Giesecke+devrient Mobile Security Gmbh

Giesecke & Devrient Gmbh

Ulrich Wimböck

Jens Rudolph

Bernhard Leutner

A method for introducing an identity into a secure element includes an operating system loaded into the secure element, which comprises a master key which is identical for a plurality of secure elements. A secure-element key datum is generated employing the master key. The secure-element key datum is configured as a temporary secure-element key datum, which, upon an initial authentication of the secure element vis-&#xe0;-vis the background system, is replaced by a final secure-element key datum which is independent of the master key by employing the temporary secure-element key datum and is itself rendered invalid for further authentications.

Introducing an identity into a secure element

A method for operating a security element of a mobile terminal with a memory unit includes using a first subscription profile with a first operating system for the security element, and a second subscription profile with a second operating system for the security element. The method involves operating the security element with the first operating system to communicate with the first subscription profile via a first mobile communication network; switching from the first operating system to the second operating system of the security element through a boot loader in the memory unit loading and executing the second operating system following a reboot of the security element; and operating the security element with the second operating system, to be able to communicate with the second subscription profile via a second mobile communication network. A corresponding security element and a corresponding mobile terminal are provided.

Method for operating a security element

Provided are a method for personalizing a security element for a mobile end device for communicating via a mobile radio network as well as a corresponding system. The method comprises the following steps: supplying initialization data of an initialization entity to the security element, wherein the initialization data comprise a personalization token; supplying the personalization token from the security element to a personalization entity; checking the validity of the personalization token through the personalization entity; and after successfully checking the validity of the personalization token, supplying personalization data from the personalization entity to the security element, wherein authorization data for authenticating the security element in encrypted form are already part of the initialization data and the personalization data comprise a key for decrypting the authorization data.

Method and system for personalizing a security element of a terminal

In order to support the access of a terminal to a mobile communication network, a network subscriber identifier and a plurality of authentication data sets relating to this network user identifier are transferred to the terminal by an access support server. The plurality of authentication data sets are generated previously by a server of the mobile communication network, after the access support server has transmitted the network subscriber identifier to the server. In order to check an authentication information item of the terminal upon logging into the mobile communication network, an authentication server of the mobile communication network transmits an authentication data set from the plurality of authentication data sets, for example via the server.

Growing community of inventors

Tutzing, Germany

Ulrich Wimböck