# US 9,883,386 B2 · Method and a server for managing profiles > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,883,386 B2 - Document ID: US9883386B2 - Status: Granted - Kind: B2 - Application number: 15/314,004 - Filed: 2015-05-26 - Published: 2017-06-29 - Granted: 2018-01-30 - Earliest claimed: 2014-05-27 - Assignees: Oberthur Technologies - Applicants: Oberthur Technologies - Inventors: Arnaud Danree; Guillaume Larignon - Web page: https://patentgrep.com/patent/US9883386B2 ## CPC - H04W 8/18: Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data - H04L 67/306: User profiles - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method that may be performed by a profile management server for managing the profiles of a secure entity, such as an embedded universal integrated circuit card. The method may include sending a message to the secure entity in order to modify the active profile of the entity; initializing and starting a timer; and in the event that the server does not receive a message indicating which profile is active in the secure entity before the expiry of a predetermined duration after the starting of the timer, then starting an audit procedure for determining which profile is actually active in the secure entity. ## Claims ### Claim 1 A method performed by a profile management server for managing profiles of a secure entity, the method comprising: sending a message to said secure entity in order to modify an active profile of said secure entity; initializing and starting a timer; and in the event of said profile management server not receiving a message indicating which profile is the active profile in said secure entity before the expiry of a predetermined duration after said starting of the timer: starting an audit procedure for determining which profile of the profiles is the active profile in said secure entity. ### Claim 2 (depends on 1) A method according to claim 1, wherein said message to modify the active profile of said secure entity is a message for activating a new profile or a message for deactivating a currently active profile. ### Claim 3 (depends on 1) A method according to claim 1, wherein said timer is initialized based on a duration corresponding to a time-to-live of the message sent by said profile management server in order to modify the active profile of said secure entity. ### Claim 4 (depends on 1) A method according to claim 1, wherein said audit procedure includes sending at least one script to said secure entity in order to obtain at least a status: of a profile of said secure entity that said profile management server considers was active before said sending of the message to modify the active profile; of a profile of said secure entity that said profile management server considers to be active after said sending of the message to modify the active profile; or of a provisions profile of said secure entity. ### Claim 5 (depends on 1) A method according to claim 1, wherein said audit procedure includes sending at least one script to said secure entity in order to obtain a status of all of the profiles of said secure entity that are known to said profile management server. ### Claim 6 (depends on 4) A method according to claim 4, wherein said at least one script includes an application protocol data unit (APDU) GET STATUS command. ### Claim 7 (depends on 5) A method according to claim 5, wherein said at least one script includes an application protocol data unit (APDU) GET STATUS command. ### Claim 8 A profile management server for managing profiles of a secure entity, the profile management server comprising: a memory that contains instructions; a network access module; and a processor, operably connected to the memory and the network access module, that executes the instructions to perform operations comprising: sending a message from the network access module to said secure entity in order to modify an active profile of said secure entity; initializing and starting a timer; and in the event of said profile management server not receiving a message indicating which profile is the active profile in said secure entity before the expiry of a predetermined duration after said starting of the timer: starting an audit procedure for determining which profile of the profiles is the active profile in said secure entity. ### Claim 9 A non-transitory computer readable data medium storing a computer program including instructions that, when executed by a processor of a profile management server, perform a profile management method, the profile management method comprising: sending a message to a secure entity in order to modify an active profile of said secure entity, wherein said secure entity includes a plurality of profiles; initializing and starting a timer; and in the event that the profile management server does not receive a message indicating which profile, among the plurality of profiles, is the active profile in said secure entity before expiry of a predetermined duration after the starting of the timer, then starting an audit procedure for determining which profile among the plurality of profiles is the active profile in said secure entity. ### Claim 10 (depends on 4) A method according to claim 4, wherein sending at least one script comprises: sending a plurality of scripts in parallel to said secure entity.