Pre-personalization of eSIMs to support large-scale eSIM delivery

    公开(公告)号:US10554487B2

    公开(公告)日:2020-02-04

    申请号:US15157332

    申请日:2016-05-17

    Applicant: Apple Inc.

    Abstract: Representative embodiments described herein set forth techniques for optimizing large-scale deliveries of electronic Subscriber Identity Modules (eSIMs) to mobile devices. Specifically, instead of generating and assigning eSIMs when mobile devices are being activated—which can require significant processing overhead—eSIMs are pre-generated with a basic set of information, and are later-assigned to the mobile devices when they are activated. This can provide considerable benefits over conventional approaches that involve generating and assigning eSIMs during mobile device activation, especially when new mobile devices (e.g., smartphones, tablets, etc.) are being launched and a large number of eSIM assignment requests are to be fulfilled in an efficient manner.

    Apparatus and methods for electronic subscriber identity module (eSIM) installation and interoperability

    公开(公告)号:US10462654B2

    公开(公告)日:2019-10-29

    申请号:US16102189

    申请日:2018-08-13

    Applicant: Apple Inc.

    Abstract: Methods and apparatus for managing processing of electronic Subscriber Identity Modules (eSIM) data at a mobile device are disclosed. An eSIM management entity of an embedded Universal Integrated Circuit Card (eUICC) in the mobile device obtains an encrypted eSIM package, decrypts the eSIM package to obtain eSIM contents formatted generically and not specifically tailored to requirements of the eUICC. In some embodiments, the eSIM contents are formatted based on an abstract syntax notation (ASN) distinguished encoding rules (DER) format. The eSIM management entity parses the formatted eSIM contents to retrieve individual eSIM components and installs each eSIM component for the eSIM in an eSIM security domain on the eUICC. In some embodiments, the eSIM management entity acts as a local, personalization server to provide local Trusted Service Manager (TSM) server functionality for eSIM installation that transforms “generically formatted” eSIM contents into eSIM components that match specific requirements of the eUICC.

    Electronic subscriber identity module (eSIM) installation and testing

    公开(公告)号:US10367810B2

    公开(公告)日:2019-07-30

    申请号:US15720454

    申请日:2017-09-29

    Applicant: Apple Inc.

    Abstract: Provisioning of an electronic subscriber identity module (eSIM) to an embedded universal integrated circuit card (eUICC) is observed to acquire a captured payload. The captured payload is then used in replay test sessions. In a live test session, test equipment can be used to monitor the communication between an eSIM server and the eUICC in order to capture the payload transmitted from the eSIM server. In the live test session, the eUICC can be in a debug mode that persists an ability to generate the same keys. In the replay test sessions, the payload captured can be reused and the eUICC can regenerate the same keys to decrypt an encrypted eSIM in the payload. After an installation attempt, the eUICC can provide notifications to the test equipment. The eUICC can be stress-tested using methods described herein without consuming a large number of eSIMs from an eSIM server inventory.

    System and method for policy control functions management mechanism

    公开(公告)号:US09763081B2

    公开(公告)日:2017-09-12

    申请号:US14549088

    申请日:2014-11-20

    Applicant: APPLE INC.

    CPC classification number: H04W8/22 G06F9/44505 G06F9/5011

    Abstract: Systems and methods for validating and applying modifications to a policy control function (PCF) of a station. The methods include generating a PCF package including a modification to a PCF, and determining whether the PCF package is to be transmitted to the station by a first or second entity. The methods further include when the PCF package is to be transmitted by the first entity, including a first signature of the first entity in a deliverer field of the PCF package, and when the PCF package is to be transmitted by the second entity, including the first signature in an owner field and a second signature of the second entity in the deliverer field. The methods further include receiving the PCF package from the first or second entity, determining whether the PCF package is valid, and applying the modification to the PCF when it is determined the PCF package is valid.

    Methods and apparatus for establishing a secure communication channel

    公开(公告)号:US09722975B2

    公开(公告)日:2017-08-01

    申请号:US14789905

    申请日:2015-07-01

    Applicant: Apple Inc.

    Abstract: A method for establishing a secure communication channel between an off-card entity and an embedded Universal Integrated Circuit Card (eUICC) is provided. The method involves establishing symmetric keys that are ephemeral in scope. Specifically, an off-card entity, and each eUICC in a set of eUICCs managed by the off-card entity, possess long-term Public Key Infrastructure (PKI) information. When a secure communication channel is to be established between the off-card entity and an eUICC, the eUICC and the off-card entity can authenticate one another in accordance with the respectively-possessed PKI information (e.g., verifying public keys). After authentication, the off-card entity and the eUICC establish a shared session-based symmetric key for implementing the secure communication channel. Specifically, the shared session-based symmetric key is generated according to whether perfect or half forward security is desired. Once the shared session-based symmetric key is established, the off-card entity and the eUICC can securely communicate information.

    Monitoring of excessive write operations issued to a non-volatile memory

    公开(公告)号:US09626114B2

    公开(公告)日:2017-04-18

    申请号:US14682037

    申请日:2015-04-08

    Applicant: Apple Inc.

    Abstract: The invention provides a technique for managing write operations issued to a non-volatile memory included in a wireless device. A monitor software application executes on the wireless device and is configured to determine that a number of write operations issued to the non-volatile memory is greater than or equal to a write operation threshold associated with the non-volatile memory. In response, at least one application is isolated as the application responsible for issuing excessive write operations. The isolation can be carried out locally on the wireless device, or the isolation can be carried out remotely at a server by sending information about the write operations to the server. The monitor then limits additional write operations from being issued to the non-volatile memory so as to protect the non-volatile memory from becoming corrupted or inoperable.

    Methods and apparatus for managing data within a secure element
    140.
    发明授权
    Methods and apparatus for managing data within a secure element 有权
    用于管理安全元件内的数据的方法和装置

    公开(公告)号:US09473943B2

    公开(公告)日:2016-10-18

    申请号:US14639861

    申请日:2015-03-05

    Applicant: Apple Inc.

    Abstract: Apparatus and methods for managing and sharing data across multiple access control clients in devices. In one embodiment, the access control clients comprise electronic Subscriber Identity Modules (eSIMs) disposed on an embedded Universal Integrated Circuit Card (eUICC). Each eSIM contains its own data. An Advanced Subscriber Identity Toolkit application maintained within the eUICC facilitates managing and sharing multiple eSIMs' data for various purposes such as sharing phonebook contacts or facilitating automatic switch-over between the multiple eSIMs (such as based on user context).

    Abstract translation: 用于在设备中的多个访问控制客户端上管理和共享数据的装置和方法。 在一个实施例中,访问控制客户端包括设置在嵌入式通用集成电路卡(eUICC)上的电子订户身份模块(eSIM)。 每个eSIM都包含自己的数据。 在eUICC内部维护的高级用户身份工具包应用程序便于管理和共享多个eSIM的数据,用于各种目的,例如共享电话簿联系人或促进多个eSIM之间的自动切换(例如基于用户上下文)。

Patent Agency Ranking