Idemia France

Oberthur Technologies

Guillaume Larignon

Tomasz Wozniak

Jérôme Dumoulin

Arnaud Danree

Jerome Dumoulin

Thomas Wozniac

Kaoutar Mazali

Notification devices and methods for configuring a secure element incorporated into a terminal connected to a network are disclosed. The devices and methods may perform steps implemented by an application of the secure element, such as obtaining at least one item of information that can be used to configure the secure element stored in a memory of the terminal outside the secure element, sending the item of information and an identifier of the secure element to a configuration system, and obtaining configuration data originating from the configuration system, the configuration data being supplied to the secure element depending on the item of information.

Notification method for configuring a secure element

Authentication device and method for a system that includes a subscriber device and a companion device. The authentication method includes the subscriber device delivering to the companion device a temporary profile and an authentication response signed by the subscriber device for sending to a server, installing the temporary profile to configure a second wireless communication interface of the companion device, and requesting a second authentication from the server via the second interface by using the delivered authentication response so as to authorize the second interface when the companion device and the subscriber device are not in communication with each other via the first communication interface. The device and method may be used by systems that include a subscriber device (e.g., a mobile telephone) and a companion device, e.g. a connected watch or object.

Authentication method for connecting a companion device when same is disconnected from a subscriber device

Described are methods and systems for provisioning a subscriber profile in a secure module, such as a SIM card. The methods and systems may perform operations that may include receiving a request for provisioning a subscriber profile accompanied by parameters of a mobile terminal associated with the subscriber profile, and configuring the terminal when notification is received of the profile being activated, the notification coming from the secure module. Variations of the systems and methods are applicable to terminals including a secure module for hosting a subscriber profile to a mobile communications network.

Method of provisioning a subscriber profile for a secure module

The disclosure relates to the notification of an SM-SR subscription management server by an eUICC card or an eSE element. The card includes, in local memory, at least one short number (or 'short code'), and more generally an address identifier, unique to a mobile-phone operator, wherein the number is associated with an operator subscriber profile within the secure card. The card is configured to retrieve, from the local memory, a short code associated with a subscriber profile in use to send, using the retrieved short code, a card status notification to the SM-SR server. In the absence of a short code, the card uses a unique international telephone number as the recipient of the notification.

EUICC card memorizing short numbers by subscriber profile to notify a subscription management server

Devices, systems, and methods related to an embedded subscriber identity module (eUICC) suitable for co-operating with a communication device (T) are described. The module may include a communication profile (P) configured to enable the embedded subscriber identity module to communicate with a telecommunications network (R) when the profile (P) is active; a reception module (PSM) for receiving, from a remote server (SM-SR) of the mobile telephone network (R), a communication profile management request; and a profile manager module (MGP). The profile manager module may be configured such as, on receiving the management request, to determine whether a rule from a predefined set of at least one rule (RL) is applicable; and if so, to execute an action specified by the applicable rule in association with a communication profile of the embedded subscriber identity module.

Embedded subscriber identity module capable of managing communication profiles

Methods and device for personalizing a secure element (e.g., a eUICC) may include or implement operations for receiving a personalization request issued by an operator to download a personalized profile in compliance with a model into the secure element, and the request may include personalization data, an identifier of the secure element and the identifier of the model. Other operations may include using the identifier of the secure element to identify a pre-personalization server suitable for pre-personalizing the secure element; obtaining a message from the pre-personalization server, the message including a pre-personalization script for the secure element based on the description of the model; generating a personalization script for the secure element by using the pre-personalization script and the personalization data; and sending the personalization script to the secure element, the secure element being suitable for executing the personalization script to install the personalized profile in the secure element.

Method for personalising a secure element

A method that may be performed by a profile management server for managing the profiles of a secure entity, such as an embedded universal integrated circuit card. The method may include sending a message to the secure entity in order to modify the active profile of the entity; initializing and starting a timer; and in the event that the server does not receive a message indicating which profile is active in the secure entity before the expiry of a predetermined duration after the starting of the timer, then starting an audit procedure for determining which profile is actually active in the secure entity.

Method and a server for managing profiles

A method and system for managing an embedded secure element () accessible as a slave of the resident applications (App1-3) of a host device of the eSE. The eSE includes an issuer security domain (), ISD, with which cryptographic keys are associated. The method includes, in an application agent embedded in an OS of the host device: sending () the ISD a random value; receiving () a cryptogram corresponding to the random value encrypted using a key associated with the ISD; sending () the random value and the cryptogram to a first extern entity entered in the application agent. The method includes: sending () the random value and the cryptogram from the first entity to a second external entity; verifying () that the second entity possesses keys associated with the ISD from the cryptogram and the random value.

Growing community of inventors

Colombes, France

Guillaume Larignon