Method for managing content on a secure element connected to an equipment
View Patent ↗The invention concerns a method for managing content on a secure element connected to an equipment, this content being managed on the secure element from a distant administrative platform. According to the invention, the method consists in: establishing, at the level of the administrative platform a secure channel between the equipment and the administrative platform, thanks to session keys generated by the secure element and transmitted to the equipment; transmitting to the administrative platform a request to manage content of the secure element; and verifying at the level of the administrative platform that this request originates from the same secure element that has generated the session keys and, if positive, authorizing the management and, if negative, forbid this management.
1. A method for managing content on a secure element connected to an equipment, said content being managed on said secure element from a remote administrative platform, wherein said method comprises:
establishing, at the level of said administrative platform a secure channel between said equipment and said administrative platform, using session keys generated by said secure element and transmitted to said equipment, wherein establishing said secure channel includes transmitting a first identifier corresponding to said session keys to said administrative platform from said equipment;
transmitting from said secure element to said administrative platform a request to manage content of said secure element using said secure channel, wherein the request includes a second identifier; and
verifying at the level of said administrative platform that said request originates from the same secure element that has generated said session keys, said verification including verifying that said first identifier, received from said equipment corresponds to said second identifier, received from said secure element, and verifying that said session keys correspond to said first identifier and, if positive, authorizing said management and, if negative, forbid said management.
2. A method according to claim 1 , wherein said management comprises in at least one of the following tasks:
downloading content on said secure element;
deleting content on said secure element;
exporting content stored on said secure element;
activating content stored on said secure element; and
deactivating content stored on said secure element.
3. A method according to claim 1 , wherein said verification comprises in verifying that a private key used for establishing said secure channel corresponds to a certificate delivered to the secure element on which the management is requested.
4. A method according to claim 1 , wherein said equipment is a mobile equipment.
5. A method according to claim 1 , wherein said equipment is a fixed equipment.
6. A method according to claim 1 , wherein said secure element is a removable Universal Integrated Circuit Card.