Methods and apparatus for use in transferring an assignment of a secure chip subscription managers
View Patent ↗Techniques for use in transferring an assignment of a secure chip of a wireless device from a current subscription manager (SM) of a current mobile network operator (MNO) to a new SM of a new MNO are described. In one illustrative example, the current SM receives a request for transferring the assignment and produces transfer permission data in response. The transfer permission data includes an identifier of the secure chip, an identifier of the current SM, and a digital signature of the current SM. The current SM then sends to the secure chip a transfer permission message which includes the transfer permission data. The transfer permission data indicates a permission for the secure chip to transfer the assignment from the current SM to the new SM. Additional techniques are performed by the secure chip, and the new SM, as described.
1. A method at a secure chip of a wireless device for facilitating a transfer of assignment of the secure chip from a current subscription manager of a current mobile network operator to a new subscription manager of a new mobile network operator, the method comprising:
receiving, from the current subscription manager, a transfer permission message which includes transfer permission data, the transfer permission data including an identifier of the current subscription manager and a digital signature of the current subscription manager;
verifying the digital signature of the current subscription manager; and
sending, to the new subscription manager, a transfer request message which includes the transfer permission data, an identifier of the new subscription manager, and a digital signature of the secure chip.
2. The method of claim 1 , wherein the transfer permission data indicates a permission for the secure chip to transfer the assignment from the current subscription manager to the new subscription manager.
3. The method of claim 1 , further comprising:
receiving a digital certificate of the new subscription manager; and
verifying the digital certificate of the new subscription manager.
4. The method of claim 1 , further comprising:
receiving a digital certificate of the new subscription manager in the transfer permission message.
5. The method of claim 1 , further comprising:
receiving an activation code in the transfer permission message.
6. The method of claim 1 , wherein the secure chip is embedded in the wireless device.
7. The method of claim 1 , wherein the secure chip comprises an Embedded Universal Integrated Circuit Card (eUICC).
8. The method of claim 1 , further comprising:
sending the transfer request message if the digital signature of the current service manager is positively verified by the secure chip.
9. The method of claim 1 , further comprising:
receiving a transfer activation code from the current subscription manager.
10. A secure chip, comprising:
one or more processors;
a memory coupled to the one or more processors;
the one or more processors being configured to facilitate a transfer of assignment of the secure chip from a current subscription manager of a current mobile network operator to a new subscription manager of a new mobile network operator, by:
receiving, from the current subscription manager, a transfer permission message which includes transfer permission data, the transfer permission data including an identifier of the current subscription manager and a digital signature of the current subscription manager;
verifying the digital signature of the current subscription manager; and
sending, to the new subscription manager, a transfer request message which includes an identifier of the new subscription manager, a digital certificate of the secure chip, and a digital signature of the secure chip.
11. The secure chip of claim 10 , which is embedded in a wireless device.
12. The secure chip of claim 10 , comprising an Embedded Universal Integrated Circuit Card (eUICC).
13. A device including a secure chip, comprising:
one or more processors;
a memory coupled to the one or more processors;
the one or more processors being configured to facilitate a transfer of assignment of the secure chip from a current subscription manager of a current mobile network operator to a new subscription manager of a new mobile network operator, by:
receiving, from the current subscription manager, a transfer permission message which includes transfer permission data, the transfer permission data including an identifier of the current subscription manager and a digital signature of the current subscription manager;
verifying the digital signature of the current subscription manager; and
sending, to the new subscription manager, a transfer request message which includes an identifier of the new subscription manager, a digital certificate of the secure chip, and a digital signature of the secure chip.
14. The device of claim 13 , wherein the secure chip is embedded in the device.
15. The device of claim 13 , wherein the device comprises a mobile communications device.
16. The device of claim 13 , wherein the device comprises a smartphone.
17. The device of claim 13 , wherein the device comprises a tablet computer.
18. The device of claim 13 , wherein the device comprises a smart meter.
19. The device of claim 13 , wherein the device comprises a security camera.
20. The device of claim 13 , wherein the device comprises a vehicle.
21. The device of claim 13 , wherein the device comprises a mobile communications device.
22. A method for use in transferring an assignment of a secure chip of a wireless device from a current subscription manager of a current mobile network operator to a new subscription manager of a new mobile network operator, the method comprising:
receiving from the secure chip a transfer request message which includes a transfer permission message and a digital signature of the secure chip, the transfer permission message including transfer permission data having an identifier of the current subscription manager and a digital signature of the current subscription manager;
verifying in the transfer request message the digital signature of the secure chip;
verifying in the transfer permission data the digital signature of the current subscription manager; and
if the digital signatures are positively verified, then assigning the secure chip to the new subscription manager.
