Apparatus and methods for controlled switching of electronic access clients without requiring network access
AssigneeApple Inc.
InventorsXiangying Yang, Jerrold Von Hauck
Life of this patent
Estimating the term…
Abstract
Methods and apparatuses for providing controlled switching of electronic access control clients without requiring network access are set forth herein. In one embodiment, a method for swapping of subscriptions and/or profiles for electronic Subscriber Identity Modules (eSIMs) without network supervision that prevents possibly malicious high frequency switching is disclosed. The disclosed embodiments offer reasonable management capabilities for network operators, without compromising the flexibility of eSIM operation.
Claims20
A method for providing controlled switching of access control clients within a mobile device without requiring access to a network, the method comprising:
- at a security module included in the mobile device, wherein the security module is separate and distinct from a secure element included in the mobile device:
- receiving, from the secure element, a request to swap a first access control client with a second access control client, wherein the first access control client is active and the second access control client is inactive;
- obtaining content from at least one sensor included in the mobile device;
- referencing the content against at least one pre-defined threshold to determine whether at least one module is operating within pre-defined thresholds;
- and
- when the at least one module is operating within the pre-defined thresholds:
- determining, based on an internal time component that corresponds to the at least one module, whether the request is valid, and
- when the request is valid:
- causing the secure element to deactivate the first access control client, and
- causing the secure element to activate the second access control client.
A non-transitory computer readable storage medium configured to store instructions that, when executed by a security module included in a mobile device, cause the mobile device to provide controlled switching of access control clients without requiring access to a network, by carrying out steps that include:
- receiving, from a secure element that is included in the mobile device and is distinct from the security module, a request to swap a first access control client with a second access control client, wherein the first access control client is active and the second access control client is inactive;
- obtaining content from at least one sensor included in the mobile device;
- referencing the content against at least one pre-defined threshold to determine whether at least one module is operating within pre-defined thresholds;
- and
- when the at least one module is operating within the pre-defined thresholds:
- determining, based on an internal time component that corresponds to the at least one module, whether the request is valid, and
- when the request is valid:
- causing the secure element to deactivate the first access control client, and
- causing the secure element to activate the second access control client.
A mobile device configured to control switching of access control clients without requiring access to a network, the mobile device comprising:
- a secure element configured to manage at least a first access control client and a second access control client;
- and
- a security module that is separate and distinct from the secure element, wherein the security module is configured to carry out steps that include:
- receiving, from the secure element, a request to swap the first access control client with the second access control client, wherein the first access control client is active and the second access control client is inactive;
- obtaining content from at least one sensor included in the mobile device;
- referencing the content against at least one pre-defined threshold to determine whether at least one module is operating within pre-defined thresholds;
- and
- when the at least one module is operating within the pre-defined thresholds:
- determining, based on an internal time component that corresponds to the at least one module, whether the request is valid, and
- when the request is valid:
- causing the secure element to deactivate the first access control client, and
- causing the secure element to activate the second access control client.
Dependencies are inferred from the claim text.