# US 8,788,832 B2 · Virtual subscriber identity module

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,788,832 B2
- Document ID: US8788832B2
- Status: Granted
- Kind: B2
- Application number: 13/487,748
- Filed: 2012-06-04
- Published: 2012-09-27
- Granted: 2014-07-22
- Earliest claimed: 2007-09-19
- Assignees: InterDigital Patent Holdings, Inc.
- Applicants: Louis J. Guccione; Andreas U. Schmidt; Nicolai Kuntze; Michael Kasper; Yogendra C. Shah; Inhyok Cha
- Inventors: Louis J. Guccione; Andreas U. Schmidt; Nicolai Kuntze; Michael Kasper; Yogendra C. Shah; Inhyok Cha
- Web page: https://patentgrep.com/patent/US8788832B2

## CPC

- H04L 9/321: {involving a third party or a trusted authority}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04W 8/265: {for initial activation of new user}
- H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning}
- H04W 12/06: Authentication
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A mobile trusted platform (MTP) configured to provide virtual subscriber identify module (vSIM) services is disclosed. In one embodiment, the MTP includes: a device manufacturer-trusted subsystem (TSS-DM) configured to store and provide credentials related to a manufacturer of the MTP; a mobile network operator-trusted subsystem (MNO-TSS) configured to store and provide credentials related to a mobile network operator (MNO); and a device user/owner-trusted subsystem (TSS-DO/TSS-U) configured to store and provide credentials related to user of the MTP. The TSS-MNO includes a vSIM core services unit, configured to store, provide and process credential information relating to the MNO. The TSS-DO/TSS-U includes a vSIM management unit, configured to store, provide and process credential information relating to the user/owner of the MTP. The TSS-DO/TSS-U and the TSS-MNO communicate through a trusted vSIM service.

## Claims

### Claim 1

In a mobile trusted platform (MTP) residing on a wireless transmit/receive unit (WTRU), wherein the MTP comprises at least a first and a second trusted subsystem, a method comprising:
establishing, by the first trusted subsystem that is configured to store and provide credentials related to a manufacturer of the MTP or the WTRU, a second trusted subsystem controlled by a remote stakeholder, the second trusted subsystem being separate and insulated from the first trusted subsystem such that the credentials related to the manufacturer cannot be accessed by the second trusted subsystem;
receiving, at the second trusted subsystem, a message from a point of sale (POS), the message having been digitally signed by the POS and the message comprising a certificate of the POS digitally signed by the remote stakeholder; and
verifying, by the second trusted subsystem, the digital signature of the POS on the message and verifying the digital signature of the remote stakeholder on the certificate, whereby a trustworthiness of the POS is certified by the remote stakeholder.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
extracting from the certificate, by the second trusted subsystem, a public key of the POS to verify the digital signature of the message.

### Claim 3 (depends on 1)

The method of claim 1, wherein the message further comprises an encryption key, wherein the encryption key of the message is encrypted with a public part of an encryption key of the second trusted subsystem, the method further comprising:
decrypting, by the second trusted subsystem, the encryption key of the message; and
using the encryption key of the message when communicating with the POS, thereby establishing a secure communication channel between the POS and the WTRU.

### Claim 4 (depends on 1)

The method of claim 1, further comprising;
storing and providing, by a virtual subscriber identity module (vSIM) core services unit of the second trusted subsystem via a memory residing on the WTRU, one or more credentials related to the remote stakeholder.

### Claim 5 (depends on 1)

The method of claim 1, further comprising:
storing and providing, by a virtual subscriber identity module (vSIM) management unit of a third trusted subsystem via a memory residing on the WTRU, one or more credentials related to a user of the MTP, wherein the third trusted subsystem is separate and isolated on the MTP from the first trusted subsystem and the second trusted subsystem.

### Claim 6 (depends on 5)

The method of claim 5, wherein the remote stakeholder is a mobile network operator, the first trusted subsystem comprises a device manufacturer trusted subsystem (TSS-DM), the second trusted subsystem comprises a remote mobile network operator (MNO) trusted subsystem (TSS-MNO), and the third trusted subsystem comprises a device user trusted subsystem (TSS-U).