# US 9,521,543 B2 · Methods and devices for OTA subscription management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,521,543 B2 - Document ID: US9521543B2 - Status: Granted - Kind: B2 - Application number: 14/654,073 - Filed: 2013-12-17 - Published: 2015-12-03 - Granted: 2016-12-13 - Earliest claimed: 2012-12-21 - Assignees: Giesecke & Devrient GmbH - Applicants: Giesecke & Devrient GmbH - Inventors: Dieter Weiss; Klaus Vedder; Michael Meyer; Michael Tagscherer; Jens Rudolph; Ulrich Dietz; Jari Nyholm; Thomas Larsson; Jorgen Hult - Web page: https://patentgrep.com/patent/US9521543B2 ## CPC - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04B 1/3816: Mechanical arrangements for accommodating identification devices, e.g. cards or chips; with connectors for programming identification devices - H04W 4/50: Service provisioning or reconfiguring - H04W 8/24: Transfer of terminal data - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - H04W 12/06: Authentication - H04W 12/35: {Protecting application or service provisioning, e.g. securing SIM application provisioning} - H04W 84/042: {Public Land Mobile systems, e.g. cellular systems} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04B: TRANSMISSION ## Abstract A method of providing a secure element of a mobile terminal with a subscription profile in which the mobile terminal is configured to communicate with a cellular communications network and the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the mobile terminal and/or the secure element. The method comprises the steps of: assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the subscription profile over-the-air to the secure element. A corresponding secure element, mobile terminal and subscription management backend system involves features of the method. ## Claims ### Claim 1 A method of providing a secure element of a mobile terminal with a subscription profile, wherein the mobile terminal is configured to communicate with a cellular communications network and wherein the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the secure element and/or the mobile terminal, wherein the method comprises the steps of: assembling the subscription profile on a first server, wherein the network specific portion of the subscription profile is provided by the first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the assembled subscription profile over-the-air to the secure element. ### Claim 2 (depends on 1) The method of claim 1, wherein prior to the step of assembling the subscription profile, the method comprises the additional step of identifying the secure element by means of an identification element for determining a configuration key and a secure element key associated with the secure element. ### Claim 3 (depends on 2) The method of claim 2, wherein the step of identifying the secure element comprises the steps of: transmitting the identification element from the secure element to the first server over-the-air; forwarding the identification element of the secure element to the second server; and transmitting the configuration key determined on the basis of the identification element from the second server to the first server over-the-air. ### Claim 4 (depends on 3) The method of claim 3, wherein the identification element is transmitted from the secure element to the first server by means of a message including the identification element in the clear and an encrypted version of the identification element encrypted by using the configuration key stored on the secure element. ### Claim 5 (depends on 4) The method of claim 4, wherein the message further comprises an encrypted version of a session key created by the secure element and an encrypted version of a hardware configuration of the secure element and/or the mobile terminal both encrypted using the configuration key. ### Claim 6 (depends on 5) The method of claim 5, wherein the first server decrypts the encrypted version of the identification element, the encrypted version of the session key and the encrypted version of the hardware configuration of the secure element and/or the mobile terminal using the configuration key provided by the second server so that the first server can verify the validity of the configuration key provided by the second server by verifying that the identification element sent in the clear is identical to the identification element resulting from the decryption of the encrypted version of the identification element using the configuration key. ### Claim 7 (depends on 5) The method of claim 5, wherein the hardware configuration of the secure element and/or the mobile terminal is automatically determined by a subscription management application being executed on the secure element and/or the mobile terminal or retrieved from a memory unit of the secure element and/or a memory unit of the mobile terminal. ### Claim 8 (depends on 4) The method of claim 4, wherein the second server transmits the configuration key determined on the basis of the identification element to the first server only after the first server has successfully authenticated itself to the second server. ### Claim 9 (depends on 3) The method of claim 3, wherein the step of assembling the subscription profile comprises the steps of encrypting the hardware specific portion of the subscription profile by the second server using the secure element key and encrypting the network specific portion of the subscription profile by the first server using the configuration key. ### Claim 10 (depends on 9) The method of claim 9, further comprising the step of encrypting the encrypted hardware specific portion of the subscription profile and the encrypted network specific portion of the subscription profile using a session key created by the secure element. ### Claim 11 (depends on 1) The method of claim 1, wherein the step of assembling the subscription profile comprises the additional step of determining at least one subscription profile, including the subscription profile, being compatible with a hardware configuration of the secure element and/or the mobile terminal. ### Claim 12 (depends on 1) The method of claim 1, wherein the hardware specific portion of the subscription profile comprises at least parts of an operating system for the secure element and/or the network specific portion of the subscription profile comprises subscription credentials, including an IMSI and/or an authentication key Ki, for attaching the secure element to the cellular communications network or a different cellular communications network. ### Claim 13 (depends on 1) A secure element comprising a subscription profile provided to the secure element by the method according to claim 1. ### Claim 14 (depends on 13) A mobile terminal containing a secure element according to claim 13. ### Claim 15 (depends on 1) A subscription management backend system, comprising a first server and a second server, wherein the first server and the second server are configured to provide a secure element of a mobile terminal with a subscription profile by the method according to claim 1. ### Claim 16 A method of providing a secure element of a mobile terminal with a subscription profile, wherein the mobile terminal is configured to communicate with a cellular communications network and wherein the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the secure element and/or the mobile terminal, wherein the method comprises the steps of: identifying the secure element by means of an identification element for determining a configuration key and a secure element key associated with the secure element; assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the assembled subscription profile over-the-air to the secure element; wherein the step of identifying the secure element comprises the steps of: transmitting the identification element from the secure element to the first server over the cellular communications network; forwarding the identification element of the secure element to the second server; and transmitting the configuration key determined on the basis of the identification element from the second server to the first server over the cellular communications network.