US 12,388,626 B2
Managing a secure element
Igor Borisoglebski, London (GB); Scott MacKenzie, London (GB); Frederico Gavinho Lima Dos Santos Dias, London (GB); and Amilcar Rodrigues Cardoso Pereira, London (GB)
Assigned to TRUPHONE LIMITED, London (GB)
Filed by Truphone Limited, London (GB)
Filed on Mar. 29, 2022, as Appl. No. 17/707,455.
Application 17/707,455 is a continuation of application No. PCT/EP2020/077428, filed on Sep. 30, 2020.
Claims priority of application No. 1914104 (GB), filed on Sep. 30, 2019.
Prior Publication US 2022/0224521 A1, Jul. 14, 2022
Int. Cl. H04L 9/08 (2006.01); H04L 67/00 (2022.01)
CPC H04L 9/0825 (2013.01) [H04L 9/085 (2013.01); H04L 9/0894 (2013.01); H04L 67/34 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method of transmitting configuration data associated with a cellular communications network to a host device comprising a secure element, the method comprising:
by a secure element manager in the cellular network, receiving from a first server in the cellular network one or more Over-The-Air (OTA) keys associated with the secure element and usable by the secure element for authorizing a source of the configuration data, wherein the first server is configured to maintain OTA keys and to transmit configuration data to the host device using OTA-based Short Messaging Service (SMS) communications;
by the secure element manager, providing a first-layer encryption of the configuration data using the received one or more OTA keys associated with the secure element to generate OTA-secured configuration data for the secure element;
by the secure element manager, providing the generated OTA-secured configuration data to a second server in the cellular communication network;
by the second server, establishing a non-SMS communications channel to the host device and providing a second encryption layer wrapping the OTA-secured configuration data, thereby giving rise to multi-layer encrypted configuration data, wherein the second encryption layer is provided using one or more encryption keys associated with the secure element and being other than the one or more OTA keys; and
transmitting, by the second server via the non-SMS communications channel, the multi-layer encrypted configuration data to the host device, thereby enabling the host device to decode the second encryption layer using the one or more encryption keys into OTA-secured configuration data, and further authorize the source of the configuration data by using the or more OTA keys to decode the OTA-secured configuration.