IP Library Granted Patent US 9,104,887
Granted Patent B2
US 9,104,887 · App. 13/653,160 · Granted Aug 11, 2015

Systems, methods, and computer program products for interfacing multiple service provider trusted service managers and secure elements

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,104,887
App. No.
13/653,160
Granted
Aug 11, 2015
Kind
B2
Abstract

System, methods, and computer program products are provided for interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and one of a plurality of secure elements (SE). A first request including a mobile subscription identifier (MSI) is received from an SP TSM over a communications network. At least one memory is queried for SE data including an SE identifier corresponding to the MSI. The SE data is transmitted to the SP TSM over the communications network. A second request based on the SE data is received from the SP TSM over the communications network. A third request, based on the second request, is transmitted, over a mobile network, to an SE corresponding to the SE data. The mobile network is selected from multiple mobile networks, and is determined based on the SE data queried from the memory.

Claims (44)

1. A system for interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and one of a plurality of secure elements, the system comprising:

at least one memory; and

a processor coupled to the at least one memory, the processor being operable to:

receive, from an SP TSM over a communications network, a first request including a mobile subscription identifier;

query the at least one memory for secure element data including a secure element identifier corresponding to the mobile subscription identifier;

transmit the secure element data to the SP TSM over the communications network;

receive, from the SP TSM over the communications network, a second request based on the secure element data; and

transmit, over a mobile network, a third request, based on the second request, to a secure element corresponding to the secure element data,

wherein the mobile network is selected from a plurality of mobile networks, and determined based on the secure element data queried from the at least one memory.

2. The system of claim 1 , wherein the second request is a request to perform pre-personalization of the secure element, the pre-personalization including creating, on the secure element, one or more security domains and installing, on the secure element, one or more applications pre-stored on the at least one memory.

3. The system of claim 1 , wherein the second request includes at least one of a request to (1) manage a communication, (2) process one or more predetermined scripts, and (3) activate a service.

4. The system of claim 3 , wherein the one or more predetermined scripts includes one of a command to (1) personalize an application, and (2) perform key rotation to set a key provided by the SP into a security domain in the secure element.

5. The system of claim 3 , wherein the one or more predetermined scripts includes one or more command application protocol data units (ADDU), the one or more command APDUs including commands for the secure element.

6. The system of claim 1 , wherein the at least one memory includes a database including a plurality of mobile subscription identifiers and a plurality of corresponding secure element identifiers.

7. The system of claim 1 , wherein the processor is further operable to validate the second request using the at least one memory.

8. The system of claim 1 , further comprising an enterprise service bus (ESB) operable to process at least one of the first, second and third requests.

9. A method for interfacing between one of a plurality of service provider (SP) trusted service managers (TSM) and one of a plurality of secure elements, the method comprising steps of:

receiving, from an SP TSM over a communications network, a first request including a mobile subscription identifier;

querying at least one memory for secure element data including a secure element identifier corresponding to the mobile subscription identifier;

transmitting the secure element data to the SP TSM over the communications network;

receiving, from the SP TSM over the communications network, a second request based on the secure element data; and

transmitting, over a mobile network, a third request, based on the second request, to a secure element corresponding to the secure element data,

wherein the mobile network is selected from a plurality of mobile networks, and determined based on the secure element data queried from the at least one memory.

10. The method of claim 9 , wherein the second request is a request to perform pre-personalization of the secure element, the pre-personalization including creating, on the secure element, one or more security domains and installing, on the secure element, one or more applications pre-stored on the at least one memory.

11. The method of claim 9 , wherein the second request includes at least one of a request to (1) manage a communication, (2) process one or more predetermined scripts, and (3) activate a service.

12. The method of claim 11 , wherein the one or more predetermined scripts includes one of a command to (1) personalize an application, and (2) perform key rotation to set a key provided by the SP into a security domain in the secure element.

13. The method of claim 11 , wherein the one or more predetermined scripts includes one or more command application protocol data units (APDU), the one or more command APDUs including commands for the secure element.

14. The method of claim 9 , wherein the at least one memory includes a database including a plurality of mobile subscription identifiers and a plurality of corresponding secure element identifiers.

15. The method of claim 9 , further comprising a step of validating the second request using the at least one memory.

16. The method of claim 9 , wherein at least one of the first, second, and third requests are processed by an ESB.

17. A non-transitory computer-readable medium having stored thereon sequences of instructions, the sequences of instructions including instructions, which, when executed by a computer system, cause the computer to:

receive, from an SP TSM over a communications network, a first request including a mobile subscription identifier;

query at least one memory for secure element data including a secure element identifier corresponding to the mobile subscription identifier;

transmit the secure element data to the SP TSM over the communications network;

receive, from the SP TSM over the communications network, a second request based on the secure element data; and

transmit, over a mobile network, a third request, based on the second request, to a secure element corresponding to the secure element data,

wherein the mobile network is selected from a plurality of mobile networks, and determined based on the secure element data queried from the at least one memory.

18. The computer-readable medium of claim 17 , wherein the second request is a request to perform pre-personalization of the secure element, the pre-personalization including creating, on the secure element, one or more security domains and installing, on the secure element, one or more applications pre-stored on the at least one memory.

19. The computer-readable medium of claim 17 , wherein the second request includes at least one of a request to (1) manage a communication, (2) process one or more predetermined scripts, and (3) activate a service.

20. The computer-readable medium of claim 19 , wherein the one or more predetermined scripts includes one of a command to (1) personalize an application, and (2) perform key rotation to set a key provided by the SP into a security domain in the secure element.

21. The computer-readable medium of claim 19 , wherein the one or more predetermined scripts includes one or more command application protocol data units (ADDU), the one or more command APDUs including commands for the secure element.

22. The computer-readable medium of claim 17 , wherein the at least one memory includes a database including a plurality of mobile subscription identifiers and a plurality of corresponding secure element identifiers.

23. The computer-readable medium of claim 17 , wherein the sequence of instructions further includes instructions which, when executed by the computer system, cause the computer system to validate the second request using the at least one memory.

24. The computer-readable medium of claim 17 , wherein the sequence of instructions further includes instructions which, when executed by the computer system, cause the computer system to process at least one of the first, second, and third requests using an ESB.

Assignments (3)
CHANGE OF NAME Recorded Oct 2, 2017
From: GOOGLE INC.
To: GOOGLE LLC
Reel/Frame 044334/0466 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 20, 2015
From: JVL VENTURES, LLC
To: GOOGLE INC.
Reel/Frame 035463/0544 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 16, 2012
From: GARGIULO, MICHAEL J.
To: JVL VENTURES, LLC
Reel/Frame 029140/0695 →