# US 9,436,455 B2 · Logging operating system updates of a secure element of an electronic device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,436,455 B2 - Document ID: US9436455B2 - Status: Granted - Kind: B2 - Application number: 14/590,933 - Filed: 2015-01-06 - Published: 2015-07-09 - Granted: 2016-09-06 - Earliest claimed: 2014-01-06 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Mehdi Ziat; Kyle A. Diebolt - Web page: https://patentgrep.com/patent/US9436455B2 ## CPC - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 8/61: Installation - G06F 8/62: {Uninstallation} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - H04L 63/0815: {providing single-sign-on or federations} - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems, methods, and computer-readable media for logging secure element updates of an electronic device are provided. In one example embodiment, a method, at a secure element including a previously-installed secure element asset, includes, inter alia, receiving an update package, uninstalling the previously-installed secure element asset based on the received update package, installing a new secure element asset based on the received update package, and updating at least one of a counter on the secure element and a log on the secure element based on the installation of the new secure element asset. Additional embodiments are also provided. ## Claims ### Claim 1 An electronic device comprising: a networking subsystem configured to communicate with an updating device; and a secure element coupled to the networking subsystem and comprising a secure element processor configured to: receive, from the updating device via the networking subsystem, an update package comprising an update to an asset installed on the secure element; identify at least one previous version of the asset installed on the secure element; uninstall the at least one previous version of the asset installed on the secure element; install the update to the at least one previous version of the asset previously installed on the secure element; and in response to the installation of the update, update a value of a counter on the secure element and create a new entry in a log on the secure element, wherein the new entry in the log on the secure element comprises the updated value of the counter on the secure element and a description of the asset. ### Claim 2 (depends on 1) The electronic device of claim 1, wherein the asset comprises a payment applet asset of the secure element. ### Claim 3 (depends on 1) The electronic device of claim 1, wherein the asset comprises an operating system asset of the secure element. ### Claim 4 (depends on 1) The electronic device of claim 1, wherein the secure element processor is further configured to: receive a retrieval command; and transmit a copy of the log from the secure element in response to the received retrieval command. ### Claim 5 (depends on 1) The electronic device of claim 1, wherein the secure element processor is further configured to: receive a retrieval command; and transmit a current value of the counter from the secure element in response to the received retrieval command. ### Claim 6 (depends on 1) The electronic device of claim 1, wherein the secure element processor is further configured to: receive a retrieval command; and transmit a last update to the log from the secure element in response to the received retrieval command. ### Claim 7 (depends on 1) The electronic device of claim 1, wherein the at least one previous version of the asset is identified by searching a registry associated with a normal operating system to be executed by the secure element processor. ### Claim 8 (depends on 1) The electronic device of claim 1, wherein: at least one of the receiving, identifying, uninstalling, installing, updating, and creating operations is performed by an updating operating system to be executed by the secure element processor; and the updating operating system is separate from a normal operating system, to be executed by the secure element processor, which performs other functions of the secure element. ### Claim 9 An electronic device comprising: a networking subsystem configured to communicate with an updating device; and a secure element coupled to the networking subsystem and comprising a secure element processor configured to: receive, from the updating device via the networking subsystem, an update package comprising an update to an asset installed on the secure element; identify at least one previous version of the asset installed on the secure element; uninstall the at least one previous version of the asset installed on the secure element; install the update to the at least one previous version of the asset previously installed on the secure element; and in response to the installation of the update, update a value of a counter on the secure element and create a new entry in a log on the secure element, wherein; when the asset comprises a payment applet asset of the secure element, the new entry in the log on the secure element comprises the updated value of the counter on the secure element but not a description of the payment applet asset; and when the asset comprises an operating system asset of the secure element, the new entry in the log on the secure element comprises: the updated value of the counter on the secure element; and a description of the operating system asset. ### Claim 10 An electronic device comprising: a networking subsystem configured to communicate with an updating device; and a secure element comprising: a processor; and a memory, coupled to the processor, which stores a program module configured to be executed by the processor, the program module comprising: instructions configured to receive, from the updating device via the networking subsystem, an update package, wherein the update package comprises an update to an asset installed on the secure element; instructions configured to identify at least one previous version of the asset installed on the secure element; instructions configured to uninstall the at least one previous version of the asset installed on the secure element; instructions configured to install the update to the at least one previous version of the asset previously installed on the secure element; and in response to the installation of the update, instructions configured to update a value of a counter on the secure element and create a new entry in a log on the secure element, wherein the new entry in the log on the secure element comprises the updated value of the counter on the secure element and an indication of the asset. ### Claim 11 (depends on 10) The electronic device of claim 10, wherein: at least one of the receiving, identifying, uninstalling, installing, updating, and creating operations is performed by an updating operating system to be executed by the processor; and the updating operating system is separate from a normal operating system, to be executed by the processor, which performs other functions of the secure element. ### Claim 12 (depends on 10) The electronic device of claim 10, wherein the asset comprises a payment applet asset of the secure element. ### Claim 13 (depends on 10) The electronic device of claim 10, wherein the asset comprises an operating system asset of the secure element. ### Claim 14 (depends on 10) The electronic device of claim 10, wherein the asset comprises a payment applet asset of the secure element, the indication of the asset comprises an indication of the installed update. ### Claim 15 (depends on 10) The electronic device of claim 10, wherein the asset comprises an operating system asset of the secure element, the indication of the asset comprises an indication of the installed update. ### Claim 16 A method comprising: at a secure element comprising a previously-installed secure element asset: receiving an update package comprising an update to the previously-installed secure element asset; identifying the previously-installed secure element asset; uninstalling the previously-installed secure element asset based on the received update package; installing a new secure element asset based on the received update package; and in response to the installation of the new secure element asset based on the received update package, updating a value of a counter on the secure element and creating a new entry in a log on the secure element, wherein the new entry in the log on the secure element comprises the updated value of the counter on the secure element and a description of the new secure element asset. ### Claim 17 (depends on 16) The method of claim 16, wherein: the previously-installed secure element asset comprises a first operating system; and the new secure element asset comprises a second operating system. ### Claim 18 A secure element for use in an electronic device, comprising: a processor; and a memory, coupled to the processor, which stores a program module configured to be executed by the processor, the program module comprising: instructions configured to receive an update package, wherein the update package comprises an update to an operating system installed on the secure element; instructions configured to identify at least one previous version of the operating system installed on the secure element; instructions configured to uninstall the at least one previous version of the operating system installed on the secure element; instructions configured to install the update to the at least one previous version of the operating system previously installed on the secure element; and in response to the installation of the update, instructions configured to update a value of a counter on the secure element and create a new entry in a log on the secure element, wherein the new entry in the log on the secure element comprises the updated value of the counter on the secure element and an identification of the installed update. ### Claim 19 A computer-program product for use in conjunction with a secure element, the computer-program product comprising a non-transitory computer-readable storage medium and a computer-program mechanism embedded therein, to update the secure element, the computer-program mechanism comprising: instructions configured to receive an update package, wherein the update package comprises an update to an asset installed on the secure element; instructions configured to identify at least one previous version of the asset installed on the secure element; instructions configured to uninstall the at least one previous version of the asset installed on the secure element; instructions configured to install the update to the at least one previous version of the asset previously installed on the secure element; and in response to the installation of the update, instructions configured to update a value of a counter on the secure element and create a new entry in a log on the secure element, wherein the new entry in the log on the secure element comprises the updated value of the counter on the secure element and a description of the asset.