Giesecke+devrient Mobile Security Gmbh

Giesecke & Devrient Gmbh

Giesecke-devrient Mobile Security Germany Gmbh

Giesecke+devreint Mobile Security Gmbh

Claus Dietze

Frank Götze

Jan Eichholz

Gero Galka

Michael Baldischweiler

Stephan Spitz

Johannes Luyken

Ralf Schedel

Daniel Albert

Martin Auer

Frank Schäfer

Helmut Schuster

A profile for implementation in a or implemented in a subscriber identity module (eUICC), wherein the profile can adopt at least a first and a second profile state. The profile including profile metadata. The profile metadata has a profile-state-management flag which can adopt a first and a second flag state of the profile-state-management flag. If the flag adopts the first flag state, any management servers are permitted to change the profile state of the profile.

Profile and subscriber identity module having profile

A chip set for a terminal comprises at least one secure processor, in which a one-time programmable memory is integrated. At least one terminal serial number of the terminal is stored in the chip set. Information for securing the terminal serial number against tampering is stored in the one-time programmable memory.

IMEI storage

A method is for a first-time startup of a not fully personalized secure element, which serves for the use of services of a mobile communication network, in a mobile terminal. In the method, the secure element is started and requested to transmit a status message. The secure element transmits a status message in which it is stated whether the secure element: S) contains only a bootloader but as yet no firmware image for the secure element; S) contains a firmware image for the secure element but is not yet fully personalized; or S) is fully personalized. The secure element is accepted in the cases S), S) and S) and rejected in other cases. In the case S), a download for a firmware image of the secure element is initiated for a first-time startup.

Method for a first start-up operation of a secure element which is not fully customized

A chipset for an end device comprises at least a Secure Processor into which a one-time programmable memory storage is integrated, wherein in the chipset at least an end-device serial number of the end device is stored, wherein in the one-time programmable memory information is stored for securing the end-device serial number against tampering.

Chipset with protected firmware

A method for authorizing a transaction reading out a first code and a second code by means of a first mobile device. The second code contains information items for decrypting the first code. From the read-out codes a first signature confirming the transaction vis-&#xe0;-vis the system is generated, which is transmitted to the system. Subsequently, an authorization of the transaction is effected.

Transaction authorization method

A method for loading a subscription into an embedded security element of a system configured on a chip of a mobile end device, wherein the system comprises an application processor, a non-volatile memory and a secure processor. The application processor and the secure processor can access the non-volatile memory via a bus. In the process, the subscription is loaded by a provisioning service into the non-volatile memory, so that the secure processor can load the subscription from the memory and execute it. The provisioning service is executed by the secure processor and the subscription is loaded by the provisioning service into a region of the non-volatile memory readable and writeable only by the secure processor.

Method for loading a subscription into an embedded security element of a mobile terminal

A method is provided for installing a security-relevant portion of an application made available by an application provider in a security element of a terminal. The terminal requests the application from the application provider and receives the application. Subsequently, the received security-relevant portion of the application is transmitted to a trustworthy instance administrating the security element. The trustworthy instance subsequently installs the security-relevant portion of the application in the security element.

Method for installing security-relevant applications in a security element of a terminal

The invention provides a mobile station comprising a mobile end device, security resources, and a discovery module implemented in the mobile station, with which the security resources of the mobile station are discoverable, at least one security level of the mobile station that is achievable by means of the security resources is derivable, and derived security levels of the mobile station are outputable. Further, there are stated an application loading system having such a mobile station, and a risk assessment system for mobile stations.

Mobile station comprising security resources with different security levels

The invention creates a mobile station comprising a mobile end device (ME) with a secured runtime environment (TEE) and a removable or firmly implemented security element (SE), with an end device send server (TEE-TSM) arranged in the security element (SE), which is arranged to send to the secured runtime environment (TEE) end device messages which can be received by the secured runtime environment (TEE). The end device messages are sent by a trusted service manager (SE-TSM), which is provided for the security element (SE), to the security element (SE), thereby higher efficiency being guaranteed at maintained security.

Contents management for mobile station having runtime environment

The invention provides a method for programming a chip for a mobile end device, wherein, in a preparatory step, a serial number is programmed into the chip and thereafter, in a programming step, the serial number is verified and a programming of at least one further datum into the chip is only carried out if the serial number has been successfully verified. The serial number is verified here by means of a security module (HSM), while employing a secret information item stored in the security module (HSM) and different from the serial number.

Method for programming a mobile end device chip

The invention relates to a chip card with at least one application for which an implementation () and an entry () referring to the implementation () are present on the chip card (). The inventive chip card is characterized in that a plurality of entries () referring to the same implementation () are present.

Growing community of inventors

Obersochering, Germany

Claus Dietze