one other subscriber identification module with a preliminary subscriber identification identical to the subscriber identification module already logged into the mobile telecommunications network for personalization, the step of: recognizing a possible misdirection of the individual and final subscriber data set by the subscriber identification module, discarding the individual and final subscriber data set, and automatically repeating the personalization request. ### Claim 14 (depends on 1) The method according to claim 1, wherein the individual and final subscriber data sets are already stored in the home register. ### Claim 15 (depends on 1) The method according to claim 1, further comprising before the personalization the step of: creating in the home register the subscriber relationships characterized by the individual and final subscriber data sets. ### Claim 16 (depends on 5) The method according to claim 5, further comprising the step of: providing the subscriber relationships characterized by the individual and final subscriber data sets in the home register with specific service restrictions. ### Claim 17 (depends on 1) The method according to claim 1, further comprising the step of: carrying out further loading operations to provide the subscriber identification module with special properties or services ate automatically following completion of personalization. ### Claim 18 (depends on 1) The method according to claim 1, further comprising, following the completed personalization, the step of: automatically starting a mechanical or personal dialogue with the customer via the mobile radio terminal, to determine the customer data or desired services.