Thales Dis France Sa

Michel Endruschat

Jean-Yves Fine

Xavier Berard

Ly Thanh Phan

Patrice Amiel

Mireille Pauliac

François Zannin

Gabriel Pereira

Michel Martin

Caroline Durant Dinet

Sébastien Ponard

This invention related to a method for provisioning a first communication device with a set of at least one credential required for accessing to a wireless network by using a second communication device provisioned with a cryptographic key K also known by the wireless network, the first communication device being associated with a certificate comprising a public key PK, said certificate being stored with an associated private key PrK in said first communication device, the method comprising the following steps: receiving by the second communication device a registration request from the first communication device in order to be provisioned with the set of at least one credential; transmitting to the wireless network by the second communication device the registration request to generate a set of at least one credential associated to the first communication device comprising at least a cryptographic key K&#x2033;, the wireless network being adapted to generate a first random number Rand a second random number R; receiving by the second communication device a response from the wireless network comprising Rand R; generating K' by the second communication device using Rand K; transmitting by the second communication device to the first communication device K&#x2032; and Rto generate K&#x2033; using Rand K&#x2032;.

Method for provisioning a first communication device by using a second communication device

A method of replacing an authentication parameter for authenticating a security element co-operating with a terminal includes storing in the security element a first authentication parameter; transmitting to a mobile network operator the first authentication parameter for the operator to record it in its authentication system; on occurrence of an event, having a remote platform transmit to the security element an indicator informing the security element that it is authorized to replace the first authentication parameter with a second authentication parameter if its authentication fails; on occurrence of the event, having the entity transmit to the operator a second authentication parameter to replace the first authentication parameter; and in the event of subsequent failure of the security element to connect to the mobile network and if the indicator is present at the security element, replacing the first authentication parameter with the second authentication parameter at the security element.

Method of replacing at least one authentication parameter for authenticating a security element and corresponding security element

Growing community of inventors

Meudon, France

Michel Endruschat