US 11,853,740 B2
Method for patching an operating system on a secure element transparently through an SM-SR platform
Frédéric Dao, La Ciotat (FR); Gerald Glinka-Hecquet, La Ciotat (FR); Denis Dubois, La Ciotat (FR); and Jérôme Duprez, La Ciotat (FR)
Assigned to THALES DIS FRANCE SAS, Meudon (FR)
Appl. No. 17/599,647
Filed by THALES DIS FRANCE SAS, Meudon (FR)
PCT Filed Mar. 31, 2020, PCT No. PCT/EP2020/059179
§ 371(c)(1), (2) Date Sep. 29, 2021,
PCT Pub. No. WO2020/201313, PCT Pub. Date Oct. 8, 2020.
Claims priority of application No. 19305429 (EP), filed on Apr. 1, 2019.
Prior Publication US 2022/0164178 A1, May 26, 2022
Int. Cl. G06F 8/65 (2018.01); H04W 12/30 (2021.01); H04W 12/40 (2021.01); H04L 9/40 (2022.01); H04L 67/00 (2022.01)
CPC G06F 8/65 (2013.01) [H04L 63/0853 (2013.01); H04L 67/34 (2013.01); H04W 12/35 (2021.01); H04W 12/40 (2021.01)] 13 Claims
OG exemplary drawing
 
1. A method for patching an operating system (OS) on a secure element embedded in a terminal, the method comprising:
transmitting an order to create an Issuer Security Domain-Profile (ISD-P) on the secure element from a script platform to a Subscription Manager Secure Routing (SM-SR);
establishing a secure channel between the script platform and the ISD-P or the secure element a secure channel;
performing ISD-P key establishment with the ISD-P on the secure element through the SM-SR, thereby generating a keyset known only by the script platform and the ISD-P to secure one or more scripts;
formatting the one or more scripts, adding one or more signed tokens in the one or more scripts, and securing the one or more scripts to produce one or more secured scripts;
sending the one or more secured scripts to the SM-SR which then sends the one or more secured scripts to the secure element;
executing the one or more secured scripts in the ISD P, wherein the execution of the one or more secured scripts install a patch in the OS; and
sending a message informing the script platform of a result of the execution of the one or more secured scripts from the secure element to the script platform.