Smart card initial personnalization with local generation of keys

A smart card coupled with a communication device of a user who is not yet a subscriber of any telecommunication network, a temporary international identity and a temporary authentication key being stored in the smart card and in a home location register connected to a roaming entity of a telecommunication network to which the communication device is able to be attached, the smart card comprising a non-transitory computer-readable storage device storing computer-executable instructions which, when executed by a processor of a computing device, cause the processor perform the operations of:

• sending a first request to the roaming entity, the first request being forwarded to the home location register that authenticates the user by means of the temporary international identity and the temporary authentication key, the roaming entity allowing the smart card to use resources of the telecommunication network;
• sending a second request for smart card personalization to an application server connected to the telecommunication network;
• receiving a response from the application server, the response comprising a personalization command and an admin code
• interpreting the personalization command to establish a secure session with a personalization server via the application server, if the admin code is valid;
• negotiating with the personalization server to agree on an initial authentication key, by exchanging messages containing values derived from random secrets;
• receiving a message (Mes3) containing an initial international identity from the personalization server;
• and
• replacing the temporary international identity and the temporary authentication key by the initial international identity and the initial authentication key.

An application server for an initial personalization of a smart card coupled with a communication device of a user who is not yet a subscriber of any telecommunication network, a temporary international identity and a temporary authentication key being stored in the smart card and in a home location register connected to a roaming entity of a telecommunication network to which the communication device is able to be attached, the application server being connected to the telecommunication network and comprising a non-transitory computer-readable storage device storing computer-executable instructions which, when executed by a processor of a computing device, cause the processor perform the operations of:

• receiving a request for smart card personalization from the smart card, after that the smart card has sent another request to the roaming entity, said another request being forwarded to the home location register that authenticates the user by means of the temporary international identity and the temporary authentication key, and the roaming entity having allowed the smart card to use resources of the telecommunication network;
• sending a response to the smart card, the response comprising a personalization command and an admin code, in order that the smart card;
• interprets the personalization command to establish a secure session with a personalization server via the application server, if the admin code is valid,
• negotiates with the personalization server to agree on an initial authentication key, by exchanging messages containing values derived from random secrets,
• receives a message containing an initial international identity from the personalization server;
• and
• replaces the temporary international identity and the temporary authentication key by the initial international identity and the initial authentication key.

A personalization server for an initial personalization of a smart card coupled with a communication device of a user who is not yet a subscriber of any telecommunication network, a temporary international identity and a temporary authentication key being stored in the smart card and in said home location register connected to a roaming entity of a telecommunication network to which the communication device is able to be attached, the personalization server comprising a non-transitory computer-readable storage device storing computer-executable instructions which, when executed by a processor of a computing device, cause the processor perform the operations of:

• establishing a secure session with the smart card via an application server connected to the telecommunication network, if an admin code received in a response sent from the application server to the smart card is valid, after that the smart card;
• has sent a first request to the roaming entity, the first request being forwarded to the home location register that authenticates the user by means of the temporary international identity and the temporary authentication key, the roaming entity allowing the smart card to use resources of the telecommunication network;
• has sent a second request for smart card personalization to the application server connected to the telecommunication network;
• and
• has interpreted a personalization command included in said response to establish a secure session;
• negotiating with the smart card to agree on an initial authentication key, by exchanging messages containing values derived from random secrets;
• and
• sending a message containing an initial international identity to the smart card that is able to replace the temporary international identity and the temporary authentication key by the initial international identity and the initial authentication key.