23. The method of claim 22 , wherein the transfer permission data indicates a permission for the secure chip to transfer the assignment from the current subscription manager to the new subscription manager.
24. The method of claim 22 , further comprising:
receiving in the transfer request message a digital certificate of the secure chip; and
verifying in the transfer request message the digital signature of the secure chip using the digital certificate of the secure chip.
25. The method of claim 22 , further comprising:
requesting and receiving from a certificate authority a digital certificate of the current subscription manager; and
verifying in the transfer permission data the digital signature of the current subscription manager using the digital certificate of the current subscription manager.
26. The method of claim 22 , further comprising:
sending to the secure chip an acknowledgement message.
27. The method of claim 22 , wherein the secure chip is embedded in the wireless device.
28. The method of claim 22 , further comprising:
repeating the actions of receiving, verifying, and assigning for a plurality of additional secure chips of a plurality of additional wireless devices.
29. The method of claim 22 , wherein the secure chip comprises an Embedded Universal Integrated Circuit Card (eUICC).
30. A non-transitory computer program product, comprising: a computer readable medium; computer instructions stored in the computer readable medium; the computer instructions being executable by one or more processors of a new subscription manager for use in transferring an assignment of a secure chip of the wireless device from a current subscription manager of a current mobile network operator to the new subscription manager of a new mobile network operator, the computer instructions being further executable for: receiving from the secure chip a transfer request message which includes a transfer permission message and a digital signature of the secure chip, the transfer permission message including transfer permission data having an identifier of the current subscription manager and a digital signature of the current subscription manager; verifying in the transfer request message the digital signature of the secure chip; verifying in the transfer permission data the digital signature of the current subscription manager; and if the digital signatures are positively verified, then assigning the secure chip to the new subscription manager.
31. The computer program product of claim 30 , wherein the transfer permission data indicates a permission for the secure chip to transfer the assignment from the current subscription manager to the new subscription manager.
32. The computer program product of claim 30 , wherein the computer instructions are further executable for:
receiving in the transfer request message a digital certificate of the secure chip; and
verifying in the transfer request message the digital signature of the secure chip using the digital certificate of the secure chip.
33. The computer program product of claim 30 , wherein the computer instructions are further executable for:
requesting and receiving from a certificate authority a digital certificate of the current subscription manager; and
verifying in the transfer permission data the digital signature of the current subscription manager using the digital certificate of the current subscription manager.
34. The computer program product of claim 30 , wherein the computer instructions are further executable for:
sending to the secure chip an acknowledgement message.
35. The computer program product of claim 30 , wherein the secure chip is embedded in the wireless device.
36. The computer program product of claim 30 , wherein the computer instructions are further executable for:
repeating the actions of receiving, verifying, and assigning for a plurality of additional secure chips of a plurality of additional wireless devices.
37. The computer program product of claim 30 , wherein the secure chip comprises an Embedded Universal Integrated Circuit Card (eUICC).
38. A network device, comprising:
a processor;
a memory coupled to the processor and storing instructions which, when executed by the processor, cause the network device to transfer an assignment of a secure chip of a wireless device from a current subscription manager of a current mobile network operator to a new subscription manager of a new mobile network operator, the instructions for:
receiving from the secure chip a transfer request message which includes a transfer permission message and a digital signature of the secure chip, the transfer permission message including transfer permission data having an identifier of the current subscription manager and a digital signature of the current subscription manager;
verifying in the transfer request message the digital signature of the secure chip;
verifying in the transfer permission data the digital signature of the current subscription manager; and
if the digital signatures are positively verified, then assigning the secure chip to the new subscription manager.
39. The network device of claim 38 , wherein the transfer permission data indicates a permission for the secure chip to transfer the assignment from the current subscription manager to the new subscription manager.
40. The network device of claim 38 , wherein the instructions are further executable for:
receiving in the transfer request message a digital certificate of the secure chip; and
verifying in the transfer request message the digital signature of the secure chip using the digital certificate of the secure chip.
41. The network device of claim 38 , wherein the instructions are further executable for:
requesting and receiving from a certificate authority a digital certificate of the current subscription manager; and
verifying in the transfer permission data the digital signature of the current subscription manager using the digital certificate of the current subscription manager.