Methods and apparatus for access data recovery from a malfunctioning device
View Patent ↗Methods and apparatus for recovering access data from a malfunctioning device. In one embodiment, trained service personnel are provided a specialized apparatus for retrieving access data from a malfunctioning device. For example, in the instance the device comprises a cellular device having an unrecoverable hardware failure, trained service personnel can connect to the secure element and retrieve the one or more electronic Subscriber Identity Modules (eSIMs) stored thereon. The eSIMs are then “reclaimed” and reprogrammed/distributed to a new device. In one implementation, security and integrity measures are taken to protect and control distribution of sensitive access data.
1. A wireless apparatus, comprising:
a communications interface;
a power supply;
a processor;
an electronic Universal Integrated Circuit Card (eUICC) adapted to store a plurality of electronic Subscriber Identity Modules (eSIMs) wherein each eSIM of the plurality of eSIMs enables the wireless apparatus to access a particular cellular network using the communications interface; and
a bypass interface, wherein the bypass interface;
comprises a power input, a data input, a data output, and a clock input, and
provides access to the plurality of eSIMs without requiring the communications interface, the power supply, and the processor to be operable.
2. The wireless apparatus of claim 1 , wherein the wireless apparatus comprises a cellular phone.
3. The wireless apparatus of claim 1 , wherein the bypass interface provides access to the plurality of eSIMs by:
retrieving, from the eUICC, at least one eSIM of the plurality of eSIMs access, and
removing, from the eUICC, the at least one eSIM.
4. The wireless apparatus of claim 1 , wherein the bypass interface provides access to the plurality of eSIMs during a recoverable malfunction operation that involves one or more of the power supply, the processor, and the communications interface being inoperable.
5. The wireless apparatus of claim 4 , wherein, when the power supply, the processor, and the communications interface are operable, the wireless apparatus authenticates to a cellular network using at least one eSIM of the plurality of eSIMs.
6. The wireless apparatus of claim 5 , wherein the wireless apparatus is further configured to communicate with the cellular network upon a successful authentication.
7. The wireless apparatus of claim 1 , wherein the bypass interface comprises an external interface that is accessible to a user without assistance from a third party.
8. The wireless apparatus of claim 7 , wherein the external interface comprises a connector whose primary purpose is not a recovery of the plurality of eSIMs.
9. The wireless apparatus of claim 8 , wherein the connector comprises a 30-pin connector.
10. The wireless apparatus of claim 7 , wherein the bypass interface comprises an internal interface that is inaccessible to the user without assistance from the third party.
11. A method for recovering at least one electronic Subscriber Identity Module (eSIM) from a wireless device that is inoperable, the method comprising:
at a retrieval device:
establishing, using a bypass interface included in the wireless device, a secure connection to an electronic Universal Integrated Circuit Card (eUICC) included in the wireless device, wherein the eUICC stores the at least one eSIM, the bypass interface comprises a power input, a data input, a data output, and a clock input, and the bypass interface operates when the wireless device is inoperable;
exchanging cryptographic material with the eUICC;
retrieving the at least one eSIM from the eUICC, wherein the at least one eSIM is encrypted based at least in part on the cryptographic material; and
voiding the at least one eSIM within the eUICC.
12. The method of claim 11 , wherein the wireless device is inoperable when one or more of a power supply, a processor, and a communications interface included in the wireless device is inoperable.
13. The method of claim 11 , wherein, when the wireless device is operable, the wireless device authenticates to a cellular network using the at least one eSIM.
14. The method of claim 11 , wherein the bypass interface comprises a connector whose primary purpose is not a recovery of the at least one eSIM.
15. The method of claim 11 , wherein the bypass interface comprises an internal interface that is inaccessible to an end user of the wireless device without assistance from a third.
16. A method for providing at least one electronic Subscriber Identity Module (eSIM) to a retrieval device, the method comprising:
at an inoperable wireless device including a bypass interface that comprises a power input, a data input, a data output, and a clock input:
responsive to a connection to the retrieval device:
entering into a recovery mode, and
exchanging, with the retrieval device, cryptographic material to secure the connection to the retrieval device;
responsive to a request for the at least one eSIM, providing the at least one eSIM to the retrieval device, wherein the at least one eSIM is stored in an electronic Universal Integrated Circuit Card (eUICC) included in the wireless device; and
subsequent to providing the at least one eSIM, voiding the at least one eSIM within the eUICC.
17. The method of claim 16 , wherein the wireless device is inoperable when one or more of a power supply, a processor, and a communications interface included in the wireless device is inoperable.
18. The method of claim 16 , wherein the bypass interface comprises a connector whose primary purpose is not the recovery of the at least one eSIM.
19. The method of claim 18 , wherein:
the wireless device comprises a cellular phone; and
the eUICC comprises an electronic Universal Integrated Circuit Card (eUICC), and the at least one eSIM comprises an electronic Subscriber Identity Module (eSIM).
20. The method of claim 16 , wherein the retrieval device is a personal computer.